FORTINET FC-10-F6H1E-108-02-DD FortiGate 601E Intrusion Prevention Service

FC-10-F6H1E-108-02-DD Entitlement Boundary

FC-10-F6H1E-108-02-DD is the FortiGuard Intrusion Prevention Service entitlement for one existing FortiGate 601E. It supplies IPS engine and signature updates; it does not include a firewall appliance, replacement hardware or managed policy operation.

Operational Asset

The platform token F6H1E maps this entitlement to a storage-equipped E-series high-capacity firewall. Inventory both SSDs, high-capacity handoffs, HA state, IPS sensors, protected applications and central export before changing inspection.

Stage signature and protocol-decoder changes by policy domain because a single 601E may protect many downstream networks. Capture a local event baseline and export checksum before broad enforcement changes.

Validate each critical handoff, both local and central evidence, HA synchronization and application response. Keep failed-media custody separate from the electronic IPS entitlement if hardware diagnostics reveal a storage issue.

On the 601E, retain a local event snapshot for every staged policy domain and compare it with the central copy after the maintenance window. Separate signature false-positive review from SSD or export health so one issue cannot conceal another. High-impact exclusions require both application and security approval, an expiry and a compensating detection path. Expansion to the next handoff occurs only after throughput, event completeness and HA state remain within the agreed baseline.

What IPS Covers

Fortinet identifies service code 108 as IPS. The service supports signature-based detection and protocol analysis for identifying and blocking malicious traffic, including malicious URL and botnet indicators used by IPS controls. It is distinct from antivirus, web filtering, hardware support and a managed SOC service.

Before registration, match the exact appliance serial and FortiCare account, then verify the installed FortiOS release, enabled IPS sensors, inspection mode and available capacity. Signature behavior and protocol coverage depend on the deployed configuration, not the order code alone.

Commercial Record

The DD suffix does not state a fixed duration on this page. Preserve the authorized quote, exact start and end dates, co-termination terms, serial, account and registration region.

• Match F6H1E, the exact FortiGate 601E serial and FortiCare account.
• Inventory IPS sensors, protected policies, exceptions and logging destinations.
• Verify FortiOS compatibility, inspection capacity and overlapping bundle coverage.
• Retain allowed-flow, blocked-pattern and event-delivery acceptance evidence.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard IPS service; Fortinet 600E Series Data Sheet.