Q
What is a Fortinet NGFW license?
A
A Fortinet NGFW license enables advanced security capabilities—like intrusion prevention, application control, and SSL inspection—on FortiGate firewalls to deliver enterprise-grade network protection.
Q
What types of Fortinet NGFW licenses are available?
A
Fortinet NGFW licenses come in perpetual and subscription models, with subscription tiers offering bundled FortiGuard services—such as antivirus, web filtering, and sandboxing—while perpetual licenses grant lifetime feature access without recurring fees.
Q
How do I choose the right Fortinet NGFW license?
A
Assess your network size, throughput requirements, and desired security services; then match them to FortiGate hardware models and subscription bundles that include the FortiGuard features you need for optimal performance and protection.
Q
What features are included in the FortiGuard NGFW license?
A
A FortiGuard NGFW license combines intrusion prevention (IPS), secure web gateway (web filtering), antivirus, application control, DNS filtering, and advanced threat protection powered by FortiSandbox for zero-day defense.
Q
How does a subscription license differ from a perpetual license?
A
Subscription licenses provide time-bound access to FortiGuard services and regular feature updates, whereas perpetual licenses offer permanent feature access but require separate support contracts for ongoing updates and threat feeds.
Q
Can I upgrade my Fortinet NGFW license tier?
A
Yes. You can seamlessly upgrade subscription tiers or switch from perpetual to subscription models through your Fortinet reseller or the Customer Service & Support portal to access additional FortiGuard services.
Q
How do I activate my Fortinet NGFW license?
A
Log in to the FortiGate GUI or CLI, navigate to License Information, enter your registration code, and synchronize with FortiGuard to automatically retrieve and apply your NGFW license.
Q
How do I renew my Fortinet NGFW license?
A
Purchase a renewal through your Fortinet partner or the support portal before expiration; then update the registration code in the FortiGate interface to restore continuous access to FortiGuard services.
Q
Are Fortinet NGFW licenses transferable between devices?
A
Subscription licenses are tied to a specific FortiGate serial number and cannot be transferred, while perpetual licenses may be transferable subject to Fortinet’s licensing policies and RMA procedures.
Q
How does high availability affect NGFW licensing?
A
In an HA cluster, each FortiGate requires its own NGFW license; however, FortiGuard services synchronize across the HA pair to ensure consistent security enforcement and streamlined management.
Q
Can I add FortiGuard services to an existing NGFW license?
A
Yes. You can augment an existing NGFW subscription with additional FortiGuard modules—like SD-WAN, sandboxing, or DLP—via your Fortinet partner to tailor your security footprint.
Q
How do I verify the status of my Fortinet NGFW license?
A
In the FortiGate GUI, go to System > License Information or use the CLI command ‘get system status’ to view license type, expiration date, and active FortiGuard service subscriptions.
Q
What support and updates are included with a Fortinet NGFW license?
A
Subscription licenses include 24×7 FortiCare support, firmware upgrades, and real-time FortiGuard threat intelligence, while perpetual licenses require a separate FortiCare contract for equivalent coverage.
Q
How do FortiManager and FortiAnalyzer integrate with NGFW licenses?
A
FortiManager centrally provisions and monitors NGFW license deployments across multiple FortiGate devices, while FortiAnalyzer aggregates logs and generates analytics from licensed security events for compliance.
Q
What are the steps to migrate from UTM to NGFW licensing?
A
Review existing UTM subscriptions, select an NGFW tier that covers required FortiGuard features, purchase the new license, and apply it in the FortiGate GUI to transition without service interruption.