Buy second hand Fortigate 8xE

[noresponse]

Hi,

I have seen a second hand Fortigate 80E.  

Can the current owner still transfer ownership to another person/company?  

Or can the new owner transfer it over themselves?

The owner sent me:

FortiGate-80E # get sys status
Version: FortiGate-80E v7.2.4,build1396,230131 (GA.F)
Virus-DB: 1.00000(2018-04-09 18:07)
Extended DB: 1.00000(2018-04-09 18:07)
AV AI/ML Model: 0.00000(2001-01-01 00:00)
IPS-DB: 6.00741(2015-12-01 02:30)
IPS-ETDB: 0.00000(2001-01-01 00:00)
APP-DB: 6.00741(2015-12-01 02:30)
INDUSTRIAL-DB: 6.00741(2015-12-01 02:30)
IPS Malicious URL Database: 1.00001(2015-01-01 01:01)
IoT-Detect: 0.00000(2022-08-17 17:31)
BIOS version: 05000007
System Part-Number: P18822-02
Log hard disk: Not available
Hostname: FortiGate-80E
Private Encryption: Disable
Operation Mode: NAT
Current virtual domain: root
Max number of virtual domains: 10
Virtual domains status: 1 in NAT mode, 0 in TP mode
Virtual domain configuration: disable
FIPS-CC mode: disable
Current HA mode: standalone
Branch point: 1396
Release Version Information: GA
System time: Tue Apr 30 09:24:19 2024
Last reboot reason: power cycle

[Toshi_Esumi · Accepted solution]

Buying a pre-owned FTNT device is always a gamble if you want to add support or feature licenses on the device. Because the previous registerer needs to agree to release it when FTNT CS contacted based on your request. If that party didn't reply to it, the transfer can't happen because of the FTNT policy.
FTNT doesn't have a revoking policy in those situations, which happened to my old FG50E 6-7 years ago.

Toshi

[Toshi_Esumi · Accepted solution]

I think so.

Toshi

[Toshi_Esumi · Accepted solution]

That's what happened when the owner of the device rejected the transfer as I described in my post.
FTNT CS knows who is the registrar of the device with the contact email/phone. So I contacted them to ask the owner to release the ownership from their end. Then it was rejected.

Toshi

[Toshi_Esumi · Accepted solution]

Buying a pre-owned FTNT device is always a gamble if you want to add support or feature licenses on the device. Because the previous registerer needs to agree to release it when FTNT CS contacted based on your request. If that party didn't reply to it, the transfer can't happen because of the FTNT policy.
FTNT doesn't have a revoking policy in those situations, which happened to my old FG50E 6-7 years ago.

Toshi

[noresponse]

Hi,

The seller just told me that "It's already been removed from the current account. No need to transfer,"  which I think is what I want. Am I right?

[Toshi_Esumi · Accepted solution]

I think so.

Toshi

[Dockered]

If you're eyeing a second-hand Fortigate 80E, transferring ownership can be straightforward. Typically, the current owner can initiate the transfer process to another person or company by contacting Fortinet's support or through their online portal. Alternatively, the new owner can often handle the transfer themselves by registering the device under their account. It's wise to check with Fortinet's support for the exact steps and any transfer fees involved. On another note, I've been finding some neat stuff at a flea market in Sacramento lately. Check out https://sacfleamarkets.com/ if you're into exploring local finds.

[noresponse]

What happens if it's bought on ebay from a company who was not the original owner?

[Toshi_Esumi · Accepted solution]

That's what happened when the owner of the device rejected the transfer as I described in my post.
FTNT CS knows who is the registrar of the device with the contact email/phone. So I contacted them to ask the owner to release the ownership from their end. Then it was rejected.

Toshi

[noresponse]

Hi,

This is the exactly the problem I suspected could happen. So the original owner sold their Fortigate box as a

second hand item, and the  rejects the transfer. Other than being mean, perhaps they gain something from keeping the device registered to them. Additionally, you could show proof of purchase to Fortinet and they could force the transfer. That they did not shows that they are in cahoots.

Thank-you for reporting what happened to you. 

I decided not to buy a Fortigate whether new or not. I shan't access such abuse from Forinet. 

[Toshi_Esumi · Accepted solution]

Just for the sake of accuracy, not giving a wrong impression to whom read this thread partially, I need to restate that FTNT does NOT have a revoking policy. If the owner/registrar of the device rejects releasing it or even when not possible to reach, FTNT doesn't take any further action and that's the end of it, regardless you have a proof of possession or not.
This it the difference from Cisco's ownership transfer policy.

Toshi