ISE integration with Fortigate for Posture wireless endpoint

sandesh-dhuri · ‎05-22-2025

We are using Cisco ISE as NAC solution and using posture, we have fortiAPs for wireless which are managed through fortigate.

We configured the radius on Fortigate, authentication is happening and posture assessment is working, but COA is not working. We have enabled the COA on fortigate, but fortigate is sending COANAK to ISE.Does anyone faced this problem and got it resolved ?

marce1000 · ‎05-22-2025

- Check if these info's can help you : https://docs.fortinet.com/document/fortideceptor/5.3.1/administration-guide/894738/integrate-with-cisco-ise

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

ahollifield · ‎05-22-2025

What is the COANAK reason? It should be in the ISE logs. What NAD profile are you using for the FortiGate? Most likely the CoA message is not formatted correctly with attributes the FortiGate does not understand.

sandesh-dhuri · ‎05-22-2025

COANAK reason is nasidentifier-mismatch. we are using Cisco device profile as we have not found anyfortinet device profile and vsa file.