FORTINET FC-10-0500E-159-02-DD FortiGate 500E OT Security Subscription

FC-10-0500E-159-02-DD OT Security Identity

FC-10-0500E-159-02-DD is the FortiGuard OT Security entitlement for one existing FortiGate 500E. It is an electronic security subscription; no firewall appliance, controller, replacement hardware or managed operation is included.

Service Scope

Fortinet identifies service code 159 as OT Security. Its scope includes OT device identification, vulnerability correlation and virtual patching, plus industrial application-control and IPS signatures. These controls support an existing FortiGate configuration and do not replace asset ownership, process-safety review or change approval.

Before activation, match the exact serial and FortiCare account, verify the FortiOS release and confirm that required OT protocols and policy features are supported. Begin with passive visibility and a documented baseline before enabling enforcement in a production network.

Platform Workflow

The platform token 0500E maps to a diskless campus and light-industrial firewall. List the 500E serial, two 10Gb handoffs, facilities and OT segments, FortiLink scope, protocol sensors, HA peer and central collector.

Keep building systems, lab equipment, user devices and vendor maintenance traffic in separate policies. Discovery should begin passively before any blocking action is introduced.

Sample each material segment, verify asset identity and protocol action, and confirm central event arrival. Temporary vendor exceptions require a source, destination, time window and owner.

For the 500E, reconcile facilities controllers, lab instruments and normal campus clients as separate inventories. Use FortiLink and segment context to prevent a user device from being treated as an industrial asset. Vendor access receives a time-bounded source and destination rule rather than a general OT bypass. Verify both 10Gb handoffs and central events before moving from passive observation to blocking.

Contract Evidence

The DD suffix does not state a fixed duration here. Preserve the authorized quote, exact dates, co-termination terms, serial, account and registration region.

• Match 0500E, the exact FortiGate 500E serial and FortiCare account.
• Inventory OT assets, protocols, zones, vulnerabilities and vendor-access paths.
• Verify FortiOS support, passive baseline, logging and bundle overlap.
• Retain process-owner approval, test evidence, exceptions and rollback criteria.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard Security Services for OT; Fortinet 500E and 501E fast-path architecture.