Fortinet white logo
Fortinet white logo

Administration Guide

7.6.0

Determining host operating system

Determining host operating system

FortiNAC uses the information configured in the endpoint compliance policy and information received from the connecting host to determine if an agent is required and which agent should be offered to a host. If the operating system or host type is one for which there is no agent, FortiNAC can allow or deny network access based on the settings in the endpoint compliance policy.

The host operating system is detected based on the information contained in the UserAgent string. When a host connects to a FortiNAC web page, its browser sends the user-agent string to the FortiNAC Server or Application Server. This string indicates which browser the host is using, its version number, and details about the host, such as operating system and version. The chart below outlines the criteria FortiNAC uses to determine the host operating system.

Operating system is considered unsupported unless it meets one of the following criteria:

Criteria

OS/Device

UserAgent contains "linux" and "android"

Android

User Agent contains "linux" only

Linux

User Agent contains "macOS"

macOS

User Agent contains "Macintosh" and "Silk"

Android

User Agent contains "Macintosh" and "Cloud9"

Android

User Agent contains "linux", "android" and "silk"

Kindle

User Agent contains any one of the following: "KFOT", "KFTT, "KFJWI", "KFJWA", "KFSOWI", "KFTHWI", "KFTHWA", "KFAPWI" or "KFAPWA"

Kindle Fire

User Agent contains "macOS" and "mobile" and "ipod"

iOS for iPod

User Agent contains "macOS" and "mobile" and "iphone"

iOS for iPhone

User Agent contains "macOS" and "mobile" and "ipad"

iOS for iPad

User Agent contains "macOS" and "mobile"

Apple iOS

UserAgent contains "windows nt"

Windows

UserAgent contains "windows phone

Windows Phone

UserAgent contains "windows nt" and "ARM"

Windows RT

UserAgent contains "freebsd"

Free BSD

UserAgent contains "openbsd"

Open BSD

UserAgent contains "netbsd"

Net BSD

UserAgent contains "solaris" or "sunos"

Solaris

UserAgent contains "symbianos" or "symbos"

Symbian

UserAgent contains "webos"

Web OS

UserAgent contains "windows ce"

Windows CE

UserAgent contains "blackberry"

Blackberry OS

UserAgent contains "BB10" and "Mobile"

BlackBerry 10 OS

UserAgent contains "RIM Tablet OS"

RIM Tablet OS

UserAgent contains "CrOS"

Chrome OS

Determining host operating system

Determining host operating system

FortiNAC uses the information configured in the endpoint compliance policy and information received from the connecting host to determine if an agent is required and which agent should be offered to a host. If the operating system or host type is one for which there is no agent, FortiNAC can allow or deny network access based on the settings in the endpoint compliance policy.

The host operating system is detected based on the information contained in the UserAgent string. When a host connects to a FortiNAC web page, its browser sends the user-agent string to the FortiNAC Server or Application Server. This string indicates which browser the host is using, its version number, and details about the host, such as operating system and version. The chart below outlines the criteria FortiNAC uses to determine the host operating system.

Operating system is considered unsupported unless it meets one of the following criteria:

Criteria

OS/Device

UserAgent contains "linux" and "android"

Android

User Agent contains "linux" only

Linux

User Agent contains "macOS"

macOS

User Agent contains "Macintosh" and "Silk"

Android

User Agent contains "Macintosh" and "Cloud9"

Android

User Agent contains "linux", "android" and "silk"

Kindle

User Agent contains any one of the following: "KFOT", "KFTT, "KFJWI", "KFJWA", "KFSOWI", "KFTHWI", "KFTHWA", "KFAPWI" or "KFAPWA"

Kindle Fire

User Agent contains "macOS" and "mobile" and "ipod"

iOS for iPod

User Agent contains "macOS" and "mobile" and "iphone"

iOS for iPhone

User Agent contains "macOS" and "mobile" and "ipad"

iOS for iPad

User Agent contains "macOS" and "mobile"

Apple iOS

UserAgent contains "windows nt"

Windows

UserAgent contains "windows phone

Windows Phone

UserAgent contains "windows nt" and "ARM"

Windows RT

UserAgent contains "freebsd"

Free BSD

UserAgent contains "openbsd"

Open BSD

UserAgent contains "netbsd"

Net BSD

UserAgent contains "solaris" or "sunos"

Solaris

UserAgent contains "symbianos" or "symbos"

Symbian

UserAgent contains "webos"

Web OS

UserAgent contains "windows ce"

Windows CE

UserAgent contains "blackberry"

Blackberry OS

UserAgent contains "BB10" and "Mobile"

BlackBerry 10 OS

UserAgent contains "RIM Tablet OS"

RIM Tablet OS

UserAgent contains "CrOS"

Chrome OS