Technical Tip: Leveraging Domain Group Membership ...

scitlak · 11-18-2024

Description This article describes how to troubleshoot and fix the FortiNAC Persistent Agent issue that runs on Ubuntu 24.04.Since the libicu package does not exist in Ubuntu 24.04 as default, and FortiNAC Persistent Agent requires this package, Pers...

scitlak · 10-11-2024

Description This article describes how to configure FortiNAC to proxy MAB Requests to Radius Server. Scope FortiNAC -F 7.4, FortiNAC -F 7.6. Solution Before FortiNAC -F version 7.4 and version 7.6, MAB requests proceeded and were answered by FortiNAC...

scitlak · 09-26-2024

Description This article describes how to fix the 'Authentication Failure' issue due to the missing 'Message-Authenticator' attribute that is mandatory with FortiOS 7.2.10 or 7.4.5. Scope FortiNAC, FortiNAC-F. Solution In case of a Radius Authenticat...

scitlak · 09-26-2024

Description This article describes how to configure FortiNAC to use LDAP Nested Security Groups in FortiNAC. Scope FortiNAC, FortiNAC -F. Solution Configure Nested Groups in LDAP and assign one LDAP user as a member of a subgroup. Under System -> Set...

scitlak · 09-15-2024

Description This article describes how to determine which VLAN ID has been assigned a host under the Inventory view. Scope FortiNAC, FortiNAC -F. Solution Under Network -> Inventory -> Switch, FortiNAC displays the current VLAN ID of each port. Howev...

scitlak · 11-15-2024

Hi, You may find some OIDs in FORTINET-FORTIEXTENDER-MIB.mib that can provide some useful information for your SIM data usage. fext info modem data usage index --> oid 1.3.6.1.4.1.12356.121.21.3.3.1.1 fext info modem data usage modem --> oid 1.3.6.1....

scitlak · 11-05-2024

Hi, You may use the same certificate for all of them or you may generate different certificates for each of them. Especially for the portal, if you would like to guest registration, it would be better to have a publicly signed certificate. As I menti...

scitlak · 11-05-2024

Hello, You probably use the default TLS certificate for your Persistent Agent in FortiNAC. According to logs, PA tries to establish an SSL/TLS handshake with your FortiNAC but it fails since the FQDN is not in the CN or SAN of your Certificate. Your ...

scitlak · 11-04-2024

Hi, Could you please try to perform the GET API requests below? /router/bgp/neighbors-statistics --->It is available with FOS 7.4.5 /router/bgp/neighbors /router/bgp/neighbors6 /router/bgp/paths-statistics /router/bgp/paths /router/bgp/paths6 BRs

scitlak · 11-04-2024

Could you please look at the below KBs? https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-do-a-SNMP-querie-of-BGP-info-from-different/ta-p/189620 https://community.fortinet.com/t5/FortiGate/Technical-Note-How-to-monitor-BGP-state-with-...

User Statistics

User Activity

Troubleshooting Tip: Persistent Agent Issue on Ubuntu 24.04 due to missing libicu package

Technical Tip: How to configure FortiNAC to proxy MAB Requests

Technical Tip: How to configure FortiNAC to send the 'Message-Authenticator' attribute in Access-Accept message through Radius Authentication

Technical Tip: How to use LDAP Nested Security Groups in FortiNAC

Technical Tip: How to identify which VLAN ID has been assigned a host under the Inventory view

Re: Monitor SIM Card usage of FortiExtender

Re: Certificate error message when device is redirect to Captive portal

Re: Certificate error message when device is redirect to Captive portal

Re: How to query BGP Community information via SNMP or REST API

Re: How to query BGP Community information via SNMP or REST API

Technical Tip: Leveraging Domain Group Membership ...

Technical Tip: FileTransfer with TFTP for FortiNAC...

Re: Monitor SIM Card usage of FortiExtender

Re: How to query BGP Community information via SNM...

Technical Tip: How to configure FortiNAC to proxy ...

Re: Certificate error message when device is redir...

Re: Fnac mac address discovery filter

Re: Radius Authentication with Dynamic VLAN Assign...

Re: FNAC - Dot1x auto registration role

KCS