Fortinet white logo
Fortinet white logo

FortiNAC Manager

9.4.0

Properties

Properties

The Host Properties view provides access to detailed information about a single host. From this view you can access the associated user's properties by clicking on the User option in the menu or the associated adapter's by clicking on the adapter's physical address displayed in the Adapters tab at the bottom of the window.

  1. Select Users & Hosts > Hosts.
  2. Search for the appropriate host.
  3. Select the host and either right-click or click Options.
  4. From the menu select Host Properties.
Settings

Field

Definition

General

Host Name

Name of the host.

Hardware Type

Type of host such as workstation.

Operating System

Operating system installed on the host. Only hosts with a valid operating system can be rescanned. Valid operating systems are Windows, Mac, and Linux.

Serial Number

Serial number of the host.

Host Status

Radio buttons indicating whether the host is Enabled or Disabled. To enable or disable the host, click the appropriate button and then click Apply.

Time

Created

Indicates when this host record was created in the database. Options include Before, After, and Between.

Expiration Date

Controls the number of days a host is authorized on the network. Host is deleted from the database when the date specified here has passed. Options include Before, After, Between, Never, and None. If Never is displayed, this indicates that the host will not age out of the database. To modify click Set. See Set host expiration date.

Inactivity Date

Controls the number of days a host is authorized on the network. Host is deleted from the database when the date specified here has passed. Options include Before, After, Between, Never, and None. The date is continuously recalculated based on the number of days entered for Inactivity Limit.

For example, if the host logs off the network on August 1st and Inactivity Limit is set to 2 days, the Inactivity Date becomes August 3rd. If on August 2nd the host logs back in again, the Inactivity Date is blank until the next time it logs out. Then the value is recalculated again. To modify click Set.

Inactivity Limit

Number of days the host must remain continuously inactive to be removed from the database. See Aging out host or user records.

Last Connected

Last time the host was heard on the network. Options include Before, After, Between, and Never.

Policy Agent/access

Role

Role assigned to the host. Use the drop-down list to select a new role.

Agent Version

The version number of the Persistent Agent or Dissolvable Agent installed on the host.

Note

"None" is displayed if the host is part of a group with an endpoint compliance policy set to by-pass the agent scan.

Update Button

Button only displays if the Persistent Agent is installed. Allows you to update this host to a different version of the Persistent Agent.

Security And Access Attribute Value

The value of the attribute that can be used as a filter in user/host profiles. Data for this field can come from a guest template, can be entered automatically from an LDAP directory based on attribute mappings or manually by typing a value in this field. If entered from a directory, the data is copied from the user record of the associated user.

For example, if you have a policy for staff and a separate policy for executives, you could enter the word staff for each staff member and executive for each member of the executive group. Enter a matching word on the appropriate user/host profile to match the host to an endpoint compliance or network access policy. See Policy & Objects.

Tabs

Adapters

Displays a list of adapters on this host by MAC address. Click on a MAC address to open the Adapter Properties.

Applications

Displays a list of applications installed on the device. This information is provided by the agent. Typically includes antivirus, Hotfixes and operating system. This information is updated with each successful scan.

Notes

Notes entered by the administrator. If this host is the registered host for a guest, this section also contains information gathered at registration that does not have designated database fields, such as Person Visiting or Reason for Visit.

Health

Lists all the Scans and System scripts, and Administrative states for which the host has been scanned or had applied. Each scan the host is eligible for is shown along with the Name, Status, and Action. Click Show History for short-term historical data. See Host health and scanning.

Patch Management

Displays information on patches that have been applied to the host by its associated patch management server. The patch management vendor name and the ID number of the most recent patch is displayed.

Logged In Users

User name of the user logged into this host.

Buttons

Send Message

Opens the Send Message window and allows you to send a message to a host. If the host has the Persistent Agent or Mobile Agent installed, the message can be sent to the host desktop.

Note

For more details see Send a message to a host.

Groups

Displays a list of available host groups. If the host is a member of a group the check box is selected. You may add or remove the host from one or more groups.

Apply

Saves changes to the host properties.

Reset

Resets the values in the host properties window to their previous settings. This option is only available if you have not clicked Apply.

Properties

Properties

The Host Properties view provides access to detailed information about a single host. From this view you can access the associated user's properties by clicking on the User option in the menu or the associated adapter's by clicking on the adapter's physical address displayed in the Adapters tab at the bottom of the window.

  1. Select Users & Hosts > Hosts.
  2. Search for the appropriate host.
  3. Select the host and either right-click or click Options.
  4. From the menu select Host Properties.
Settings

Field

Definition

General

Host Name

Name of the host.

Hardware Type

Type of host such as workstation.

Operating System

Operating system installed on the host. Only hosts with a valid operating system can be rescanned. Valid operating systems are Windows, Mac, and Linux.

Serial Number

Serial number of the host.

Host Status

Radio buttons indicating whether the host is Enabled or Disabled. To enable or disable the host, click the appropriate button and then click Apply.

Time

Created

Indicates when this host record was created in the database. Options include Before, After, and Between.

Expiration Date

Controls the number of days a host is authorized on the network. Host is deleted from the database when the date specified here has passed. Options include Before, After, Between, Never, and None. If Never is displayed, this indicates that the host will not age out of the database. To modify click Set. See Set host expiration date.

Inactivity Date

Controls the number of days a host is authorized on the network. Host is deleted from the database when the date specified here has passed. Options include Before, After, Between, Never, and None. The date is continuously recalculated based on the number of days entered for Inactivity Limit.

For example, if the host logs off the network on August 1st and Inactivity Limit is set to 2 days, the Inactivity Date becomes August 3rd. If on August 2nd the host logs back in again, the Inactivity Date is blank until the next time it logs out. Then the value is recalculated again. To modify click Set.

Inactivity Limit

Number of days the host must remain continuously inactive to be removed from the database. See Aging out host or user records.

Last Connected

Last time the host was heard on the network. Options include Before, After, Between, and Never.

Policy Agent/access

Role

Role assigned to the host. Use the drop-down list to select a new role.

Agent Version

The version number of the Persistent Agent or Dissolvable Agent installed on the host.

Note

"None" is displayed if the host is part of a group with an endpoint compliance policy set to by-pass the agent scan.

Update Button

Button only displays if the Persistent Agent is installed. Allows you to update this host to a different version of the Persistent Agent.

Security And Access Attribute Value

The value of the attribute that can be used as a filter in user/host profiles. Data for this field can come from a guest template, can be entered automatically from an LDAP directory based on attribute mappings or manually by typing a value in this field. If entered from a directory, the data is copied from the user record of the associated user.

For example, if you have a policy for staff and a separate policy for executives, you could enter the word staff for each staff member and executive for each member of the executive group. Enter a matching word on the appropriate user/host profile to match the host to an endpoint compliance or network access policy. See Policy & Objects.

Tabs

Adapters

Displays a list of adapters on this host by MAC address. Click on a MAC address to open the Adapter Properties.

Applications

Displays a list of applications installed on the device. This information is provided by the agent. Typically includes antivirus, Hotfixes and operating system. This information is updated with each successful scan.

Notes

Notes entered by the administrator. If this host is the registered host for a guest, this section also contains information gathered at registration that does not have designated database fields, such as Person Visiting or Reason for Visit.

Health

Lists all the Scans and System scripts, and Administrative states for which the host has been scanned or had applied. Each scan the host is eligible for is shown along with the Name, Status, and Action. Click Show History for short-term historical data. See Host health and scanning.

Patch Management

Displays information on patches that have been applied to the host by its associated patch management server. The patch management vendor name and the ID number of the most recent patch is displayed.

Logged In Users

User name of the user logged into this host.

Buttons

Send Message

Opens the Send Message window and allows you to send a message to a host. If the host has the Persistent Agent or Mobile Agent installed, the message can be sent to the host desktop.

Note

For more details see Send a message to a host.

Groups

Displays a list of available host groups. If the host is a member of a group the check box is selected. You may add or remove the host from one or more groups.

Apply

Saves changes to the host properties.

Reset

Resets the values in the host properties window to their previous settings. This option is only available if you have not clicked Apply.