Hot!Fortinet firewalls - quick question

New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2020/11/26 10:21:18
  • Status: offline
2020/11/26 10:28:48 (permalink)

Fortinet firewalls - quick question

if I understand it right there's the firewall appliance , then there is FortiCare (which is support basically) and FortiGuard (which are paid addons like IPS, IDS, antimalware...)is the standalone appliance such as 60E with only FortiCare for updates capable of everything such as site to site IPSec VPNs? basic ACLs, port forwarding etc..I get that buying a next-gen firewall without next-gen addons is kinda pointless, but my current ASAs are very very old, without support so I mainly want a new appliance that isn't ancient and basic firmware/OS support for now. If budget allows I'll gladly add UTM/UTP services on top later.
post edited by iktribegr63 - 2020/11/28 22:29:21

3 Replies Related Threads

    Expert Member
    • Total Posts : 848
    • Scores: 60
    • Reward points: 0
    • Joined: 2017/06/14 01:27:25
    • Location: Regensburg
    • Status: offline
    Re: Fortinet firewalls - quick question 2020/11/27 00:57:53 (permalink)
    quick answer: no
    FortiCare gives you support and hardware exchange
    Firmware & general updates needs to be licensed too
    UTM (IPS,IDS,webfilter etc) and HA require additional licensing.
    So with only FortiCare you have support and rma service, you will have the basic functionality you wrote but you won't get any updates.
    Gold Member
    • Total Posts : 379
    • Scores: 16
    • Reward points: 0
    • Joined: 2014/07/30 11:15:18
    • Status: offline
    Re: Fortinet firewalls - quick question 2020/11/27 12:22:09 (permalink)
    quick answer: yes
    if you buy the appliance and support you get the all non UTM stuff and firmware upgrades, that is what forticare gets you.

    FortiCare device-based support is the foundation of the support services, providing firmware updates, technical support, and foundational FortiGuard subscriptions for dynamic policies. Two levels are available: 24x7 and Advanced Support Engineer (ASE). ASE provides higher ticket servicing for faster starts and ticket resolution.
    Expert Member
    • Total Posts : 5919
    • Scores: 394
    • Reward points: 0
    • Joined: 2008/03/20 13:30:33
    • Location: AUSTIN TX AREA
    • Status: offline
    Re: Fortinet firewalls - quick question 2020/11/28 02:14:58 (permalink)
    I have to agree with boneyard
    . UTM (IPS,IDS,webfilter etc) and HA require additional licensing. 

    BTW,  HA does not require any licensing and in general none of the other things mentioned in that same line require licensing. You could run your appliance with no active subscription IDS,IPS,WEBfiltering....
    Your active subscription to forticare is what give you the active updates. You could run all UTM mention above and with no active subscription, but in general, that would not keep your appliance up to date on threats. And would be. heavily ill-advised for webfiltering.
    Ken Felix

    Jump to:
    © 2021 APG vNext Commercial Version 5.5