Technical Tip: Host has 2 or more IP addresses

FortiNAC

NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.

Article Id 190220

Description

In environments where there are multiple different ARP sources, it is possible the appliance may not display or use the most recent IP address when matching hosts/adapters with policies or device profiling rules.

If the L3 polling (mac to IP resolution) returns multiple IP addresses either by the same or different L3 devices, then all will be displayed.

Once only one IP is returned from L3 Polling, then only one will be displayed in the Host View.

Scope
Version: 8.x.

Solution
This is considered a Known Anomaly. A complete list of Known Anomalies is available at the following URL:
https://docs.fortinet.com/document/fortinac/8.6.0/known-anomalies

ID: 0660505, 0677851, 0682758.

499

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.