Fortigate license comparison

FortiOS Carrier licensing FortiOS Carrier 7.6.2 runs on the 3000, 4000, 5000, and 7000 series FortiGate platforms and on the FortiGate-2600F and 2601F. FortiOS Carrier 7.6.2 also runs on VM08/VM08-v, VM16/VM16-v, VM32/VM32-v, and VMUL/VMUL-v series. FortiOS Carrier is not supported for the VM S-Series. To run FortiOS Carrier you must purchase a FortiOS Carrier license from Fortinet. Once you have a license key, you should upgrade your FortiGate device or VM to the FortiOS software version that you want to be running and then use the following command from the FortiOS CLI to license your product for FortiOS Carrier: execute forticarrier-license The FortiGate restarts and is set to the FortiOS Carrier factory default configuration. You can configure and operate a FortiGate running FortiOS Carrier just like a normal FortiGate. For example, you can upgrade the firmware by downloading and installing a new FortiOS firmware version or through FortiGuard. You do not have to re-license your FortiGate for FortiOS Carrier after installing new FortiOS firmware.

Root FortiGate. Once configured, the root FortiGate pushes the settings to other FortiGates in the Security Fabric. FortiGate Cloud Sandbox (FortiSandbox SaaS) FortiGate Cloud Sandbox allows users to take advantage of FortiSandbox features without having to purchase, operate, and maintain a physical appliance. It also allows you to control the region where your traffic is sent to for analysis. This allows you to meet your country's compliance needs regarding data storage locations. Users are not required to have a FortiCloud account to use FortiGate Sandbox Cloud. The submission to the cloud with a valid FortiGuard Antivirus (AVDB) license is rate limited per FortiGate model. Refer to the Service Description for details. For those without any AVDB license, the submission is limited to only 100 per day. To configure FortiGate Cloud Sandbox, you must first activate the connection from the CLI. Note that FortiGate Cloud Sandbox is decoupled from FortiGate Cloud logging, so you do not need to have a FortiCloud account or have cloud logging enabled. To activate the FortiGate Cloud Sandbox connection:# execute forticloud-sandbox region0 Europe1 Global2 Japan3 USPlease select cloud sandbox region[0-3]:3 After a region is selected, the following configuration is added:config system fortiguard set sandbox-region {0 | 1 | 2 | 3}end Alternatively, using the execute forticloud-sandbox update command also works. To obtain or renew a FortiGuard antivirus license: See the How to Purchase or Renew FortiGuard Services video for FortiGuard antivirus license purchase instructions. Once a FortiGuard license is purchased and activated, users are provided with

Configuring sandboxing The Security Fabric supports the following types of FortiSandbox deployments: Type Description Requirements Next steps FortiGate Cloud Sandbox (FortiSandbox SaaS) Files are sent to Fortinet’s Cloud Sandbox cluster for post‑processing. The FortiGate must be subscribed to the Advanced Malware Protection (AMP) license, which includes the AV license. Activate and configure your FortiGate Cloud Sandbox. Use post-transfer scan with Antivirus. FortiGuard Inline Malware Prevention System Files are sent to Fortinet’s Cloud Sandbox cluster for real-time processing. The FortiGate must either be subscribed to the Enterprise Protection bundle or have an a la carte Inline Malware Prevention license. Verify your license. Configure your FortiGate. Use Inline Scan with Antivirus. Verify Sandbox detection. FortiSandbox Cloud (FortiSandbox PaaS) Files are sent to a dedicated FortiCloud hosted instance of FortiSandbox for processing. FortiCloud premium license. FortiSandbox Cloud entitlement. The FortiGate and FortiCloud licenses are registered to the same account. Provision your dedicated instance. Configure your FortiGate for post-transfer scan or inline scan. Verify Sandbox detection. FortiSandbox Appliance Files are sent to a physical or VM appliance, typically residing on premise, for processing. None Configure your FortiSandbox. Configure your FortiGate for post-transfer scan or inline scan. Verify Sandbox detection. To apply sandboxing in a Security Fabric, connect one of the FortiSandbox deployments, then configure an antivirus profile to submit files for dynamic analysis. The submission results supplement the AV signatures on the FortiGate. FortiSandbox inspection can also be used in web filter profiles. In a Security Fabric environment, sandbox settings are configured on the

A paid FortiSandbox Cloud license. Go to Dashboard > Status to view the FortiSandbox Cloud license indicator. Alternatively, go to System > FortiGuard to view the FortiSandbox Cloud license indicator. To enable FortiGate Cloud Sandbox in the GUI: Go to Security Fabric > Fabric Connectors and double-click the Sandbox card. Set the Status to Enabled. Set the Type to FortiGate Cloud. Select a Region from the dropdown. Click OK. FortiSandbox Cloud (FortiSandbox PaaS) FortiSandbox Cloud offers more features and better detection capability. Connecting to FortiSandbox Cloud will automatically use the cloud user ID of the FortiGate to connect to the dedicated FortiSandbox Cloud instance. The FortiGate automatically detects if there is a valid entitlement. The following items are required to initialize FortiSandbox Cloud: A FortiCloud premium account. A valid FortiSandbox Cloud contract on the FortiGate. To view contract information in the CLI, enter diagnose test update info. The User ID at the end of the output shows FortiCloud which FortiSandbox Cloud account the FortiGate is connected to. A provisioned FortiSandbox Cloud. See Deploying FortiSandbox Cloud for information. To configure FortiSandbox Cloud in the GUI: Go to Security Fabric > Fabric Connectors and double-click the Sandbox card. Set the Status to Enabled. Set the Type to FortiSandbox Cloud. If the FortiSandbox Cloud option is grayed out or not visible, enter the following in the CLI:config system global set gui-fortigate-cloud-sandbox enableend Click OK. To configure FortiSandbox Cloud in the CLI:config system fortisandbox set status enable set forticloud enable set server end If