FortiNAC DHCP or Fortigate DHCP

[ByteHaven]

Hello NAC admins,

My question is, which scenario is recommended, FortiNAC acting as DHCP server for isolated devices or Fortigate acting as a DHCP server ?

BR,

[AEK · Accepted solution]

As per my knowledge it MUST be FortiNAC the DHCP server for isolated devices.  I'm pretty sure something will not work properly if you setup FGT instead, but I don't have it in mind.

[ByteHaven]

Thank you for your help, I'll follow your advice

BR,

[ebilcari]

Isolation scopes should be configured in FNAC, because if the subnet is not known to FNAC, DNS queries originating from that subnet will be ignored, causing portal redirection or Agent communication to fail.