FORTINET FC-10-F6H0E-159-02-DD FortiGate 600E OT Security Subscription

FC-10-F6H0E-159-02-DD OT Security Identity

FC-10-F6H0E-159-02-DD is the FortiGuard OT Security entitlement for one existing FortiGate 600E. It is an electronic security subscription; no firewall appliance, controller, replacement hardware or managed operation is included.

Service Scope

Fortinet identifies service code 159 as OT Security. Its scope includes OT device identification, vulnerability correlation and virtual patching, plus industrial application-control and IPS signatures. These controls support an existing FortiGate configuration and do not replace asset ownership, process-safety review or change approval.

Before activation, match the exact serial and FortiCare account, verify the FortiOS release and confirm that required OT protocols and policy features are supported. Begin with passive visibility and a documented baseline before enabling enforcement in a production network.

Platform Workflow

The platform token F6H0E maps to a diskless high-capacity OT perimeter. Document the 600E serial, HA topology, production handoffs, industrial protocol paths and external telemetry chain without importing 601E SSD assumptions.

Prove collector health and clock alignment before enabling new OT detections. Apply controls to one production path at a time and compare latency, retransmissions and process alarms with baseline.

Close only after central evidence remains continuous, HA is stable and control traffic passes the approved test. Emergency bypasses need an exact asset pair and rollback time.

The diskless 600E depends on continuous external evidence, so test collector backlog, timestamps and network reachability before policy work. Introduce discovery on one handoff, reconcile assets with the control-system owner, and only then stage enforcement. Compare cycle time, retransmission and alarm behavior with the approved baseline. Final acceptance explicitly states that no local SSD evidence or media-return step applies.

Contract Evidence

The DD suffix does not state a fixed duration here. Preserve the authorized quote, exact dates, co-termination terms, serial, account and registration region.

• Match F6H0E, the exact FortiGate 600E serial and FortiCare account.
• Inventory OT assets, protocols, zones, vulnerabilities and vendor-access paths.
• Verify FortiOS support, passive baseline, logging and bundle overlap.
• Retain process-owner approval, test evidence, exceptions and rollback criteria.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard Security Services for OT; Fortinet 600E Series Data Sheet.