Service offerings

The following table provides an overview of the available service packages:

• Virtual Machines

• Hardware Appliances

• Cloud Services

Virtual Machines

FortiGate Virtual Machine - Service Bundle

For detailed information, see the FortiGate™ Virtual Appliances.

Bundles	Enterprise Protection	Unified Threat Protection	Advanced Threat Protection	FortiCare Only
FortiCare Premium	24x7	24x7	24x7	24x7
FortiGuard App Control Service	✓	✓	✓	✓
IPS	✓	✓	✓
Application Control	✓	✓	✓
Advanced Malware Protection	✓	✓	✓
URL, DNS, & Video Filtering	✓	✓
Anti-spam Service	✓	✓
DLP	✓
Inline CASB Database	✓
AI-based Inline Malware Prevention	✓
Attack Surface Security	✓
Converter Service	✓

Entitlement Limits
vCPUS		VDOMs
Minimum	1	VM01	10
Maximum	96	VM02 - VM03	25
Increments	1	VM04 - VM07	50
		VM08 - VM96	500

FortiGate Virtual Machine - A La Carte Services

The A La Carte Service package allows you to pick and choose the services you want use.

Service Type	Services
FortiGuard Services	Intrusion Prevention
	Advanced Malware Protection
	FortiGuard Attack Surface Security Service
	FortiGuard OT Security Service
	DLP
	AI-Based InLine Sandbox
	Web, DNS, & Video Filtering
	FortiConverter Service
Cloud Services	FortiGate Cloud
	SD-WAN Underlay
	FortiAnalyzer Cloud with SOCaaS
	FortiAnalyzer Cloud
	SD-WAN Connector for FortiSASE
	Cloud-based Overlay-as-a-Service
Support Services	FortiCare Premium
	FortiCare Elite

Entitlement Limits
vCPUS		VDOMs
Minimum	1	VM01	10
Maximum	96	VM02 - VM03	25
Increments	1	VM04 - VM07	50
		VM08 - VM96	500

FortiWeb Virtual Machine - Service Bundle

Service type	Advanced Bundle	Standard Bundle	Enterprise Bundle
FortiCare Premium + FortiWeb Security Service	✓	✓	✓
IP Reputation	✓	✓	✓
Antivirus	✓	✓	✓
FortiSandbox Cloud Service	✓		✓
Credential Stuffing Defense Service and Threat Analytics	✓		✓
Advanced Bot Protection			✓
Data Loss Prevention Service			✓

FortiManager Virtual Machine

The FortiManager Virtual Machine allows you to set the number of managed devices and ADOMs.

Service Type	Included in bundle
FortiCare Premium support	✓

Entitlement Limits
Devices		ADOMs
Minimum	1	Minimum	0
Maximum	100 000	Maximum	100 000
Increments	1	Increments	1

FortiClient EMS On-Prem

Service Type	Services
Support Services	FortiCare Premium
	FortiCare Best Practice
Service Packages	ZTNA/VPN
	EPP/ATP + ZTNA/VPN
	Chromebook

Entitlement Limits
All Endpoints
Minimum	25
Maximum	25 000
Increments	1

FortiAnalyzer Virtual Machine

The FortiAnalyzer Virtual Machine allows you to set the daily storage (GB) and ADOMs.

Service Type	Included in bundle
FortiCare Premium support	✓
FortiGuard IOC (Indicators Of Compromise)	✓
Security Automation Service	✓
FortiGuard Outbreak Detection Service	✓

Entitlement Limits
Storage (GB)		ADOMs
Minimum	5	Minimum	0
Maximum	8 300	Maximum	1 200
Increments	1	Increments	1

FortiPortal Virtual Machine

Service Type	Included in bundle
FortiCare Premium support	✓

Entitlement Limits
Devices
Minimum	0
Maximum	100 000
Increments	1

FortiADC Virtual Machine

Service Package	Included in bundle
FortiCare Premium	✓
Network Security	✓
Application Security	✓
AI Security	✓

FortiSOAR Virtual Machine

Entitlement Limits
Prepaid and Postpaid		Evaluation
Minimum	0 (disabled)	Minimum	0 (disabled)
Maximum	1 000	Maximum	5

FortiMail Virtual Machine

Entitlement Limits
Quantity of entitlements per account	1
CPUs
Minimum	1
Maximum	2

Hardware Appliances

FortiGate Hardware

The hardware device is purchased and owned by customers. However, only hardware that does not have any services already attached can be added to FortiFlex. If the hardware has any services attached, contact customer service to detach the services before configuring on FortiFlex.

The Continuous Service Policy is not applicable to FortiFlex entitlements.

Service Type	Services
Support Services	FortiCare Premium
	FortiCare Elite
	FortiCare Elite Upgrade
	ATP
	UTP
	Enterprise

The FortiCare Elite Upgrade can only be combined with one of the FortiGuard Service Bundles (ATP, UTP, or Enterprise).

FortiAP

Service Type	Services
Support Services	FortiCare Premium
	FortiCare Elite

The entitlement must be active for at least 30 days after creation.

FortiSwitch

Service Type	Services
Support Services	FortiCare Premium
	FortiCare Elite

The entitlement must be active for at least 30 days after creation.

Cloud Services

FortiWeb Cloud - Private

Service Type	Services
Average Throughput	Average throughput measured by the 95th percentile.
Web Applications	Number of web applications.

Entitlement Limits
Throughput		Web Apps
Minimum	10	Minimum	1
Maximum	10 000	Maximum	5 000
Increments	25	Increments	1

FortiWeb Cloud - Public

Service Type	Services
Average Throughput	Average throughput measured by the 95th percentile.
Web Applications	Number of web applications.

Entitlement Limits
Throughput		Web Apps
Minimum	10	Minimum	1
Maximum	10 000	Maximum	5 000
Increments	25	Increments	1

FortiClient EMS Cloud

Service Type	Services
Support Services	FortiCare Best Practice
Service Packages	ZTNA/VPN
	ZTNA/VPN + FortiGuard Forensics
	EPP/ATP + ZTNA/VPN
	EPP/ATP + ZTNA/VPN + FortiGuard Forensics
	Chromebook

Entitlement Limits
All Endpoints
Minimum	25
Maximum	25 000
Increments	1

FortiSASE

Service Type	Services
Number of users	Number of users of the service
Service Packages	Standard
	Advanced
	Comprehensive
Bandwidth (Mbps)	Total required bandwidth
Dedicated IPs	Number of dedicated IP addresses
Additional Compute Region	Number of regions Scaling down this parameter is not supported.
SD-WAN On-Ramp Locations	Number of locations This parameter is not available for the Standard service package. For the initial configuration, the minimum quantity is two. It can then be incrementally increased.

Entitlement Limits
Users		Bandwidth		Dedicated IP		SD-WAN On-Ramp Locations
Minimum	50	Minimum	25	Minimum	4	Minimum	0 (disabled)
Maximum	50 000	Maximum	10 000	Maximum	65 534	Maximum	8
Increments	1	Increments	25	Increments	1	Increments	1

The minimum entitlement term is 90 days after creation. Likewise, when editing an entitlement, the expiration date cannot be less than 90 days. For example, if an entitlement is STOPPED after 91 days and then reactivated, it cannot be STOPPED again for another 90 days.

FortiEDR MSSP

Service Type	Services
Service Package	Discover/Protect/Respond

Entitlement Limits
Endpoints
Minimum	0
Maximum	50 000
Increments	1

FortiRecon

Entitlement Limits
Assets
Minimum	200
Maximum	1 000 000
Increments	50
Networks
Minimum	0 (Disabled)
Maximum	100
Increments	1
Executives
Minimum	0 (Disabled)
Maximum	1 000
Increments	1
Vendors
Minimum	0 (Disabled)
Maximum	1 000
Increments	1

Evaluation Limits
Assets
Minimum	1
Maximum	100
Increments	1
Networks
Minimum	0 (Disabled)
Maximum	5
Increments	1
Executives
Minimum	0 (Disabled)
Maximum	5
Increments	1
Vendors
Minimum	0 (Disabled)
Maximum	5
Increments	1

Only one FortiRecon entitlement can be included in an account. However, two FortiRecon entitlements from different sources, such as a regular contract and FortiFlex, is allowed for migration. FortiRecon entitlements must be active for at least 90 straight days. When creating a new entitlement, the expiration date cannot be less than 90 days from the date of creation. When editing an entitlement, the expiration date cannot be less than 90 days from the last date the entitlement was ACTIVE.

FortiSIEM Cloud

Entitlement Limits
Compute Units		Online Storage		Archive Storage
Minimum	10	Minimum	500 GB	Minimum	0 GB
Maximum	600	Maximum	60 000 GB	Maximum	60 000 GB
Increments	10	Increments	500 GB	Increments	500 GB