Licensing explained

[graemeb]

If you buy a new firewall alone, does it do anything like stnd packet filtering?

If you buy DNS & Video Filtering Service, will it work alone and offer firmware updates or do you need this plus FortiCare?

Thank you

[AEK]

A firewall without subscription can everything (including packet filter), except anything related to FortiGuard, like Web filter, signature update (AV, IPS, App) and so, even if it still does IPS, AV and app filter with using the installed signatures (without updates).

You need FortiCare for firmware updates.

In case your subscription is bundle then FortiCare is always included.

But in case your subscription is "a-la-carte" then you can purchase anything independently of others, e.g.: you can get DNS & video filter without FortiCare.

[graemeb]

Thank you @AEK for the helpful reply.

60F 24x7 UTP Bundle is £361

FortiCare is £100

I am mostly after firewalling and malicous url filtering.

IPS seems to cover malicous/botnet blocking.

Does the url service cover that also?

Lastly, is the sub different for 60f v 60f wi-fi please?

[dingjerry_FTNT]

FGT 60F WiFi has additional built-in WiFi functions.

[Dhruvin_patel]

Greetings,

The FortiGate 60F and 60F Wi-Fi have identical subscription services, including FortiGuard bundles (e.g., UTP or Enterprise). The primary difference is the hardware: the 60F Wi-Fi includes built-in wireless capabilities, which the standard 60F lacks.

Please find the attachment of datasheet:

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/pdf/fortigate-fortiwifi-60f-series....

https://www.avfirewalls.com/datasheets/fg-60f-series.pdf?srsltid=AfmBOorsA2SqdkGXmVqRlCJRha65WSAvYja...

Regards!

If you have found a solution, please like and accept it to make it easily accessible for others.

[graemeb]

Hi @Dhruvin_patel ,

The reason i asked is the below. Wi-Fi sub is more cash.

https://store.tnp.net.uk/forticare/fortinet-fortigate-60f-24x7-advanced-threat-protection-bundle.htm...

https://store.tnp.net.uk/forticare/fortinet-fortiwifi-60f-24x7-advanced-threat-protection.html

Seems to show it is different

[AEK · Accepted solution]

Hi

Regarding your first question, look at the "Base Services" on the above screenshot, there is "Internet Services and Botnet IPs" included, so no need for other feature for that.

You can then find all bad destination (like Botnet-C&C.Server) under the "IP Reputation DB" in the ISDB. You just need to use them within your firewall policies.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Blocking-Potential-threats-over-Internet-s...

Hope it helps.

[graemeb]

Excellent. I may just get the ATP bundle since it does enough and has FortiCare which as you said works.

[AEK]

ATP bundle is a nice choice in case you don't need Web filtering.

Web filtering is suitable for Internet navigation and is used to allow or deny access to sites depending on their categories, e.g.: you can deny "Social Media" and "Streaming Media" categories and allow "Banking" and "Information Technology" categories.

In case you need Web filtering then just go for UTP bundle.

[graemeb]

Great. More interested in just malicious url blocking than blocking gambling, webmail etc.

ATP is like 150 pound less than utp.

Thank you