FORTINET FC-10-F50G5-159-02-12 FortiGate 50G-5G Services and Subscriptions

One-Year OT Visibility and Protection Pilot for FortiGate 50G-5G

FC-10-F50G5-159-02-12 is a 12-month FortiGuard OT Security entitlement for one eligible FortiGate 50G-5G. Fortinet associates this service family with OT device detection, industrial protocol intelligence, vulnerability correlation and virtual-patching capabilities. It is an electronic service line; it does not supply the firewall, industrial sensors, engineering assessment or cellular airtime.

Start with passive plant evidence

Inventory controllers, HMIs, engineering stations, historians, gateways and industrial protocols visible through the intended FortiGate policies. Compare observed devices with the engineering asset register. Use an observation period before blocking because unusual commands may be legitimate process activity.

Validate both connectivity paths

Where the 50G-5G supports a remote site, record whether OT management or telemetry can move over cellular failover. Confirm service registration, FortiOS eligibility, signature updates and logging on primary and backup paths. A transport change must not create an undocumented inspection or remote-access bypass.

Operate virtual patches as temporary controls

For every correlated vulnerability, record the affected asset, vendor advisory, compensating signature, enforcement point, test result, owner and planned permanent remediation. Involve plant engineering in changes that may affect availability or safety-adjacent processes.

First-year decision

Measure asset-identification accuracy, protocol coverage, open vulnerabilities, enforced virtual patches, false positives and unsupported traffic. Before expiry, decide whether to renew, expand segmentation or choose another monitoring control. Hardware, general IPS, malware services, FortiCare and RMA remain separate.

Official Fortinet sources: Operational Technology ordering guide and FortiGuard OT Security.