FORTINET FC-10-00306-159-02-DD Firewalls

FC-10-00306-159-02-DD OT Procurement Check

FC-10-00306-159-02-DD is the FortiGuard OT Security entitlement for one existing FortiGate 300E. It is an electronic security subscription; no firewall appliance, controller, replacement hardware or managed operation is included.

Before Activation

The DD suffix does not state a fixed duration here. Preserve the authorized quote, exact dates, co-termination terms, serial, account and registration region.

Before activation, match the exact serial and FortiCare account, verify the FortiOS release and confirm that required OT protocols and policy features are supported. Begin with passive visibility and a documented baseline before enabling enforcement in a production network.

• Match 00306, the exact FortiGate 300E serial and FortiCare account.
• Inventory OT assets, protocols, zones, vulnerabilities and vendor-access paths.
• Verify FortiOS support, passive baseline, logging and bundle overlap.
• Retain process-owner approval, test evidence, exceptions and rollback criteria.

Asset and Protocol Review

The platform token 00306 maps to a diskless mid-range segmentation firewall. Map the 300E serial, sixteen copper and sixteen SFP paths, OT zones, HA peer, protocol sensors and external evidence repository.

Separate controller, engineering, historian and vendor-access flows. Since the platform is diskless, prove off-box collection before enabling OT detection or virtual-patching actions.

Acceptance requires identified assets, expected industrial protocol behavior, central events and stable HA. An exception must name the asset, protocol, owner, expiry and compensating control.

Pair each 300E OT zone with its expected controller, engineering station, historian and approved maintenance source. Compare the passive inventory with the plant asset register before assigning a vulnerability or virtual patch. Test one path on copper and one on SFP where both carry production traffic, then verify external evidence and HA. A mismatch is investigated as an asset-governance issue rather than suppressed by a broad signature exclusion.

Included Function

Fortinet identifies service code 159 as OT Security. Its scope includes OT device identification, vulnerability correlation and virtual patching, plus industrial application-control and IPS signatures. These controls support an existing FortiGate configuration and do not replace asset ownership, process-safety review or change approval.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard Security Services for OT; Fortinet 300E and 301E fast-path architecture.