Licensing

FortiWeb-VM has two license types. The VM license series is for permanent use of FortiWeb-VM, and the VM S license series is used for annual subscription. VM S license is supported only on 6.3.0 and later releases.

The licenses determine the size of the virtual appliance. The registration number you use to obtain the license is also required to download software (for hypervisor deployments) and register for FortiGuard services and technical support.

The FortiWeb-VM licenses specify the size of the virtual appliance you can deploy. It's not allowed to import license to a virtual machine with greater vCPU number than the license specifies. The following table lists the FortiWeb-VM licenses and the supported vCPU number. To ensure high performance, it's recommended to use a license with at least 2 vCPUs.

FortiWeb-VM resource limitations

	License/model
	VM/VM S 01	VM/VM S 02	VM/VM S 04	VM/VM S 08	VM/VM S 16
Virtual CPUs (vCPUs)	1	2	4	8	16

Maximum IP sessions and policies varies by license, but also by available vRAM, just as it does for hardware models. For details, see maximum configuration values in the FortiWeb Administration Guide.

When you place an order for FortiWeb-VM, Fortinet emails a registration number to the recipient address you supplied on the order form. To register your appliance with Technical Support and to obtain a license file, enter that registration number on the Fortinet Technical Support website at the following location:

https://support.fortinet.com/

The license file is required to permanently activate FortiWeb-VM. For details, see Downloading the FortiWeb-VM license & registering with Technical Support.

FortiWeb-VM needs to periodically re-validate its license by contacting either Fortinet’s FortiGuard Distribution Network (FDN) via an Internet connection or a FortiManager. If FortiWeb-VM cannot contact FDN or FortiManager for 24 hours, it locks access to the web UI and CLI. In some cases, the web UI displays a message such as: License has been uploaded. Please wait for authentication with registration servers. For information on restoring access or configuring license validation using FortiManager, see Uploading the license.

Flex-VM

FortiWeb-VM 7.0.1 and later releases support Flex-VM license on private cloud platforms as well as public cloud platforms including AWS, Azure, and Google Cloud. With Flex-VM license, resource consumption is calculated on a daily basis.

For more information on Flex-VM license, refer to https://docs.fortinet.com/product/flex-vm/.

To get the Flex-VM license file:

1. Get the token on Support site. Refer to this article.
2. Run the following command in FortiWeb CLI:
   

   exec vm-license <token>

   A license file will be fetched if the token validation can be passed.

   You will see the license status turning into Valid on Dashboard in GUI, or run diagnose debug vm license to check if the license is valid.

Since 7.0.2, it's supported to get the Flex-VM license file through a proxy server:

exec vm-license <token> [user:password@]proxyhost[:port]

Please note if a proxy server is deployed before FortiWeb, make sure you have run the following command so that FortiWeb can connect with FortiGuard Distribution Network (FDN) through the proxy server for license validation.

config system autoupdate tunneling

set status enable

set address <proxy_host>

set port <proxy_port>

set username <username>

set password <password>

end