It means we can create IPsec with DES algo only, which is actually OK for labbing, IPSec VPN tunnels, including Forticlient dial-up, will come up just fine and we can later run OSPF/BGP over them. In my view this is the most limiting disabled feature.

Crypto - IPSec/SSL/TLS: Low only, means only DES is enabled as algorithm.

This causes discomfort as forces us to delete some rules to add new ones.

5 Security Rules Maximum: At any given moment, you can have up to 5 security rules present.

And you cannot create fully featured VDOMs on this license, just a single default one root VDOM is available. This is quite limited mode and does not approximate fully featured multi-VDOM mode. you can create 1 admin-only VDOM and 1 traffic-only VDOM.

VDOMs: Only split-VDOM mode is supported, i.e.

If you pass some 1-10 Mbit/sec in a lab, you will have both mostly idle. Both CPU and memory usage in Fortigate depends on the traffic volume passing the Fortigate.

Memory 1024 Mb max: also, if not trying to use Virtual Fortigate for production level traffic, you will unlikely to hit this memory threshold.

1 CPU maximum: for labs/demo and such not much of a concern as you will not likely to hit this limitation.

BUT, you can always download (only) the LATEST version vm image, by just registering with an email in FortiCloud, no need to be a paying client of Fortinet.

Where To Download: You can (legally) download ANY version of Fortigate VM image from if you are a Fortinet client, i.e.

This license, unlike the 15-days one, has almost NO limitations, and you get fully functional virtual Fortigate. Note: There is another evaluation license - for 60 days, that you can only get from Fortinet Account Manager. Unfortunately, it comes with some limitations you should be aware of so not to waste your time trying to debug them. So, after reading this article, make sure to read this one as well: Fortigate free VM Evaluation License is now permanent, not limited to 15 days, here is how to get it.Įach Fortigate Virtual Machine (VM) image (until FortiOS 7.2.1) comes with built-in 15 days evaluation license which starts the moment you spin this image in your virtual environment - VMWare ESXi/WorkStation, KVM, GNS3, EVE-NG.

Update August 2022: All the said below is still true, but starting with FortiOS 7.2.1 the process of issuing the evaluation license has changed.

Fortigate vm license expired