Fortinet 3.0 MR7 manual Unregistered vs. registered devices

Device Viewing the device list

For networks with more demanding logging scenarios, an appropriate device ratio may be less than the allowed maximum. Performance will vary according to your network size, device types, logging thresholds, and many other factors. When choosing a FortiAnalyzer model, consider your network’s log frequency, and not only your number of devices.

A VDOM or high availability (HA) cluster counts as a single “device” towards to maximum number of allowed devices. Multiple FortiClient installations (which can number up to the limit of allowed FortiClient installations) also count as a single “device.”

For example, a FortiAnalyzer-100B could register up to either:

•10 devices

•9 devices and 100 FortiClient installations

•9 devices and one HA pair

•1 device and 9 VDOMs

but could not register 1 device and 900 FortiClient installations.

When devices attempt to connect to a FortiAnalyzer unit that has reached its number of maximum number of allowed devices, the FortiAnalyzer unit will reject connection attempts by excess devices, and automatically add those excess devices to the list of blocked devices. For more information about on blocked devices, see “Blocking device connection attempts” on page 86.

Once the FortiAnalyzer unit has exceeded its maximum number of allowed devices, you will not be able to add devices to the device list. To resume adding devices, you must first block a device that is currently on your device list, then unblock the device you want to add and add it to the device list.

Unregistered vs. registered devices

The FortiAnalyzer device list can display both registered and unregistered devices.

If you have configured Unregistered Device Options to do so, unregistered devices appear in the device list when the FortiAnalyzer unit receives a connection attempt. However, a device will not be able to use most of the FortiAnalyzer unit’s features until you register the device, either manually or automatically.

If you want to configure connection attempt handling, including whether or not a device is automatically added to the device list as a registered or unregistered device, see “Configuring unregistered device connection attempt handling” on page 79.

For more information about manually registering a device, see “Manually adding a device” on page 80.

Note: Both registered and unregistered devices count towards the maximum number of devices available for a FortiAnalyzer unit. Too many unregistered devices will prevent you from adding a device. For more information, see “Maximum number of devices” on page 76.

FortiAnalyzer Version 3.0 MR7 Administration Guide
05-30007-0082-20080908	77