If a host marked Untrusted isn’t being isolated, it usually means the
quarantine/enforcement policy isn’t fully applied. In FortiNAC you
must:Ensure the host state (like At‑Risk/Untrusted) is mapped to a
quarantine VLAN or enforcement action in your ...
FortiGate doesn’t natively support SSTP, so you’d need a Windows Server
or another SSTP-capable device if that’s required.For Layer 2,
FortiSwitch supports VLANs, ACLs, 802.1X, and ARP/IP-MAC binding to
isolate devices, but there’s no automatic attac...