FortiGate Licensing

FortiGate Licensing — Models & Options (UAE & GCC Ready)

Choose the right FortiGate entitlements with confidence. We align licensing to your environment, co-term renewals for clean audits, and provide local/remote support across the UAE and GCC.

Licensing Models at a Glance

• FortiOS and core NGFW features ship with the appliance (Base). SD‑WAN/VPN are built-in; advanced protections require FortiGuard subscriptions.
• FortiGuard AI‑Powered Security Services are offered in tiered bundles that build on each other: ATP → UTP → Enterprise (ENT).
• 360 Protection adds cloud management/analytics entitlements plus support, simplifying operations for distributed estates.
• FortiCare Support is per‑device with tiers (Essential, Premium, Elite) to match SLA and RMA needs.
• Optional SASE expansion connects FortiGate estates to FortiSASE with included user seats (supported on G‑series models).

Base (included with FortiGate appliances)

• Includes: NGFW policy engine, routing, SSL/IPsec VPN, SD‑WAN, High Availability (HA), logging/monitoring under FortiOS.
• No extra license for base SD‑WAN/VPN; however, security inspection capabilities rely on FortiGuard subscriptions.
• Virtual/cloud form factors follow the same model with term licensing aligned to instance sizing.

FortiGuard Security Bundles

Advanced Threat Protection (ATP)

• Core network/file security to stop known threats (e.g., IPS, AV).
• Fit: Foundational security for branch/HQ where web filtering is handled elsewhere.

Unified Threat Protection (UTP)

• Everything in ATP + web protection (URL/DNS filtering) for full UTM coverage.
• Fit: Most enterprises standardize on UTP for complete edge protection.

Enterprise Protection (ENT)

• Everything in UTP + advanced services (e.g., inline AI malware prevention, CASB/advanced controls) and FortiCare Premium.
• Fit: Security‑sensitive networks needing the broadest coverage and higher‑touch support.

360 Protection

• Adds cloud entitlements such as FortiManager Cloud/FortiAnalyzer Cloud alongside security services and support.
• Delivers centralized management, analytics, and operational visibility (single‑pane‑of‑glass) for multi‑site estates.

FortiCare Support (Per‑Device)

• Essential — base‑level support; web/case assistance suited to lower‑criticality devices.
• Premium — 24×7×365 with faster response SLAs for critical cases and next‑business‑day for non‑critical.
• Elite — highest SLAs and accelerated resolution; includes Extended End‑of‑Engineering‑Support (E‑EoES) options.

FortiSASE Expansion (Optional)

• FortiGate SASE expansion license includes a starter pack of FortiSASE users and SPA connectivity to the cloud edge.
• Supported on G‑series FortiGate models starting at 120G; bundles available with 10/50/100 user seats depending on model tier.

Procurement Tips (UAE & GCC)

• Co‑term all subscriptions (UTP/ENT/360) to a single renewal date for budget clarity and audit readiness.
• Right‑size per‑device bundles versus a‑la‑carte add‑ons; plan FortiCare tier by site criticality and RMA objectives.
• If adopting SASE, start with the FortiGate SASE expansion and scale user seats as adoption grows.

FortiGate Licensing — Summary Table