Need help with configuration

[renra]

Hello everyone,

I have a big problem, I am new to the world of fortinac and I was asked to configure in a very basic way the NAC such that:

All devices on the network at the moment are registered and can browse without any problems.

New devices on the other hand should all be blocked and then allowed manually under request

could someone give me an idea on how I could do this?

Thanks in advance

[ebilcari]

Are you referring to the FortiNAC as a dedicated solution or the NAC feature in FGT/FSW?

[adambomb1219]

Why would this be the approach?  How do you know that all devices on the network today are trusted?  Why restrict enforcement only to new assets?