New Features in 8.6.0

Nozomi Networks Integration

What it does:

• Expands device Trust in FortiNAC to those devices managed by Nozomi appliances. This also further extends FortiNAC’s endpoint visibility of managed devices.
• Security event parsing for Automated Threat Response

For integration instructions, refer to the Fortinet Document Library.

Dot1x Auto Registration

What it does:

Automatic registration of a host based upon the user's 802.1x authentication with the RADIUS server. The feature is enabled/disabled in the SSID Configuration view of the Controller/Access Point model under Network Devices > Topology.

Enhanced Visibility by Leveraging Traffic Analysis

What it does:

• FortiGate session information is pulled and saved based on endpoint models in FortiNAC.
• Rogue / Unknown Endpoint host records can now be created based upon the presence of the endpoint’s MAC Address in the Fortigate session table or a router’s ARP table.
• FortiGate Sessions View
  • Allows an admin to view endpoint connections and to build profiling rules from the information.

  See FortiGate sessions in the Administration Guide for more information.

• New Device Profiling Methods
  • Network Traffic (Network Flow)
    • Identify / Classify device based on traffic
    • Protocol / Application, Source, Destination
  • FortiGate
    • Classify based on device type from FortiGate
    • Classify based on Hostname, Device Type

    See Device Profiler - Adding a rule in the Administration Guide for more information.

Unique Device ID

This feature creates a unique ID for the endpoint based on hardware attributes.

UI Default Theme

The default theme for the UI is now green.