FortiGate License Status Check and Verification Guide

FortiGate license status is checked from the FortiGuard/License panel in the GUI, from CLI commands, and from the asset records on the Fortinet support portal. Each security service's status and expiry date should be verified separately.

Checking the License from the GUI

The GUI check is done via the System > FortiGuard (or License) panel; it shows the active status and expiry dates of services such as antivirus, IPS, and web/DNS filtering.

In the FortiOS interface, the FortiGuard panel lists each service's validity status (active, expired, grace period) and expiry date. The dashboard license widget also gives a quick overview.

If a service shows 'expired', assess the impacts as we cover in our what happens when a license expires article.

Checking the License from the CLI

The CLI check lets you see general license/version info with 'get system status' and service-level contract status with FortiGuard-related diagnostic commands.

The CLI is handy for automation and remote checks. The 'get system status' output summarizes the license and FortiGuard signature versions. Diagnostic commands showing FortiGuard update/communication status are used to verify synchronization.

• General license/version summary with 'get system status'.
• FortiGuard communication and update status diagnostics.
• Checking service contract statuses.
• Triggering synchronization manually (if needed).

Verifying from the Support Portal

The support portal (support.fortinet.com) is the final source of the contract dates in the device's asset record; if the date shown on the device differs from the portal, the portal takes precedence.

In the portal, find the device by serial number and view active contracts and expiry dates in the asset/contract section. This is the most reliable way to verify that the renewal was written to the correct device.

If you see a date mismatch between device and portal, we explain that it is a known sync difference in our renewal problems and solutions article.

What Should Be Verified?

What to verify is each FortiGuard service's active status, each service's separate expiry date, the FortiCare support status, and device-portal date consistency.

Remember that each service (antivirus, IPS, web filtering, application control) can have its own expiry date. So instead of relying on a single 'license valid' statement, check per service.

We cover the distinction between FortiCare and FortiGuard statuses in our FortiCare vs FortiGuard differences article.

Regular Monitoring

Regular monitoring means periodically checking expiry dates and planning upcoming renewals in advance; this prevents outages and back-coverage cost.

Check license status as a regular routine, not a one-off. In multi-device environments, a central monitoring and reminder mechanism eliminates missed renewals.

We cover multi-device monitoring in our multi-device FortiGate license management article and automatic reminders in our renewal automation article. For the overall renewal strategy, see our comprehensive license renewal guide.

Frequently Asked Questions

Where do I see FortiGate license status?

In the GUI, the System > FortiGuard (or License) panel and the dashboard license widget show service statuses and expiry dates. In the CLI, 'get system status' and FortiGuard diagnostic commands can also be used.

Which CLI command should I use?

'get system status' gives a general license/version summary. FortiGuard communication and update status diagnostic commands are used to verify synchronization and service contracts.

Does each service have its own expiry date?

Yes, services like antivirus, IPS, and web filtering can have separate expiry dates. So it matters to check per service rather than relying on a single general statement.

If device and portal dates differ, which is correct?

The final source is the asset record on the support portal. Since the device pulls license info via periodic synchronization, short differences can occur; they usually align after synchronization.

How often should I check license status?

As a regular routine, especially as expiry dates approach. In multi-device environments, setting up central monitoring and reminders prevents misses.

How do I confirm it works after renewal?

Check in the GUI/CLI that services appear active with the new expiry date and verify consistency with the portal record.

Conclusion

Verifying FortiGate license status per service via the GUI, CLI, and support portal is the basis of both post-renewal confirmation and proactive planning. Regular monitoring prevents outage and back-coverage surprises.

For a license-status audit and a regular monitoring setup, talk to the Sora Yazılım team.