The type of scan you are adding:

• System - These scans runs scripts on the FortiNAC platform.
• Admin - These scans indicate the reason why a host was manually marked at risk. They are not actually scanning the host but provide a configuration or profile with which to associate the host state. Admin Scans are also used to mark hosts At Risk or Safe based on an alarm action triggered by an event.

System scripts

• ForceCSARescan - Forces the Target Group of hosts using the Adapters cannot be successfully moved between hosts using the Dissolvable Agent. to be rescanned by setting the hosts in the group to At-Risk.
• ForcePersistentAgent - Forces the Target Group of hosts using the Persistent Agent to be rescanned by setting the hosts in the group to At-Risk.
• PassAllClients - Sets the Target Group of hosts to Safe.
• FailAllClients - Sets the Target Group of hosts to AtRisk.

Admin scans

Enter a name for the scan. This scan is initiated on the Host Properties under the Health tab.

Displayed on the failure page when a network user's PC has failed a scan. If no label is provided, the scan name is used. The label or scan name is a link that takes the user to a page indicating why the PC has failed the scan.

The maximum length of time FortiNAC will wait for the scan to return a status of passed or failed. If the elapsed time is greater than this value, a script failed error is generated and the host returns to the queue of hosts waiting to be scanned.

Enable or Disable the scan. This setting can be modified to allow the scan to run or to stop it from running.

The sub-set of FortiNAC hosts that will be scanned.

• All Hosts
• All Hosts & Servers
• All Registered
• All Rogues
• All Servers
• All VPN Clients
• Group: See below.
• Security and Access Attribute Value. See below.

Specify the FortiNAC host group to be scanned. This option is only available if you select Group as the Target.

Used to determine which scan is to be applied to hosts connecting to the network whose associated user has this value set in the Active Directory Security and Access attribute. The host inherits this value from the user. This option is only available if you select Directory Attribute as the Target.

The location of the URL containing instructions for users whose hosts fail the scan.

This must be a local URL.