How many subscriptions are available for a Fortigate and what do they each exactly cover?

Forum|Forum|2 years ago
June 26, 2024
4 replies
2987 views

Hi everyone,

I am new with Fortinet devices and have Fortigate FG-100F. I am struggling a lot understanding how many subscriptions are available and what features do they exactly offer for my device. I have tried looking onlin for Forticare, IPS, Antivirus, etc. but what I have found online so far is marketing material which is very broad and ambiguous. I want to know the specific details (e. g. What additional firewall rules can I create, what additional logs and events can I monitor, etc.). Where may I find the information I am looking for?

FortiGate

hjezzapaula

Staff

Hi,

You may check on below for brief information:

https://www.fortinet.com/content/dam/fortinet/assets/solution-guides/sb-portfolio-brief-fortiguard-ai-powered-security.pdf

Based on 100F datasheet, this unit does not come with storage, you may also check on cloud logging. Below is the comparison for device with and without subscription.

https://docs.fortinet.com/document/fortigate-cloud/24.2.0/administration-guide/215425/feature-comparison

100F datasheet: https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortigate-100f-series.pdf

You may coordinate with sales or Fortinet local partner if you need further information regarding your requirement.

Fortinet local Partner:

https://www.fortinet.com/partners/partner-program/find-a-partner.html

Or Fortinet local Sales Office:

http://www.fortinet.com/aboutus/locations.html

Thanks,

fricci_FTNT

Staff

Hi @jefazo92 ,

I can understand it is not easy to browse among all the marketing material.
The documents below might give you an idea of the features and what they do (matching the contents between them):

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortigate-100f-series.pdf (<--page 9)
https://community.fortinet.com/t5/FortiGate/Technical-Tip-List-of-features-that-will-still-continue-to-work/ta-p/240941

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/FortiOS.pdf

In terms of doubts or questions, I would suggest you to contact a sales engineer, that will provide you all the answers:

https://www.fortinet.com/corporate/about-us/contact-us

Regarding some doubt that you have specified, please see my answers:
>> What additional firewall rules can I create, what additional logs and events can I monitor

The number of firewall rules might be specific to the hardware platform and not to a subscription (CLI "print tablesize"). With specific subscriptions you can configure/use UTM features within a firewall policy. Some specific feature also offer further specific logs (i.e.: Webfilter, DLP, AV ), their name might be different in different FOS versions.

If you have further questions, please let us know. Anyway Sales engineers, remain the best resource to clarify your doubts.

Best regards,

jefazo92Author

Explorer II

Thank you both @hjezzapaula and @fricci_FTNT. I still have a number of questions before I can understand what my device requires:

What service is responsible for providing FW updates? Is it FortiCare ir Fortigate Cloud? Are both services the one and the same?

For vulnerability management, do I need to purchase thr FortiCare Support Services, Advanced Support license? What does it cover exactly?

If the Fortigate-100F has no onboard storage, does the device have to be connected to Fortigate Cloud whether I go for the free version (hosted log retention of 7 days) or buy a subscription (hosted log retention of 1 year)? Otherwise no logs are generated or they get lost immediately as soon as they are created? Is there no way I can download the logs into a separate storage or into my PC directly from Fortigate?

What is FortiGuard Security Fabric, is it all the services covered by a FortiGuard Services? Or is the fabric related to the FortiCare license?

How is FortiCare structured in terms of services offered, bundles, etc.? Is FortiCare Support Services part of FortiCare Services or sre both terms equivalent? It is confusing as both https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.fortinet.com/content/dam/fortinet/assets/solution-guides/sb-forticare-services.pdf&ved=2ahUKEwiu4b-og_yGAxWiUKQEHTGoAqYQFnoECBwQAQ&usg=AOvVaw01c2vQh_QIulR848a5m161 and https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/og-forticare.pdf&ved=2ahUKEwjnmp6lhPyGAxX2TKQEHY9UANgQFnoECCMQAQ&usg=AOvVaw2TehhE-F0j0ShgxIH2amOE explain the same things but are structured in a different manner and have different bundle plans.

With the FortiCloud subscription, can one only download Firmware updates until device EOL? Is there no plan that allows FW updates even after EOL?

For malicious file analysis, how is malware file analysis from FortiGuard Security Services different from Fortigate Cloud Premium Sandbox feature?

Will DLP continue to work without a FortiGuard Security Services subscription? The Fortinet Forum page https://community.fortinet.com/t5/FortiGate/Technical-Tip-List-of-features-that-will-still-continue-to-work/ta-p/240941 says so but DLP is listed as FortiGuard Security Service in the Fortigate 100F datasheet.

fricci_FTNT

Staff

Hi @jefazo92 ,

I can understand you have all those question and I am unable to accurately answer most of them.

Regarding question #1, they are kind of the same, you can download firmware versions from FortiCare.
Regarding the question #3, you can configure syslog server settings and send all logs to your favourite third party syslog server:

https://docs.fortinet.com/document/fortigate/7.2.8/cli-reference/141516630/config-log-syslogd-setting

I suggest you to get in touch with our sales department (https://www.fortinet.com/corporate/about-us/contact-us ).

Best regards,