FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
DPadula
Staff & Editor
Staff & Editor
Article Id 421273
Description This article describes the behaviour FortiGate OT Security Service is showing as 'Not Licensed' and version 0.00000, for some of its definitions.
Scope FortiGate.
Solution
  1. Go to System -> FortiGuard and check if the OT Security Service is showing as 'Not Licensed'.

 

Not Licensed.png

 

  1. On the same page, check that FortiGuard Updates is enabled:

 

Updates on.png

 

  1. Select 'Update Licenses & Definitions Now'.

 

Update now.png

 

  1. After the license is installed automatically by FortiGuard, its status will change to 'Licensed'.

 

license_status.jpg

 

  1. For the version of 'OT device identification definitionsand 'OT vulnerability correlation definitions & virtual patching signatures' to be updated. Make sure the following settings are applied:

  • OT signature is included in the IPS setting:

 

config ips global

    set exclude-signatures none

end

  • Enable device detection on at least one interface:


config system interface
    edit <name>
        set device-identification enable
    next
end

 

Note:

The version numbers for some licenses may not change, and this is a normal behavior.