Fortinet black logo

EMS Administration Guide

FortiClient EMS

FortiClient EMS

FortiClient EMS supports the following types of licenses:

Free trial license

When you install FortiClient EMS, the free trial license is enabled by default. There are separate licenses for Windows, macOS, and Linux endpoint management and for Chromebook management.

The free trial license for Windows, macOS, and Linux FortiClient EMS supports ten FortiClient endpoints. FortiClient EMS consumes one license count for each managed FortiClient device.

The free trial license for Chromebook management supports ten Google Chromebook users. FortiClient EMS consumes one license count for each logged-in user. If the user logs out, the license seat times out (default timeout being 24 hours), and the license is released. At this point, another user can use this license seat.

Purchased license

There are separate purchasable licenses for Windows, macOS, and Linux endpoint management and Chromebook management.

Each purchased Windows, macOS, and Linux license allows management of one FortiClient endpoint. You must purchase a minimum of 100 endpoint licenses, and you can have these EMS licenses for a maximum three year term. You can specify the number of endpoints and the term duration at time of purchase.

Each purchased Chromebook license allows management of one Google Chromebook user. You must purchase a minimum of 100 Google Chromebook user licenses and can have these EMS licenses for a maximum three year term. You can specify the number of Google Chromebook users and the term duration at time of purchase. FortiClient EMS uses one license seat per logged-in user. If the user logs out, the license seat times out (default timeout being 24 hours), and the license is released. At this point, another user can use this license seat.

You can use a licensed FortiClient EMS to deploy, provision, and manage FortiClient endpoints. However, if you have a FortiGate in your network, you can buy an add-on FortiGate endpoint license to enforce endpoint compliance on the firewall while EMS is managing the endpoints. Using FortiGate with EMS is optional.

EMS sends an email when you are running out of licenses. Additionally, EMS enters a log entry when an endpoint is refused connection due to unavailable licenses.

FortiClient EMS

FortiClient EMS supports the following types of licenses:

Free trial license

When you install FortiClient EMS, the free trial license is enabled by default. There are separate licenses for Windows, macOS, and Linux endpoint management and for Chromebook management.

The free trial license for Windows, macOS, and Linux FortiClient EMS supports ten FortiClient endpoints. FortiClient EMS consumes one license count for each managed FortiClient device.

The free trial license for Chromebook management supports ten Google Chromebook users. FortiClient EMS consumes one license count for each logged-in user. If the user logs out, the license seat times out (default timeout being 24 hours), and the license is released. At this point, another user can use this license seat.

Purchased license

There are separate purchasable licenses for Windows, macOS, and Linux endpoint management and Chromebook management.

Each purchased Windows, macOS, and Linux license allows management of one FortiClient endpoint. You must purchase a minimum of 100 endpoint licenses, and you can have these EMS licenses for a maximum three year term. You can specify the number of endpoints and the term duration at time of purchase.

Each purchased Chromebook license allows management of one Google Chromebook user. You must purchase a minimum of 100 Google Chromebook user licenses and can have these EMS licenses for a maximum three year term. You can specify the number of Google Chromebook users and the term duration at time of purchase. FortiClient EMS uses one license seat per logged-in user. If the user logs out, the license seat times out (default timeout being 24 hours), and the license is released. At this point, another user can use this license seat.

You can use a licensed FortiClient EMS to deploy, provision, and manage FortiClient endpoints. However, if you have a FortiGate in your network, you can buy an add-on FortiGate endpoint license to enforce endpoint compliance on the firewall while EMS is managing the endpoints. Using FortiGate with EMS is optional.

EMS sends an email when you are running out of licenses. Additionally, EMS enters a log entry when an endpoint is refused connection due to unavailable licenses.