FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
This article describes step-by-step instructions on how to refresh the license in FortiClient EMS by adjusting various timeout settings and how to revoke a license from a client by de-registering it.
Scope
FortiClient EMS + FortiClient EMS Cloud.
Solution
FortiClient license timeout:
From the EMS console, navigate to 'System Settings -> EMS Settings -> Endpoint Settings -> FortiClient license timeout'.
Adjust the timeout settings as needed to control how long a FortiClient license remains active before timing out.
EMS license timeout:
From the EMS console, navigate to: 'System Settings -> EMS Settings -> Endpoint Settings -> EMS license timeout'.
Set the EMS license timeout to determine how long the EMS waits before timing out an unused license.
Stale Verified User Cleanup Timeout / Deauthorized User Inactivity Timeout:
From the EMS console, navigate to: 'System Settings -> EMS Settings -> Endpoint Settings -> Stale Verified User Cleanup Timeout / Deauthorized User Inactivity Timeout'
Configure these settings to manage how long a user remains in the system without activity before being automatically cleaned up or de-authorized.
Revoking a License by de-registering clients:
To revoke a license from a specific client, de-register the client from the EMS:
Navigate to: 'EMS Console -> Endpoints -> Action -> Deregister'.
Select the client to de-register. This action will revoke the license from the client.
Adjust these configurations and use these processes to effectively manage the licenses within an FortiClient EMS environment.
