Skip to main content
redial
New Member
September 26, 2021
Question

FGT 30E for pharmacy

  • September 26, 2021
  • 4 replies
  • 6351 views

Hello all,

 

I've been asked by a small pharmacy to install a firewall for their network. I am looking into the FortiGate 30E in this case because there are not many devices on the network (around 10-15).

 

I am wondering if anybody here has done an installation of a FortiGate for a medical facility in the past, and if so, which licenses did you purchase (IPS, antimalware, etc.)? I am trying to get an idea of which services would be most applicable for this facility so I can figure out licensing costs.

 

Thank you for your insights.

Matteo

4 replies

ede_pfau
SuperUser
SuperUser
September 26, 2021

hi,

 

and welcome to the forums.

 

I don't think there are special needs for this customer but you may know better.

To protect a small network I would always offer antivirus (which includes botnet blacklisting), webfilter and, if there are servers, IPS. IPS includes application control which is very effective.

 

For hardware, I would not go for a 30E but for the 30F (or 40F). New generation, same price, 10fold performance.

For subscriptions, the UTM bundle includes all. Maybe ATP will do as well, but I doubt the price difference is worth it.

 

And, to economize, always buy a hardware bundle, that is, FGT plus 3 or 5 years subscriptions. They are heavily discounted when bought together with the hardware. The customer will skip all subsequent price raise s, and services will not expire too soon.

 

Usually, any network includes a WiFi nowadays. A FortiWiFi model with internal AP is not as powerful as an external AP, and sometimes includes only 1 radio (2.4 or 5 GHz). A  single simple FortiAP has advantages here. The WiFi controller is built-in and does not require licensing.

 

HTH.

PTM
New Member
September 26, 2021
I would avoid the 30E as it has no FortiOS 6.4 or 7.0 support. Latest software version available at present is 6.2.9. I would go for a 40F which has much better performance and will support software updates for years to come.
ede_pfau
SuperUser
SuperUser
September 26, 2021

right, 2 opinions to that.

One is "anything below a 60 is not a Fortigate" - if any FortiOS feature is not supported by hardware, it's in these small models. And "30B/40C/30D/30E are gas station models: made for a low-traffic VPN outposts, that is, single purpose, low demands, sold in 10 packs (which is true)".

The 40F is on the brink, powerful yes, but still not the full fledged model. Which might just be fine for some scenarios, nonetheless.

victornakagomi
Explorer II
April 11, 2023

Hello, for this case I recommend that you use the basic licenses with IPS and UTM protection, considering that it is a small environment and that probably does not have published services for the Web.

 

Yours sincerely,
Victor

lol
Staff
Staff
April 12, 2023

Hello,


Out of personal experience I'd suggest a 60F for such a small environment.
It is only slightly more expensive than a 40F but comes i.e. with 8 instead of 4 CPU cores and 8GB instead of 4GB internal flash.

If you go for a 60F WiFi you can even spare the 3rd party AP.

 

Also my recommendation would be to purchase a bundle with AV scanning included.


Regards

BrianSolley
New Member
April 13, 2023

Hi Matteo,
I don't have experience with installing a FortiGate for a medical facility, but it's great that you're doing your research to ensure that the network is secure.
As for licenses, I would suggest looking into the FortiGuard Security Subscription, which includes IPS, antimalware, web filtering, and other services.
Speaking of medical facilities, check out meldonium-store.com. They offer a wide range of affordable medications and excellent customer service. It's always great to have a reliable online pharmacy as an option.