FortiOS 6.0 Getting Started: Verifying FortiGuard licenses and troubleshooting

1. Viewing your licenses

To view your licenses, go to the Dashboard and find the Licenses widget.

The FortiGuard licenses are listed, with their status indicated:

1). A green check mark indicates an active license.
2). A gray question mark indicates an unavailable license.
3). A license highlighted in orange is either unlicensed or expires soon.
4). A license highlighted in red is expired.

The widget only displays licenses for features you enabled in Feature Visibility. To enable more features, go to System > Feature Visibility.

The Web Filtering license only appears as active when a web filter profile is applied to a firewall policy.

You can also view FortiGuard license information by going to System > FortiGuard.

2. Troubleshooting

If you need to add or renew a subscription, go to Fortinet Support.

If a license that should be active isn’t currently available, you can use the following steps to troubleshoot your connection. After each troubleshooting step, go to System > FortiGuard to check if the licenses are now showing as available.

Connecting to FortiGuard

To prompt your FortiGate to connect to FortiGuard, connect to the CLI and use the following command:

diagnose debug application update -1
diagnose debug enable
execute update-now

If your FortiGate has multiple VDOMs, make sure that you use the management VDOM and that the VDOM has Internet access. To set the proper VDOM as the management VDOM, use the following command:

config system global
  set management-vdom
end

Checking FortiGuard filtering

To test if FortiGuard is reachable, go to System > FortiGuard.

Under Filtering, check Filtering Services Availability. If you don’t see a green checkmark, select Check Again.

If you still don’t see a green check mark, change the FortiGuard Filtering Port to the alternate port (8888). Select Apply and see if the services become available.

Testing the DNS

To test if your DNS can reach FortiGuard, use the following CLI command:

    execute ping guard.fortinet.net

If you can reach the address, run the following command:

diagnose debug application update -1
diagnose debug enable
execute update-now

If you can’t reach the address, go to System > DNS and verify that the settings are correct. Then run the PING test again.

Contacting Support

If you still can’t connect, contact Fortinet Support.

3. Results

Go to the Dashboard and view the Licenses widget. Any subscribed services should have a green-check beside it.

Go to System > FortiGuard. Features and services you’re subscribed to should have a green check mark beside them.