Validate Enforcement

1. Connect a rogue host to one of the managed ports

2. Host receives IP address from FortiGate

3. Upon bringing up browser, the captive portal is displayed (if configured). If portal page is slow to build, certain domains may need to be whitelisted. See KB article Captive Portal Slow to Build.

4. Register the system

5. Once registered, verify the correct Network Access Policy matches in FortiNAC

   1. In FortiNAC UI, navigate to Hosts > Host View

   2. Search on host record, right click and select Policy Details

6. Verify the correct IPv4 Policy matches in the FortiGate

   1. In FortiGate UI, navigate to FortiView > Sources

   2. Double click on host entry

   3. Click Policies tab

   4. Hover over policy to verify time last used

Confirm user is able to access network resources as expectedIf any of the above do not work as expected, refer to the Troubleshooting section of this document.