FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
btan
Staff & Editor
Staff & Editor
Article Id 321744
Description This article describes the prerequisites for creating a Fabric Connector to FortiClient EMS Cloud or FortiSASE.
Scope FortiClient v7.0 onwards, FortiGate.
Solution

One FortiCloud account can only have either FortiClient EMS Cloud or FortiSASE. It is not possible to have both EMS Cloud and FortiSASE registered under the same FortiCloud account.

 

Prerequisites:

  1. The FortiGate must be registered under the same FortiCloud account with EMS Cloud or FortiSASE.
  2. The FortiGate must also have a valid support license and FortiGuard service license.

 

To verify both items, run the below command in FortiGate:

 

diagnose test update info contract

 

Under account contracts, you should be able to see both 'FCEM' and 'FCEP' contracts, for example:

 

Account contracts:
FCEM,Thu Jul 20 10:00:00 2023 <-----
FMGC,Sat Jun 22 10:00:00 2024
FSAP,Thu Dec 29 10:00:00 2022
FCEP,Thu Oct 26 10:00:00 2023 <-----

 

 

If there is not either 'FCEM' or 'FCEP':

  • FortiGate and EMS/FortiSASE are not registered under the same account
  • They are registered under the same account, but FortiGate does not have a valid support license or FortiGuard service license.


To validate this:

 

diagnose debug reset
diagnose debug app update -1
diagnose debug enable
execute update-now

 

If FortiGate has Internet access, and the output is showing unable to reach FortiGuard services, it means FortiGate does not have a valid support license and FortiGuard service license.