But SSL VPN, AppControl, and Web Filtering for HTTPS traffic will not work at all, unless you use some Windows 2000-era browser with such a low encryption, and even then, it will not work for other reasons. It means we can create IPsec with DES algo only, which is actually OK for labbing, IPSec VPN tunnels, including Forticlient dial-up, will come up just fine and we can later run OSPF/BGP over them.
In my view this is the most limiting disabled feature.
BUT, you can always download (only) the LATEST version vm image, by just registering with an email in FortiCloud, no need to be a paying client of Fortinet. Where To Download: You can (legally) download ANY version of Fortigate VM image from if you are a Fortinet client, i.e. This license, unlike the 15-days one, has almost NO limitations, and you get fully functional virtual Fortigate. Note: There is another evaluation license - for 60 days, that you can only get from Fortinet Account Manager. Unfortunately, it comes with some limitations you should be aware of so not to waste your time trying to debug them. Each Fortigate Virtual Machine (VM) image comes with built-in 15 days evaluation license which starts the moment you spin this image in your virtual environment - VMWare ESXi/WorkStation, KVM, GNS3, EVE-NG.