we have alerts setup for admin login/logout. since adding to fortinac we have hundreds of alerts being generated. what is the best way to deal with this? can we exclude the fortinac from the event notification somehow?
FortiNAC periodically logs in to all network equipment, like to poll L2/L3 devices and so.
But where do you see the alerts? You mean on a separate monitoring solution? If this is the case then all monitoring solutions have a way to disable a specific alert. That's where you should disable them.
How is the FGT integrated with FNAC, does it have FSW, FAP or VPN integration configured?
Most of the communication now are done through API (page 67), L3 polling may still use SSH access to get the ARP table. You can also configure the REST API Administrator key as shown in page 10.
User | Count |
---|---|
1921 | |
1144 | |
769 | |
447 | |
277 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.