FortiClient EMS
Windows, macOS, and Linux endpoint licenses
There are three types of licenses for Windows, macOS, and Linux endpoints:
License name |
Description |
---|---|
Fabric Agent with Endpoint Protection and Cloud Sandbox |
Full license that offers all FortiClient features including endpoint protection and Sandbox Cloud. Includes all features detailed below for the Fabric Agent with Endpoint Protection and Sandbox Cloud licenses. |
Fabric Agent with Endpoint Protection |
Includes support for Telemetry and endpoint protection and management (AV, on-premise FortiSandbox, Web Filter, Application Firewall, Vulnerability Scan, FSSO, and FortiGate registration). Each purchased Fabric Agent license allows management of one FortiClient Windows, macOS, or Linux endpoint. You must purchase a minimum of 25 endpoint licenses, and you can have these EMS licenses for a maximum three year term. You can specify the number of endpoints and the term duration at time of purchase. The Fabric Agent license also applies for iOS and Android endpoints. |
Sandbox Cloud |
Adds support for FortiSandbox Cloud for Windows endpoints. |
When using both Fabric Agent and Sandbox Cloud licenses, you must purchase the same number of licenses for both license types:
- If you already have purchased Fabric Agent licenses for 1000 endpoints, then decide to add the Sandbox Cloud licenses, you must also purchase 1000 Sandbox Cloud licenses.
- If you have purchased Sandbox Cloud licenses for 500 endpoints, then decide to add the Fabric Agent licenses, you must also purchase 500 Fabric Agent licenses.
- If you purchase both Fabric Agent and Sandbox Cloud licenses at the same time, you must purchase the same number of both licenses.
![]() |
You must purchase a license for each registered endpoint. |
Chromebook licenses
Each purchased Chromebook license allows management of one Google Chromebook user. You must purchase a minimum of 25 Google Chromebook user licenses and can have these EMS licenses for a maximum three year term. You can specify the number of Google Chromebook users and the term duration at time of purchase. FortiClient EMS uses one license seat per logged-in user. If the user logs out, the license seat times out (default timeout being 24 hours), and the license is released. At this point, another user can use this license seat.
![]() |
EMS sends you an email when you are running out of licenses. Additionally, a log entry is entered when a client is refused connection due to unavailable licenses. |