FORTINET FC-10-GT71G-112-02-36 URL, DNS and Video Filtering for FortiGate 71G - 3 Year

Three-Year Filtering Policy Rollout

FC-10-GT71G-112-02-36 identifies the three-year FortiGuard URL, DNS and Video Filtering service line for FortiGate 71G. It provides filtering entitlement; it is not a FortiGate appliance, physical media or a complete security-services bundle.

Separate the three control planes

Design web, DNS and video controls as related but distinct policies. Web filtering governs requested destinations and categories. DNS filtering can act earlier on domain requests and known botnet destinations. Supported video filtering adds criteria such as category, channel or metadata, but Fortinet documents inspection-mode and SSL deep-inspection dependencies that must be validated on the running FortiOS release.

Phased branch deployment

Use an initial monitor phase to learn which categories, domains and video channels are used by each business group. Move high-confidence malicious categories to block first, then introduce acceptable-use restrictions with an approved exception path. A three-year window supports rollout, stabilization and a later policy redesign checkpoint without annual entitlement procurement.

Decision precedence and user experience

Document what happens when DNS and web-filter results differ, which replacement message users receive and how encrypted traffic is handled. Fortinet notes that DNS filtering can take precedence when both controls are configured. Test browser behavior, certificate inspection, captive portals and business-critical software before broad enforcement.

Operational acceptance

Verify the eligible FortiGate 71G serial and Fortinet account, activate the entitlement, confirm rating-service reachability, assign the intended profiles and generate test events for allow, monitor and block actions. Capture the policy IDs, category overrides, logging destination and exception owner in the handover record.

Renewal checkpoint

Before the third-year boundary, review category accuracy, encrypted-DNS usage, video-control requirements, false positives and the appliance roadmap. Compare a renewal with a broader FortiGuard bundle if the branch now requires malware, IPS or additional security functions.

Official Fortinet sources: FortiGuard subscriptions ordering guide, DNS filtering guidance and video-filter requirements.