| Description | This article describes how to check whether a FortiGate has a paid FortiGate Cloud Service Subscription, or is using a free license. FortiGates can utilize either a free tier of FortiGate Cloud with basic functionality or a paid version (the FortiGate Cloud Service Subscription) which includes many more features. The feature comparison matrix can be found in this document: Feature comparison. |
| Scope | FortiGate. |
| Solution |
In the CLI, the following command can be used to check whether a FortiGate has a paid FortiGate Cloud Service Subscription or is only using a free license:
diagnose test application forticldd 2
For FortiGates which have a paid FortiGate Cloud Service Subscription, it will show as ‘type=paid’ under the account section as follows:
diag test app forticldd 2
Server: log-controller, task=0/10, watchdog is off Domain name: logctrl1.fortinet.com Address of log-controller: 1 xxx.xxx.xxx.xxx:443 Source IP: 0.0.0.0 Source IP6: [::] Statistics: total=18, discarded=0, sent=18, last_updated=115241 secs ago http connection: is not in progress Current address: xxx.xxx.xxx.xxx:443 Source IP: 0.0.0.0:0 Calls: connect=54, rxtx=54 Current tasks number: 0 Account: name=xxxxxxx@xxxxx.com, status=200, type=paid Current volume: 0B Current tasks number: 0 Update timer fires in 57498 secs Daily volume reset timer fires in 25205 secs
For FortiGates which only has the free tier of FortiGate Cloud, it will show as 'type=basic' under the account section as follows:
diag test app forticldd 2
Server: log-controller, task=0/10, watchdog fires in 45 secs Domain name: globallogctrl.fortinet.net Address of log-controller: 1 xxx.xxx.xxx.xxx:443 Source IP: 0.0.0.0 Source IP6: [::] Statistics: total=2, discarded=0, sent=2, last_updated=15 secs ago http connection: is not in progress Current address: xxx.xxx.xxx.xxx:443 Source IP: 0.0.0.0:0 Calls: connect=7, rxtx=6 Current tasks number: 0 Account: name=xxxxx@xxxx.com, status=200, type=basic Current volume: 0B Current tasks number: 0 Update timer fires in 86386 secs Daily volume reset timer fires in 86384 secs
Within the FortiGate GUI under System -> FortiGuard, FortiGates that have a paid FortiGate Cloud Service Subscription show as ‘Licensed’ under the ‘FortiGate Cloud Log Retention’ section: 
FortiGates that are only using the free tier of FortiGate Cloud will see 'Free License' under the 'FortiGate Cloud Log Retention' section:
If the user is on a paid-tier FortiGate and it shows a free license for FortiGate cloud, use a CLI command 'diagnose fdsm log-controller-update' and it will refresh the license status.
|
