Control Manager

• FortiNAC Control Manager
  • What's new in this version
  • Key features
  • Getting additional help
  • Access the FortiNAC Control Manager
  • FortiNAC GUI icons
  • License types and usage
    • Licensing events and alarms
    • Licensing in a FortiNAC Control Manager environment
    • Manage guests in a FortiNAC Control Manager environment
    • Manage hosts in a FortiNAC Control Manager environment
• Getting started
  • Menus
    • Manage bookmarks
    • Admin user interface settings
    • Legal
  • Dashboard
    • Add a panel to the dashboard
    • License information panel
    • Licenses in use detail
  • Locate View
    • All search results
    • Locate devices
    • Device search results
    • Locate hosts/users
    • Host/User search results
  • Navigation
  • Filters
• Settings
  • Authentication
    • Authentication directories
    • Directory set up requirements
    • Directory structure and synchronization
    • Directory configuration
      • Add/modify directory - Connection tab
      • Add/modify directory - User Attributes tab
      • GAdd/modify directory - Group Attributes tab
      • Add/modify directory - Search Branches tab
      • Add/modify directory - Select Groups tab
    • Schedule directory synchronization
    • Create a keystore or SSL or TLS communications to LDAP
    • Preview directory
    • Passive registration using the domain controller
      • Customize log in and log out scripts
      • Active Directory setup for passive registration
      • Novell setup for passive registration
  • Identification
    • Device types
      • Add/modify a device type
      • Delete a device type
      • Device type in use
    • Vendor OUIs
      • Add a vendor OUI
      • Modify a vendor OUI
      • Modify multiple vendor OUIs
      • Delete a vendor OUI
      • Register devices
  • FortiNAC Control Manager
    • Server synchronization
  • Security settings
    • Certificate management
      • Obtain a valid SSL certificate from a CA
      • UI method: upload the certificate received from the CA
      • Activate certificates
      • View the details and private key information for a certificate
  • System communication
    • Email settings
    • Log receivers
    • Mobile providers
      • Add/modify a mobile provider
      • Delete a mobile provider
    • SNMP
    • Register hosts and users with SNMPv3 traps
    • Proxy settings
  • System management
    • Database archive
    • Database backup/restore
    • High availability
    • License management
    • NTP and time zone
    • Power management
    • Backup to remote server
      • Configure the remote backup destination
    • System backups
  • Updates
    • Agent packages
      • Download new agent packages
    • Operating system updates
    • System update
• Device profiler
  • Device Profiling Process
  • Device profiling rules
    • Manage device profiling rules
    • Device profiling rules - best practices
    • Add or modify device profiling rule
    • Delete a device profiling rule
    • Copy a device profiling rule
    • Evaluate rogue hosts with device profiling rules
    • Administrative user profiles for device managers
    • Add a device manager admin profile
    • Add an administrative user for device profiler
    • Device profiler events and alarms
• Admin profiles and permissions
  • Default admin profiles
  • Permissions list
  • Add an admin profile
  • Modify admin profiles
  • Modify admin profiles for administrator users
  • Delete an admin profile
  • Copy admin profiles
  • Admin profile mappings
    • Admin profile mappings process
    • Add/Modify an admin profile mapping
    • Delete an admin profile map
  • Administrative user profiles for guest manager
    • Add a guest manager admin user profile
    • Add a kiosk admin profile
    • Add a guest self registration admin profile
  • Printer settings for guest contractor badges
• Admin users
  • Add Admin users
  • Modify Admin users
  • Delete Admin users
  • Copy Admin users
  • Modify an Admin profile
  • Themes
  • Using groups to limit Admin access
  • Add Admin users to groups
  • Admin user group membership
  • Configure secure mode for Admin users
• Import and export data
  • Import archived data
  • Import hosts, users or devices
    • Import hosts, users or devices
    • Sample host, adapter, user, or device import files
    • Import hosts, users, devices or IP phones from a .csv file
    • Import host, user, and adapter data from a previous version
  • Import Admin users
  • Import IP ranges
  • Export data
• Hosts, adapters, and applications
  • Configure table columns and tool-tips
  • Search and filter options for hosts, adapters, users or applications
  • Host view
    • Host view and search field definitions
    • Host drill-down
    • Host properties
    • Host health and scanning
    • Modify a host
    • Delete a host
    • Enable or disable hosts
    • Add IP Phones
      • Policy details
    • Add hosts to groups
    • Host group membership
    • Register a host as a device
    • Set host expiration date
  • Adapter view
    • Adapter view and search field definitions
    • Adapter properties
    • Adapter device identity
    • Enable or disable an adapter
    • Modify an adapter
  • Application view
    • Show the host(s) containing an application
    • Set the threat override for an application
  • Aging out host or user records
  • Export data
• User view
  • Configure table columns and tool-tips
  • Search and filter options for hosts, adapters, users, or applications
  • User view and search field definitions
  • User drill-down
  • User properties
  • Modify a user
  • Delete a user
  • Add users to groups
  • User group membership
  • Policy details
  • Guest user account details
  • Set user expiration date
• Admin auditing
• Event management
  • Enable and disable events
  • Event thresholds
  • Log events to an external log host
  • Examples of syslog messages
  • View events currently mapped to alarms
  • Events view
    • Event notes
    • FortiNAC events and alarms list
• Alarms view
  • Show/hide alarm details
  • Map events to alarms
    • Add or modify alarm mapping
    • Bulk modify alarm mappings
    • Delete alarm mapping
• Policies
  • Policy assignment
  • User/host profiles
    • Add/modify a user or host profile
    • User/host profile filter example
    • User/host profile example
    • User/host profiles in use
    • Delete a user/host profile
  • Endpoint compliance policies
    • Endpoint compliance implementation
    • Add/modify an endpoint compliance policy
    • Delete an endpoint compliance policy
    • Determining host operating system
    • Endpoint compliance configurations
      • Add/Modify an endpoint compliance configuration
      • Endpoint compliance configurations in use
      • Delete an endpoint compliance configuration
    • Scans
      • Scan on connect
      • Scan hosts without enforcing remediation
      • Delayed remediation for scanned hosts
      • Add/modify a scan
        • Custom scans options - scan level
        • Custom scans options within a category level
        • Monitor custom scans
        • Reset default antivirus or values
      • Delete a scan
      • Scans in use
      • Schedule a scan
        • Add proactive scanning to a scheduled scan
        • Schedule a scan—proactive scanning
      • Custom scans overview
        • Create custom scans for windows
        • Create custom scans for macOS
        • Create custom scans for Linux
        • Custom scans severity level
        • Custom scans - use case
• Role management
  • Assigning roles
  • Set up role management
  • Roles
    • Add a role
    • Modify or delete role from database
    • Role in use
• Guest manager
  • Guest manager implementation
    • Guest/contractor templates
      • Guest account types or visitor types
      • Create guest/contractor templates
      • Assign an endpoint compliance policy to a guest
      • Modify templates
      • Copy templates
      • Delete templates
    • Administrative user profiles for guest manager
      • Add a guest manager admin user profile
      • Add a kiosk admin profile
      • Add a guest self registration admin profile
    • Administrative users for guest manager
      • Add an admin user for guest manager
    • Printer settings for guest contractor badges
    • Guest manager events and alarms
    • Use guest manager as a sponsor
    • Guest or contractor accounts
      • Create single guest or contractor accounts
      • Create bulk or multiple accounts
      • Bulk guest account import file
      • Provide account information to guest or contractor
      • Conference accounts
        • Create conference accounts
    • Guest account details
  • Guest or contractor log in
  • Manage guests in a FortiNAC Control Manager environment
• Groups view
  • Add groups
  • Copy a group
  • Delete a group
  • Limit user access with groups
  • Modify a group
  • Groups - group membership
  • Show group members
  • Group in use
  • Aging hosts in a group
  • System groups
  • Customer defined groups
• Scheduler view
  • Add a task within the scheduler
  • Copy a task
  • Modify a task
  • Delete a task
  • Run a task now
• Send SMS messages
• Scan management
  • Manage scans
  • Copy a scan
• High availability
  • HA configuration using a shared IP address (layer 2)
  • HA configuration with servers on different subnets (layer 3)
  • Connectivity configuration
  • FortiNAC primary and secondary configuration
  • Update software in a high availability environment
  • High availability concepts
    • High availability concepts
    • Monitor high availability
    • Control sequence
    • Recovery
    • Stop the primary server
  • Troubleshooting tips
    • Determine which appliance has the shared IP
    • Determine appliance status
    • Confirm database replication
    • Verify license key configuration
• Scan parameters
  • Antivirus parameters - Windows
  • Antivirus parameters - macOS
  • Operating system parameters - Windows
  • Operating systems parameters - macOS
• Change log