Fortigate license

FortiOS Carrier licensing FortiOS Carrier 7.6.2 runs on the 3000, 4000, 5000, and 7000 series FortiGate platforms and on the FortiGate-2600F and 2601F. FortiOS Carrier 7.6.2 also runs on VM08/VM08-v, VM16/VM16-v, VM32/VM32-v, and VMUL/VMUL-v series. FortiOS Carrier is not supported for the VM S-Series. To run FortiOS Carrier you must purchase a FortiOS Carrier license from Fortinet. Once you have a license key, you should upgrade your FortiGate device or VM to the FortiOS software version that you want to be running and then use the following command from the FortiOS CLI to license your product for FortiOS Carrier: execute forticarrier-license The FortiGate restarts and is set to the FortiOS Carrier factory default configuration. You can configure and operate a FortiGate running FortiOS Carrier just like a normal FortiGate. For example, you can upgrade the firmware by downloading and installing a new FortiOS firmware version or through FortiGuard. You do not have to re-license your FortiGate for FortiOS Carrier after installing new FortiOS firmware.

Root FortiGate. Once configured, the root FortiGate pushes the settings to other FortiGates in the Security Fabric. FortiGate Cloud Sandbox (FortiSandbox SaaS) FortiGate Cloud Sandbox allows users to take advantage of FortiSandbox features without having to purchase, operate, and maintain a physical appliance. It also allows you to control the region where your traffic is sent to for analysis. This allows you to meet your country's compliance needs regarding data storage locations. Users are not required to have a FortiCloud account to use FortiGate Sandbox Cloud. The submission to the cloud with a valid FortiGuard Antivirus (AVDB) license is rate limited per FortiGate model. Refer to the Service Description for details. For those without any AVDB license, the submission is limited to only 100 per day. To configure FortiGate Cloud Sandbox, you must first activate the connection from the CLI. Note that FortiGate Cloud Sandbox is decoupled from FortiGate Cloud logging, so you do not need to have a FortiCloud account or have cloud logging enabled. To activate the FortiGate Cloud Sandbox connection:# execute forticloud-sandbox region0 Europe1 Global2 Japan3 USPlease select cloud sandbox region[0-3]:3 After a region is selected, the following configuration is added:config system fortiguard set sandbox-region {0 | 1 | 2 | 3}end Alternatively, using the execute forticloud-sandbox update command also works. To obtain or renew a FortiGuard antivirus license: See the How to Purchase or Renew FortiGuard Services video for FortiGuard antivirus license purchase instructions. Once a FortiGuard license is purchased and activated, users are provided with

Configuring sandboxing The Security Fabric supports the following types of FortiSandbox deployments: Type Description Requirements Next steps FortiGate Cloud Sandbox (FortiSandbox SaaS) Files are sent to Fortinet’s Cloud Sandbox cluster for post‑processing. The FortiGate must be subscribed to the Advanced Malware Protection (AMP) license, which includes the AV license. Activate and configure your FortiGate Cloud Sandbox. Use post-transfer scan with Antivirus. FortiGuard Inline Malware Prevention System Files are sent to Fortinet’s Cloud Sandbox cluster for real-time processing. The FortiGate must either be subscribed to the Enterprise Protection bundle or have an a la carte Inline Malware Prevention license. Verify your license. Configure your FortiGate. Use Inline Scan with Antivirus. Verify Sandbox detection. FortiSandbox Cloud (FortiSandbox PaaS) Files are sent to a dedicated FortiCloud hosted instance of FortiSandbox for processing. FortiCloud premium license. FortiSandbox Cloud entitlement. The FortiGate and FortiCloud licenses are registered to the same account. Provision your dedicated instance. Configure your FortiGate for post-transfer scan or inline scan. Verify Sandbox detection. FortiSandbox Appliance Files are sent to a physical or VM appliance, typically residing on premise, for processing. None Configure your FortiSandbox. Configure your FortiGate for post-transfer scan or inline scan. Verify Sandbox detection. To apply sandboxing in a Security Fabric, connect one of the FortiSandbox deployments, then configure an antivirus profile to submit files for dynamic analysis. The submission results supplement the AV signatures on the FortiGate. FortiSandbox inspection can also be used in web filter profiles. In a Security Fabric environment, sandbox settings are configured on the

A paid FortiSandbox Cloud license. Go to Dashboard > Status to view the FortiSandbox Cloud license indicator. Alternatively, go to System > FortiGuard to view the FortiSandbox Cloud license indicator. To enable FortiGate Cloud Sandbox in the GUI: Go to Security Fabric > Fabric Connectors and double-click the Sandbox card. Set the Status to Enabled. Set the Type to FortiGate Cloud. Select a Region from the dropdown. Click OK. FortiSandbox Cloud (FortiSandbox PaaS) FortiSandbox Cloud offers more features and better detection capability. Connecting to FortiSandbox Cloud will automatically use the cloud user ID of the FortiGate to connect to the dedicated FortiSandbox Cloud instance. The FortiGate automatically detects if there is a valid entitlement. The following items are required to initialize FortiSandbox Cloud: A FortiCloud premium account. A valid FortiSandbox Cloud contract on the FortiGate. To view contract information in the CLI, enter diagnose test update info. The User ID at the end of the output shows FortiCloud which FortiSandbox Cloud account the FortiGate is connected to. A provisioned FortiSandbox Cloud. See Deploying FortiSandbox Cloud for information. To configure FortiSandbox Cloud in the GUI: Go to Security Fabric > Fabric Connectors and double-click the Sandbox card. Set the Status to Enabled. Set the Type to FortiSandbox Cloud. If the FortiSandbox Cloud option is grayed out or not visible, enter the following in the CLI:config system global set gui-fortigate-cloud-sandbox enableend Click OK. To configure FortiSandbox Cloud in the CLI:config system fortisandbox set status enable set forticloud enable set server end If

The FortiGate does not detect the proper entitlement, a warning is displayed and the CLI configuration will not save. If the FortiSandbox Cloud is running version 4.0.0 and later, the FortiGate will automatically connect to fortisandboxcloud.com, and then discover the specific region and server to connect to based on which region the customer selected to deploy their FortiSandbox Cloud instance. The FortiGate must have a FortiCloud premium account license and a FortiSandbox Cloud VM license for this functionality. FortiSandbox appliance FortiSandbox appliance is the on-premise option for a full featured FortiSandbox. Connecting to a FortiSandbox appliance requires that Cloud Sandbox is disabled. To enable FortiSandbox appliance in the GUI: Go to Security Fabric > Fabric Connectors and double-click the Sandbox card. Set the Status to Enabled. In the Server field, enter the FortiSandbox device's IP address. Optionally, enter a Notifier email. Click OK. To enable FortiSandbox appliance in the CLI:config system fortisandbox set status enable set forticloud disable set server end Authorizing the FortiGate from FortiSandbox Cloud and a FortiSandbox appliance Once the FortiGate makes a connection to the FortiSandbox Cloud or appliance, the FortiGate must be authorized. See FortiGate devices in the FortiSandbox Administration guide for information. Antivirus profiles An antivirus profile must be configured to send files to the sandbox. Once submitted, sandbox inspection is performed on the file to detect malicious activities. The FortiGate can use the dynamic malware detection database from the sandbox to supplement the AV signature database. See Using FortiSandbox post-transfer scanning with antivirus

Security Service (OT dashboards and compliance reports, OT application and service detection, OT vulnerability correlation, OT virtual patching, OT signatures - Application Control and IPS rules)#FC-10-0070F-159-02-12List Price: $173.60 Our Price: $129.20 FortiGate-70F 1 Year FortiGuard Attack Surface Security Service (Security, Compliance and Risk Ratings, IoT Detection and IoT Vulnerability Correlation)#FC-10-0070F-175-02-12List Price: $173.60 Our Price: $129.20 FortiGate-70F 1 Year FortiGuard SD-WAN Underlay Bandwidth and Quality Monitoring Service#FC-10-0070F-288-02-12List Price: $173.60 Our Price: $155.04 Fortigate-70F 1 Year FortiManager Cloud: Cloud-based Central Management & Orchestration Service#FC-10-0070F-179-02-12 Get a Quote!FortiGate-70F 1 Year SOCaaS: 24x7 cloud-based managed log monitoring, incident triage and SOC escalation service#FC-10-0070F-464-02-12List Price: $499.10 Our Price: $445.75 FortiGate-70F 1 Year FortiConverter Service for one time configuration conversion service#FC-10-0070F-189-02-12List Price: $50.00 Our Price: $42.94 FortiGate-70F 1 Year FortiGuard AI-based Inline Malware Prevention Service#FC-10-0070F-577-02-12List Price: $260.40 Our Price: $232.56 FortiGate-70F 1 Year FortiAnalyzer Cloud: cloud-Based central logging & analytics. Include All FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service.#FC-10-0070F-585-02-12List Price: $260.40 Our Price: $232.56 FortiGate-70F 1 Year Managed FortiGate service, available 24x7, with Fortinet NOC experts performing device setup, network, and policy change management#FC-10-0070F-660-02-12List Price: $1,847.20 Our Price: $1,649.74 FortiGate-70F 1 Year FortiGuard Data Loss Prevention Service#FC-10-0070F-589-02-12List Price: $173.60 Our Price: $129.20 FortiGate CloudBack to topFortiGate-70F 1 Year FortiGate Cloud Management, Analysis and 1 Year Log Retention#FC-10-0070F-131-02-12List Price: $173.60 Our Price: $155.04 FortiGate-70F 3 Year FortiGate Cloud Management, Analysis and 1 Year Log Retention#FC-10-0070F-131-02-36List Price: $520.80 Our Price: $465.12 FortiGate-70F 5 Year FortiGate Cloud Management, Analysis and 1 Year Log Retention#FC-10-0070F-131-02-60List Price: $868.00 Our Price: $775.21 Enables zero touch bulk provisioning for your FortiGate, FortiWifi, or FortiAP products.#FDP-SINGLE-USEList Price: $100.00 Our Price: $74.43 FortiGate-70F SD-WAN Overlay-as-a-Service for SaaS based overlay network provisioningFortiGate-70F 1 Year SD-WAN Overlay-as-a-Service for SaaS based overlay network provisioning#FC-10-0070F-657-02-12List Price: $217.00 Our Price: $193.80 FortiGate-70F Managed FortiGate service, available 24x7, with Fortinet NOC experts performing device setup, network, and policy change managementFortiGate-70F 3 Year Managed FortiGate service, available 24x7, with Fortinet NOC experts performing device setup, network, and policy change management#FC-10-0070F-660-02-36List Price: $2,541.60 Our Price: $2,269.91 FortiGate-70F 5 Year Managed FortiGate service, available 24x7, with Fortinet NOC experts performing device setup, network, and policy change management#FC-10-0070F-660-02-60List Price: $3,236.00 Our Price: $2,890.07 FortiGate-70F FortiSASE subscription including cloud management and 10Mbps bandwidth licenseFortiGate-70F 1 Year FortiSASE subscription including cloud management and bandwidth license#FC-10-0070F-595-02-12List Price: $303.80 Our Price: $271.32 FortiGate-70F Enterprise Protection (IPS, AI-based Inline Malware Prevention, Inline CASB Database,