FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
This article discusses user-based and device-based EMS license types and how to free up license seats.
Scope
FortiClient EMS Cloud and on-prem.
Solution
EMS offers per-device and per-user licensing types but only one license type per EMS instance can be used.
License type: per-device:
Tied to individual device-based.
Each device requires a separate license.
License count is based on the number of devices that are managed by EMS.
License type: per-user:
Tied to individual user-based.
Each user can register up to 3 devices.
For example, if the same user registers on the fourth device, the license will consume 2 user seats.
License count is based on the number of users that are managed by EMS.
For example, if one device has 2 different user accounts, the license seat will count as 2 user seats.
User-based Scenario: Exclude from Management to free up user license seat:
User A sign in to the FortiClient endpoint device that was managed by EMS -> 1 license seat count for User A.
User A sign out from the endpoint device -> 1 license seat count remains as this user is still managed by EMS.
User B sign in the same FortiClient endpoint device that was managed by EMS -> add another 1 license seat count for User B, having 2 users license seat in total now.
To free up the license seat count for User A who has not signed in, the EMS administrator needs to manually exclude User A from management.
Navigate to EMS GUI -> Endpoints -> All Endpoints > tick the checkbox to select desired user -> Action -> Exclude from Management.
This can be enabled again in the Action tab for future management.
The current user license count will be reduced in the License Information dashboard.
More reference regarding EMS per-device and per-user licensing:
