topic Re: Host Check for RAVPN in SASE and Remote Access

Host Check for RAVPN

Fabz — Tue, 03 Oct 2023 16:11:43 GMT

Hi Checkmates,

Im building a VPN Firewall with advanced checking level for endpoint that trying to connect to the internal resources.

Cust looking for capabilities checking the registry value and mac address check like the existing one : https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/32970/configuring-os-and-host-check

Im aware CP can build this via SCV Check. But im still confused how to enable mac address check, does anyone know about it? and found nothing for setup a MacOS check.

Do i need to purchase harmony endpoint or with mobile access is enough? Thanks!

Re: Host Check for RAVPN

the_rock — Tue, 03 Oct 2023 17:51:48 GMT

We had customer wanting to utilize this SCV couple of years ago, but after realizing how complicated it was to make it work and having spent numerous hours with TAC troubleshooting it, they just opted to stay with harmony endpoint features.

Im not so versed in harmony endpoint myself, but you may want to confirm with support if it has those capabalities...Im fairly sure it does.

Andy

Re: Host Check for RAVPN

PhoneBoy — Tue, 03 Oct 2023 22:21:15 GMT

SCV only works on Windows, which Mac currently does not support.

Endpoint Compliance is what you will need to use on the Mac.
This requires Harmony Endpoint licenses that include Remote Access or a CPEP-ACCESS SKU.