fortigate firewall license getting revoke

[Zayd]

Hi,

I have a fortigate fws a-p mode managed by fortiManager in air-gap environment, all are in air-gap.

What i see recently i replaced the passive fw with new unit due to rma. after joining it to cluster, both got in-sync as well.

I see the licenses on both a-p are getting revoked, i applied the license file for each unit separately but that does not help. It shows license file succesfully uploaded it will show all IPS, AV in Green with proper expiry date, after 2-5 min it all gets orange with no license.

What i observed is that the license section shows License update ip as Fortimanager, do i need to upload the license via Fortimgr ?

i tried for active fw license file upload under fortimngr Foortiguard settings > service pack > but that also does not help.

[funkylicious]

i would say that if you are using FMG as an FDS in your air gapped environment and FGTs are configured to get all the info from it, that you should upload the license to it.

https://docs.fortinet.com/document/fortimanager/7.4.7/administration-guide/431186 

[Zayd]

@funkylicious Thanks for the article. I have two separate license file for each fgt a-ap device.

So do i need to upload two files at the same time? Or i have to request one file from FGT support providing them the devices SN ?

[funkylicious]

havent really used this feature in FMG but i would assume that you either upload them both if allows multiple files or one by one.

[Zayd]

@funkylicious yes i takes multiple files for upload i do it AV and IPS 

I will see tomorw