FortiNAC discovers all connected devices in your network, controls their access to network resources, and responds to security vulnerabilities automatically
FortiNAC is a zero-trust access solution that oversees and protects all digital assets connected to the enterprise network, covering devices ranging from IT, IoT, OT/ICS, to IoMT. With network access control that enhances the Fortinet Security Fabric, FortiNAC delivers visibility, control, and automated response for everything that connects to the network. FortiNAC provides protection against IoT threats, extends control to third-party network devices, and orchestrates automatic response to a wide range of network events.
For over 20 years, FortiNAC has been safeguarding organizations on the digital transformation journey by protecting ever-growing networks and digital assets. With continued technology advancement and innovations, FortiNAC expands protection to address today’s dynamic and increasing attack surface. It does this through real-time visibility, streamlined enforcement, dynamic policy adjustment, and automated response to compromised devices or anomalous activity.
Integrating with FortiGate and other Fortinet Security Fabric solutions, FortiNAC gains a more comprehensive and accurate view of connected devices and users. Expanding its capability with a true multi-vendor environment, FortiNAC can leverage existing infrastructure and orchestrate network segmentation and automated response.
FortiNAC is packed with a range of powerful features that make managing network access easier and quicker. From advanced device profiling to automated workflows, every aspect of FortiNAC has been carefully crafted to deliver the best possible user experience.
Agentless Scanning
Detect and identify headless devices as they connect to the network
21 Profiling Methods
Utilize 21 different ways to determine the identity of a device
Fortinet Security Fabric Integration
Leverage the Security Fabric for better visibility, segmentation enforcement, and policy adjustments
Microsegmentation
Narrowly restrict access to network assets for identified devices
Extensive Multivendor Support
Interact with and configure network devices (switches, APs, firewalls, clients) from 150+ vendors
Scalability
Enable effective scaling to multi-sites and support millions of devices
"It's an excellent network security tool that provides useful insight into all assets connected to a network, like hard-wired and wirelessly. It's been proven that it is beneficial to our business because we deal with sensitive data or run multiple cloud instances. Setting up FortiNAC for 3rd access to systems as well as remote access from home was simple. With some clicks, we can set relatively strong VPN connections, connect two or more stores, and add remote access from home or on the street.
"Its one of the best Network Access Control application out there. The application provides with detailed information about the devices connected on the network and also provides lot of tools to keep the network secure."
The FortiNAC product line includes hardware appliances, virtual machines, and licenses. Each FortiNAC deployment requires both a Control and an Application Server. If your deployment is larger than what a single server can support, you can stack servers for more capacity. FortiNAC has no limit on the number of concurrent ports it can support.
View by:
Functionality |
Control and Application Server |
Capacity |
Each server manages up to 5,000 ports in the network |
Functionality |
Control and Application Server |
Capacity |
Each server manages up to 15,000 ports in the network |
Functionality |
Control and Application Server |
Capacity |
Each server manages up to 25,000 ports in the network |
Functionality |
Management Server |
Capacity |
Unlimited |
Functionality |
FortiNAC Control and Application next-gen VM Server (VMware/Hyper-V/AWS/Azure/KVM) |
Functionality |
FortiNAC Manager next-gen VM Server (VMware or Hyper-V) |
| FortiNAC Base License | ||
|---|---|---|
| Functionality | Endpoint Visibility and Auto Provisioning | |
| Perpetual Licenses (Concurrent endpoint devices per license) | ||
| 100 | LIC-FNAC-BASE-100 | |
| 1,000 | LIC-FNAC-BASE-1K | |
| 10,000 | LIC-FNAC-BASE-10K | |
| 50,000 | LIC-FNAC-BASE-50K | |
| Subscription Licenses | ||
| 25 | FC1-10-FNAC1-215-01-DD | |
| 500 | FC2-10-FNAC1-215-01-DD | |
| 10,000 | FC3-10-FNAC1-215-01-DD | |
| FortiNAC Plus License | ||
|---|---|---|
| Functionality | Visibility and Control | |
| Perpetual Licenses (Concurrent endpoint devices per license) | ||
| 100 | LIC-FNAC-PLUS-100 | |
| 1,000 | LIC-FNAC-PLUS-1K | |
| 10,000 | LIC-FNAC-PLUS-10K | |
| 50,000 | LIC-FNAC-PLUS-50K | |
| Subscription Licenses | ||
| 25 | FC1-10-FNAC1-213-01-DD | |
| 500 | FC2-10-FNAC1-213-01-DD | |
| 10,000 | FC3-10-FNAC1-213-01-DD | |
| FortiNAC Pro License | ||
|---|---|---|
| Functionality | Visibility, Control and Response | |
| Perpetual Licenses (Concurrent endpoint devices per license) | ||
| 100 | LIC-FNAC-PRO-100 | |
| 1,000 | LIC-FNAC-PRO-1K | |
| 10,000 | LIC-FNAC-PRO-10K | |
| 50,000 | LIC-FNAC-PRO-50K | |
| Subscription Licenses | ||
| 25 | FC1-10-FNAC1-209-01-DD | |
| 500 | FC2-10-FNAC1-209-01-DD | |
| 10,000 | FC3-10-FNAC1-209-01-DD | |
Fortinet is dedicated to helping our customers succeed, and every year FortiCare services help thousands of organizations get the most from their investments in Fortinet's products and services. To achieve this, FortiCare follows the life-cycle approach and provides unique services to help our customers in their success journeys.
FortiCare for FortiNAC
Advanced technical support, firmware updates, hardware replacement, training and resources, SLA
FortiNAC Professional Services
Architecture and design, implementation, integration with other Fortinet products, customization, and optimization
FortiNAC QuickStart Services
Rapid deployment, best practices, knowledge transfer, reduced risk
FortiNAC has many integrations across the Security Fabric to both share information and direct enforcement actions.
With the cost of an endpoint-based breach reaching into the millions of dollars per event, it is critical for security teams to understand and address network access control (NAC) vulnerabilities that can’t be secured by outdated solutions.
The digital transformation of OT has introduced many new IP devices to those networks. Learn how FortiNAC provides visibility and control in OT environments.
The Internet of Medical Things (IoMT) are providing great advancements in health services, but require special attention to keep networks safe from cyber attack.
In the last two years there were 386 cyber incidents in U.S. public schools. Securing today's primary and secondary school networks require containment of personal data.
Secure IT/OT Convergence with the Fortinet Network Access Control Solution
How to Successfully Design a Network Access Solution
How IoT and BYOD Devices Have Changed NAC Solutions
Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.
Coupling CyberMDX detection and identification capabilities with Fortinet, healthcare organizations are equipped with unmatched IoMT & IoT asset visibility, classification and attack-prevention enforcement tools.
The Cynerio-Fortinet joint solution equips healthcare IT security teams with comprehensive security and remediation policies that ensure uninterrupted clinical services. Armed with detailed insights into medical device behavior, impact, and criticality, hospitals can enforce customized cybersecurity policy using ACLs, VLANs, NAC and firewalls.
Google Cloud Platform is a secure, dedicated public cloud computing service operated by Google which provides a range of infrastructure and application services that enable deployments in the cloud. Fortinet provides critical firewalling, advanced security and scalable BYOL protection for elastic compute, container, and machine-learning workloads in Google’s innovative public cloud.
Hewlett Packard Enterprise is an industry-leading technology company that enables customers to go further, faster. With the industry’s most comprehensive portfolio, HPE's technology and services help customers around the world make IT more efficient, more productive, and more secure.
Intel invents at the boundaries of technology to make amazing experiences possible for business and society, and for every person on Earth. To learn more about Intel and our technologies, please visit: www.intel.com
Jamf automates Apple device deployment, management and security without impacting the end-user experience or requiring IT to touch the device. Jamf preserves the native and consistent Apple experience that people expect at work, while fulfilling the security and compliance requirements of the enterprise.
Lightspeed Systems has been serving schools since 1999. It’s our mission to protect students by providing IT with the tools it needs to succeed.
Together, Medigate and Fortinet deliver the deep clinical visibility and cybersecurity intelligence needed to accurately detect real-time threats in healthcare networks and automate effective policy enforcement to keep patient data and operations safe.
Microsoft is the leading platform and productivity company for the mobile-first, cloud-first world, and its mission is to empower every person and every organization on the planet to achieve more.
The surge in deployment of IoT devices requires advanced network security. Specifically, network operators need to be able to identify every user and device that connects to the network and then grant or limit network access appropriately. Furthermore, the network needs constant supervision to ensure ongoing safe operation with automated responses to threats as they are detected. FortiNAC from Fortinet can provide those capabilities so that network operators can confidently know who and what is on their network. Come and see how FortiNAC can provide visibility, control, and response for your network.
