FORTINET FC-10-GT71G-112-02-60 URL, DNS and Video Filtering for FortiGate 71G - 5 Year

Long-Term Web Governance with FC-10-GT71G-112-02-60

FC-10-GT71G-112-02-60 is the five-year filtering entitlement associated with FortiGate 71G. It suits a standardized branch estate that expects to retain the appliance and its acceptable-use framework over a long operating period.

Governance must outlive staff changes

For a multi-year commitment, store the business owner, security owner and exception approver for every major category policy. Define review dates, expiry for temporary overrides and evidence requirements for unblock requests. Preserve the entitlement certificate and registered serial in a controlled asset record so account ownership is not lost when administrators change.

Plan for changing classifications

FortiGuard ratings, application use and organizational policy will evolve during the service term. Establish a recurring sample review for newly categorized sites, recategorization requests, DNS false positives and video-channel exceptions. Track policy changes separately from automatic rating updates so an audit can explain why access changed.

Encrypted traffic and privacy boundary

Filtering depth depends on traffic path and inspection design. Record where certificate inspection or deep inspection is permitted, how privacy-sensitive groups are handled and which applications bypass decryption. Video filtering can require proxy-based policy and deep inspection; confirm model memory, FortiOS support and certificate deployment instead of assuming entitlement alone enables every mode.

Resilience and telemetry

Test behavior when FortiGuard rating services are unavailable and document local cache or fail-open/fail-closed expectations. Send web-filter and DNS-filter events to the approved analytics platform, apply retention controls and watch for sudden category-block spikes that may signal a policy error or compromised clients.

Five-year asset alignment

Before purchase, compare the subscription end date with the FortiGate 71G lifecycle, site lease, planned bandwidth and consolidation schedule. Confirm transfer or replacement rules in writing where an RMA or platform refresh is plausible. A longer term reduces renewal frequency but should not create stranded entitlement.

Commercial boundary

This PID does not include the FortiGate 71G, configuration labor, SSL certificates, FortiCare replacement or unrelated IPS and malware subscriptions. Obtain an exact quote tied to the intended serial, region and account before activation.

Official Fortinet sources: FortiGuard filtering operations, DNS-filter controls and video-filter mode and inspection requirements.