How Does FortiNAC Really Work?

Join me as I share some of the details about how I was able to wrap my head around the complexities of FortiNAC.

[@mrtahap]

That's really awesome Samuel, Thank you for your informative and sensitive video that add me real info.

[@mohammedhanzaz498]

Great Video Man ! very informative

[@lesibethipe1075]

Great video

[@dutchdollar]

Hey Awesome video, I now conceptually understand how FortiNac works. An example situation that you could explain per flow would have been helpful though!

[@chriseddisford1834]

Good video thank you.

[@fawaz_Aoun]

I would like the book from which you explain this lecture, please

[@alimushantat2685]

Hi Samuel , do you offer full FortiNAC training, thank you

[@Ping_Localh0st127]

Hello Tomball, TX :)

[@NetSecAcademy]

Hi, thanks for the video. I’m working with Cisco ISE and I’m interested about other solutions. How would you compare fortinac with fortinet ztna?

[@SamuelBarlass]

From a high level: Both are implementations of the Zero Trust principal. FortiNAC protects devices connecting to the network (specifically headless/IoT/OT devices). Fortinet ZTNA is more focused on remote access, and requires an agent (no headless/IoT/OT devices supported). NAC protects network connectivity, ZTNA protects specific applications.

[@FadiHelou73]

This is good but what kind of policies you are talking about? Lets say one of the employees was pissed off having a problem with his boss and his boss fired him and this employee is a smart ass he mirrored copy his device on a hdd usb or whatever after he leaves the company he will install the mirrord drive on another computer with all the policies and even can copy the MAC address that he had on the old pc so he will have access on the network and screw up everything, what I am pointing here is about the most important thing which is security and we need a kind of security that can’t be accessed in any way, as we know the is a security called ACL access control list that works for MAC address but unfortunately MAC address can be copied and edited, so for me this is not a security anymore but a new security called device serial number which can’t be edited that we can rely on for security, so at least we know no matter what happens its impossible to access a network if a serial number is not found on the switch itself before reaching the server even and searching for the rest of the policies that you implement in your system. The question is that do you think its possible to have a device serial number ACL on installed on the switch itself with the Mac Address ACL to work together in order to have a stronger security?