Fortinet black logo

EMS Administration Guide

FortiClient EMS

FortiClient EMS

Free trial license

After you install EMS, you can enable a free trial license. With the free trial license, you can provision and manage FortiClient on ten Windows, macOS, and Linux endpoints and ten Chromebook endpoints indefinitely. EMS consumes one license count for each managed endpoint.

See To apply a trial license to FortiClient EMS:.

You must have an eligible FortiCare account to activate an EMS trial license. A FortiCare account can only have one EMS trial license.

Windows, macOS, and Linux endpoint licenses

There are three types of licenses for Windows, macOS, and Linux endpoints:

License name

Description

Fabric Agent with Endpoint Protection and Cloud Sandbox

Full license that offers all FortiClient features including endpoint protection and Sandbox Cloud.

Includes all features detailed for the Fabric Agent with Endpoint Protection and Sandbox Cloud licenses.

Fabric Agent with Endpoint Protection

Includes support for Telemetry and endpoint protection and management (AV, on-premise FortiSandbox, Web Filter, Application Firewall, Vulnerability Scan, Fortinet Single Sign-On (FSSO), and FortiGate registration).

Each purchased Fabric Agent license allows management of one FortiClient Windows, macOS, or Linux endpoint. You must purchase a minimum of 25 endpoint licenses, and you can have these EMS licenses for a maximum three year term. You can specify the number of endpoints and the term duration at time of purchase.

The Fabric Agent license also applies for iOS and Android endpoints.

Sandbox Cloud

Adds support for FortiSandbox Cloud for Windows endpoints.

When using both Fabric Agent and Sandbox Cloud licenses, you must purchase the same number of licenses for both license types:

  • If you already have purchased Fabric Agent licenses for 1000 endpoints, then decide to add the Sandbox Cloud licenses, you must also purchase 1000 Sandbox Cloud licenses.
  • If you have purchased Sandbox Cloud licenses for 500 endpoints, then decide to add the Fabric Agent licenses, you must also purchase 500 Fabric Agent licenses.
  • If you purchase both Fabric Agent and Sandbox Cloud licenses at the same time, you must purchase the same number of both licenses.
  • If the amounts of licenses differ, the lowest common number of licenses is available. For example, if you purchase 500 Fabric Agent licenses and 300 Sandbox Cloud licenses, EMS only has 300 licenses available.

You must purchase a license for each registered endpoint.

Chromebook licenses

Each purchased Chromebook license allows management of one Google Chromebook user. You must purchase a minimum of 25 Google Chromebook user licenses and can have these EMS licenses for a maximum three year term. You can specify the number of Google Chromebook users and the term duration at time of purchase. FortiClient EMS uses one license seat per logged-in user. If the user logs out, the license seat times out (default timeout being 24 hours), and the license is released. At this point, another user can use this license seat.

EMS sends you an email when you are running out of licenses. Additionally, a log entry is entered when a client is refused connection due to unavailable licenses.

FortiClient EMS

Free trial license

After you install EMS, you can enable a free trial license. With the free trial license, you can provision and manage FortiClient on ten Windows, macOS, and Linux endpoints and ten Chromebook endpoints indefinitely. EMS consumes one license count for each managed endpoint.

See To apply a trial license to FortiClient EMS:.

You must have an eligible FortiCare account to activate an EMS trial license. A FortiCare account can only have one EMS trial license.

Windows, macOS, and Linux endpoint licenses

There are three types of licenses for Windows, macOS, and Linux endpoints:

License name

Description

Fabric Agent with Endpoint Protection and Cloud Sandbox

Full license that offers all FortiClient features including endpoint protection and Sandbox Cloud.

Includes all features detailed for the Fabric Agent with Endpoint Protection and Sandbox Cloud licenses.

Fabric Agent with Endpoint Protection

Includes support for Telemetry and endpoint protection and management (AV, on-premise FortiSandbox, Web Filter, Application Firewall, Vulnerability Scan, Fortinet Single Sign-On (FSSO), and FortiGate registration).

Each purchased Fabric Agent license allows management of one FortiClient Windows, macOS, or Linux endpoint. You must purchase a minimum of 25 endpoint licenses, and you can have these EMS licenses for a maximum three year term. You can specify the number of endpoints and the term duration at time of purchase.

The Fabric Agent license also applies for iOS and Android endpoints.

Sandbox Cloud

Adds support for FortiSandbox Cloud for Windows endpoints.

When using both Fabric Agent and Sandbox Cloud licenses, you must purchase the same number of licenses for both license types:

  • If you already have purchased Fabric Agent licenses for 1000 endpoints, then decide to add the Sandbox Cloud licenses, you must also purchase 1000 Sandbox Cloud licenses.
  • If you have purchased Sandbox Cloud licenses for 500 endpoints, then decide to add the Fabric Agent licenses, you must also purchase 500 Fabric Agent licenses.
  • If you purchase both Fabric Agent and Sandbox Cloud licenses at the same time, you must purchase the same number of both licenses.
  • If the amounts of licenses differ, the lowest common number of licenses is available. For example, if you purchase 500 Fabric Agent licenses and 300 Sandbox Cloud licenses, EMS only has 300 licenses available.

You must purchase a license for each registered endpoint.

Chromebook licenses

Each purchased Chromebook license allows management of one Google Chromebook user. You must purchase a minimum of 25 Google Chromebook user licenses and can have these EMS licenses for a maximum three year term. You can specify the number of Google Chromebook users and the term duration at time of purchase. FortiClient EMS uses one license seat per logged-in user. If the user logs out, the license seat times out (default timeout being 24 hours), and the license is released. At this point, another user can use this license seat.

EMS sends you an email when you are running out of licenses. Additionally, a log entry is entered when a client is refused connection due to unavailable licenses.