Introduction to FortiNAC
Gain Visibility, Control, and Automated Response across your wired and wireless network using network access control.
Watch NowNetwork Access Control (NAC)
Security for networks with IoT
Free Product Demo
Overview
What is Network Access Control (NAC)?
Network access control, or NAC, is a zero-trust access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
This NAC security technology has been around for nearly two decades, but a new generation of its tools is helping organizations meet today’s ever-expanding attack surface, delivering not only visibility of the network environment, but also enforcement and dynamic policy control. Whether devices are connecting from inside or outside the network, it can automatically respond to compromised devices or anomalous activity.
Modern solutions also provide a clear view into network assets to support regulatory certifications and security best practices that require organizations to establish and maintain an accurate inventory of all connected devices—even in virtual environments where assets are constantly connecting and disconnecting from the network. The monitoring and response capabilities are especially critical since many devices open users to additional risk via compromised, poorly written and un-patchable software, unadvertised back doors hardwired into firmware, and other factors.
Network access control solutions are an important part of a Zero Trust Access model for security, in which trust is no longer implicit for users, applications, or devices attempting to access the network, and for which IT teams can easily know who and what are accessing the network, as well as how to protect corporate assets both on and off the network.
|
The FortiNAC product line includes hardware appliances, virtual machines and licenses. The licenses can run on either the hardware appliance or the virtual machine. Each FortiNAC deployment requires both a Control and Application server. Note that if your deployment is larger than what a single server can support, you can stack servers for more capacity. The FortiNAC solution has no upper limit on the number of concurrent ports it can support.
View by:
Functionality |
Control and Application Server |
Capacity |
Each server manages up to 2,000 ports in the network |
Functionality |
Control and Application Server |
Capacity |
Each server manages up to 15,000 ports in the network |
Functionality |
Control and Application Server |
Capacity |
Each server manages up to 25,000 ports in the network |
Functionality |
Management Server |
Capacity |
Unlimited |
| FortiNAC Base License | ||
|---|---|---|
| Functionality | Endpoint Visibility and Auto Provisioning | |
| Perputual Licenses (Concurrent endpoint devices per license) | ||
| 100 | LIC-FNAC-BASE-100 | |
| 1,000 | LIC-FNAC-BASE-1K | |
| 10,000 | LIC-FNAC-BASE-10K | |
| 50,000 | LIC-FNAC-BASE-50K | |
| Subscription Licenses | ||
| 25 | FC1-10-FNAC1-215-01-DD | |
| 500 | FC2-10-FNAC1-215-01-DD | |
| 10,000 | FC3-10-FNAC1-215-01-DD | |
| FortiNAC Plus License | ||
|---|---|---|
| Functionality | Visibility and Control | |
| Perputual Licenses (Concurrent endpoint devices per license) | ||
| 100 | LIC-FNAC-PLUS-100 | |
| 1,000 | LIC-FNAC-PLUS-1K | |
| 10,000 | LIC-FNAC-PLUS-10K | |
| 50,000 | LIC-FNAC-PLUS-50K | |
| Subscription Licenses | ||
| 25 | FC1-10-FNAC1-213-01-DD | |
| 500 | FC2-10-FNAC1-213-01-DD | |
| 10,000 | FC3-10-FNAC1-213-01-DD | |
| FortiNAC Pro License | ||
|---|---|---|
| Functionality | Visibility, Control and Response | |
| Perputual Licenses (Concurrent endpoint devices per license) | ||
| 100 | LIC-FNAC-PRO-100 | |
| 1,000 | LIC-FNAC-PRO-1K | |
| 10,000 | LIC-FNAC-PRO-10K | |
| 50,000 | LIC-FNAC-PRO-50K | |
| Subscription Licenses | ||
| 25 | FC1-10-FNAC1-209-01-DD | |
| 500 | FC2-10-FNAC1-209-01-DD | |
| 10,000 | FC3-10-FNAC1-209-01-DD | |
Our Customers Emphasize the Value of FortiNAC in Gartner Peer Insights Reviews
★★★★★
“Fit Our Needs As A K-12 Organization That Wanted To Do BYOD Minus Issue With Registration”
Director of Media and Technology
Industry: Education
Role: CTO
Firm Size: <50M USD
“This solution fits our needs because it allows for network segmentation, filtering, and user management within the product. It also interoperates with our directory, our firewall, and our filtering solutions seamlessly."
★★★★★
“Implementation Was Smooth And Product Runs With Very Few Problems”
VP Networking
Industry: Finance
Role: Infrastructure and Operations
Firm Size:1B - 3B USD
“Our company has been using the FortiNAC product for around 6 years and it has been a good experience. We use it to manage around 13K devices across 3 data centers and 260+ locations.”
★★★★★
“Solid NAC Solution... Some Room To Improve Interface And Support”
Sr Director, Network Operations
Industry: Miscellaneous
Role: Infrastructure and Operations
Firm Size: <50M USD
“Once we got the hang of managing it, it's really been a god-send having visibility of all devices connected across our entire network.”
★★★★★
“Flexible Product, Vendor Agnostic, A Great Value In Device Registration On The Network”.
LAN Admin
Industry: Education
Role: Infrastructure and Operations
Firm Size: Gov't/PS/ED <5,000 Employees
“Flexible product, can get very detailed as to what you want to check/analyze/scan or can be setup very simplistic for on-boarding purposes. Is vendor agnostic on the hardware side and implementation was very smooth. We have been using this product for 11 years.”
★★★★★
“Seemless With No Customer Impact”
CIO - CISO
Industry: Healthcare
Role: CIO
"The product is easy to use and understand and the support team helped whenever asked. The protection of the network cannot happen without Port security and this product does that and gives you visibility."
★★★★★
“Solid Products, But Needs Persistent Agent For Chromebooks”
Network Administrator
Industry: Education
Role: System Integrator
Firm Size: Gov't/PS/ED <5,000 Employees
“The overall experience has been great.”
★★★★★
“Effective Tool That Works Well”
Lead Network Architect Engineer
Industry: Government
Role: Infrastructure and Operations
Firm Size: Gov't/PS/ED <5,000 Employees
“The Network Sentry - Network Access Control aka NAC, has been critical in the control of access to our environment. It has allowed us to keep those who don't belong out, it alerts on attempts, and allowed us to catch audit penetration attempts.”
Gartner Peer Insights reviews constitute the subjective opinions of individual end users based on their own experiences, and do not represent the views of Gartner or its affiliates.
View by:
Data Sheets
White Papers & eBooks
Case Studies
Solution Guides
Related Links
FortiNAC Integrations Alliance Partners
FortiNAC has integrations with more than 150 vendors, enabling it to integrate with virtually every switch, wireless access point, and firewall in your network. The below companies are examples of Fortinet Fabric partners with integrations. For a complete list of vendors with integrations, please see the data sheet.
Cisco
Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.
CyberMDX
Coupling CyberMDX detection and identification capabilities with Fortinet, healthcare organizations are equipped with unmatched IoMT & IoT asset visibility, classification and attack-prevention enforcement tools.
Cynerio
The Cynerio-Fortinet joint solution equips healthcare IT security teams with comprehensive security and remediation policies that ensure uninterrupted clinical services. Armed with detailed insights into medical device behavior, impact, and criticality, hospitals can enforce customized cybersecurity policy using ACLs, VLANs, NAC and firewalls.
Google Cloud Platform
Google Cloud Platform is a secure, dedicated public cloud computing service operated by Google which provides a range of infrastructure and application services that enable deployments in the cloud. Fortinet provides critical firewalling, advanced security and scalable BYOL protection for elastic compute, container, and machine-learning workloads in Google’s innovative public cloud.
Hewlett Packard Enterprise
Hewlett Packard Enterprise is an industry-leading technology company that enables customers to go further, faster. With the industry’s most comprehensive portfolio, HPE's technology and services help customers around the world make IT more efficient, more productive, and more secure.
- Fortinet-HPE Alliance Brief
- HPE Aruba Solution Brief
- HPE Aruba Technical Guide
- Fortinet and HPE-GreenLake Solution Brief
- Fortinet and HPE Edgeline Converged Edge Systems and OT Link Solution Brief
- Fortinet and HPE IT OT Convergence Security Solution White Paper
- Fortinet and HPE Proliant for Microsoft Azure Solution Brief
- Fortinet and HPE Proliant for Microsoft Azure White Paper
- Fortinet-HPE SDN Solution Brief
- Fortinet, HPE, and Pensando Innovative Edge-to-Core Solution Brief
- Fortinet, HPE, and Scality Distributed Object Storage Environment Solution Brief
Intel
Intel invents at the boundaries of technology to make amazing experiences possible for business and society, and for every person on Earth. To learn more about Intel and our technologies, please visit: www.intel.com
Jamf
Jamf automates Apple device deployment, management and security without impacting the end-user experience or requiring IT to touch the device. Jamf preserves the native and consistent Apple experience that people expect at work, while fulfilling the security and compliance requirements of the enterprise.
Lightspeed Systems
Lightspeed Systems has been serving schools since 1999. It’s our mission to protect students by providing IT with the tools it needs to succeed.
Medigate
Together, Medigate and Fortinet deliver the deep clinical visibility and cybersecurity intelligence needed to accurately detect real-time threats in healthcare networks and automate effective policy enforcement to keep patient data and operations safe.
Microsoft Azure
Microsoft is the leading platform and productivity company for the mobile-first, cloud-first world, and its mission is to empower every person and every organization on the planet to achieve more.
Nozomi Networks
Nozomi Networks is a leading provider of real-time visibility, advanced monitoring capabilities, and strong security for industrial control networks supporting critical infrastructure. Nozomi has been deployed in some of the largest industrial installations, providing some of the fastest return-on–investment in the industry.
- Solution brief
- Fortinet FortiGate and Nozomi Networks Guardian Deployment Guide
- Fortinet FortiSIEM and Nozomi Networks CMDB Deployment Guide
- ICS Security Overview & Integration Video
- Fortinet-Nozomi integration demo
Nutanix
Nutanix makes infrastructure invisible, elevating IT to focus on the applications and services that power their business. The Nutanix enterprise cloud platform leverages web-scale engineering and consumer-grade design to natively converge compute, virtualization and storage into a resilient, software-defined solution that delivers any application at any scale.
Ordr
Ordr delivers comprehensive proactive protection for the hyper-connected enterprise. The Ordr Systems Control Engine utilizes sophisticated machine learning and artificial intelligence to provide complete visibility and exhaustive control over every class of connected device and system.
Siemens
Siemens is a global powerhouse focusing on the areas of electrification, automation and digitalization.
Tenable
Tenable®, Inc. is the Cyber Exposure company. Over 30,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus®, Tenable extended its expertise in vulnerabilities to deliver the world’s first platform to see and secure any digital asset on any computing platform.
View by:
The surge in deployment of IoT devices requires advanced network security. Specifically, network operators need to be able to identify every user and device that connects to the network and then grant or limit network access appropriately. Furthermore, the network needs constant supervision to ensure ongoing safe operation with automated responses to threats as they are detected. FortiNAC from Fortinet can provide those capabilities so that network operators can confidently know who and what is on their network. Come and see how FortiNAC can provide visibility, control, and response for your network.
Demo Videos
FortiNAC Use Cases
Branch have grown in complexity with more devices, including headless IoT devices, getting connected to the network-without a corresponding increase in staff. To maintain visibility, control, and responsiveness in Branch Offices, FortiNAC is part of the Fortinet's Secure SD-Branch Solution. Learn more here.
FortiNAC Videos
Features and Benefits
Agentless scanning
Detect and identify headless devices as they connect to the network
17 profiling methods
Utilize up to 17 different ways of determining the identity of a device
Simplified onboarding
Automate onboarding process for large number of endpoints, users, and guests
Micro-segmentation
With identified devices, FortiNAC can narrowly restrict network access for those devices to only necessary network assets
Extensive multi-vendor support
Interact with and configure network devices (switches, wireless access points, firewalls, clients) from more than 150 vendors
Scalability
FortiNAC architecture enables effective scaling to multi-site locations and supporting millions of devices
How Network Access Control Secures Your Network
NAC network security provides visibility over everything connected to the network, as well as the ability to control those devices and users, including dynamic, automated responses. It plays a role in strengthening overall network security infrastructure.
A properly functioning solution can prevent access to noncompliant users or devices, place them in quarantine, or restrict access to a small number of network resources, separated from the rest of the network. A network access control policy generally supports the following:
- Authentication and authorization of users and devices
- User and device profiling
- Denial of unsecured devices
- Quarantine of unsecured devices
- Restricting access to unsecured devices
- Policy lifecycle management
- Overall security posture assessment
- Incident response through policy enforcement
- Guest networking access
Network Access Control Benefits and Use Cases
IoT and BYOD
The adoption of IoT devices is growing exponentially, especially in high-risk markets such as healthcare and retail where even a few years ago there were far fewer network-connected devices. Converging with this trend is BYOD (Bring Your Own Device), which over more than a decade has brought an influx of new mobile devices connecting to corporate networks. Both technologies create substantial new security risks and open new threat vectors, and unsecured devices dramatically increase the risk of intrusion, breach, and a catastrophic cyberattack. The right NAC solutions ensure compliance for all devices connecting to networks, checking that proper controls are in place before corporate network resources are accessible.
There are now billions of non-traditional compute, IP-enabled devices that are connecting to public networks. (This means basically everything on the network that isn't a laptop or mobile phone, from IP cameras, to VoIP phones, printers, HVAC controls, temperature sensors, badge readers, digital displays, bluetooth sensors, and many more examples.)
Incident Response
The role of NAC in incident response is often significant. Network access control solutions can be configured to automatically enforce security policies, share contextual information, and isolate unsecure devices from accessing other parts of a network.
Contractors
Contractors, partner employees, and other guest workers need specialized access only to those parts of the corporate network that enable a good user experience and allow them to do their jobs. NAC plays a key role in maintaining access privileges while ensuring guest users have smooth connectivity and a good overall experience.
Medicine
Healthcare is an industry rapidly embracing the Internet of Medical Things (IoMT) and now many new networked devices are coming online to support advances in medicine and medical care. But as more medical devices access the corporate network, it is critical to employ NAC computer solutions that can help protect devices and massive troves of sensitive personal data, including medical records. This can help improve healthcare security overall and keep medical facilities and other healthcare institutions free from ransomware and other prevalent threats.
Compliance
Regulatory compliance isn’t optional, and organizations can receive serious fines and create myriad other problems if access controls aren’t implemented or aren’t demonstrably effective. NAC solutions have long been thought of as risk mitigation technology—which they certainly are—but the right ones can also help enforce compliance controls under regulations such as HIPAA, SOX, or PCI-DSS, and ensure smooth compliance audits.
FortiNAC: Network Access Security Solution
FortiNAC is the Fortinet network access control solution. NAC computer security enhances the overall Fortinet Security Fabric with visibility, control, and automated response for everything that connects to the network. It provides protection against IoT threats, extends control to third-party devices, and orchestrates automatic responses to a wide range of networking events.
FortiNAC enables three key capabilities to secure IoT devices:
- Network visibility to see every device and user as they join the network
- Network control to limit where devices can go on the network
- Automated response to speed reaction time to events from days to seconds
The FortiNAC solution protects both wireless and wired networks with a centralized architecture that enables distributed deployments with automated responsiveness.
FortiNAC is an ideal solution for any stage or maturity level of a security strategy. Using FortiNAC, organizations can:
- Deliver agent and agentless scanning of the network for discovery and classification of devices
- Create an inventory of all devices on the network and assess the risk of every endpoint connected to the network
- Use a centralized architecture for easy deployment and management
- Leverage extensive support for third-party network devices to ensure overall effectiveness
- Enforce dynamic access control
- Prepare for incident response and reduce containment time to seconds, sometimes from as long as days or weeks
- Integrate with SIEM solutions to provide detailed contextual data and reduce investigation time
- Automate the onboarding and permissions process for large numbers of endpoint devices, users, and guests
Explore Models & Specs
Request the Product Demo.
