Fortinet black logo

Hyperscale Firewall Guide

Applying the hyperscale firewall activation code or license key

Applying the hyperscale firewall activation code or license key

To activate hyperscale firewall features for your FortiGate you must register your FortiGate and purchase a hyperscale firewall license for it. From the Fortinet Support website you can apply the hyperscale firewall license to the FortiGate and obtain your hyperscale firewall activation code or license key.

You can use the following command to apply your hyperscale firewall activation code or license key to activate hyperscale firewall features for your FortiGate:

execute hscalefw-license {<activation-code> | <license-key>}

After you enter this command, the FortiGate restarts with hyperscale firewall features available. Check the Licenses dashboard widget to verify that the FortiGate has been successfully licensed for hyperscale firewall features.

Note

If you are operating an HA cluster, all FortiGates in the cluster must have a hyperscale firewall license.

You can also use the get system status command to verify that your hyperscale firewall license is enabled:

get system status
...
Hyperscale license: Enabled
...
end

You can now create hyperscale firewall configurations for your FortiGate. To apply hyperscale firewall features, your FortiGate must be operating in multi VDOM mode. You cannot use the root VDOM for hyperscale firewall features. Instead you must create new hyperscale firewall VDOMs for the traffic that you want to apply hyperscale firewall features to. You can also use the root VDOM for other traffic or create other VDOMs for other traffic.

Note

The FortiGate hyperscale firewall license also includes an unregister license key. You can use the unregister license key to disable hyperscale firewall features by entering the following command:

execute hscalefw-license <unregister-license-key>

After entering the command the FortiGate restarts and hyperscale firewall features are no longer available. You can verify this from the Licenses dashboard widget or by using the get system status command.

Applying the hyperscale firewall activation code or license key

To activate hyperscale firewall features for your FortiGate you must register your FortiGate and purchase a hyperscale firewall license for it. From the Fortinet Support website you can apply the hyperscale firewall license to the FortiGate and obtain your hyperscale firewall activation code or license key.

You can use the following command to apply your hyperscale firewall activation code or license key to activate hyperscale firewall features for your FortiGate:

execute hscalefw-license {<activation-code> | <license-key>}

After you enter this command, the FortiGate restarts with hyperscale firewall features available. Check the Licenses dashboard widget to verify that the FortiGate has been successfully licensed for hyperscale firewall features.

Note

If you are operating an HA cluster, all FortiGates in the cluster must have a hyperscale firewall license.

You can also use the get system status command to verify that your hyperscale firewall license is enabled:

get system status
...
Hyperscale license: Enabled
...
end

You can now create hyperscale firewall configurations for your FortiGate. To apply hyperscale firewall features, your FortiGate must be operating in multi VDOM mode. You cannot use the root VDOM for hyperscale firewall features. Instead you must create new hyperscale firewall VDOMs for the traffic that you want to apply hyperscale firewall features to. You can also use the root VDOM for other traffic or create other VDOMs for other traffic.

Note

The FortiGate hyperscale firewall license also includes an unregister license key. You can use the unregister license key to disable hyperscale firewall features by entering the following command:

execute hscalefw-license <unregister-license-key>

After entering the command the FortiGate restarts and hyperscale firewall features are no longer available. You can verify this from the Licenses dashboard widget or by using the get system status command.