Fortinet FortiGateRugged-30D Unified Protection Service Manual

1. Introduction and Overview

This manual provides essential information regarding the Fortinet FortiGateRugged-30D 1 Year Unified (UTM) Protection service, specifically the FC-10-R030D-950-02-12 license. This service offers comprehensive security solutions designed to protect against a wide range of cyber threats.

The Fortinet FortiGateRugged-30D is a robust security appliance, and this license ensures its continuous protection through FortiGuard security subscription services and FortiCare support services. These services provide dynamic protection based on the extensive research of the Fortinet Global Threat Research Team.

Figure 1.1: Representation of the Fortinet Activation Key for the Unified Protection Service.

2. Key Features and Benefits

The Fortinet Unified Protection Bundle extends threat protection across the entire digital attack surface, providing industry-leading defense against sophisticated attacks. Key benefits include:

• Comprehensive Threat Protection: Delivers global, proactive threat library for network, content, and application threats.
• Multi-Threat Security Research: Leverages intelligence from various security disciplines to protect against known and unknown threats.
• Broadest Protection: Incorporates feedback from a worldwide installed base and cooperation with major infrastructure vendors.
• Simplified Deployment: Offers "set and forget" functionality for easier deployment and management.
• Continuous Support: Includes dynamic FortiCare Support Services (8x5, 24x7, 360) ensuring ongoing assistance.
• Manufacturer Part: FC-10-R030D-950-02-12, ensuring authenticity and compatibility.

3. FortiCare Support Services

FortiCare services provide comprehensive technical support and hardware replacement options to ensure the continuous operation and security of your Fortinet devices. The service levels included are:

Figure 3.1: Overview of FortiCare Support Service Tiers.

3.1. FortiCare 8x5 Service

This service provides access to technical support via web portal, online chat, and telephone during business hours (8 hours a day, 5 days a week). It includes return and replace for hardware failures and allows for fast, written access to technical support requests.

3.2. FortiCare 24x7 Service

For mission-critical requirements, the 24x7 service offers round-the-clock access to technical support, 365 days a year. This tier also includes advanced replacement service for hardware failures, ensuring minimal downtime.

3.3. FortiCare 360 Service

FortiCare 360 is an advanced service offering proactive support. It includes all 24x7 services plus personalized monthly audit reports for your FortiGate and FortiWiFi appliances. This service actively monitors performance and security, providing recommendations to prevent disruptions and detect problems early.

3.4. FortiCare Premium RMA Service

Designed to minimize downtime, this service offers expedited hardware replacement options:

• Next-day Delivery: Parts delivered the day following RMA approval by Fortinet support.
• 4-Hour Courier: Parts delivered on-site within 4 hours of RMA approval by Fortinet support (24/7).
• 4-Hour On-site Engineer: Parts delivered on-site with an engineer within 4 hours of RMA approval by Fortinet support (24/7).

3.5. FortiCare Secure RMA Service

This service allows for non-return of an appliance for customers with strict rules and requirements for physical data protection.

Figure 3.2: Detailed diagram of FortiCare Support Services and RMA options.

4. FortiGuard Security Subscriptions

FortiGuard services provide continuous, automatic updates for various security functions, protecting against evolving cyber threats. The FortiGuard Labs team actively researches and develops protection against known and unknown threats, forming the basis of these subscription services.

Figure 4.1: General overview of FortiGuard Security Subscriptions.

4.1. Key Aspects of FortiGuard Subscriptions

• Up-to-the-minute Threat Intelligence: Real-time updates to stop the latest threats.
• Global Insight: Intelligence gathered from a global network of over three million sensors.
• Fast & Comprehensive Intelligence: Automated and advanced analytics, including machine learning and cross-discipline information.
• High Fidelity & Rigorous Processes: Robust back-end processes ensure accuracy.
• Proactive Threat Research: Prevention of exploitation of new avenues of attack.
• Proven Effectiveness: Achieved through commitment to independent, real-world testing.

4.2. FortiGuard Subscription Options

Figure 4.2: Detailed breakdown of various FortiGuard Subscription services.

• Next Generation Application Control and IPS

  Application control and intrusion prevention (IPS) are foundational security technologies for FortiGate firewalls. FortiGuard IPS blocks approximately 470,000 network intrusions, and new IPS signatures are created and deployed daily.

• Web Filtering

  FortiGuard Labs processes nearly 50 million URL categorization requests daily, blocking over 160,000 malicious websites. It provides granular control over web access.

• Antivirus

  FortiGuard Labs has identified and neutralized nearly 100,000 malware programs targeting traditional, mobile, and IoT platforms. It provides continuous updates for comprehensive virus protection.

• Web Application Security Service

  This service provides fully automated updates to protect your sensitive data and content from application-layer threats, including bots, suspicious URL patterns, and heuristic detection engines.

• Antispam

  A critical component of email security, FortiGuard Antispam detects unwanted and often malicious email with global spam filtering. It processes millions of new and updated spam rules weekly.

• Vulnerability Scan

  The FortiGuard Vulnerability Scan service helps FortiClient solutions accurately identify and manage the latest software vulnerabilities on endpoint devices, providing insights into OS and application vulnerabilities.

• Botnet IP and Domain Reputation

  Every minute of every day, FortiGuard Labs blocks approximately 32,000 botnet command & control communication attempts, preventing infected devices from communicating with command and control servers.

• Database Security Control

  FortiGuard's Database Security service offers centrally managed, enterprise-scale database protection for FortiDB. It provides updates against known exploits, configuration weaknesses, and other database-related threats.

• Mobile Security Service

  Protects your organization against attacks targeting your mobile platforms. FortiGuard Mobile Security service gives you the ability to create effective protection against the latest threats targeting mobile devices.

• Advanced Threat Protection (FortiSandbox Cloud)

  Thousands of organizations leverage FortiSandbox to identify advanced threats. FortiSandbox utilizes the full FortiGuard antivirus database, along with community reputation lookups, platform-independent code emulation, and virtual sandboxing to identify zero-day threats.

5. Setup and Activation

Activating your Fortinet Unified Protection service is a straightforward process. This license is a subscription contract for the FortiGateRugged-30D model.

5.1. Initial Activation

1. Locate Your Activation Key: The activation key is typically provided with your purchase, either physically or digitally.
2. Access FortiCare Portal: Navigate to the official FortiCare support portal (support.fortinet.com). You may need to create an account if you don't have one.
3. Register Your Product: Within the portal, find the "Product Registration" or "License Activation" section.
4. Enter Details: Input your FortiGateRugged-30D serial number and the provided activation key.
5. Confirm Activation: Follow the on-screen prompts to complete the activation. The system will link the Unified Protection service to your device.

5.2. Ensuring Service Continuity

Fortinet designed support and subscriptions to be continuous. It is crucial to renew your license before the expiration date to avoid any lapse in service. A lapse in the service period means your device will not receive the latest threat intelligence updates and support, potentially exposing it to new vulnerabilities.

6. Operating the Unified Protection Service

Once activated, the Unified Protection service operates largely in the background, providing continuous security updates and threat intelligence to your FortiGateRugged-30D device. Management of the service is primarily done through the FortiGate's web-based interface and the FortiCare portal.

6.1. Monitoring Security Status

• FortiGate Dashboard: Log in to your FortiGateRugged-30D's administrative interface. The dashboard provides an overview of security status, threat detections, and service update status.
• FortiCare Portal: The FortiCare portal allows you to view your license status, service expiration dates, and access support resources.

6.2. Automatic Updates

The FortiGuard services deliver continuous, automatic updates for antivirus, intrusion prevention, web filtering, and antispam. Ensure your FortiGate device has internet connectivity to receive these critical updates.

6.3. Utilizing Support Services

Should you encounter any issues or require technical assistance, refer to the FortiCare Support Services section (Section 3) for details on how to access support based on your subscription level.

7. Maintenance and Renewal

Maintaining your Fortinet Unified Protection service primarily involves ensuring timely renewals and monitoring service health.

7.1. License Renewal

To ensure uninterrupted protection, it is vital to renew your FortiGateRugged-30D Unified Protection license before its expiration date. Renewal can typically be done through your Fortinet reseller or directly via the Fortinet sales channels.

• Check Expiration: Regularly check the expiration date of your license via the FortiCare portal.
• Early Renewal: Consider renewing your license well in advance to avoid any service gaps.
• Lapse in Service: Be aware that a lapse in service means your device will no longer receive critical security updates, potentially compromising your network's security.

7.2. Monitoring Service Health

For FortiCare 360 subscribers, regular monthly audit reports provide insights into the health and performance of your FortiGate device, helping you proactively address potential issues.

8. Troubleshooting Common Issues

This section addresses common issues related to your Fortinet Unified Protection service. For more complex problems, always refer to Fortinet's official support channels.

8.1. Service Not Updating

• Check Internet Connectivity: Ensure your FortiGateRugged-30D has stable internet access to reach FortiGuard servers.
• Verify License Status: Log in to the FortiCare portal to confirm your license is active and not expired.
• DNS Resolution: Ensure your FortiGate can resolve FortiGuard domain names.
• Firewall Rules: Check if any local firewall rules on your FortiGate are blocking access to FortiGuard update servers.

8.2. Accessing Support

If you are unable to resolve an issue, contact Fortinet support using the methods outlined in Section 3 (FortiCare Support Services). Have your product serial number and a detailed description of the issue ready.

9. Specifications

This section provides technical specifications related to the Fortinet FortiGateRugged-30D Unified Protection service license.

10. Warranty and Support Information

This section summarizes the support and warranty aspects of your Fortinet Unified Protection service.

10.1. Service Coverage

The FC-10-R030D-950-02-12 license includes 1 year of Unified (UTM) Protection with 24x7 FortiCare support. This covers software updates, threat intelligence, and technical assistance as detailed in Section 3 (FortiCare Support Services) and Section 4 (FortiGuard Security Subscriptions).

10.2. Protection Plans (Optional)

Additional protection plans may be available for your FortiGate hardware, such as extended warranties. These are separate from the software subscription and provide coverage for the physical device.

• 4-Year Protection Plan: An optional plan for extended hardware coverage.
• Complete Protect: A monthly subscription plan that may cover eligible past and future purchases.

For details on these optional plans, please refer to your purchase documentation or contact your Fortinet reseller.

10.3. Return Policy

The standard return policy for this product is typically 30 days for refund/replacement, as per the vendor's terms. Please consult your purchase agreement for specific return conditions.