Hot!FortiClient for VPN Question / Licensing

Author
Chuck Whiteley III
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2014/07/06 18:55:03
  • Status: offline
2014/07/06 19:03:59 (permalink)
0

FortiClient for VPN Question / Licensing

I' m pretty new to the Fortinet product line and we just purchased a Fortigate 800C. I found it very easy to setup the VPN and use the FortiClient to connect. Working great! I log into the console to find out that I only have 10 licenses for the FortiClient. I' m guessing that is the default setting. I only have the VPN portion of the client turned on. When I wrote support, they said I have to buy licenses for the client. I read somewhere that you don' t have to buy licenses if you' re only using the VPN portion. I' m not sure who to believe. If I have to buy licenses, I guess I will try to setup the VPN to work with the native VPN client within Windows although it looks kind of cumbersome.

Any insight would be appreciated.

Thank you in advance,

Chuck
< Message edited by Chuck Whiteley III -- 7/6/2014 7:04:22 PM >
#1

9 Replies Related Threads

    Fullmoon
    Platinum Member
    • Total Posts : 883
    • Scores: 13
    • Reward points: 0
    • Joined: 2010/08/02 18:02:10
    • Status: offline
    RE: FortiClient for VPN Question / Licensing 2014/07/06 22:57:48 (permalink)
    0
    fortigate has bundle 10 free licenses for forticlient, if you go beyond 10 then you must pay it. one way for you to have unlimited vpn connections is by using ssl vpn,it is a browser based,agent less and easy to handle. :)
    < Message edited by Fullmoon -- 7/6/2014 10:58:20 PM >

    Fortigate Newbie
    #2
    emnoc
    Expert Member
    • Total Posts : 5546
    • Scores: 357
    • Reward points: 0
    • Joined: 2008/03/20 13:30:33
    • Location: AUSTIN TX AREA
    • Status: offline
    RE: FortiClient for VPN Question / Licensing 2014/07/06 23:12:05 (permalink)
    0
    fwiw;
    if all you need is the vpn portion & if you have microsoft L2TP supported clients like winows7/8 , vista or even macosx. Then L2TP/ipsec setup is not cumbersome and doe not require any 3rd party software installation.

    The third benefit, most Android/iOS devices has L2TP support. So you can easily build a profile that supports most BYODs & with one easy vpn configuration & you don' t have to install any additional client side software imho.
    < Message edited by emnoc -- 7/6/2014 11:12:55 PM >

    PCNSE 
    NSE 
    StrongSwan  
    #3
    Baptiste
    Gold Member
    • Total Posts : 171
    • Scores: 13
    • Reward points: 0
    • Status: offline
    RE: FortiClient for VPN Question / Licensing 2014/07/07 08:00:23 (permalink)
    0
    If you just want to connect a VPN , you can also use sslvpnclient (exe or msi), which is free and unlimited. You' ll find it in a sub-directory of FortiOS ( on Fortinet FTP)

    2 FGT 100D  + FTK200
    3 FGT 60E 
    FAZ VM 
    some FAP 210B/221C/223C/321C/421E
    #4
    adnan.sabir
    New Member
    • Total Posts : 14
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/04/20 03:40:11
    • Status: offline
    Re: RE: FortiClient for VPN Question / Licensing 2017/02/13 23:48:17 (permalink)
    0
    do we also need liscense for site to site vpn...
    #5
    Selective
    Expert Member
    • Total Posts : 2744
    • Scores: 119
    • Reward points: 0
    • Joined: 2007/07/03 10:44:56
    • Location: Gothenburg - Sweden
    • Status: offline
    Re: RE: FortiClient for VPN Question / Licensing 2017/02/13 23:56:18 (permalink)
    0
    To summarize this:
     
    VPN on a FortiGate is free.
    Both SSLVPN and IPSEC (dialup or site-to-site).
     
    You don´t pay for the VPN part, but for webfiltering, application control, AV etc...
     
    You can check it out here: http://www.forticlient.com
     
    #6
    adnan.sabir
    New Member
    • Total Posts : 14
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/04/20 03:40:11
    • Status: offline
    Re: RE: FortiClient for VPN Question / Licensing 2017/02/14 00:04:38 (permalink)
    0
    my license is expired so it is showing 1/10 available forticlient.. i just wanted to confirm that we don not need any license for site to site vpn on fortigate ?
     
    post edited by adnan.sabir - 2017/02/14 00:10:11
    #7
    Selective
    Expert Member
    • Total Posts : 2744
    • Scores: 119
    • Reward points: 0
    • Joined: 2007/07/03 10:44:56
    • Location: Gothenburg - Sweden
    • Status: offline
    Re: RE: FortiClient for VPN Question / Licensing 2017/02/14 00:30:38 (permalink)
    0
    no you don´t.
     
    You can hook up FortiClient to your FortiGate and do "compliance" checks, and there you need to pay for a license if you are going above 10 clients, but it has nothing to do with the VPN part.
    #8
    Jim_FH
    Bronze Member
    • Total Posts : 30
    • Scores: 0
    • Reward points: 0
    • Joined: 2015/08/03 07:53:26
    • Status: offline
    Re: FortiClient for VPN Question / Licensing 2017/02/17 05:15:31 (permalink)
    0
    I just went through this with my Fortigates.
     
    As I understand it, the initial free 10 clients are for forticlients that you manage from the fortigate.  The clients register to the 'gate and you can set different options for them (AV, Web Filter, App Control), enforce compliance, etc.
     
    If you don't plan on using the 'gate to manage the clients, you can connect as many clients as you want (up to the box's capacity, of course.)
     
    So it's "free" for basic RA connectivity, licensed if you want the cool bells & whistles that come with the ability to manage the clients.
    #9
    Jan_1966
    New Member
    • Total Posts : 12
    • Scores: 2
    • Reward points: 0
    • Joined: 2020/02/11 19:16:30
    • Status: offline
    Re: FortiClient for VPN Question / Licensing 2020/03/20 20:48:49 (permalink)
    0
    All,
     
    I think I found the solution for my problem. The VPN tunnel name is limeted to 15 Characters and each remote access gets a number. Since my tunnel interface is already 13 Characters adding the sequence number _0 makes it 15. So I can't go beyond Tunnel_name_9 as the _10 makes it 16 Characters.
     
    I think I need to recreate the tunnel with a bit shorter name.
     
    Thanks All
    #10
    Jump to:
    © 2020 APG vNext Commercial Version 5.5