FortiGuard Services : Configuring devices to use the built-in FDS : Handling connection attempts from unregistered devices
 
Handling connection attempts from unregistered devices
The built-in FDS replies to FortiGuard update and query connections from devices registered with the Device Manager’s device list. If Unregistered Device Options is configured to allow connections from unregistered devices, unregistered devices can also connect.
For example, you might choose to manage a FortiGate unit’s firmware and configuration locally (from its web‑based manager), but use the FortiManager system when the FortiGate unit requests FortiGuard Antivirus and attack updates. In this case, the FortiManager system considers the FortiGate unit to be an unregistered device, and must decide how to handle the connection attempt. The FortiManager system will handle the connection attempt as configured in Unregistered Device Options.
 
Unregistered FortiClient connections are handled in FortiClient Manager.
To configure connection attempt handling:
1. Go to Device Manager > Unregistered Device > Unregistered Device Options.
2. Select which action the FortiManager system performs when receiving a connection attempt from an unregistered device:
Add unregistered devices to device table, but ignore service requests
The device appears in the Unregistered Devices item in the device list, but its connection attempt is otherwise ignored.
Add unregistered devices to device table, and allow FortiGuard service and central management service.
The device appears in the Unregistered Devices item in the device list, and will be allowed to receive FortiGuard services.
3. Select Apply.