Fortinet black logo

Administration Guide

Device identity

Copy Link
Copy Doc ID 825689eb-200d-11e9-b6f6-f8bc1258b856:920430
Download PDF

Device identity

FortiNAC continuously collects identity records as hosts connect to the network. These records are used to rapidly identify and categorize new devices as they connect to the network. A list of Device Identities can be viewed using the Device Identity View. Reports can be exported to CSV, Excel, XML, PDF or RTF file formats.

View individual host Device Identity data from the Host properties view for that host. If two Device Identities are learned for the same MAC and port, but have different OSs, the host is most likely dual-booting. If this occurs, the Device Fingerprint Changed event and its associated alarm are generated. See Device identity for additional information.

To access the Device Identity View select Hosts > Device Identity.

Settings

Fields used in filters are also defined in this table.

Field

Definition

Learned Time

Date/time that the first DHCP packet was heard for a host.

Last Heard Time

Date/time that the most recent DHCP packet was heard for a host.

Physical Address

MAC Address of a host.

Host Name

Host Name contained in the DHCP packet heard for a host.

Vendor Class

This is Option 60 from the DHCP Packet, which is used to identify the vendor type and configuration of a DHCP host such as, MSFT 50 for Windows PCs..

Device Type

Indicates the type of hardware detected.

Message Type

This is the type of DHCP Packet heard. Types include: DHCP DISCOVER, DHCP REQUEST, NMAP, Directory Authentication, Passive Fingerprinting, IP Address Profiling, Vendor OUI.

Operating System

Operating system of the host. If more that one record is displayed with different operating systems, this host may be dual boot.

Option List

Displays a list of option numbers from the DHCP packet used to provide information about the host.

Parameter List

Combination of parameters contained in the DHCP packet that allows FortiNAC to infer the Operating System for this host. This is Option 55 from the DHCP Packet.

To filter, enter a comma separated list of Option 55 Parameter numbers.

Note

It is possible that multiple Operating Systems will resolve to the same fingerprint.

Views

Click the Adapter icon to open the Adapter Properties View.

Buttons

Delete

Allows you to delete selected records from the table.

Export

Exports the data displayed to a file in the default downloads location. File types include CSV, Excel, PDF or RTF. See Export data.

Device identity

FortiNAC continuously collects identity records as hosts connect to the network. These records are used to rapidly identify and categorize new devices as they connect to the network. A list of Device Identities can be viewed using the Device Identity View. Reports can be exported to CSV, Excel, XML, PDF or RTF file formats.

View individual host Device Identity data from the Host properties view for that host. If two Device Identities are learned for the same MAC and port, but have different OSs, the host is most likely dual-booting. If this occurs, the Device Fingerprint Changed event and its associated alarm are generated. See Device identity for additional information.

To access the Device Identity View select Hosts > Device Identity.

Settings

Fields used in filters are also defined in this table.

Field

Definition

Learned Time

Date/time that the first DHCP packet was heard for a host.

Last Heard Time

Date/time that the most recent DHCP packet was heard for a host.

Physical Address

MAC Address of a host.

Host Name

Host Name contained in the DHCP packet heard for a host.

Vendor Class

This is Option 60 from the DHCP Packet, which is used to identify the vendor type and configuration of a DHCP host such as, MSFT 50 for Windows PCs..

Device Type

Indicates the type of hardware detected.

Message Type

This is the type of DHCP Packet heard. Types include: DHCP DISCOVER, DHCP REQUEST, NMAP, Directory Authentication, Passive Fingerprinting, IP Address Profiling, Vendor OUI.

Operating System

Operating system of the host. If more that one record is displayed with different operating systems, this host may be dual boot.

Option List

Displays a list of option numbers from the DHCP packet used to provide information about the host.

Parameter List

Combination of parameters contained in the DHCP packet that allows FortiNAC to infer the Operating System for this host. This is Option 55 from the DHCP Packet.

To filter, enter a comma separated list of Option 55 Parameter numbers.

Note

It is possible that multiple Operating Systems will resolve to the same fingerprint.

Views

Click the Adapter icon to open the Adapter Properties View.

Buttons

Delete

Allows you to delete selected records from the table.

Export

Exports the data displayed to a file in the default downloads location. File types include CSV, Excel, PDF or RTF. See Export data.