The Host Inventory feature provides a way for end-users to manage which of their hosts are registered on the network without requiring assistance from a FortiNAC administrator. This is useful when the Network Administrator imposes a limit on the number of hosts that each user can have simultaneously registered.
The Host Inventory is an alternate "Success" page. After authentication, if the user's device is already registered and doesn't require remediation they are brought to the Host Inventory.
Host Inventory is an alternate "Success" page in the portal for the Registration and VPN pages. After the end user is registered and successfully authenticated, the portal advances to the Host Inventory page where other hosts can be registered and/or existing registered hosts can be deleted.
The registration is conceptually similar to the "Gaming Registration" portal pages, but Host Inventory is not restricted to Vendor OUIs which are identified as "Gaming" - any host of any valid vendor OUI can be registered. Furthermore, there is a Control setting that even allows non-valid vendor OUIs to be registered.
In order to register a host using Host Inventory, the host must be online. This is to ensure that the host does not match an Endpoint Compliance policy that requires an agent. If the host matches an Endpoint Compliance policy, the host cannot be registered using the Host Inventory portal page.
If your policies are configured to bypass the agent, the hosts cannot register in Host Inventory. As long as FortiNAC supports an agent for the particular operating system, Host Inventory will identify the host as requiring an agent, independent of whether the host (and user) would match a policy that has the endpoint compliance policy set to None-Bypass.
- To enable Host Inventory:
- Click System > Portal Configuration.
- Expand Global and click Settings.
- Select Host Inventory from the Success Page Type drop-down list.
A host must be connected to the network at the time of registration to ensure it does not match an Endpoint Compliance policy.
To configure the content that is displayed in the page and the messages that convey the status, use the options under the "Host Inventory" category in the Content Editor of the Portal Configuration. The controls for which capabilities to make available (Register Host, Delete Host, Require Valid Vendor OUI and Show Registration Counts) as well as other settings (for example, the Host Role to use) are also configured under "Host Inventory."
To access the Host Inventory pages from a host that's already registered, navigate to this URL in a browser window:
https://<IP or hostname of NS500 or NS8200>/registration/DeviceInventory.jsp