Technical Tip: Security Rating entries shown as Unlicensed

1. The FortiManager Security Rating is based on the security ratings from its managed FortiGate. When running the Security Rating report in FortiManager, the user may be able to see some entries being categorized as 'Unlicensed'.

2. Since the FortiManager Security Rating report data is derived from the managed FortiGate, the local FortiGate needs to have a valid Security Rating license. Users will be able to verify the Security Rating license entitlement in the local FortiGate device either via GUI or CLI.

In newer versions such as 7.2, 7.4 and 7.6, this license will rename to 'Security Rating & CIS Compliance' under 'Attack Surface Security Rating'.

diagnose autoupdate versions | grep Rating -A 6

…

Security Rating Data Package

---------

Version: 4.00057

Contract Expiry Date: Sun Mar  2 2025

Last Updated using scheduled update on Sat May 11 05:16:50 2024

Last Update Attempt: Tue May 28 10:15:12 2024

Result: No Updates

It is also possible to use the following commands in the CLI:

diagnose debug application update -1

diagnose debug enable

execute update-now

To stop the debugs, run the following command :

diagnose debug disable

After running the above, check the Security rating license information to see if it is updated by running the following command:

diagnose autoupdate versions | grep Rating -A 6

Related articles:

Troubleshooting Tip: FortiGate license shows expiration with a valid contract

Technical Tip: The license still shows as expired after renewal