Which FortiGuard licenses are required for FortiLink device detection to enable device identification and vulnerability detection?

Question

Options

• AFortiGuard Vulnerability Management and FortiGuard Endpoit Protection
• BFortiGuard Threat Intelligence and FortiGuard loT Detection
• CFortiGuard Threat Intelligence and FortiGuard Endpoint Protection
• DFortiGuard Attack Surface Security and FortiGuard loT Detection

• A
  2% (1)
• B
  2% (1)
• D
  96% (47)

Explanation

FortiLink device detection relies on FortiGate'sDevice IdentificationandIoT Detectioncapabilities to classify devices connected to FortiSwitch ports. To enabledevice identificationandvulnerability detectionfor IoT/endpoint devices in LAN Edge deployments, FortiGate must subscribe to the correct FortiGuard services. 1. Required FortiGuard License for Device Identification (IoT Detection) The FortiOS documentation clearly states: "IoT detection service... requires anAttack Surface Security Rating service licenseto download the IoT signature package." "The following settings are required for IoT device detection: A validAttack Surface Security Rating service licenseto download the IoT signature package." This service provides: IoT signature package IoT device classification Device behavior profiling This makesAttack Surface Securitymandatory for FortiLink device detection. 2. Required FortiGuard License for Device Vulnerability Detection FortiOS further clarifies that IoT vulnerabilities require theIoT Detection license, which is included under the same Attack Surface service entitlement: "To detect IoT vulnerabilities the FortiGate must have a validIoT Definitions license..." The IoT Definitions license comeswith the Attack Surface Security Rating serviceand is used for: Scanning connected devices Identifying IoT/endpoint vulnerabilities Reporting vulnerability severity Enabling NAC-based remediation (VLAN steering, port isolation) In LAN Edge Architect, this license combination is emphasized as a foundational requirement for: FortiLink device profiling Automated quarantine actions IoT device classification Vulnerability-based segmentation 3. Why the Correct Answer Is Option D FortiGuard Attack Surface Security FortiGuard IoT Detection These are exactly the services required per FortiOS 7.4.1: Attack Surface Security Rating provides IoT signature package + vulnerability data IoT Detection (Definitions) enables actual device-type and vulnerability identification Together they powerFortiLink Device DetectionandIoT Vulnerability Detection, which are essential LAN Edge security functions.

No community discussion yet for this question.