Turn the FortiGate you already own into more than a basic firewall.
FortiGate subscriptions can add updated intrusion prevention, malware protection, website and DNS filtering, application control, cloud visibility, and other security services. Availability depends on the appliance, FortiOS version, and bundle.
Fortinet FortiGate
Features relevant to a shop or small office.
The useful question is not “Which bundle is biggest?” It is “Which protections fit the way this location uses the internet?”
Intrusion prevention
Inspect network traffic for known attack patterns and block matching threats using updated IPS intelligence.
Antivirus and malware services
Check supported traffic for known malicious files and use additional malware analysis features where included.
URL and DNS filtering
Block known malicious websites, phishing destinations, and risky DNS requests where the selected subscription includes them.
Application control
Identify and control categories of applications using the connection, instead of treating all traffic the same.
Network segmentation
Keep staff systems, guest Wi-Fi, cameras, payment devices, and other groups on separate network segments when configured correctly.
VPN and secure connectivity
Support encrypted remote or site-to-site connections using capabilities available on the appliance and FortiOS.
Things a small business may not realize FortiGate can do.
Some capabilities are built into FortiOS; others require a current support contract, security service, cloud option, or specific model.
Create separate network zones
A shop can keep customer Wi-Fi away from payment terminals, office computers, printers, and cameras.
See application categories
Application control can help show whether traffic is business software, streaming, remote access, social media, or another category.
Filter at URL and DNS level
Supported services can block known malicious or unwanted destinations before a user reaches the page.
IoT visibility in applicable coverage
Higher-feature services can help identify certain connected devices and correlate known vulnerabilities where supported.
FortiGate Cloud options
Eligible devices can use cloud-based management, logging, or reporting options depending on subscription and model.
Buy à la carte where available
Not every location needs a full bundle; some FortiGuard services can be selected individually when compatible.
Understand the three main security bundles.
Fortinet’s current ordering information groups services into ATP, UTP, and ENT bundles. Exact contents and model restrictions must be confirmed when quoting.
ATP bundle
A core first line of defense
- IPS and antivirus capabilities
- FortiSandbox SaaS and application control in the current bundle description
- Does not include the full web and DNS filtering set
UTP bundle
Web and network protection
- Includes ATP services
- Adds URL and DNS filtering plus anti-botnet/C2 services
- Often relevant where safer web access is a priority
ENT bundle
Fortinet’s higher-feature Enterprise Protection bundle
- Includes ATP and UTP services
- Adds capabilities such as DLP, attack-surface services, and applicable IoT visibility
- The official bundle name does not mean every small business needs it
Which FortiGate features does this location need?
Send the model, serial number, renewal date if known, and whether the priority is support, safer web access, threat protection, visibility, or cloud management.