Licensing

FortiWeb on AWS supports BYOL (Bring Your Own License) and PAYG (Pay As You Go) order types. For the BYOL order type, you need to buy licenses through Fortinet partners. If you don't have a partner, contact gcpsales@fortinet.com for assistance in purchasing a license.

The following table lists the FortiWeb-VM BYOL licenses and the supported vCPU number. To ensure high performance, it's recommended to use a license with at least 2 vCPUs.

License	vCPU
FWB-VM01	1
FWB-VM02	2
FWB-VM04	4
FWB-VM08	8
FWB-VM16	16

It's allowed to import license to a virtual machine with greater vCPU number than the license specifies, for example, you can use FWB-VM04 on a virtual machine with 6 vCPUs, but the extra 2 vCPUs will not be used by FortiWeb-VM.

The maximum number of IP sessions and policies an instance can support is determined by the license and available vRAM, just as it does for hardware models. For details, see maximum configuration values in the FortiWeb Administration Guide.

Downloading license file

When you place an order for FortiWeb-VM, Fortinet emails a registration number to the recipient address you supplied on the order form.

After you receive the registration number, perform the following steps to generate a license file on Fortinet support site.

1. Go to https://support.fortinet.com/ and create a new account or log in with an existing account.
2. Go to Register/Renew to start the registration process. In the Specify Registration Code field, enter your license registration number and select Next to continue registering the product. Enter your details in the other fields.
   
   
3. At the end of the registration process, download the license (.lic) file to your computer. You will upload this license later to activate the FortiWeb-VM.
   After registering a license, Fortinet servers may take up to 30 minutes to fully recognize the new license. When you upload the license (.lic) file to activate the FortiWeb-VM, if you get an error that the license is invalid, wait 30 minutes and try again.

Flex-VM

FortiWeb-VM 7.0.1 and later releases support Flex-VM license on private cloud platforms as well as public cloud platforms including AWS, Azure, and Google Cloud. With Flex-VM license, resource consumption is calculated on a daily basis.

For more information on Flex-VM license, refer to https://docs.fortinet.com/product/flex-vm/.

To get the Flex-VM license file:

1. Get the token on Support site. Refer to this article.
2. Run the following command in FortiWeb CLI:
   

   exec vm-license <token>

   A license file will be fetched if the token validation can be passed.

   You will see the license status turning into Valid on Dashboard in GUI, or run diagnose debug vm license to check if the license is valid.

Since 7.0.2, it's supported to get the Flex-VM license file through a proxy server:

exec vm-license <token>[user:password@]proxyhost[:port]

Please note if a proxy server is deployed before FortiWeb, make sure you have run the following command so that FortiWeb can connect with FortiGuard Distribution Network (FDN) through the proxy server for license validation.

config system autoupdate tunneling

set status enable

set address <proxy_host>

set port <proxy_port>

set username <username>

set password <password>

end