Fortinet Community

ebilcari · 09-25-2023

Description This article describes some easy API calls to add information in FortiNAC and its syntax. Scope All supported versions of FortiNAC. Solution Adding hosts and adapters This example shows how to put a single host with one or multiple adapte...

ebilcari · 09-18-2023

Description This article describes that In cases where authentication is required to use MSCHAPv2 (usually in Microsoft Windows environments), in order for RADIUS authentication to succeed FortiNAC needs to be domain joined. This requirement comes fr...

ebilcari · 08-04-2023

Description This article describes an example of how to set up FortiNAC in a simplified network. It additionally covers how to connect the ports and how to handle IP addressing. This is an example of Stage 2 from this article: Technical Tip: Comprehe...

ebilcari · 07-24-2023

Description This article describes some cases where some hosts (IoT or other static systems) that are manually registered need to override the global aging timer set on System -> Settings -> User/Host Management -> Aging [Registered Hosts] to avoid t...

ebilcari · 07-05-2023

Description This article provides some general recommendations for improving FortiNAC's day-to-day operations. This includes disabling forgotten debugs, checking for enabled logs, and specific configurations that can add extra load to FortiNAC perfor...

ebilcari · 10-02-2023

Hi, If I get it right, you want to use FNAC to do RADIUS authentication only without checking any enforcement just to respond to authentication with a user group as RADIUS attribute (Fortinet-Group-Name)?

ebilcari · 09-29-2023

Some information is covered in the admin guide here by default in later version all ports are enabled to auto discover config switch interfaceedit "port1"set auto-discovery-fortilink enable remove the auto discovery on port level for one or both swit...

ebilcari · 09-29-2023

The full OID should be like this: .1.3.6.1.4.1.12356.101.5.1.2.1.1.4.1.6 where .1.3.6.1.4.1.12356.101.5.1.2.1.1.4.1[.6] the number "6" is the policy ID The OID value: 09/29/2023 14:24 (20 second(s) ago)

ebilcari · 09-29-2023

there is also this convenient way from FGT that factory reset the switch and convert it to standalone: GW # execute switch-controller switch-action set-standalone S108EN0000001234This action will return the FortiSwitch to standalone modeand will dele...

ebilcari · 09-26-2023

Yes, I think: fgFwPolLastUsed - .1.3.6.1.4.1.12356.101.5.1.2.1.1.4 {How many minutes since last used} can give an alert on the monitoring system if one of the policies is not being used for a long time, similar result like the count drop you are tryi...

Fortinet Community

User Statistics

User Activity

Technical Tip: Simple API calls to add data in FortiNAC

Technical Tip: MSCHAPv2 authentication, join FortiNAC in domain and checks

Technical Tip: An example of a simple network deployment of FortiNAC with FortiGate/FortiSwitch

Technical Tip: Overriding host aging for specific group of devices

Technical Tip: Performance issue and some general recommendations

Re: FortiNAC Fortigate remote vpn using LDAP Groups based authentication support question

Re: manual Fortilink and custom commands

Re: Policy monitoring through SNMP

Re: Standalone Fortiswitch 424E how to disable fortilink mode.

Re: Policy monitoring through SNMP

Technical Tip: An example of a simple network depl...

Re: Policy monitoring through SNMP

Re: FortiNAC API count parameter not working

Re: FortiNAC integration with unlicensed fortigate...

Re: Disable FortiLink discovery

Re: Policy monitoring through SNMP

Re: Que encriptación usa el VPN SSL para viajar

Re: FortiNAC integration with unlicensed fortigate...

Re: which one is priorty LDAP or FSSO

Re: Fortinac dot1x combined with persistent agent ...

KCS