FortiNAC Deployment Architecture and Communication Methods Quiz

Infrastructure Management

• FortiNAC commonly uses SNMP to complete tasks related to the infrastructure.
• FortiNAC uses SNMP to discover the infrastructure, complete data collection, and perform ongoing management.
• SNMP is used to gather visibility information and control access across a wired or wireless connection.

Device Visibility

• FortiNAC uses SNMP and LLDP to stay up to date on visibility details, such as hosts going offline.
• FortiNAC may leverage vendor-specific APIs, such as Cisco's CLI or Juniper's Netconf, to enhance visibility and enforce control, depending on the vendor of the infrastructure device.

Device Identification

• FortiNAC identifies connected devices and gains enhanced visibility through LLDP and SNMP.

Data Collection

• FortiNAC uses LLDP to gather Layer 2 Polling Data.
• SNMP is used to issue commands to gather visibility information or execute control functions on a device.
• FortiNAC uses syslog to log and react to security alerts, if configured to do so.

Communication Methods

• The type of device FortiNAC is communicating with determines the communication methods used.
• FortiNAC uses SNMP and LLDP to gather information and maintain control after knowing the type of device it is communicating with.

Vendor-Specific Configuration

• FortiNAC uses vendor-specific APIs, such as Cisco's CLI or Juniper's Netconf, to enhance visibility and enforce control, depending on the vendor and model of the infrastructure device.

Layer 2 Data Polling

• Linkup, linkdown, warmstart, and coldstart traps trigger Layer 2 data polling in FortiNAC.
• Endpoint visibility is established in FortiNAC through the combination of SNMP and LLDP.
• The preferred method for learning and updating Layer 2 information in FortiNAC is through SNMP and LLDP.
• Manual polling for Layer 2 information occurs in FortiNAC when the device is not sending traps or notifications.

Link Traps

• The purpose of link traps received from an edge device in FortiNAC is to trigger Layer 2 data polling.
• MAC notification traps in FortiNAC trigger the beginning of endpoint visibility.

Best Practices

• SNMP and LLDP should always be used for learning and updating Layer 2 information when it is an option in FortiNAC.
• Manual polling should not be configured on interfaces that are uplinks in FortiNAC.

Test your knowledge of deployment architecture and communication methods used by FortiNAC in this quiz. Explore how FortiNAC uses SNMP for infrastructure discovery and data collection, as well as SSH or Telnet for CLI tasks.