Fortinet FortiGate 1001F FortiGuard OT Security Service, 3-Year (FC-10-F1K1F-159-02-36)

A FortiGate 1001F guarding an IT/OT boundary sees plenty of firewall traffic, but general IPS and AV signatures were not built to recognize a PLC, an RTU, or a SCADA historian. The FortiGate 1001F 3-Year FortiGuard OT Security Service (FC-10-F1K1F-159-02-36) closes that gap for three years: OT device detection, vulnerability correlation with virtual patching, and application/protocol-aware IPS signatures purpose-built for industrial traffic. It is a subscription only, no hardware included, delivered electronically to any country.

What this service covers

FortiGuard OT Security is sold à la carte, separate from the UTP, ATP, and Enterprise bundles. Activated on a FortiGate 1001F, the 3-year term keeps these features current:

• OT device detection: signature updates that identify industrial devices on the network and surface their metadata, giving the firewall visibility into PLCs, RTUs, HMIs, and similar OT assets it can see on the wire.
• OT vulnerability correlation and virtual patching: matches known vulnerabilities to detected OT devices and applies a virtual patch at the FortiGate, containing exploit attempts against equipment that cannot simply be rebooted or firmware-updated on an IT schedule.
• OT application control and IPS: additional signatures written for industrial protocols and applications, so policy can enforce which OT traffic is allowed instead of relying on generic IT rule sets.
• OT dashboards and compliance reporting: reporting views tailored to OT operators and auditors, kept separate from the standard IT security dashboards.

FortiGuard Labs updates the OT device and vulnerability signature sets as new industrial protocols and CVEs surface, so the 3-year term stays current without manual signature management.

Who needs it

This license fits a FortiGate 1001F positioned at the IT/OT boundary or inline with SCADA, manufacturing, energy, or building-automation traffic, where an existing FortiGuard bundle already covers general IPS, AV, and web filtering but does not classify or protect the OT-specific assets behind it. Utilities, manufacturers, and critical-infrastructure operators are the usual buyers. A FortiGate 1001F with no OT segment behind it has no use for this service.

Activation and delivery

The license is issued electronically and tied to a specific FortiGate 1001F by serial number. Once activated, OT device signatures, vulnerability correlation data, and industrial-protocol IPS updates push to the unit for the full 3-year term. Nothing ships physically, and a licensed FortiGate 1001F must already be deployed before the subscription can be applied to it.

One service vs. the bundle

OT Security stands outside the UTP, ATP, and Enterprise subscription bundles for the FortiGate 1001F, so this license adds a distinct capability rather than duplicating what a bundle already provides. If the 1001F still needs general network, file, and web protection, the Enterprise subscription (FC-10-F1K1F-809-02-36) or UTP subscription (FC-10-F1K1F-950-02-36) covers that layer at the same 3-year term, with OT Security layered on top for the industrial-facing traffic.

Buying from DataCenter360.ca

Our team works with OT and critical-infrastructure customers across regions and can help match term length to an existing FortiCare renewal cycle, or confirm whether this service or a broader bundle is the right fit before you order. DataCenter360.ca is an authorized Fortinet Select Partner; every license is issued directly from Fortinet, and checkout is fully secured.