Technical Tip: FortiDDoS behavior after license expiration
Description
This article describes the behavior of FortiDDoS after the support or service license expires.
Scope
FortiDDoS.
Solution
When the FortiDDoS license expires, the appliance does not automatically switch to bypass mode.
The appliance continues operating using the currently installed firmware version and existing configuration. Core DDoS detection and mitigation functionality remains operational. The following behavior is expected after license expiration:
Core DDoS detection and mitigation features continue functioning normally.
Existing IP Reputation and Domain Reputation databases remain available on the appliance. However, these databases no longer receive FortiGuard updates.
Firmware upgrades are no longer available without an active support contract.
Technical Assistance Center's Support and Return Merchandise Authorization services require an active support contract.
IP Reputation and Domain Reputation services are optional enhancement features and are not required for core DDoS mitigation operations.
If the license remains expired for an extended period, outdated reputation databases may increase the possibility of false positives. In such cases, consider disabling IP Reputation and Domain Reputation features.
