FORTINET FC-10-0401E-159-02-DD Firewalls

FC-10-0401E-159-02-DD Industrial Security Record

FC-10-0401E-159-02-DD is the FortiGuard OT Security entitlement for one existing FortiGate 401E. It is an electronic security subscription; no firewall appliance, controller, replacement hardware or managed operation is included.

Installed Device Plan

The platform token 0401E maps to a storage-equipped mid-range OT edge. Capture the 401E serial, zone ownership, HA peer, SSD health, OT sensors, protected protocols and central export destination.

Use local history to investigate disputed asset classifications before changing policy. A virtual-patch exclusion must identify the exact asset, vulnerability, requester and review date.

Retest the process flow and controlled detection, then verify local logging, central export and HA behavior. Security and plant operations should independently approve closure.

Use the 401E local timeline to prove whether an asset classification or virtual patch caused the reported process change. Export the relevant window before adjusting policy and retain the exact vulnerability and asset identifier. The plant owner validates process behavior while security validates detection; the evidence owner confirms SSD health and export. All three approvals are required for a persistent exclusion.

Eligibility and Dates

Before activation, match the exact serial and FortiCare account, verify the FortiOS release and confirm that required OT protocols and policy features are supported. Begin with passive visibility and a documented baseline before enabling enforcement in a production network.

The DD suffix does not state a fixed duration here. Preserve the authorized quote, exact dates, co-termination terms, serial, account and registration region.

Code 159 Boundary

Fortinet identifies service code 159 as OT Security. Its scope includes OT device identification, vulnerability correlation and virtual patching, plus industrial application-control and IPS signatures. These controls support an existing FortiGate configuration and do not replace asset ownership, process-safety review or change approval.

• Match 0401E, the exact FortiGate 401E serial and FortiCare account.
• Inventory OT assets, protocols, zones, vulnerabilities and vendor-access paths.
• Verify FortiOS support, passive baseline, logging and bundle overlap.
• Retain process-owner approval, test evidence, exceptions and rollback criteria.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard Security Services for OT; Fortinet supported-model documentation.