Back in the FortiGate Web UI (https://192.168.1.99):
Post-reboot verification:
get system status | grep -E "License|Valid"
Expected output: License Status: Valid and Valid: yes.
Fortinet offers a limited-time trial license for the FortiGate Virtual Machine (FortiGate-VM). This is essential for testing Next-Generation Firewall (NGFW) features, SSL VPNs, SD-WAN capabilities, or studying for Fortinet certifications (NSE 4/5/6/7).
Here is the step-by-step process for the installation and licensing workflow.
Note: Accept the self-signed certificate warning.
The FortiGate VM trial license is a powerful, zero-cost way to validate Fortinet’s security capabilities in a virtual environment. By carefully following the serial number generation process, ensuring stable NTP and outbound connectivity, and protecting the VM’s UUID, you can maximize the full 15-day evaluation period. Use snapshots, document your tests, and plan for a smooth transition to a paid license or a clean teardown. For production, always procure a valid, perpetual, or subscription-based license from an authorized Fortinet partner.
This article is current as of FortiGate VM 7.4.x. Always refer to Fortinet’s official documentation for the most recent trial policies and platform support.
Setting up a FortiGate Virtual Machine (VM) for testing or learning has become significantly more accessible with the introduction of the Permanent Evaluation License. Unlike the older 15-day trials, modern FortiOS versions (7.2.1 and later) offer a trial that does not expire, provided you link it to a valid FortiCare account. Understanding the Permanent Evaluation License
The permanent trial is designed for lab environments and training rather than production use. It allows you to explore core firewall features, IPsec tunnels, and SD-WAN without a time limit, though it comes with specific resource constraints. Max Resources: 1 vCPU and 2 GB of RAM. fortigate vm license trial install
Networking: Maximum of 3 interfaces, 3 firewall policies, and 3 routes.
Availability: One trial instance per unique FortiCloud/FortiCare account.
Support: Includes basic FortiGuard updates and HTTPS certificates, unlike older trial versions. Step-by-Step Installation & Trial Activation 1. Download the FortiGate VM Image
First, you must obtain the correct deployment package for your hypervisor (VMware, KVM, Hyper-V, etc.).
The FortiGate VM permanent trial (introduced in FortiOS 7.2.1) is a significant shift from the previous 15-day time-limited trials. It allows for indefinite testing of the FortiOS platform, provided you accept specific resource and feature constraints. Core Trial Limitations
The trial is designed for learning and lab environments rather than production use. According to the Fortinet Administration Guide, the key restrictions include: Hardware Caps: Limited to 1 CPU and 2 GB of RAM.
Networking: Maximum of 3 interfaces, 3 firewall policies, and 3 routes.
Security: Supports low encryption only (no strong crypto for VPNs) and excludes FortiCare support.
Connectivity: Requires access to FortiGuard for periodic license validation. Installation & Activation Review Back in the FortiGate Web UI ( https://192
The process is straightforward but requires a FortiCloud account for registration.
Deployment: Import the VM image (KVM, ESXi, etc.) into your hypervisor.
Registration: Log into the Fortinet Customer Service & Support portal to obtain a license file or activation code. Activation: Access the FortiGate GUI using the default IP.
Navigate to the Virtual Machine widget on the dashboard and select the Evaluation License icon.
Upload the license file or enter your FortiCloud credentials to trigger the activation and a mandatory system reboot. Community Experience & Tips
Users often note that while the resource limits are tight, the removal of the 15-day expiration makes it a viable tool for long-term self-study.
“To renew your Evaluation VM... decommissioning the old serial and re-registering can trigger a reboot but refreshes the license state.” YouTube · Dynamic Coder · 2 years ago
Summary Verdict: The trial is an excellent "free-forever" lab tool for learning the interface and basic policy logic. However, the 3-policy limit and low encryption make it unsuitable for even the smallest production environments or advanced VPN testing. Permanent trial mode for FortiGate-VM
Starting with FortiOS 7.2.1, Fortinet transitioned from a 15-day trial to a permanent evaluation license for FortiGate-VM. This license does not expire, but it is strictly intended for lab and study purposes due to significant resource caps. 🚀 Installation & Activation Steps Post-reboot verification: get system status | grep -E
To activate the trial, your VM must have internet access to communicate with FortiGuard servers.
Create a Account: Register for a free account at FortiCloud/FortiCare.
Download Image: Get the VM deployment package (e.g., OVF for VMware) from the Support Portal. Initial CLI Setup: Log in with username admin (no password by default).
Configure an IP and gateway on port1 to ensure the VM can reach the internet. GUI Activation: Navigate to the VM's IP address in a web browser. On the login screen, select Evaluation License.
Enter your FortiCloud credentials. The VM will reboot and apply the license. ⚠️ Key Trial Limitations
The permanent trial is highly restrictive compared to a commercial license:
It looks like you are looking for a guide on how to get a FortiGate VM (virtual appliance) up and running with a trial license. This is a common scenario for labs, testing configurations, or studying for Fortinet certifications (NSE4, etc.).
Here is a helpful article/guide to walk you through the process.
Or use HTTPS to the management IP (if DHCP is available on Port1):
Run basic configuration wizard (optional):
| Issue | Solution |
|-------|----------|
| "Invalid license file" | The Serial Number in your license must match get system status exactly. |
| No HTTPS GUI after reboot | Check if allowaccess includes https on port1. Use console: diagnose sys top |
| Trial expired quickly | Fortinet trials are calendar-based (15 days from generation, not installation). |