Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
damianhlozano
Contributor

Questions about VPN licences

Hello team!!

 

I have many questions about VPN Licences.

I think I understand the following, please let me know if I am wrong:

* Up to FortiOS 6.2: I have licences for 10 Standalone Forticlient

* From FortiOS 6.2 or higher: Unlimited Standalone Forticlients

 

In first place I don't care about support, I am worried about how many client I could connect to Fortigate VPN.

What about L2TP VPNs?  There is a limit for the amount of clients?

I see an article here for FortiClient, but not for L2TP VPNs.

 

Thanks in advance.

Regards.

Damián

 

2 Solutions
Yurisk
Valued Contributor

Hi Damian, either I got you wrong, or we are talking about different things.

 

  • Forticlient VPN-only functionality (both IPsec and SSL) is free no matter what is the version of either Fortigate or Forticlient. 
  • Forticlient (FC) version up to and including 6.0 was free in ALL functions, not only VPN - but Web FIltering, A/V etc. Starting with FC 6.2 you have to buy EMS license to have the same functionality, but VPN is still free.
  • There is no limit on Fortigate how many VPN clients (IPsec/SSL) can connect to it, in ANy model or version. It only depends on Fortigate capacity - how many FC clients can it handle CPU and memory-wise.
  • "10 licenses per Fortigate" you mentioned was in older (up to 6.2) FortiOS versions and it was for MANAGING FCs centrally from the Fortigate firewall directly (pushing policy to FCs, configuring Endpoint checks for FCs etc.), and not using separate EMS server. This option does not exist anymore at the FortiOS level as far as I know, no matter what license you have.

HTH

Edit: for grammar.

 

Yuri https://yurisk.info/  blog: All things Fortinet, no ads.

View solution in original post

Yuri https://yurisk.info/ blog: All things Fortinet, no ads.
tio3udes

There's no licensing limitation for that @damianhlozano ! That's  one of the beatiful things about working with fortinet.

 

What you might have is a limitation due to the model of the firewall, which you can check here:

 

https://docs.fortinet.com/max-value-table

 

Other than that, kock yourself out man! set up as many l2tp tunnels you need!

ti03udes

View solution in original post

ti03udes
4 REPLIES 4
Yurisk
Valued Contributor

Hi Damian, either I got you wrong, or we are talking about different things.

 

  • Forticlient VPN-only functionality (both IPsec and SSL) is free no matter what is the version of either Fortigate or Forticlient. 
  • Forticlient (FC) version up to and including 6.0 was free in ALL functions, not only VPN - but Web FIltering, A/V etc. Starting with FC 6.2 you have to buy EMS license to have the same functionality, but VPN is still free.
  • There is no limit on Fortigate how many VPN clients (IPsec/SSL) can connect to it, in ANy model or version. It only depends on Fortigate capacity - how many FC clients can it handle CPU and memory-wise.
  • "10 licenses per Fortigate" you mentioned was in older (up to 6.2) FortiOS versions and it was for MANAGING FCs centrally from the Fortigate firewall directly (pushing policy to FCs, configuring Endpoint checks for FCs etc.), and not using separate EMS server. This option does not exist anymore at the FortiOS level as far as I know, no matter what license you have.

HTH

Edit: for grammar.

 

Yuri https://yurisk.info/  blog: All things Fortinet, no ads.
Yuri https://yurisk.info/ blog: All things Fortinet, no ads.
damianhlozano
Contributor

Thanks Yurisk!!

That is what I needed to know

What about L2TP VPNs (Without FortiClient)?  Is still free and without limits about amount of clients connected at the same time?

 

Regards,

Damián

tio3udes

There's no licensing limitation for that @damianhlozano ! That's  one of the beatiful things about working with fortinet.

 

What you might have is a limitation due to the model of the firewall, which you can check here:

 

https://docs.fortinet.com/max-value-table

 

Other than that, kock yourself out man! set up as many l2tp tunnels you need!

ti03udes
ti03udes
damianhlozano
Contributor

Thank you tio3udes

Labels
Top Kudoed Authors