FORTINET FC-10-F6H0E-108-02-DD FortiGate 600E Intrusion Prevention Service

FC-10-F6H0E-108-02-DD IPS Identity

FC-10-F6H0E-108-02-DD is the FortiGuard Intrusion Prevention Service entitlement for one existing FortiGate 600E. It supplies IPS engine and signature updates; it does not include a firewall appliance, replacement hardware or managed policy operation.

Service Boundary

Fortinet identifies service code 108 as IPS. The service supports signature-based detection and protocol analysis for identifying and blocking malicious traffic, including malicious URL and botnet indicators used by IPS controls. It is distinct from antivirus, web filtering, hardware support and a managed SOC service.

Before registration, match the exact appliance serial and FortiCare account, then verify the installed FortiOS release, enabled IPS sensors, inspection mode and available capacity. Signature behavior and protocol coverage depend on the deployed configuration, not the order code alone.

Platform Inspection Plan

The platform token F6H0E maps this entitlement to a diskless E-series high-capacity firewall. Document the 600E serial, HA topology, high-capacity ingress and egress paths, IPS sensor bindings and external telemetry chain without borrowing 601E SSD assumptions.

Verify collector health before changing signatures, then apply updates to one policy group at a time. Compare IPS actions, throughput, latency and application errors against the baseline before expanding enforcement.

Close the change only when central evidence remains continuous, HA is synchronized and every material path passes an allowed-flow and blocked-threat test. Emergency bypasses require an exact destination, rollback time and named approver.

The diskless 600E requires a telemetry-first change record: prove collector ingestion and clock alignment before testing IPS actions. Use separate checkpoints for north-south application traffic, inter-zone flows and administrator access. A rise in dropped sessions must be correlated with a signature and policy rather than treated as generic capacity loss. The final record includes collector continuity, rollback evidence and confirmation that no local-drive procedure was falsely recorded.

Contract Evidence

The DD suffix does not state a fixed duration on this page. Preserve the authorized quote, exact start and end dates, co-termination terms, serial, account and registration region.

• Match F6H0E, the exact FortiGate 600E serial and FortiCare account.
• Inventory IPS sensors, protected policies, exceptions and logging destinations.
• Verify FortiOS compatibility, inspection capacity and overlapping bundle coverage.
• Retain allowed-flow, blocked-pattern and event-delivery acceptance evidence.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard IPS service; Fortinet 600E Series Data Sheet.