An administrator has created several device profiling rules and evaluated all existing devices in the...

In FortiNAC-F,Device Profiling Rulesare used to automatically identify and categorize devices (such as IP cameras, printers, or IoT devices) based on fingerprints like DHCP fingerprints, OIDs, or MAC prefixes. When a device matches a rule, it appears in theProfiled Devicesview.

However, matching a rule does not automatically register the device in the database unless the rule is configured to do so. If the devices appear in the view but remain " Unknown " and show " No " in the registration column, it indicates that the " Confirm " (or " Auto-register " ) action has not been triggered. In the Device Profiling Rule configuration, there is a setting called " Allow Auto-Approval " or " Confirm " . If this is not enabled, the system identifies the device but waits for an administrator to manually approve the match before changing the host status from " Unknown " to " Registered " .

This is a common " safety " configuration used during the initial deployment phase to ensure that the profiling rules are accurate before the system begins automatically granting network access based on those matches.

" If a device matches a rule but is not registered, check the rule configuration. TheConfirmoption (within the Method or Rule settings) determines if the system automatically registers the device upon a match. IfConfirmis not enabled, the device will remain in the ' Profiled ' state with a registration status of ' No ' until an administrator manually promotes the device. " —FortiNAC-F Administration Guide: Device Profiling Rules.