Description This article shows how to troubleshoot and resolve a 401
error when the Refresh token and Access Key are known to working
otherwise. Scope Solution Run the following debugs in the CLI: #
nacdebug -name MSInTuneServer true And # nacdebug -...
Description This article describes how to reduce the generated IdP
prefix in order to allow for more than 16 IdPs/Domains. Scope Solution
Steps to decrease IdP prefix to increase IdP/domain count: 1) Add SP by
going to Authentication -> SAML IdP -> S...
DescriptionThis article describes how to check items that could be
causing 'Processes are Down'/'System Processes Down' in an HA situation
when the license is correct and both nodes are showing as slave.Refer to
'Related article' to eliminate the lic...
DescriptionThis article describes how to reset Portal settings should
elements of the portal become unresponsive or do not show
properly.Sometimes issues occur where the captive portal page does not
produce the login fields, the login field do not al...
Description This article describes how to acquire a new refresh key for
the Intune Connector should it expire. The Refresh Token is valid for 90
days as issued by the Intune service. ***Note: The Refresh token only
expires after 90 days if it sits id...
The only way would be to either have the Persistent Agent on the device
which would report the IP (if it can be installed on it) or have an L3
device modeled in the FortiNAC so that its ARP table can be polled and
the IP be mapped to the MAC of the h...
It might be doing a polling action every so often. I would need to see
what logging we can pull for the NAC function of the FortiGate so get
better insight. How long have you left the device on the port since you
moved it back to 4?
Blacktron, How do you mean by "Enabling FortiNAC on some ports"? There
is a NAC function on the FortiGates but, it is not FortiNAC. FortiNAC is
a separate Fortinet product that works in a somewhat different manner in
how it changes the vlans on the F...
sel18, I would suggest opening a support ticket on support.fortinet.com
and getting an engineer to assist you. This will require debugs to be
enabled and logs to be pulled to validate an issue and could result in
an developer ticket being made. Thank...