FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
btan
Staff
Staff
Article Id 321744
Description This article provides the Prerequisites of creating a Fabric Connector to FortiClient EMS Cloud or FortiSASE.
Scope FortiClient v7.0 onwards
Solution

One FortiCloud account can only have either FortiClient EMS Cloud or FortiSASE.It is not possible to have both EMS Cloud and FortiSASE registered under the same FortiCloud account.

 

Prerequisites:

  1. The FortiGate must be registered under the same FortiCloud account with EMS Cloud or FortiSASE.
  2. The FortiGate must also have a valid support license and FortiGuard service license.

 

To verify both items, run the below command in FortiGate:

 

diag test update info contract

 

Under account contracts, you should be able to see both 'FCEM' and 'FCEP' contracts, for example:

 

Account contracts:
FCEM,Thu Jul 20 10:00:00 2023 <-----
FMGC,Sat Jun 22 10:00:00 2024
FSAP,Thu Dec 29 10:00:00 2022
FCEP,Thu Oct 26 10:00:00 2023 <-----

 

 

If there is not either 'FCEM' or 'FCEP':

  • FortiGate and EMS/FortiSASE are not registered under the same account
  • They are registered under the same account, but FortiGate does not have a valid support license or FortiGuard service license.


To validate this:

 

diag debug reset
diag debug app update -1
diag debug en
exec update-now

 

If FortiGate has Internet access, and the output is showing unable to reach FortiGuard services, it means FortiGate does not have a valid support license and FortiGuard service license.

Contributors