we have alerts setup for admin login/logout. since adding to fortinac we have hundreds of alerts being generated. what is the best way to deal with this? can we exclude the fortinac from the event notification somehow?
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
FortiNAC periodically logs in to all network equipment, like to poll L2/L3 devices and so.
But where do you see the alerts? You mean on a separate monitoring solution? If this is the case then all monitoring solutions have a way to disable a specific alert. That's where you should disable them.
How is the FGT integrated with FNAC, does it have FSW, FAP or VPN integration configured?
Most of the communication now are done through API (page 67), L3 polling may still use SSH access to get the ARP table. You can also configure the REST API Administrator key as shown in page 10.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1712 | |
1093 | |
752 | |
447 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.