FORTINET FC-10-F6H1E-159-02-DD FortiGate 601E OT Security Subscription

FC-10-F6H1E-159-02-DD Entitlement Boundary

FC-10-F6H1E-159-02-DD is the FortiGuard OT Security entitlement for one existing FortiGate 601E. It is an electronic security subscription; no firewall appliance, controller, replacement hardware or managed operation is included.

Operational Context

The platform token F6H1E maps to a storage-equipped high-capacity OT perimeter. Inventory both SSDs, high-capacity plant handoffs, HA state, OT policy domains, local evidence and central export before activation.

Stage asset identification and virtual-patch changes by production area. High-impact exceptions require control-system, security and operations approval plus an explicit maintenance window.

Validate each critical handoff, deterministic latency, both evidence paths and HA synchronization before expanding policy. Storage custody and service entitlement are governed separately.

On the 601E, create separate baselines for each production area and retain them on both local storage and the central repository. Introduce virtual patches during area-specific maintenance windows, with control engineers watching process alarms. Do not propagate a rule to the next handoff until latency, asset visibility, SSD evidence and HA remain stable. Failed-drive handling follows the plant evidence policy and is not part of code 159.

What OT Security Covers

Fortinet identifies service code 159 as OT Security. Its scope includes OT device identification, vulnerability correlation and virtual patching, plus industrial application-control and IPS signatures. These controls support an existing FortiGate configuration and do not replace asset ownership, process-safety review or change approval.

Before activation, match the exact serial and FortiCare account, verify the FortiOS release and confirm that required OT protocols and policy features are supported. Begin with passive visibility and a documented baseline before enabling enforcement in a production network.

Commercial Record

The DD suffix does not state a fixed duration here. Preserve the authorized quote, exact dates, co-termination terms, serial, account and registration region.

• Match F6H1E, the exact FortiGate 601E serial and FortiCare account.
• Inventory OT assets, protocols, zones, vulnerabilities and vendor-access paths.
• Verify FortiOS support, passive baseline, logging and bundle overlap.
• Retain process-owner approval, test evidence, exceptions and rollback criteria.

Official sources: Fortinet FortiGuard Ordering Guide; FortiGuard Security Services for OT; Fortinet 600E Series Data Sheet.