FORTINET FC-10-F100F-175-02-12 FortiGate 100F Attack Surface Monitoring Subscription

FC-10-F100F-175-02-12 Procurement Check

FC-10-F100F-175-02-12 identifies the legacy per-FortiGate FortiGuard Attack Surface Monitoring subscription for an existing FortiGate 100F. It is an electronic security service; no firewall appliance, support contract or replacement hardware is included.

Authorized Term Evidence

The suffix 12 denotes a 12-month historical subscription term. Match the proposed start date to existing coverage, record the end date and do not assume that a legacy annual SKU remains directly orderable under the current catalog.

• Match token F100F, the exact FortiGate 100F serial and the FortiCare account.
• Confirm monitored networks, IoT inventory ownership and alert recipients.
• Record vulnerability disposition, due date and validation evidence for each actionable finding.
• Use an authorized quote to confirm the current SD-WAN bundle or legacy-renewal path.

Attack Surface Monitoring

Fortinet describes service code 175 as providing IoT detection, IoT vulnerability correlation and Security Rating updates. Those results support inventory and exposure governance; they do not patch a discovered device, guarantee complete asset discovery or replace the team responsible for remediation.

Fortinet's current Secure SD-WAN Ordering Guide states that the older individual Attack Surface SKU is no longer available a la carte as of January 2026 and is now delivered through the applicable SD-WAN Service Bundle. Treat this page as an exact legacy-entitlement and renewal-reference record. Confirm current eligibility and replacement path in an authorized quote before ordering.

Platform Operations

The platform token F100F maps the entitlement to a diskless campus and branch edge. List the 100F serial, LAN and WAN zones, FortiLink scope, HA state and external logging target. This is the diskless 100F, so IoT evidence retention depends on the configured central service.

Review discoveries with both network and facilities owners because campus IoT often crosses organizational boundaries. Each vulnerability correlation needs a device identity, physical or logical location, accountable owner and target date.

For the 100F, reconcile discovered cameras, printers, access-control panels and other shared devices with switch and facilities records. Decide whether remediation belongs to IT, security, a building contractor or the device vendor before assigning a deadline. Where immediate patching is impossible, document a restricted VLAN, allowed destinations and monitoring owner. Validate the fix from the central collector because this model has no onboard storage workflow. The annual review should measure fewer unknown assets and expired exceptions, not only the number of portal alerts.

Official sources: Fortinet Secure SD-WAN Ordering Guide; Fortinet 100F Series Data Sheet.