FortiNAC
NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
FortiKoala
Staff
Staff
Article Id 190837
Description
Conference Account Details Show Multiple Registrations for the Same Host

Scope
Version:  Network Sentry 8
Solution
Version:  Network Sentry 8


Issue:  Max number of attendees for conference account exceeded.  Conference account details show the same host multiple times.

Conference accounts consider each adapter record as a separate registration.  During registration, if the host
matches an Endpoint Compliance Policy whose Policy Configuration provides a Dissolvable or Persistent Agent, the agent would provide Network Sentry information regarding all enabled adapters.  Consequently, those adapters (regardless of online state) would be counted.    

Example: A Windows laptop with wireless, wired and bluetooth adapters enabled would count as 3 attendees.


Solution Option 1:  Conference guests not requiring a scan (such as for internet only access)

Ensure conference hosts do not match a policy that provides the agent.  One way to do this is the create a Conference Template that uses unique role and/or Security & Access Value.  Create an Endpoint Compliance Policy that does not assign an agent and does not scan.  

Example
Template Name: "Internet Only Conference"
Role = Guest
Security & Access Value:  Internet Only    

Endpoint Compliance policy "Internet Only Conferences"
User/host profile matches the following attributes:
User Role = Guest
User Security Access & Value: Internet Only    

Endpoint Compliance Configuration
General tab: Scan set to AgentNoScan
Agent tab: All operating systems set to None - Bypass


Solution Option 2:  Conference guests requiring a scan
For conferences that require guests to be scanned during registration, set the max number of attendees to accommodate the scenario where all devices have multiple adapters. 

Example
Conference for 20 guests
Max number of Accounts = 100 (20 guests x 5 adapters per machine) 

Note: The Concurrent License count only increases for online hosts. 


Contributors