FORTINET FC-10-GT71G-464-02-36 FortiAnalyzer Cloud with SOCaaS for FortiGate 71G - 3 Year

Three-Year SOCaaS Onboarding and Escalation Program

FC-10-GT71G-464-02-36 is the three-year -464 FortiAnalyzer Cloud subscription with SOC-as-a-Service for an eligible FortiGate 71G. Fortinet SOC analysts monitor forwarded security events, triage alerts and escalate confirmed threats. The customer remains responsible for business decisions, containment and recovery.

Prepare usable telemetry

Before onboarding, confirm that the FortiGate sends the required event and security logs to the associated FortiAnalyzer Cloud instance with accurate time, device identity and policy context. A managed analyst cannot validate activity that is missing, delayed or stripped of useful fields. Record normal daily volume and test visibility for priority controls.

Build the escalation matrix

Nominate primary and backup contacts for each severity, with reachable phone and email details, time zones and authority to initiate response. Define what evidence Fortinet should include, how a case enters the internal incident system and when legal, privacy or executive teams are notified.

Understand triage versus response

Not every alert visible in FortiAnalyzer Cloud is escalated; SOC analysts review findings and raise those that require customer attention after triage. Document who validates business impact, isolates systems, preserves evidence and closes the event. Do not treat the subscription as outsourced ownership of the complete incident lifecycle.

Onboarding acceptance

Verify the -464 contract, FortiCloud account, FortiAnalyzer Cloud instance, FortiGate 71G association and SOCaaS portal status. Run an agreed test or tabletop exercise to confirm notification routing, case content, acknowledgement and handoff. Retain the test result and contact matrix.

Three-year improvement cycle

Use the first phase to stabilize logging and escalation, the second to tune noisy controls and response playbooks, and the final phase to review service effectiveness before renewal. Measure confirmed escalations, acknowledgement time, telemetry gaps, false-positive drivers, unresolved actions and repeat incident patterns.

Commercial boundary

The SKU excludes FortiGate hardware, on-premises FortiAnalyzer, unlimited storage, forensic retainers and automatic remediation. Additional GB/day capacity may be required separately. Confirm PID, serial, account, region, service dates and current notification SLA before purchase.

Official Fortinet sources: SOCaaS service overview and FortiAnalyzer Cloud licensing.