FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
duenlim
Staff
Staff
Article Id 212873
Description This article describes how is the Proxy/UTM sessions used to understand the number of sessions per seat license.
Scope FortiProxy.
Solution

For example, run a CLI command to show the session license details.

 

get system status
Version: FortiProxy-KVM v7.4.8,build0649,250115 (GA.M)
License: Active, seat 100, active seat 100, expiry date 2026-04-24 

 

diagnose wad license detail

Purchased License Seat: 100
Available License Seat: 100
Max Licensed Session: 2500

 

License shown on GUI dashboard: 

 

sessions.jpg

 

The Max Licensed session is 2500 derived from 25 sessions x 100 License Seat. That also means that FortiProxy supports up to 2500 maximum proxy/UTM sessions.

 

Once the maximum concurrent session has been reached, new proxy sessions are bypassed by default without UTM inspection. This is so that FortiProxy does not drop or block those sessions.

 

show full system global | grep license
set license-overlimit bypass 

 

Note:

FortiProxy in HA mode. The half of license seats in the slave unit were added to a primary unit like the example below. 

 

License Seats Registered:


FPX4HETA19-----9: 1000
FPX4HETA19-----9: 1000


New license seats adjusted:


FPX4HETA19-----9: 1500 <----- Primary Unit.
FPX4HETA19-----9: 500

Available License Seat: 1500
Max Licensed Session: 37500
Current Licensed Session: 37500

 

FortiProxy in HA mode needs FC entitlements (UTM licenses) for both devices for seat sharing to work. In v7.2.0 and above, the license sharing is 100% instead of 50%.

 

Related document:

HA license sharing behavior change