FORTINET FC-10-00306-108-02-DD Firewalls

FC-10-00306-108-02-DD IPS Procurement Check

FC-10-00306-108-02-DD is the FortiGuard Intrusion Prevention Service entitlement for one existing FortiGate 300E. It supplies IPS engine and signature updates; it does not include a firewall appliance, replacement hardware or managed policy operation.

Before Activation

The DD suffix does not state a fixed duration on this page. Preserve the authorized quote, exact start and end dates, co-termination terms, serial, account and registration region.

Before registration, match the exact appliance serial and FortiCare account, then verify the installed FortiOS release, enabled IPS sensors, inspection mode and available capacity. Signature behavior and protocol coverage depend on the deployed configuration, not the order code alone.

• Match 00306, the exact FortiGate 300E serial and FortiCare account.
• Inventory IPS sensors, protected policies, exceptions and logging destinations.
• Verify FortiOS compatibility, inspection capacity and overlapping bundle coverage.
• Retain allowed-flow, blocked-pattern and event-delivery acceptance evidence.

Traffic and Evidence Review

The platform token 00306 maps this entitlement to a diskless E-series mid-range firewall. Record the 300E serial, sixteen copper and sixteen SFP traffic paths, HA peer, IPS sensor assignments and off-box evidence destination.

Review server, user and management zones separately so a high-risk protocol cannot inherit a broad monitoring-only exception. Because this model has no local storage workflow, preserve before-and-after IPS events in the external repository.

Acceptance requires expected signature action, stable accelerated traffic, HA consistency and complete central events. A bypass must identify the exact application, protocol, owner, expiry and compensating control.

The 300E evidence plan should link each protected zone to a sensor, collector and application owner. Compare fast-path traffic with flows that require full inspection so accelerated forwarding is not mistaken for verified IPS coverage. During acceptance, test a server protocol, user web flow and management connection independently. Since evidence is off-box, collector delay or packet-loss gaps must be resolved before the security owner closes the change.

Code 108 Scope

Fortinet identifies service code 108 as IPS. The service supports signature-based detection and protocol analysis for identifying and blocking malicious traffic, including malicious URL and botnet indicators used by IPS controls. It is distinct from antivirus, web filtering, hardware support and a managed SOC service.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard IPS service; Fortinet 300E and 301E fast-path architecture.