Technical Note: Scan Settings in Scan vs Passive A...

FortiNAC

NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.

Article Id 197757

Description

Scan Settings in Scan vs Passive Agent Configuration

Solution

The Passive Agent Configuration setting "Scan unless previously scanned within..." is mutually exclusive from the Scan On Connect setting within the scan itself in the Endpoint Compliance Configuration.

"Scan On Connect" is triggered by line state (online versus offline).
The Passive Agent Rule setting "Scan unless previously scanned within" is based on login/logout activity.

Refer to the Online Help Topics "Manage Passive Agent Configurations" and "Add/Modify A Scan" for additional information.

376

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Note: Scan Settings in Scan vs Passive Agent Configuration