Fortinet FortiGate 1801F OT Security Service, 5-Year (FC-10-F18F1-159-02-60)

Operational technology networks run protocols and devices that standard IT security signatures were never written for. The FortiGate 1801F 5-Year FortiGuard OT Security Service (FC-10-F18F1-159-02-60) closes that gap: it’s an à la carte subscription that layers OT-specific detection, vulnerability correlation, and industrial protocol IPS rules onto a FortiGate 1801F for a five-year term, with no hardware included.

What this service covers

FortiGuard OT Security is built and maintained by FortiGuard Labs specifically for industrial environments, and it ships as three coordinated capabilities on the FortiGate 1801F:

• OT device detection — an up-to-date OT device signature package that identifies and profiles the PLCs, RTUs, HMIs, and other industrial assets on the network, including metadata lookups against FortiGuard when local signatures don’t have a match.
• OT vulnerability correlation and virtual patching — maps known vulnerabilities to the specific OT devices detected, then lets the FortiGate apply a virtual patch through NAC and Virtual Patching policy so exposed equipment is shielded without waiting for a firmware update or maintenance window.
• OT application control and IPS — additional signatures written for industrial protocols and applications (SCADA, DNP3, Modbus, and similar), layered on top of the FortiGate’s existing Application Control and IPS profiles.

Fortinet backs this with over 2,400 virtual patches, 1,600+ recognized OT applications, and 3,500+ protocol rules purpose-built for ICS/SCADA traffic, a scope that general-purpose IT signature sets don’t reach.

Who needs this license

This service targets the FortiGate 1801F when it’s deployed at the edge of or inside an OT network: manufacturing plants, utilities, water treatment, oil and gas, transportation, and any converged IT/OT site where the 1801F’s 22 Gbps IPS throughput and NP7/CP9 acceleration are protecting both a corporate network segment and an industrial control system. It’s most relevant for security teams that already have IT-side FortiGuard coverage in place (IPS, AMP, web filtering) and need the OT layer added specifically because they’ve identified PLCs, RTUs, or SCADA traffic on a segment the 1801F inspects.

Activation and delivery

FC-10-F18F1-159-02-60 is a subscription license, not a physical shipment. Once the order is placed, DataCenter360.ca issues the entitlement electronically and it’s applied against the FortiGate 1801F’s serial number in the FortiCare account, typically same-day. There’s nothing to unbox and nothing that requires Canadian delivery: this is licensing, so it ships to any country. The five-year term locks in coverage and pricing through the full contract length, which is generally the most cost-effective path for a device that’s staying in production long-term.

One service vs. the bundle

OT Security is sold à la carte only; it isn’t rolled into the ATP, UTP, or Enterprise bundle matrix the way IPS, AMP, or URL filtering are. That means ordering it doesn’t replace those bundles, it stacks on top of whichever one the 1801F already runs. A site running the Enterprise bundle for broad AI/ML threat protection, DLP, and attack-surface visibility adds OT Security on top specifically for the industrial signature set and device correlation the bundle doesn’t include. If the 1801F isn’t running Enterprise, UTP, or ATP yet, it’s worth confirming FortiCare Premium support and a base FortiGuard bundle are active before adding an OT-only add-on, since OT Security assumes the underlying NGFW protections are already licensed.

Buying from DataCenter360.ca

DataCenter360.ca processes FortiGate licensing electronically as a Fortinet Select Partner, so a five-year OT Security term for the 1801F is issued and applied to the device’s FortiCare record without a shipping wait, regardless of where the buyer is located. For teams standardizing OT coverage across multiple 1801F units, or co-terming this with an existing Enterprise/UTP/ATP renewal date, reach out for a matched quote so every service on the device expires together.