By Manny Fernandez

February 13, 2026

Deploying FortiNAC in EVE-NG

Deploying FortiNAC in EVE-NG

First things first, you will need to download the KVM version of the FortiNAC-F.  You will also need a license for it & in this case, EVE-NG.

SSH to your EVE-NG server.  Once there, you will need to create a directory for FortiNAC

mkdir /opt/unetlab/addons/qemu/fortinet-NAC

Download the FortiNAC KVM image from support.fortinet.com and unzip it.

You can see the .zip file I downloaded and the folder it created when I unzipped it on macOS.

Here, you can see the FNCKVM.qcow2 (The name caught me by suprise for a quick second 😀)

Next you will need to get your files on to the EVE-NG server.

Let’s go back to the SSH session.

cd /opt/unetlab/addons/qemu/fortinet-NAC  – Change to the addons/qemu directory.
mv <your-uploaded-filename>.qcow2 virtioa.qcow2 Now we are going to rename the file we uploaded from the FNCKVM.qcow2 to virtioa.qcow2 using the mv command.

Now we are going to create a log disk

/opt/qemu/bin/qemu-img create -f qcow2 virtiob.qcow2 40G

NOTE: The virtioA and virtioB names.

Now we are going to run the fixpermissions script.

/opt/unetlab/wrappers/unl_wrapper -a fixpermissions

I next downloaded the FortiNAC logo from the stencil site.

You need to upload it to /opt/unetlab/html/images/icons .  You will want to use the 50 px format.

Now we log into the EVE-NG portal and deploy a Node.  It will show up under fortigate and you can swap the image.

Choose the fortinet-NAC image and the .png you uploaded.

Note:  Ensure you have at least 4 CPUs and 8GB or RAM.

Boom 💥 you are done.  Hope this helps.

FortiLink NAC or NAC Lite

FortiLink NAC or NAC Lite

Configure FortiGate FortiSwitch NAC without extra software. Learn to set up NAC Lite, create VLANs, and define policies for device onboarding and isolation.

Read More
FortiNAC Device Profiling and Config Wizard – Session 3

FortiNAC Device Profiling and Config Wizard – Session 3

Configure the FortiNAC Config Wizard for Layer 3 isolation and set up device profiling rules to automate endpoint registration and security posture checks.

Read More
FortiNAC Initial Inventory Discovery – Session 2

FortiNAC Initial Inventory Discovery – Session 2

Configure FortiNAC inventory discovery for FortiGate. Set up SNMPv3, API keys, and admin accounts to sync switches and enable NAC policies.

Read More