FortiNAC relies on several backend services to provide network access control, authentication, endpoint visibility, profiling, policy enforcement, database operations and platform communications. Backend services are internal FortiNAC processes and are different from Interface services which control network access to services on FortiNAC interfaces.
Note: The services available on a system may vary depending on the FortiNAC version, deployment type, and enabled features. Some backend services are managed through the normal FortiNAC CLI, while others are visible from the underlying operating system shell.
The following sections describe commonly encountered backend services and their functions:
Core FortiNAC Services nac: Core FortiNAC service responsible for endpoint management, policy evaluation and enforcement operations. naccontrol: Provides communication and coordination between FortiNAC services and components. nacapplication: Provides application layer processing and business logic used by FortiNAC workflows. nacprobe: Performs endpoint discovery, network monitoring and device profiling functions.
Infrastructure Services mysqld: Database service used to store configuration, endpoint information, policies, events, alarms and operational data. apache2: Web server providing administrative GUI and portal related web services. named: DNS service used for endpoint registration, onboarding, captive portal redirection and isolation network operations. squid: Proxy service used by FortiNAC web and network operations.
Network Services
kea-dhcp4: DHCPv4 service used for registration, onboarding and isolation networks. kea-dhcp6: DHCPv6 service used for IPv6 registration, onboarding and isolation networks. p0f: Passive operating system fingerprinting service used for endpoint profiling and device identification.
Additional Backend Services nac-datasyncer: Provides synchronization of configuration and operational data between FortiNAC components. redis: In-memory data store used for caching, session management and inter-service communication. radiusd: RADIUS authentication, authorization and accounting (AAA) service used for network access control workflows. winbind: Provides Active Directory identity mapping, authentication and group resolution services.
Service Operations Usage: execute service
Examine service status and enable/disable services
Commands:
restart Restart a specified service
start Start a specified service
status Retrieve status of a specified service
stop Stop a specified service
Examples
Display the status of a specific service:
execute service status nac
Display available backend services:
execute service status ?
Start a service:
execute service start mysqld
Stop a service:
execute service stop named
Restart a service:
execute service restart nac
Display all running services:
execute enter-shell
systemctl status
Related Article:
Technical Tip: FortiNAC Interface Services and their function | 
