Fortinet black logo

Administration Guide

Retrieving account level entitlements for FortiGate

Retrieving account level entitlements for FortiGate

Managed FortiGate devices can retrieve their account level entitlements from FortiCloud directly through the FortiManager. This allows features controlled by account level entitlements, for example FortiSandbox Cloud sandboxing, to be enabled without requiring the FortiGate to connect to the internet. This feature requires that FortiManager has an internet connection.

Example - FortiSandbox Cloud entitlements

For example, when FortiGate has an entitlement for FortiSandbox Cloud, the FortiGate can retrieve that entitlement information directly from FortiManager and then allow the FortiSandbox Cloud settings to be enabled in the Sandbox Fabric Connector.

To retrieve FortiGate's FortiSandbox Cloud entitlement through FortiManager:
  1. Verify that the FortiGate has an entitlement for FortiSandbox Cloud on FortiCloud.
  2. Configure the FortiGate to use FortiManager for update services.

    config system central-management

    config server-list

    edit 1

    set server-type update rating

    set server-address {ipv4-address}

    next

    end

    set include-default-servers disable

    end

    The FortiGate retrieves the account level contract from FortiManager.

  3. Enable the FortiSandbox Cloud option in the Sandbox Fabric Connector.

Retrieving account level entitlements for FortiGate

Managed FortiGate devices can retrieve their account level entitlements from FortiCloud directly through the FortiManager. This allows features controlled by account level entitlements, for example FortiSandbox Cloud sandboxing, to be enabled without requiring the FortiGate to connect to the internet. This feature requires that FortiManager has an internet connection.

Example - FortiSandbox Cloud entitlements

For example, when FortiGate has an entitlement for FortiSandbox Cloud, the FortiGate can retrieve that entitlement information directly from FortiManager and then allow the FortiSandbox Cloud settings to be enabled in the Sandbox Fabric Connector.

To retrieve FortiGate's FortiSandbox Cloud entitlement through FortiManager:
  1. Verify that the FortiGate has an entitlement for FortiSandbox Cloud on FortiCloud.
  2. Configure the FortiGate to use FortiManager for update services.

    config system central-management

    config server-list

    edit 1

    set server-type update rating

    set server-address {ipv4-address}

    next

    end

    set include-default-servers disable

    end

    The FortiGate retrieves the account level contract from FortiManager.

  3. Enable the FortiSandbox Cloud option in the Sandbox Fabric Connector.