We have 300C with us. In recent vulnerability scan we found that device firmware is vulnerable and device is not capable of upgrading firmware to 5.4.x or more.
As per fortinet fix has been released in 5.4.6 and more. We have recently purchased the UTM subscription for 3 years in March 2018 and to get compliance we have to change the device. So is it possible that, I can get refund for the subscription or is there any refund policy in place?
This is a question for Fortinet Customer Support. They set the policies and would be far better at getting you the proper answer. My guess would be that you would have to apply the purchase price of your current device and spring for a few dollars more to get the comparable "D" model. That's just me speculating though.
Also drop your SE a line. They may be able to help you as well.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.