Google GSuite

When a rogue host is detected on the network, FortiNAC connects to Google GSuite Directory API, retrieves the host data and registers the host in FortiNAC. The GSuite API is polled periodically in order to update records for those hosts that are already registered in FortiNAC.

• Host records are registered and deleted based on the host list returned from GSuite.

• Polling behavior when On Demand Lookup is enabled: Full poll (paged). Stops looking once endpoint is found.

• Duplicate entries and entries with invalid MAC addresses (00:00:00:00:00:00) are not added.

• FortiNAC does not take into account the status of the host (e.g. ACTIVE, DISABLED, DEPROVISIONED) when registering. This means FortiNAC will include all hosts, Active or otherwise, in the database. Consequently, filter results for hosts registered from GSuite may have a higher count that what is reported in GSuite (as GSuite may only list active accounts).

FortiNAC collects the following host data from GSuite:

• Operating System

• Model (Hardware Type)

• Host Name

• Serial Number

• Owner (User)

Requirements

FortiNAC

• Supported Engine Version: 8.5.0 and greater

• Recommended Engine Version: 8.8.5 and greater (ID 682244)