:

:

Device profiling rules in FortiNAC are used to evaluate and classify rogue devices. These rules can be

configured to automatically, manually, or through sponsorship evaluate and classify unknown

untrusted devices as they are identified and created​​.

Reference

FortiNAC 7.2 Study Guide, page 98

The exhibit shows the status of two hosts connected to a wired infrastructure and indicates their

respective MAC addresses and the rule name associated with them. When a port is a member of the

Forced Registration port group, and multiple hosts with different statuses are connected to that port,

FortiNAC will provision the port to the registration network, which is designed to isolate hosts until

they are verified or registered. This ensures that unregistered or unauthorized hosts do not gain

access to the network. Therefore, both hosts will be isolated in the registration network according to

FortiNAC policy for such scenarios.

In an isolation VLAN, FortiNAC supplies DHCP and DNS services. The guide specifies that FortiNAC

has a DHCP scope defined for a particular VLAN and should be the only DHCP server available to

hosts on that VLAN. Additionally, hosts on the VLAN would get a DNS server configuration of the

FortiNAC IP for that VLAN