FortiNAC Plus License

FortiNAC PLUS License

The FortiNAC PLUS License is a software license tier designed to enable core network access control capabilities for the FortiNAC solution, providing organisations with advanced visibility, device profiling, dynamic access policies, and reporting functionality for managing endpoints in enterprise networks.

What It Does

The FortiNAC PLUS License equips FortiNAC with the essential feature set required to enforce controlled network access and gain comprehensive visibility of connected devices. It enables organisations to understand what devices are on the network, how they are behaving, and to apply policies that ensure only authorised devices and users gain access to appropriate resources.

The PLUS License is appropriate for environments that require robust endpoint discovery and access controls without the additional automated threat response capabilities included in higher-tier licensing.

Visibility and Device Profiling

Under the PLUS License, FortiNAC can:

• Discover and maintain an up-to-date inventory of all connected endpoints, including BYOD, IoT, and OT devices

• Classify devices using multiple profiling methods such as active and passive scanning, agent and agentless techniques, and behavioural analysis

• Identify devices using native and FortiGuard IoT categorisation for deeper context

• Detect rogue or unknown devices attempting to join the network

These capabilities allow IT and security teams to understand network composition and behaviour, which is critical for effective risk assessment and policy enforcement.

Dynamic Access Control

The PLUS License enables FortiNAC to enforce network access policies that govern how and when devices and users are allowed to connect. Key access control capabilities include:

• Role-based access policies based on user identity, device type, and contextual attributes

• Dynamic VLAN assignment to direct devices into appropriate network segments

• Guest onboarding for temporary users and devices

• MAC Authentication Bypass (MAB) and RADIUS/EAP methods for network authentication

Dynamic access control functions ensure that devices and users are granted only the access needed to perform legitimate tasks, aligning with least-privilege principles.

Reporting and Analytics

With the PLUS License, FortiNAC provides reporting and analytics features that help with compliance, audit readiness, and network insight. Reporting encompasses:

• Endpoint inventory summaries

• Device categorisation and behaviour reports

• Guest access activity

• Policy enforcement events

These reports are useful for both security operations and compliance teams, providing visibility into how the network is being utilised and where potential risks may exist.

Deployment Context

The FortiNAC PLUS License can be applied to:

• Hardware appliances (such as FortiNAC CA series)

• Virtual appliances running FortiNAC-OS

• Cloud marketplace deployments

Licenses are sized based on the number of concurrent managed endpoints and are available in various tiers (e.g., 100, 1K, 10K, 50K), allowing organisations to scale licensing in line with network size and operational needs.

Ideal Use Cases

The FortiNAC PLUS License is well suited for:

• Organisations seeking comprehensive network visibility and access control

• Networks with significant BYOD, IoT, or OT device populations

• Environments requiring centralised device profiling and access enforcement

• Teams requiring reporting and audit documentation for compliance

View data sheet: FortiNAC Data Sheet