FortinetAvailable
FCF-CA
FCN Exam Guide: FortiNAC Administrator Cost and Prep
Direct answer: FCN is the Fortinet FortiNAC Administrator exam. It suits network and security staff who run network access control. Our voucher costs $114.99, arrives by email within 12 hours, and a six-week plan with hands-on labs is a realistic way to prepare.
The FCN FortiNAC Administrator exam checks that you can run Fortinet's network access control product, FortiNAC. Our voucher costs $114.99 (USD), and the code is emailed within 12 hours of payment. Six weeks at about six hours a week is a realistic plan if you already know switching and VLANs.
What the FCN exam proves and who should take it
FortiNAC is a network access control (NAC) product. It finds devices on your network, identifies them, and decides what each one may reach. The FCN exam shows you can administer that kind of deployment.
This exam fits you if you:
Manage wired or wireless networks and want to control who and what connects.
Work in a security team that must enforce policy on laptops, phones, printers and IoT devices.
Support a Fortinet environment and need to show product-level skill on your CV.
Already hold a Fortinet certification, such as the one covered in our NSE 4 FCP FortiOS Administrator guide, and want to add NAC.
It is a poor first certification. If you are new to networking, start with the basics in our Networking category first.
Exam facts at a glance
Item | Detail |
|---|---|
Exam | FCN FortiNAC Administrator |
Vendor | Fortinet |
Our voucher price | $114.99 USD (as listed on 2026-11-07) |
Code delivery | Emailed within 12 hours of payment, also shown in your account |
Cancellation before delivery | Full refund |
Fortinet sets the list price, exam length, passing score and objective weights, and it can change them, so confirm those on the Fortinet Training Institute exam page before you book.
Topics to study (and the hands-on task for each)
FortiNAC work is practical, so study each topic by doing something with it. The table below groups the general areas an administrator of this product works with. It is a study aid, not the official objective list or weighting.
Topic area | What to be able to do |
|---|---|
Architecture and deployment | Explain the roles of the FortiNAC servers and how they sit in the network |
Network device integration | Add a switch or wireless controller and confirm FortiNAC can read it |
Device discovery and profiling | Explain how an unknown device becomes identified and classified |
Onboarding and registration | Walk a user or guest through registering a device |
Policies and access control | Match a device or user to a policy and the network access it receives |
Events, alarms and automation | Trace a security event to an automated response |
Troubleshooting | Work out why a device landed in the wrong network |
When you check the official objectives, rank your own gaps against that list. Spend the most time on the areas where you cannot yet do the task without notes.
A worked example: why does this laptop land in the wrong VLAN?
This kind of scenario is the heart of NAC work, and it is a good way to test yourself. Picture a new laptop plugged into an access switch.
The switch reports a new MAC address to FortiNAC, by trap or by polling.
FortiNAC does not know the device yet, so it treats the device as an unregistered (rogue) host.
A policy places the port in a restricted network, such as a registration VLAN.
The user registers the device. FortiNAC now knows who owns it and what it is.
A different policy matches the registered device and moves the port to the right VLAN.
If the laptop stays in the restricted network, work backward through those steps. Did the switch report the MAC? Is the device profile correct? Did the right policy match? Can FortiNAC actually change the port?
Step one often fails in a home lab because the switch is not reachable over SNMP. You can test that from any Linux machine:
snmpwalk -v2c -c <community> <switch-ip> 1.3.6.1.2.1.1
snmpwalk -v2c -c <community> <switch-ip> 1.3.6.1.2.1.17.4.3The first command reads basic system information. The second reads the bridge forwarding table, which lists the MAC addresses the switch has learned. If either returns nothing, fix the SNMP settings before you blame the NAC policy.
A six-week study plan
This plan assumes you know VLANs, DHCP and basic RADIUS ideas. It totals about 36 hours. Add a week or two if those basics are new to you.
Week | Hours | Focus |
|---|---|---|
1 | 6 | Read the official exam page and objectives. Review VLANs, 802.1X and SNMP. |
2 | 6 | Architecture, deployment and adding network devices. |
3 | 6 | Discovery, profiling and device classification. |
4 | 6 | Onboarding, registration, guests and policies. |
5 | 6 | Events, alarms, automation and troubleshooting. |
6 | 6 | Weak areas, timed practice, and a final read of your notes. |
Use Fortinet's official training material as your main source. If you can get lab access, spend at least half of your hours in it. Reading about a policy match is not the same as watching one fail.
Common mistakes
Memorizing screens instead of logic. Interfaces change. The flow from discovery to policy to enforcement does not.
Skipping network basics. Many NAC problems are really VLAN, SNMP or DHCP problems.
Ignoring troubleshooting. Scenario questions often ask why something did not happen.
Relying on leaked question dumps. They break exam rules, and they teach you answers without skills. Dump sites are often out of date as well.
Booking before you have lab time. Set the exam date after week four, not before week one.
Voucher delivery, redemption and refunds
After payment, the voucher code is emailed within 12 hours and also appears in your account. You can find the product at FCN FortiNAC Administrator.
The refund rules are simple:
You can cancel an order for a full refund before the code is delivered.
A delivered code is non-refundable, with one exception.
If the test provider rejects the code as invalid, already used or expired on first use, contact support within 14 days. Send the order number and a screenshot. The code is then replaced or refunded.
Read the full terms on the refund policy and delivery policy pages.
After you pass
Add the credential to your CV and professional profiles, and describe what you did in the lab, not only the exam name. A short note such as "configured device profiling and onboarding policies" tells an employer more than a badge alone.
If you also run firewalls, the next logical step is a FortiGate exam. Our FCP-FGT-AD-7.4 guide explains that path. Ready to book? Get your FCN voucher and set your exam date for after week four.
Sources
Questions about this topic
Is the FCN exam hard if I have never used FortiNAC?
It is harder without hands-on time, because the product is built around policies and device behavior. If you know switching, VLANs and SNMP, you can learn the rest in about six weeks. If those basics are new, plan for more time.
Do I need another Fortinet certification before FCN?
We do not list a prerequisite for this exam. Check the exam page on the Fortinet Training Institute for current requirements. A background in networking helps more than any single certificate.
Can I practice FortiNAC without buying the product?
Fortinet's training offerings may include lab access, so check the Training Institute first. You can also practice the underlying skills at home: VLANs on a managed switch, SNMP queries, and 802.1X with a RADIUS server.
What happens if my voucher code does not work?
Contact support within 14 days with your order number and a screenshot of the error. If the test provider rejected the code as invalid, already used or expired on first use, we replace or refund it.
How long does it take to receive the voucher?
The code is emailed within 12 hours of payment. It also appears in your account on our site, so you can find it there if the email is delayed.
