Fortinet black logo

AWS Administration Guide

FortiCloud-generated license adoption for AWS on-demand variant

FortiCloud-generated license adoption for AWS on-demand variant

FortiGate-VM AWS on-demand instances can obtain FortiCloud-generated licenses and register to FortiCloud.

The valid license allows you to register to FortiCloud to use features including FortiToken with the FortiGate-VM instance.

The FortiGate-VM must be able to reach FortiCloud to receive a valid on-demand license. Ensure connectivity to FortiCloud (https://directregistration.fortinet.com/) by checking all related setup on security groups, access control lists, Internet gateways, route tables, public IP addresses, and so on.

If you created the FortiGate-VM in a closed environment or it cannot reach FortiCloud, the FortiGate-VM self-generates a local license as in previous FortiOS versions. You can obtain a FortiCloud license, ensure that the FortiGate-VM can connect to FortiCloud, then run the execute vm-license command to obtain the license from FortiCloud.

To deploy a FortiGate-VM AWS on-demand instance:

When deploying a FortiGate-VM on-demand instance for AWS, you use the FGT_VM64_AWS-v7-buildXXXX-FORTINET.out image. After deployment with this image, running get system status results in output that includes the following lines:

Version: FortiGate-VM64-AWS v7.4.x,buildXXXX,XXXXXX (GA)

Virus-DB: 71.00242(2019-08-30 08:19)

Extended DB: 1.00000(2018-04-09 18:07)

Extreme DB: 1.00000(2018-04-09 18:07)

IPS-DB: 6.00741(2015-12-01 02:30)

IPS-ETDB: 0.00000(2001-01-01 00:00)

APP-DB: 6.00741(2015-12-01 02:30)

INDUSTRIAL-DB: 6.00741(2015-12-01 02:30)

Serial-Number: FGTAWS12345678

FortiCloud-generated license adoption for AWS on-demand variant

FortiGate-VM AWS on-demand instances can obtain FortiCloud-generated licenses and register to FortiCloud.

The valid license allows you to register to FortiCloud to use features including FortiToken with the FortiGate-VM instance.

The FortiGate-VM must be able to reach FortiCloud to receive a valid on-demand license. Ensure connectivity to FortiCloud (https://directregistration.fortinet.com/) by checking all related setup on security groups, access control lists, Internet gateways, route tables, public IP addresses, and so on.

If you created the FortiGate-VM in a closed environment or it cannot reach FortiCloud, the FortiGate-VM self-generates a local license as in previous FortiOS versions. You can obtain a FortiCloud license, ensure that the FortiGate-VM can connect to FortiCloud, then run the execute vm-license command to obtain the license from FortiCloud.

To deploy a FortiGate-VM AWS on-demand instance:

When deploying a FortiGate-VM on-demand instance for AWS, you use the FGT_VM64_AWS-v7-buildXXXX-FORTINET.out image. After deployment with this image, running get system status results in output that includes the following lines:

Version: FortiGate-VM64-AWS v7.4.x,buildXXXX,XXXXXX (GA)

Virus-DB: 71.00242(2019-08-30 08:19)

Extended DB: 1.00000(2018-04-09 18:07)

Extreme DB: 1.00000(2018-04-09 18:07)

IPS-DB: 6.00741(2015-12-01 02:30)

IPS-ETDB: 0.00000(2001-01-01 00:00)

APP-DB: 6.00741(2015-12-01 02:30)

INDUSTRIAL-DB: 6.00741(2015-12-01 02:30)

Serial-Number: FGTAWS12345678