Technical Tip: How to configure IPSEC dialup VPN u...

amacchiaverna · 04-04-2022

Description This article describes that depending on the environment, there are controls and/or requirements in place, on the network, that prevent incoming packets on the isolation VLAN going to eth1 and outgoing on eth0 are not able to reach back i...

amacchiaverna · 03-30-2022

Description This article describes that depending on the distribution of Linux and the brand of GUI desktop manager in use, the Persistent Agent icon does not always display in the systray. Scope Any Linux OS using GUI based desktop and Persistent Ag...

amacchiaverna · 02-07-2022

Description This article describes that Winbind will work without these changes for the most part. However, sometimes there are various errors that can happen. The most common is an invalid username or password. This can be misleading as this can occ...

amacchiaverna · 02-07-2022

Description This article discusses about 405 errors in Windows Agent or OWA Agent logs. This is usually due to an incorrect API key (link to KB to create a new key will be below) or the interface of the FortiAuthenticator is not setup to receive REST...

amacchiaverna · 12-16-2021

Description This article shows how to troubleshoot and resolve a 401 error when the Refresh token and Access Key are known to working otherwise. Scope Solution Run the following debugs in the CLI: # nacdebug -name MSInTuneServer true And # nacdebug -...

amacchiaverna · 12-09-2021

The only way would be to either have the Persistent Agent on the device which would report the IP (if it can be installed on it) or have an L3 device modeled in the FortiNAC so that its ARP table can be polled and the IP be mapped to the MAC of the h...

amacchiaverna · 12-03-2021

It might be doing a polling action every so often. I would need to see what logging we can pull for the NAC function of the FortiGate so get better insight. How long have you left the device on the port since you moved it back to 4?

amacchiaverna · 12-03-2021

Blacktron, How do you mean by "Enabling FortiNAC on some ports"? There is a NAC function on the FortiGates but, it is not FortiNAC. FortiNAC is a separate Fortinet product that works in a somewhat different manner in how it changes the vlans on the F...

amacchiaverna · 12-02-2021

sel18, I would suggest opening a support ticket on support.fortinet.com and getting an engineer to assist you. This will require debugs to be enabled and logs to be pulled to validate an issue and could result in an developer ticket being made. Thank...

amacchiaverna · 11-18-2021

As in you cannot WinBind to it? I haven't run into that yet. We are trying to get a Azure AD instance as a lab and can update later on when we get something setup.

User Statistics

User Activity

Technical Tip: Captive Portal not coming up when eth0 and eth1 are on separate subnets and isolated

Technical Tip: Persistent Agent icon does not appear on the systray in Linux GUI desktops

Technical Tip: How to change Winbind files in FortiNAC to resolve errors in joining the FortiNAC to a domain

Technical Tip: Windows Agent or OWA agent producting 405 errors in logging

Technical Tip: Intune polling is producing 401 errors even if the Access key and Refresh token are correct

Re: OID FortiNAC.

Re: Fortilink not updating VLANs

Re: Fortilink not updating VLANs

Re: FortiNAC authentication with L3.

Re: FortiNAC and Azure AD joined machines

Technical Tip: How to configure IPSEC dialup VPN u...

Re: Fortilink not updating VLANs

Re: FORTINAC Certificate Management Error

Re: Regarding FortiNAC Base License

KCS