Technical Tip: Mark all 'At-Risk' hosts to 'Safe'

FortiNAC-F

FortiNAC-F is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks. For legacy FortiNAC articles prior to FortiNAC-F 7.2, see FortiNAC.

Article Id 312217

Description

This article describes how to mark all hosts that are currently marked 'At-Risk' to 'Safe'.
Hosts can be marked 'At-Risk' due to a failed Endpoint Compliance Scan or by an Event to an Alarm action that marks hosts 'At-Risk'.

Scope

FortiNAC-F v7.2, v7.4.

Solution

Login to the FortiNAC-F Admin GUI as a System Administrator.
Navigate to System -> Settings -> Control -> Quarantine OR Network -> Settings -> Control -> Quarantine.
Select Apply next to Set all hosts 'Risk State' to 'Safe'.
A dialog box will appear to confirm this action, select Yes.

Note:

This function only applies to hosts that are currently 'At-Risk', this does not have any impact on hosts that are in a 'Pending At-Risk' host state.

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.