License sharing
FortiIsolator allows licenses to be shared among all members of the same HA setup. A license file can be uploaded from any member and will then be applied to the entire HA setup. Each license is entitled with a certain number of sessions. All session entitlements within the HA setup are shared and split among the members, depending on when the session limit is reached. For example, for an HA setup of five members with a total entitlement of 500 sessions, the 500 sessions are shared among the members and each member can have up to 500 sessions.
Configuring maximum number of sessions
To optimize license usage and ensure fair distribution of sessions among the members, you can configure a limit for the number of sessions allowed for each user or IP address.
To configure the limit in the GUI:
Use the following options under Policies and Profiles > Default Policy:
- Max Session Per User: assigns a session limit to each local user.
- Max Session Per IP: assigns a session limit to each unique IP address.
To configure the limit in the CLI:
Default policy:
set default-policy-max-session-per-ip 100
set default-policy-max-session-per-user 100
User-created policy:
set policy-max-session-per-user policy_name 100
set policy-max-session-per-ip policy_name 100