FORTINET FC-10-GT71G-589-02-36 FortiGuard Data Loss Prevention for FortiGate 71G - 3 Year

Three-Year DLP Classification and Rollout Program

FC-10-GT71G-589-02-36 is a three-year FortiGuard Data Loss Prevention service entitlement for an eligible FortiGate 71G. Fortinet provides a managed database of predefined sensitive-data patterns; the organization must still decide where inspection is lawful, which events matter and how matches are handled.

Build a data inventory first

List the regulated and business-critical information that can cross the FortiGate, such as payment data, tax identifiers, personal records and internal confidential formats. Map each data class to owners, permitted destinations, business exceptions and retention requirements. Do not enable broad blocking before this inventory exists.

Move through monitor, tune and enforce

Start selected DLP sensors in a logging or monitoring posture. Sample events with data owners, remove expected business traffic and adjust thresholds or dictionaries. Introduce blocking or quarantine only for well-understood high-confidence cases, with an approved exception and escalation process.

Account for encrypted traffic

DLP can evaluate content only where the FortiGate is able and authorized to inspect it. Document certificate deployment, privacy exclusions, unsupported applications and traffic that bypasses inspection. A valid subscription does not make opaque traffic visible or replace legal review.

Three-year milestones

Use the first phase for data discovery and baseline collection, the second for targeted enforcement, and the final phase for control-effectiveness review. Track true and false positives, blocked transfers, unresolved incidents, policy exceptions and the percentage of relevant egress traffic actually inspected.

Incident workflow

Define who validates a match, contacts the user, preserves evidence and decides whether an event is accidental, malicious or a policy-design error. Limit sensitive content in logs to what is necessary and permitted. Test notification and rollback before changing a production rule from monitor to block.

Order and activation checks

Confirm the exact PID, FortiGate 71G serial, Fortinet account, supported FortiOS release, service start date, region and existing entitlement. This line excludes the appliance, data-classification consulting, policy implementation and a guarantee that every proprietary file or cloud application can be inspected.

Official Fortinet sources: FortiGuard DLP Service overview and FortiOS DLP administration guide.