Which two things must be done to allow FortiNAC to process incoming syslog messages from an unknown vendor? (Choose two.)

To allow FortiNAC to process incoming syslog messages from an unknown vendor, two steps must be

taken:

Creation of a customized event parser: This enables FortiNAC to parse and integrate syslog messages

from any vendor or device, as long as the messages are in CSV, CEF, or Tag/Value format​​.

Modeling the device in the Topology view: Any device that sends syslog messages to FortiNAC must

be modeled in this view. FortiNAC will not process syslog or trap messages unless the source address

belongs to a device modeled in the topology​​.

Reference

FortiNAC 7.2 Study Guide, pages 428 and 399