FortiNAC

A bouncer for network ports and Wi-Fi. It identifies each device that connects and decides what it is allowed to reach.

It discovers devices by querying switches and access points, and it fingerprints what each device is. Based on policy, it can move a device to the right VLAN, restrict it or disconnect it. It works across many vendors’ network equipment and can notify other security tools.

Administrators need to know every device on the network, including ones that shouldn’t be there. An unknown device in a programs room or a tablet moved to the wrong place is a policy problem as much as a security one. FortiNAC identifies what connects and decides what it can do.

• Shows every device on the network, including tablets, kiosks, cameras and door controllers.
• Blocks or isolates an unapproved device the moment it connects.
• Places each device in the right network automatically, so an inmate device can’t land on a staff network.
• Keeps a history of when and where each device connected.

• Port-level placement: a kiosk or tablet is identified and moved to the inmate VLAN when it connects, and an unknown device can be quarantined.
• Automatic inventory: profiling identifies devices that can’t run an agent, such as cameras.
• Dynamic VLAN assignment places a device in its proper segment when it connects.
• Automatic isolation: an unknown MAC address, or a known device acting differently, can be quarantined.
• Works with third-party switches, so you needn’t replace the network first.