Skip to main content
Authorized Fortinet reseller · DynaScale Technologies888-907-0723 · 24/7[email protected]
FortiAuthenticator (FAC-300F / 800F / 3000F / VM)

FortiAuthenticator Identity Management

Identity, SSO, certificates and 802.1X for the Fabric

Compare all 4 models

Figures are Fortinet’s own — sortable, cited on every product page
FortiAuthenticator Identity Management model comparison
ModelActions
FortiAuthenticator 300FFAC-300F5003,0002 TBDetails
FortiAuthenticator 800FFAC-800F2,66616,0002x 2 TBDetails
FortiAuthenticator 3000FFAC-3000F80,000480,0002x 2 TBDetails
FortiAuthenticator VMFAC-VM33 to +33,333200 to +20,00060 GB to 10 TBDetails

How to read these numbers

FortiAuthenticator is the identity server behind the Fabric: single sign-on, RADIUS and LDAP authentication, certificate authority for machine and user certificates, guest management, and 802.1X for wired and wireless network access.

More on choosing within this range

Capacity is quoted in local and remote users: 1,500/150 on the FAC-300F, 8,000/800 on the 800F and 40,000/240,000 on the 3000F, with NAS device limits of 500, 2,666 and 80,000 respectively and FortiToken capacity from 3,000 to 480,000.

Before you order

How many users, and how many NAS devices?

Both are hard limits and they scale very differently across the range. Every switch and access point doing 802.1X counts as a NAS device, which is the figure people underestimate.

Do you need the certificate authority?

Machine certificates for 802.1X and for ZTNA are a common driver. Running your own CA properly is real work and this is where it gets done.

What identity source do you already have?

FortiAuthenticator usually augments Active Directory or Entra ID rather than replacing it. Tell us what exists so we scope integration rather than migration.

All FortiAuthenticator Identity Management