How it Works
In order to utilize the Persistent Agent, it must be installed on the end machine. Once the agent is installed and its service is started, the agent will attempt to communicate with FortiNAC. The general process the Persistent Agent uses to communicate is as follows:
-
Identify the name of the FortiNAC Agent Server with which the agent should communicate. This information can be provided to the agent in two ways:
-
Persistent Agent settings configured via…
-
Software distribution
-
Last successful communication with FortiNAC
-
-
Discovery process - lookup for DNS SRV records from…
-
Production DNS server
-
FortiNAC Captive Portal
Agent 5.3 and greater: Option available to disable SRV lookups (are enabled by default)
-
-
-
Attempt to establish communication to the server over SSL/TLS using TCP port 4568 (requires SSL certificates installed on FortiNAC).
-
Once SSL/TLS communication is established, the agent uses TCP port 4568 for most all other agent/server communication. See Persistent Agent Server Discovery Process in the Appendix for port and version information.