Retrieving account level entitlements for FortiGate

Managed FortiGate devices can retrieve their account level entitlements from FortiCloud directly through the FortiManager. This allows features controlled by account level entitlements, for example FortiSandbox Cloud sandboxing, to be enabled without requiring the FortiGate to connect to the internet. This feature requires that FortiManager has an internet connection.

Example - FortiSandbox Cloud entitlements

For example, when FortiGate has an entitlement for FortiSandbox Cloud, the FortiGate can retrieve that entitlement information directly from FortiManager and then allow the FortiSandbox Cloud settings to be enabled in the Sandbox Fabric Connector.

To retrieve FortiGate's FortiSandbox Cloud entitlement through FortiManager:

1. Verify that the FortiGate has an entitlement for FortiSandbox Cloud on FortiCloud.
   
2. Configure the FortiGate to use FortiManager for update services.

   config system central-management

   config server-list

   edit 1

   set server-type update rating

   set server-address {ipv4-address}

   next

   end

   set include-default-servers disable

   end

   The FortiGate retrieves the account level contract from FortiManager.

3. Enable the FortiSandbox Cloud option in the Sandbox Fabric Connector.