Fortinet black logo

Administration Guide

Endpoint Fingerprints

Endpoint Fingerprints

For information on Endpoint Fingerprints, see Endpoint Fingerprints.

This widget displays either a list of, or summary of information regarding, Endpoint Fingerprints collected by FortiNAC.

This widget has three visualizations: Table View, Top Operating Systems, and Top Vendors. Table View is only available if the current user has Host permissions.

Table View

The Table View visualization is a limited version of the Endpoint Fingerprints view. Charts are not shown in this widget, in order to save space within the view.

Top Operating Systems

A summary of the Endpoint Fingerprints grouped by Operating System. The count of each slice is the total number of fingerprints which match that operating system.

Top Vendors

A summary of the Endpoint Fingerprints grouped by vendor. The count of each slice is the total number of fingerprints with a physical address matching each vendor.

Caution

Rogue record is created and populated with the information collected from the various endpoint fingerprint sources. The device is only automatically registered if it matches a Device Profiling rule that is configured to automatically register. Otherwise, it remains a Rogue.

If the Vendor OUI is not yet recognized, FortiNAC will not be able to register the device. See Vendor OUIs.

Set Source Rank

The order used when processing fingerprint sources for populating an endpoint's host record, starting at rank 1.

Example:

  1. Agent—processes info from endpoint's agent first and populates host record
  2. DHCPv4—processes info collected from endpoint's DHCP packets second and populates host record
  3. Vendor OUI—processes endpoint's OUI info last and populates host record
Last Heard Time The most recent time FortiNAC received information from that specific method. Example: The last time FortiNAC received a DHCP packet for the endpoint.

Endpoint Fingerprints

For information on Endpoint Fingerprints, see Endpoint Fingerprints.

This widget displays either a list of, or summary of information regarding, Endpoint Fingerprints collected by FortiNAC.

This widget has three visualizations: Table View, Top Operating Systems, and Top Vendors. Table View is only available if the current user has Host permissions.

Table View

The Table View visualization is a limited version of the Endpoint Fingerprints view. Charts are not shown in this widget, in order to save space within the view.

Top Operating Systems

A summary of the Endpoint Fingerprints grouped by Operating System. The count of each slice is the total number of fingerprints which match that operating system.

Top Vendors

A summary of the Endpoint Fingerprints grouped by vendor. The count of each slice is the total number of fingerprints with a physical address matching each vendor.

Caution

Rogue record is created and populated with the information collected from the various endpoint fingerprint sources. The device is only automatically registered if it matches a Device Profiling rule that is configured to automatically register. Otherwise, it remains a Rogue.

If the Vendor OUI is not yet recognized, FortiNAC will not be able to register the device. See Vendor OUIs.

Set Source Rank

The order used when processing fingerprint sources for populating an endpoint's host record, starting at rank 1.

Example:

  1. Agent—processes info from endpoint's agent first and populates host record
  2. DHCPv4—processes info collected from endpoint's DHCP packets second and populates host record
  3. Vendor OUI—processes endpoint's OUI info last and populates host record
Last Heard Time The most recent time FortiNAC received information from that specific method. Example: The last time FortiNAC received a DHCP packet for the endpoint.