Sounds reasonable to me and inline with other vendor's management
solutions. Note this only applies to firewalls without subscriptions. If
you pay for FortiGate Cloud or manage with a FortiManager you have MUCH
greater controls on firmware.
Well its an enterprise product with very tight controls on compliance,
security, etc. Where did you purchase the FortiGate? How do you know its
unclaimed?https://docs.fortinet.com/document/fortigate/6.4.0/hardening-your-fortigate/907853/disable-the-m...
So you are having posture issues once connecting? Or you can't even join
the WiFi? What do the FortiNAC logs say? Does it receive the posture
status of the endpoint at all? Is this just one client or multiple? What
version of FortiNAC?