FortiNAC

Version : FortiNAC v8.5 and v8.6.

FortiNAC is a product to unify endpoint security technology (such as antivirus, host intrusion prevention, and vulnerability assessment), the user or system authentication and network security enforcement.

Netsurion Open XDR collects the event logs delivered from FortiNAC. Netsurion Open XDR will alert whenever any login failure occurs in FortiNAC devices, it also alerts us when any rogue mac is detected on the network. Netsurion Open XDR will help you to visualize the FortiNAC data into the dashboard, using those we can correlate data across the environment. Its reports can allow the user to see the important events on a scheduled basis.

Netsurion Open XDR monitors all the FortiNAC events from services like Amazon EC2 and Amazon VPC, they are given as below.

  • Security – Admin user (FortiNAC console) Login failed activity, Rogue MAC detected connecting to the endpoint system.
  • Operation – Admin user (FortiNAC console) Login and logout activity, User-Management activity, and network switch interface/port up/ down.

Once FortiNAC is configured to deliver events to Netsurion Open XDR Manager; alerts, dashboards, and reports can be configured into Netsurion Open XDR.

To take advantage of this data source integration and to learn more about alerts, reports, and dashboards, contact your Technical Account Manager (TAM). If you are not currently a Netsurion customer or partner, contact us to learn more.