User/Host Management

Configure default settings to age users and hosts out of the database.

See Aging.

Configure the default number of hosts that can be registered to a user.

See Allowed hosts.

Enable or Disable creating rogues from DHCP packets heard on the network.

See Device profiler.

Authentication

Directories

Roaming guests

Control

Provides the ability to manage hosts connected to hubs using DHCP as a means to control or restrict host access.

See Access point management.

Specify the domains and production DNS server that isolated hosts use to gain access to network locations.

See Allowed domains.

When quarantine VLAN Switching is set to Enable and the ports are in the Forced Remediation Group,FortiNAC switches unregistered hosts that are being scanned to the quarantine VLAN until the scan process is completed.

See Quarantine.

Identification

Displays icons representing each device type in the system, and allows you to add, modify, and delete custom type icons.

Enter the IP ranges where FortiNAC will allow NAT'd hosts. IP addresses outside this range could be NAT'd hosts and can generate an event and an alarm to notify the network administrator.

See NAT detection.

Monitors approved DHCP servers operation and detects rogue DHCP servers on the network using a dedicated interface on the FortiNAC appliance. It defines a scheduled task to run and search specific VLANs and discover all active entities serving IP addresses. This task compares the discovered DHCP servers against a list of authorized DHCP servers and triggers corresponding events when there is no match.

See Rogue DHCP server detection.

Allows you to modify the vendor OUI database, which is used to determine whether or not a MAC address is valid or by device profiler to profile devices by OUI. The database is updated periodically through the Auto Definition update process.

See Vendor OUIs.

Network Device

Reports

Configure the connection between the FortiNAC server and the cloud reporting Analytics server. This connection allows an agent on the FortiNAC server to push data for reporting to an external server based on a user-defined schedule.

Persistent Agent

Enable Persistent Agent updates by operating system, schedule agent updates and add hosts to the list of Update Exceptions. You can update agents on both platforms simultaneously or separately.

See Agent update

Configure how credentials are verified for hosts who use the Persistent Agent.

See Credential configuration.

Configure the FortiNAC server name of the server for Persistent Agent communication, enable or disable display notifications to the host, configure Header and footer text for the Persistent Agent authentication page and Status messages in the message box on the user's desktop.

See Properties.

Configure how users are notified of their host status when the Persistent Agent contacts the FortiNAC server.

See Status notifications.

Configure TCP and UDP communication between the FortiNAC server and the Persistent Agent.

See Transport configurations

Use the USB Detection view allows to configure FortiNAC to be notified in the event that a USB device was plugged into a host on the network.

See USB detection.

System Communication

Configure a list of address and address group objects used in SSO and VPN configuration. See Addresses.

Enter settings for your email server. This allows FortiNAC to send email to Administrators and network users.

See Email settings.

Configure Logical Network Firewall Tags

Enable FortiNAC as a Fortinet Fabric Connector

Configure a list of servers to receive event and alarm messages from FortiNAC.

See Log receivers.

Customization of SMS and E-Mail messages for Self-Registered and Pre-Registered Guests

Displays the default set of Mobile Providers included in the database. FortiNAC uses the Mobile Providers list to send SMS messages to guests and administrators. The list can be modified as needed.

See Mobile providers.

The Patch Management feature allows integration with Patch servers such as BigFix or PatchLink.

See Patch management.

Configure FortiNAC to direct web traffic to a proxy server in order to download OS updates and auto-definition updates.

Set the SNMP protocol for devices that query FortiNAC for information. It is also used to set the SNMP protocol to accept SNMPv3 traps that register hosts and users.

See SNMP.

Syslog Files that you create and store are used by FortiNAC to parse the information received from these external devices and generate an event. The event can contain any or all of the fields contained in the syslog output and can be mapped to an Alarm and an Alarm action.

See Syslog files and Map events to alarms.

Enter configurations to interpret SNMP trap MIB information sent from a device and associate it with events and alarms in FortiNAC.

See Trap MIB files and Map events to alarms.

Configure and manage the connection to a Vulnerability Scanner, allowing FortiNAC to request and process scan results.

System Management

Set the age time for archived data files and configure the schedule for the Archive and Purge task.

See Database archive.

Schedule database backups, configure how many days to store local backups, and restore a database backup. Note that this restores backups on the FortiNAC server, not backups on a remote server.

See Database backup/restore.

Configuration for Primary and Secondary appliances for high availability. Saving changes to these settings restarts both the Primary and Secondary servers.

See High availability.

View or modify the license key for this server or an associated Application server.

See License management

Reset the time zone and NTP server for your FortiNAC appliances. Typically the time zone and NTP server are configured using the Configuration Wizard during the initial FortiNAC set up. Requires a server restart to take effect.

See NTP and time zone.

Reboot or power off the FortiNAC server. In the case of a FortiNAC Control Server / Application Server pair, reboot or power off each server individually.

See Power management.

Configure Scheduled Backups to use a remote server via FTP and/or SSH.

See Remote backup configuration.

Create a backup of all system files that are used to configure FortiNAC.

See System backups.

Updates

Displays a list of the Dissolvable Agent, Persistent Agent, and Passive Agentversions available on your FortiNAC appliance. Download new agents and add them to FortiNAC as they become available from Fortinet using Download. Download an Administrative template for GPO configuration to your PC from the FortiNACappliance using the links at the top of the view.

See Agent packages.

Use operating system updates to download and install updates to the operating system on FortiNAC servers.

See Operating system.