if I understand it right there's the firewall appliance , then there is
FortiCare (which is support basically) and FortiGuard (which are paid
addons like IPS, IDS, antimalware...)is the standalone appliance such as
60E with only FortiCare for updates...
