FORTINET FC-10-00603-108-02-DD FortiGate 600D Intrusion Prevention Service

FC-10-00603-108-02-DD Intrusion Prevention Record

FC-10-00603-108-02-DD is the FortiGuard Intrusion Prevention Service entitlement for one existing FortiGate 600D. It supplies IPS engine and signature updates; it does not include a firewall appliance, replacement hardware or managed policy operation.

Installed Device Workflow

The platform token 00603 maps this entitlement to a legacy D-series data-center firewall. Map every protected interface, HA role, inspected protocol and external log target before renewing IPS on this aging platform.

Use the IPS review to retire obsolete signatures and exceptions instead of carrying them into a replacement design. Validate the installed FortiOS train and confirm the quote term does not extend beyond the approved 600D retirement date.

Test one representative server flow and one blocked exploit pattern, then compare policy hits, latency and central logs with the pre-change baseline. Record any performance-driven exception with an owner and migration deadline.

For 600D renewal governance, export the active sensor list and classify every override as a legacy application dependency, temporary incident measure or unsupported protocol. Map retained exceptions to the successor firewall design and assign a removal milestone. Review CPU and session headroom during representative load because an old policy may fail operationally even when its signatures are current. Architecture approval is required when service dates extend beyond the funded migration window.

Eligibility and Dates

Before registration, match the exact appliance serial and FortiCare account, then verify the installed FortiOS release, enabled IPS sensors, inspection mode and available capacity. Signature behavior and protocol coverage depend on the deployed configuration, not the order code alone.

The DD suffix does not state a fixed duration on this page. Preserve the authorized quote, exact start and end dates, co-termination terms, serial, account and registration region.

Included Security Function

Fortinet identifies service code 108 as IPS. The service supports signature-based detection and protocol analysis for identifying and blocking malicious traffic, including malicious URL and botnet indicators used by IPS controls. It is distinct from antivirus, web filtering, hardware support and a managed SOC service.

• Match 00603, the exact FortiGate 600D serial and FortiCare account.
• Inventory IPS sensors, protected policies, exceptions and logging destinations.
• Verify FortiOS compatibility, inspection capacity and overlapping bundle coverage.
• Retain allowed-flow, blocked-pattern and event-delivery acceptance evidence.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard IPS service; Fortinet 600D Information Supplement.