1. Introduction
This manual provides essential information for the activation and management of your Fortinet FortiGate-91E FortiGuard IPS License (FC-10-0091E-108-02-12). This license enables advanced Intrusion Prevention System (IPS) capabilities on your FortiGate-91E device, enhancing network security by detecting and preventing malicious activities.
The FortiGuard IPS service provides real-time threat intelligence updates, ensuring your network is protected against the latest known exploits and vulnerabilities.
Image: Fortinet FortiGate-91E FortiGuard IPS License product box, indicating an activation key.
2. Setup and Activation
To activate your FortiGuard IPS license, follow these steps:
- Access FortiGate Device: Log in to your FortiGate-91E device's web-based manager or CLI. Ensure your device has internet connectivity.
- Register Product: If your FortiGate device is not yet registered, navigate to the Fortinet Support website (support.fortinet.com) and register your FortiGate-91E using its serial number.
- Locate License Key: Find the activation key provided with your FortiGuard IPS license purchase. This is typically a string of alphanumeric characters.
- Apply License: In the FortiGate web-based manager, go to System > FortiGuard. Locate the IPS service section and click on "Update License" or "Enter License Key". Input the provided activation key.
- Verify Activation: After applying the license, the FortiGuard IPS service status should change to "Licensed" or "Active". Verify that the subscription expiry date is correctly updated.
- Update Definitions: Ensure your FortiGate device downloads the latest IPS definitions. This usually happens automatically, but you can manually trigger an update from the FortiGuard section.
For detailed instructions, refer to the official Fortinet documentation available on the Fortinet Support website.
3. Operating FortiGuard IPS
Once activated, FortiGuard IPS provides real-time protection against network-based threats. Key operational aspects include:
- IPS Profiles: IPS functionality is applied through IPS profiles, which are configured within security policies. You can create custom profiles to tailor protection levels for different traffic types or network segments.
- Signature Updates: The FortiGuard IPS service automatically delivers new threat signatures to your FortiGate device. Regular updates are crucial for maintaining effective protection against emerging threats.
- Monitoring: Monitor IPS activity through the FortiGate logs and reports. Navigate to Log & Report > Security Events > IPS to view detected and blocked threats.
- Policy Configuration: Ensure that your firewall policies have IPS inspection enabled for the traffic you wish to protect.
Image: Overview of FortiGuard Security Subscriptions, highlighting various threat intelligence services including IPS.
Image: Detailed breakdown of FortiGuard Subscription Options, including Next Generation Application Control and IPS, Antivirus, Antispam, Botnet IP and Domain Reputation, Mobile Security Service.
Image: Continuation of FortiGuard Subscription Options, detailing Web Filtering, Web Application Security Service, Vulnerability Scan, Database Security Control, and Advanced Threat Protection (FortiSandbox Cloud).
4. Maintenance
To ensure optimal performance and continued protection from your FortiGuard IPS license:
- License Renewal: Your FortiGuard IPS license is valid for a specific period (e.g., 1 year). Ensure timely renewal to avoid service interruption. The license expiry date can be checked in the FortiGate web-based manager under System > FortiGuard.
- Firmware Updates: Keep your FortiGate-91E device's firmware up to date. Firmware updates often include enhancements to security features and compatibility with the latest FortiGuard services.
- Regular Monitoring: Periodically review IPS logs and reports to identify any unusual activity or potential false positives that may require policy adjustments.
5. Troubleshooting
Common issues and their resolutions:
| Issue | Possible Cause | Resolution |
|---|---|---|
| IPS service shows "Expired" or "Not Licensed" | License has expired or was not applied correctly. | Verify license key and re-apply. Check expiry date. Purchase a new license if expired. |
| IPS definitions not updating | No internet connectivity, DNS issues, or FortiGuard server access problems. | Check network connectivity, DNS settings, and firewall rules allowing access to FortiGuard servers. Manually trigger update. |
| Unexpected network traffic blocked by IPS | Overly aggressive IPS profile or false positive detection. | Review IPS logs to identify the signature. Adjust IPS profile settings or create exceptions if it's a legitimate application. |
6. Specifications
This section outlines key specifications related to the FortiGuard IPS License for FortiGate-91E.
- Product: FortiGuard IPS License
- Applicable Device: FortiGate-91E
- Model Number: FC-10-0091E-108-02-12
- Service Duration: 1 Year (as per product title)
- Service Type: FortiGuard Security Service - Intrusion Prevention System (IPS)
- Manufacturer: FORTINET
- ASIN: B06XNK9777
- UPC: 619587345604
7. Support and Warranty
For technical assistance and support related to your Fortinet products and FortiGuard services, Fortinet offers various support options:
Image: Description of FortiCare 8x5 Service, providing access to technical support via web portal, online chat, and telephone during business hours.
Image: Description of FortiCare 24x7 Service, offering round-the-clock access to mission-critical support services and advanced replacement options.
Image: Diagram illustrating the FortiCare Support Services, including 8x5, 24x7, and 360° options, and their components like Service Operation, Service Strategies, Service Design, and Service Transition.
For detailed information on FortiCare support plans and warranty terms, please visit the official Fortinet Support website: support.fortinet.com.
This license is for a service and does not typically come with a hardware warranty. The warranty for the FortiGate-91E hardware device itself is separate and provided by Fortinet.
