Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
I_encounter_everybug
New Contributor

Howto free up Licenses from active Clients without loosing EMS connection

Hi, would be glad if someone can help:

 

Info: Forticlient 7.4.3 deployed from EMS with autoconnect EMS-Telemetry with specified Passphrase

 

Situation:

Users sometimes connect with multiple different devices over time (which is ok). I need to free up licenses after let's say 3 days of no connection so these doesnt eat up all free licenses.
I told EMS-Server to deregister this clients, which works but when you do it it will also disconnect the EMS Telemetry.

 

Problem:

When the user wants to reconnect with one of the deregistered devices at a later time he must first click on Connnect with EMS" in the "zero Trust Settings" of the Forticlient.

The Client is not asking for the Telemetrie Key to reconnect, which is fine, so why does it disconnect at all???

That doesnt make sense in my opinion and leads to this unneccessary extra step. 

Anybody knows which setting I'm missing or how to free up the licenses without loosing EMS-Telemetry Connection?

Best regards,
Daniel

 

3 REPLIES 3
Anthony_E
Community Manager
Community Manager

Hello Daniel,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Anthony-Fortinet Community Team.
Anthony_E
Community Manager
Community Manager

Hi Daniel,

 

To free up licenses from active clients without losing EMS connection, follow these steps:

  1. Exclude Users or Endpoints: For per-user licenses, manually remove or exclude users from management to free up license seats. This will not affect the EMS connection.
  2. De-register Clients: Navigate to the EMS Console. - Go to `Endpoints -> Action -> Deregister`. Select the client you wish to deregister. This action will revoke the license from the client while maintaining the EMS connection.
  3. Uninstall FortiEDR Collector Agent (if applicable): For Windows, stop the service using the command: C:\Program Files\Fortinet\FortiEDR\FortiEDRCollectorService.exe --stop -rp:INPUTPASSWORD. Uninstall the FortiEDR Collector Agent. For macOS and Linux, follow the uninstallation guide provided in the FortiEDR documentation.

 

By following these steps, you can effectively manage and free up licenses without disrupting the EMS connection.

Anthony-Fortinet Community Team.
I_encounter_everybug
New Contributor

  1. De-register Clients: Navigate to the EMS Console. - Go to `Endpoints -> Action -> Deregister`. Select the client you wish to deregister. This action will revoke the license from the client while maintaining the EMS connection.->

    Thats exactly what I do, but as soon as I do this the client switches to 30day grace period (trialmode) and disconnects from ems telemetry. (The EMS Server stays in the input field, but you must manually click connect - thats my problem)
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors