FORTINET FC-10-00306-100-02-DD Firewalls

FC-10-00306-100-02-DD Procurement Check

FC-10-00306-100-02-DD is the FortiGuard Advanced Malware Protection subscription associated with one existing FortiGate 300E. It is an electronic security entitlement; no FortiGate appliance or replacement hardware is included.

Coverage Acceptance

The DD suffix does not prove a duration on this page. Preserve the authorized start and end dates, co-termination terms, registration region and current entitlement status from the Fortinet quote.

• Match token 00306, the FortiGate 300E serial and the FortiCare account.
• Confirm antivirus profiles, cloud submission scope and permitted data region.
• Verify SOC recipients, log enrichment and endpoint containment ownership.
• Confirm whether separate support or inline-prevention coverage is required.

Detection and Enrichment

Fortinet documents the AMP service as including antivirus, mobile-malware protection and FortiGate Cloud Sandbox. The cloud Sandbox Detection service performs out-of-band analysis and enriches logs for security operations. It provides detection evidence, not the inline blocking behavior Fortinet assigns to its separate Inline Malware Prevention and Enterprise offerings.

FortiGate 300E Operations

The platform token 00306 identifies a diskless E-series mid-range firewall. Map the 300E serial, protected zones, HA peer, central log repository and file-inspection policies. Keep the evidence workflow external because this is not the storage-equipped 301E.

When cloud sandboxing returns a verdict, link it to the source zone, user or server owner and the original antivirus action. Verify central log enrichment and decide whether the related host needs isolation, rescanning or policy adjustment.

Use the 300E zone map to distinguish workstation downloads, server transfers and management traffic before applying containment. Preserve the enriched event in the external repository, identify the policy and NP6 path that observed it, and have the system owner approve isolation. After cleanup, retest the same business flow with a known-safe file and verify HA synchronization plus new log arrival. Because evidence is off-box, loss of central logging is a release blocker even when the appliance itself continues forwarding.

Official sources: Fortinet FortiSandbox Ordering Guide; Fortinet 300E and 301E fast-path architecture.