...
When viewed in the Fortinac system, the user’s registration listing will have multiple instances for the Android phone if they connect with the randomized MAC address option turned on. Typically, the latest attempt at connecting will be on the Registration (10.165.xxx.xxx) network.
The Fix
Have user services remove all of the Android records in Fortinac.
On the phone:
Forget Knox-Wireless
Reconnect to Knox-Wireless
Select Network and Internet from the Settings app
Select WiFi → Knox-Wireless
Select Advanced
Turn Randomized MAC off
Navigate back to the phone’s home screen
Open a web browser and go to knoxaccess.knox.edu
Reregister the phone in Fortinac.
More details may be found here:
MAC Address Randomization - Android 10 - Stock Android - YouTube
Galaxy S20 / Ultra / Plus: How to Set Wifi to Use Randomize or Device MAC Address - YouTube
...