FORTINET FC-10-00603-159-02-DD FortiGate 600D OT Security Subscription

FC-10-00603-159-02-DD Industrial Security Record

FC-10-00603-159-02-DD is the FortiGuard OT Security entitlement for one existing FortiGate 600D. It is an electronic security subscription; no firewall appliance, controller, replacement hardware or managed operation is included.

Installed Device Plan

The platform token 00603 maps to a legacy data-center boundary. Inventory the 600D serial, HA state, plant-facing interfaces, industrial protocols, passive discovery sources and central OT event collector.

Use renewal to map every OT signature and exception into the funded successor design. Validate the installed FortiOS train and do not extend quote dates beyond the approved retirement window.

Test passive visibility first, then one controlled industrial-protocol policy. Retain baseline latency, allowed control traffic, blocked test evidence and the migration owner for every exception.

For a 600D, classify discovered assets as migration dependency, temporary legacy device or approved retirement candidate. Export protocol and virtual-patch exceptions into the successor policy workbook instead of renewing them blindly. Test during a production-approved window and record process latency, failover behavior and collector continuity. Any quote extending beyond the replacement milestone needs architecture and plant-owner approval.

Eligibility and Dates

Before activation, match the exact serial and FortiCare account, verify the FortiOS release and confirm that required OT protocols and policy features are supported. Begin with passive visibility and a documented baseline before enabling enforcement in a production network.

The DD suffix does not state a fixed duration here. Preserve the authorized quote, exact dates, co-termination terms, serial, account and registration region.

Code 159 Boundary

Fortinet identifies service code 159 as OT Security. Its scope includes OT device identification, vulnerability correlation and virtual patching, plus industrial application-control and IPS signatures. These controls support an existing FortiGate configuration and do not replace asset ownership, process-safety review or change approval.

• Match 00603, the exact FortiGate 600D serial and FortiCare account.
• Inventory OT assets, protocols, zones, vulnerabilities and vendor-access paths.
• Verify FortiOS support, passive baseline, logging and bundle overlap.
• Retain process-owner approval, test evidence, exceptions and rollback criteria.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard Security Services for OT; Fortinet 600D Information Supplement.