FORTINET FC-10-0091G-159-02-36 FortiGate 91G Services and Subscriptions

FC-10-0091G-159-02-36 Service Record

FC-10-0091G-159-02-36 is the OT-focused application, threat and virtual-patching definition subscription for supported FortiOS controls on one FortiGate 90G for 3 years. It is an FC service line for an already-owned device, not a physical FG or BDL order.

91G storage-bearing platform

Match exact SKU, serial, account, country, dates, prerequisites and supported FortiOS. Unlike the diskless 90G, the 91G has local storage; local retention still requires capacity monitoring, export policy, backup ownership and an approved media-disposition path.

Service acceptance procedure

Inventory industrial protocols, controllers, engineering workstations, maintenance windows and safety owners before enforcement. Validate definitions with representative traffic and approved rollback.

Local-to-external evidence reconciliation

Keep sanitized OT events externally under process-owner approval. Give each virtual patch an asset owner, vendor-remediation state, test result and expiry. A successful local lookup does not prove cloud ingestion, entitlement status or long-term retention.

Three-year evidence architecture

Define what remains on the 91G, what is exported, how long each record is retained and who can recover both stores. Capture a reproducible baseline before normal log rotation changes the initial evidence.

Capacity and health review

At each anniversary, compare generated volume, local utilization, disk health, dropped-event indicators and external ingestion. Correct retention assumptions before a capacity limit becomes an incident.

Midterm configuration custody

After account, administrator, site, certificate or major FortiOS changes, repeat a known-event retrieval and configuration recovery test. Keep a second authorized custodian.

Multi-year change ledger

Link entitlement amendments, tenant changes, storage alerts and retention-policy changes to their approved business reason. Retain before-and-after retrieval results, affected evidence dates and rollback owner so a later administrator can explain why the three-year baseline changed.

Closing-year transition

Fund the next entitlement or platform plan early enough to preserve local and external evidence continuity. Assign export, account-transfer and old-authorization owners.

What this order does not include

The line includes no appliance, asset-discovery project, physical segmentation, process-safety assessment, automatic remediation or compliance certification.

Official references

Fortinet Operational Technology Security Service documentation supports the service context. Fortinet's 90G Series data sheet distinguishes the storage-equipped 91G platform.