Yes, in order to populate the End System database, you need EAC, which updates the Fortigate. However, if you have EXOS switches and Identity Management enabled, that may populate the ES database without the requirement for EAC, it just has not been tested and is not officially supported.