Fortinet black logo

Online Help

Turn on Workload Guardian

Copy Link
Copy Doc ID 66c81096-fdee-11ea-96b9-00505692583a:101963

Turn on Workload Guardian

Workload Guardian can be turned on again when the cloud account status is "Off by User" or "Off by System". If it was turned off the user, you can turn on Workload Guardian again anytime you are ready. When the Workload Guardian is turned off by system, most of the time is due to the number of virtual machine monitored by FortiCASB exceeds the license capacity and subsequently the monitoring is turned off by the system.

Resolve Insufficient Workload Guardian License Seat Issue

Before turning back on the Workload Guardian of a "Off by System" status account, you may want to increase your license capacity to cover additional virtual machines or reduce the number of virtual machines monitored by FortiCWP.

There are 3 methods to reduce the number of virtual machines monitored by FortiCWP:

Platform Methods
FortiCWP Cloud Account Management Turn off Workload Guardian of cloud accounts that are non-priority to free up Workload Guardian license seats. For more details on turning off Workload Guardian, please see Turn off Workload Guardian.
FortiCWP Cloud Account Management Delete cloud accounts that no longer needed to be monitored by FortiCWP to free up Workload Guardian license seats. For more details on deleting a cloud account, please see Delete Cloud Account.
Cloud Account Platform Host Delete virtual machines that are no longer needed on the cloud account platform host, e.g., AWS EC2, Google Cloud Console, etc.

One you have finished increasing your Workload Guardian license capacity or reducing the number of virtual machines, you may turn on Workload Guardian again following the steps below:

  1. Go to Admin > Account from FortiCWP navigation pane.
  2. Choose the cloud account that needs to have Workload Guardian turned on.
  3. Click the Action button and select Turn on Workload Guardian.
  4. Check all options in the pop-up delete cloud account check box.
  5. Click "Re-Sync Virtual Machine" to turn on Workload Guardian.
  6. Note: If you have sufficient Workload Guardian license seats, Workload Guardian will successfully turn on.

Turn on Workload Guardian

Workload Guardian can be turned on again when the cloud account status is "Off by User" or "Off by System". If it was turned off the user, you can turn on Workload Guardian again anytime you are ready. When the Workload Guardian is turned off by system, most of the time is due to the number of virtual machine monitored by FortiCASB exceeds the license capacity and subsequently the monitoring is turned off by the system.

Resolve Insufficient Workload Guardian License Seat Issue

Before turning back on the Workload Guardian of a "Off by System" status account, you may want to increase your license capacity to cover additional virtual machines or reduce the number of virtual machines monitored by FortiCWP.

There are 3 methods to reduce the number of virtual machines monitored by FortiCWP:

Platform Methods
FortiCWP Cloud Account Management Turn off Workload Guardian of cloud accounts that are non-priority to free up Workload Guardian license seats. For more details on turning off Workload Guardian, please see Turn off Workload Guardian.
FortiCWP Cloud Account Management Delete cloud accounts that no longer needed to be monitored by FortiCWP to free up Workload Guardian license seats. For more details on deleting a cloud account, please see Delete Cloud Account.
Cloud Account Platform Host Delete virtual machines that are no longer needed on the cloud account platform host, e.g., AWS EC2, Google Cloud Console, etc.

One you have finished increasing your Workload Guardian license capacity or reducing the number of virtual machines, you may turn on Workload Guardian again following the steps below:

  1. Go to Admin > Account from FortiCWP navigation pane.
  2. Choose the cloud account that needs to have Workload Guardian turned on.
  3. Click the Action button and select Turn on Workload Guardian.
  4. Check all options in the pop-up delete cloud account check box.
  5. Click "Re-Sync Virtual Machine" to turn on Workload Guardian.
  6. Note: If you have sufficient Workload Guardian license seats, Workload Guardian will successfully turn on.