Skip to main content
ataro
Explorer II
July 17, 2025
Solved

Fortigate Evaluation License Offline Mode

  • July 17, 2025
  • 2 replies
  • 2215 views

I have loaded FG image on Hyper-V, how can I request virtual license in offline (without Internet on Firewall)  mode?

Best answer by esalija

Dear @ataro 

To request a virtual license for a FortiGate-VM in an offline mode (without internet on the firewall), you can use FortiManager as a license server. Here are the steps:

1. Set Up FortiManager:
- Ensure that FortiManager has internet access to communicate with FortiGuard servers.
- Configure FortiManager to act as a FortiGuard proxy for the FortiGate-VM.

2. Configure FortiGate-VM:
- Connect the FortiGate-VM to FortiManager. This requires configuring the central management settings on the FortiGate-VM.
- Use the following CLI commands on the FortiGate-VM:

# config system central-management
set type fortimanager
config server-list
edit 1
set server-type update rating
set server-address <fortimanager_ip>
next
end
set include-default-servers disable
end

3. Upload the License:
- If you have the license file, upload it to the FortiGate-VM using TFTP:

execute restore vmlicense tftp <filename>.lic <tftp_ip>

- The FortiGate will reboot after the license is uploaded.

4. Verify License Status:
- After reboot, check the license status using the following CLI command:

# get system status

- Ensure the license status is marked as "Valid."

By following these steps, you can request and apply a virtual license to a FortiGate-VM in an offline environment using FortiManager.

Please check the KB for details - https://community.fortinet.com/t5/FortiGate/Technical-Tip-Procedure-to-apply-FortiGate-firewall-license-to/ta-p/198781

Best regards,
Erlin

2 replies

esalija
Staff
esalijaAnswer
Staff
July 18, 2025

Dear @ataro 

To request a virtual license for a FortiGate-VM in an offline mode (without internet on the firewall), you can use FortiManager as a license server. Here are the steps:

1. Set Up FortiManager:
- Ensure that FortiManager has internet access to communicate with FortiGuard servers.
- Configure FortiManager to act as a FortiGuard proxy for the FortiGate-VM.

2. Configure FortiGate-VM:
- Connect the FortiGate-VM to FortiManager. This requires configuring the central management settings on the FortiGate-VM.
- Use the following CLI commands on the FortiGate-VM:

# config system central-management
set type fortimanager
config server-list
edit 1
set server-type update rating
set server-address <fortimanager_ip>
next
end
set include-default-servers disable
end

3. Upload the License:
- If you have the license file, upload it to the FortiGate-VM using TFTP:

execute restore vmlicense tftp <filename>.lic <tftp_ip>

- The FortiGate will reboot after the license is uploaded.

4. Verify License Status:
- After reboot, check the license status using the following CLI command:

# get system status

- Ensure the license status is marked as "Valid."

By following these steps, you can request and apply a virtual license to a FortiGate-VM in an offline environment using FortiManager.

Please check the KB for details - https://community.fortinet.com/t5/FortiGate/Technical-Tip-Procedure-to-apply-FortiGate-firewall-license-to/ta-p/198781

Best regards,
Erlin

ataro
ataroAuthor
Explorer II
July 21, 2025

It seems only one port PORT1 is available on this image after demo license activation, is it normal?