FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Dhruvin_patel
Article Id 411812
Description The article describes an issue with FortiGate showing 'No Subscription' and providing read-only access on the FortiGate Cloud portal, despite having the proper entitlement being transferred after the RMA.
Scope FortiGate Cloud.
Solution

The entitlement has been transferred after the RMA from the replaced device to the new device.

 

Entitlement example:

 

Entitlement_ FG100FTK21048354.PNG

 

The portal shows that the FortiGate Cloud service on the FortiGate will expire in December 2028; however, the FortiGate displays the license type as Basic instead of Paid.

 

diagnose test application forticldd 2

Server: log-controller, task=0/10, watchdog is off
Domain name: globallogctrl.fortinet.net
Address of log-controller: 1
173.243.132.25:443
Source IP: 0.0.0.0
Source IP6: [::]
Statistics: total=19, discarded=0, sent=19, last_updated=451619 secs ago
http connection: is not in progress
Current address: 173.243.132.25:443
Source IP: 0.0.0.0:0
Calls: connect=57, rxtx=77
Current tasks number: 0
Account: name=xyz@gmail.com, status=200, type=basic
Current volume: 0B
Current tasks number: 0
Update timer fires in 19548 secs
Daily volume reset timer fires in 43658 secs

 

As a first step, run the following command on the FortiGate to refresh the license status, and then kill the fgfmd process to recreate the tunnel between the FortiGate and FortiGate Cloud.

 

diagnose fdsm contract-controller-update
fnsysctl killall fgfmd

 

Afterwards, check the license type using the command (diagnose test application forticldd 2).

 

If the FortiGate still shows the same issue, run the following commands to receive updates from FortiGuard.

 

diagnose debug reset

diagnose debug application update -1

diagnose debug console time enable
diagnose debug enable
execute update-now

 

Wait for five minutes to receive updates from FortiGuard, and then press Ctrl + C and enter diagnose debug disable to stop the debugs.

 

Check the license type again. If the above step does not help resolve the issue, then it may be related to a known issue with FortiGate Cloud, reported under the title: 'Device from RMA transfer sometimes doesn’t carry over contract', which will be resolved in FortiGate Cloud version 25.3.a.

 

To resolve the issue immediately, open a case with TAC.

 

Related article:

Technical Tip: FortiCompanion to RMA Services