FortiSOC features in FortiAnalyzer are enabled through a SOC subscription license. The SOC subscription license includes features such as playbooks, connecting to third-party feeds, and incident investigation.
- The SOC subscription license can be viewed in System Settings > Dashboard in the License Information widget.
You can also check the license through the CLI using the
diagnose license listcommand.
- With a valid license, FortiSoC features are fully available.
- When the license is expired or there is no valid license, FortiSoC includes a try-it-out mode with a maximum of five playbooks run per day.