Malware defense on a busy perimeter firewall is only as current as the intelligence behind it. The FC-10-0400E-100-02-12 keeps the FortiGate 400E’s file-scanning and traffic-analysis engines connected to FortiGuard Labs for 12 months, covering everything from conventional virus signatures to AI-generated evasion techniques the device would otherwise miss.
What the Advanced Malware Protection Service Covers
This 1-year subscription activates the full AMP service stack on the FortiGate 400E:
- Antivirus (AV) with AI-based Heuristics — Scans files in transit using both signature-based detection and AI/ML models that identify unknown malware variants by behavior and structure, not just known signatures.
- Mobile Malware Detection — Identifies and blocks malicious APKs, iOS payloads, and other mobile-platform threats passing through the firewall, covering BYOD and mobile-heavy environments.
- Botnet Domain Blocking — Blocks DNS resolution and TCP sessions to confirmed command-and-control (C2) domains, severing malware callbacks before exfiltration can start.
- Virus Outbreak Protection — Cross-checks file hashes against a real-time outbreak database for files not yet covered by a full AV signature, bridging the gap during active campaigns.
- Content Disarm & Reconstruct (CDR) — Strips potentially malicious active content (macros, embedded objects, JavaScript) from documents and reconstructs a clean version for delivery, neutralizing weaponized Office and PDF files.
- FortiGate Cloud Sandbox — Detonates suspicious files in an isolated cloud environment for deep behavioral analysis. Zero-day and novel threats that pass static inspection are submitted for dynamic execution and verdict.
All intelligence feeds are delivered as continuous cloud updates from FortiGuard Labs, so the AMP engines on the FortiGate 400E stay current without manual signature imports.
Who Purchases This License
The FC-10-0400E-100-02-12 is the right fit for organizations running a FortiGate 400E (or 401E / 401E-DC) that need file-layer threat prevention and sandbox analysis without purchasing a full multi-service bundle. Typical buyers:
- Security teams that have already licensed IPS and web filtering separately and want to co-term AMP on a matching 1-year cycle
- Mid-enterprise environments where antivirus inspection and cloud sandbox detonation are the primary security requirements for the perimeter firewall
- Organizations migrating from a third-party AV gateway and consolidating file inspection onto the FortiGate 400E platform
- IT departments co-terming individual FortiGuard services to align renewal dates with an existing FortiCare contract
Activation and Delivery
No hardware ships with this license. After purchase, a Fortinet contract registration key is delivered electronically. Register it against the FortiGate 400E serial number through the FortiCare Support Portal at support.fortinet.com. FortiOS activates the FortiGuard AMP feed within minutes of registration. The term begins on the registration date, or co-terms with an existing contract when aligned to a FortiCare quote ID generated through Fortinet’s channel portal.
Delivery is worldwide and is completed within 0–1 business days of order confirmation.
This Service vs. a Full Bundle
Advanced Malware Protection is included in all three FortiGuard subscription bundles for the FortiGate 400E. Purchasing it individually gives you AMP coverage only. If the device also needs IPS, URL/DNS filtering, or application control, the UTP bundle (FC-10-0400E-950-02-12) packages all of those services together with FortiCare Premium at a substantially lower per-service cost than à-la-carte licensing. The Enterprise bundle (FC-10-0400E-809-02-12) extends to DLP, inline CASB, and attack surface security for environments with data-layer and SaaS-layer compliance requirements.
| FortiGuard Service |
AMP Only (this SKU) |
UTP Bundle |
Enterprise Bundle |
| Antivirus with AI-based Heuristics |
✓ |
✓ |
✓ |
| Mobile Malware Detection |
✓ |
✓ |
✓ |
| Botnet Domain Blocking |
✓ |
✓ |
✓ |
| Content Disarm & Reconstruct (CDR) |
✓ |
✓ |
✓ |
| FortiGate Cloud Sandbox |
✓ |
✓ |
✓ |
| Intrusion Prevention System (IPS) |
— |
✓ |
✓ |
| URL, DNS & Video Filtering |
— |
✓ |
✓ |
| Anti-Botnet & C2 Service |
— |
✓ |
✓ |
| DLP & Inline CASB |
— |
— |
✓ |
| Attack Surface Security & IoT Detection |
— |
— |
✓ |
| FortiCare Premium Support |
— |
✓ |
✓ |
Buying from DataCenter360.ca
DataCenter360.ca is an authorized Fortinet Select Partner. The FC-10-0400E-100-02-12 is listed at the current price shown, with no hidden fees. Orders placed during business hours are processed the same day, and license keys are delivered electronically to customers worldwide. If you need a formal quote, want to co-term AMP with an active FortiCare contract, or are evaluating whether the UTP bundle makes more sense for your environment, contact us and we will turn around a comparison and pricing within one business day.
Does this AMP license include FortiCare support for the FortiGate 400E?
No. FC-10-0400E-100-02-12 covers FortiGuard Advanced Malware Protection intelligence only — antivirus, mobile malware, CDR, cloud sandbox, and botnet domains. FortiCare Premium support (FC-10-0400E-247-02-12) must be active separately to receive firmware updates and Fortinet TAC assistance. Both can be co-termed through a Fortinet channel quote.
Is this license compatible with the FortiGate 401E and 401E-DC?
Yes. The FC-10-0400E license family applies to the full FortiGate 400E hardware series: FG-400E, FG-401E, and FG-401E-DC. Fortinet binds the subscription to the device serial number at registration through the FortiCare portal, not to the specific variant listed on the order.
Can this subscription be delivered and registered outside of Canada?
Yes. This is a software license with no physical shipment. Fortinet contract keys are registered through the FortiCare portal and activate on any registered FortiGate device worldwide. DataCenter360.ca delivers keys electronically to customers in any country, typically within 0–1 business days.
What happens to malware scanning when the 1-year term expires?
When the AMP subscription lapses, FortiOS stops receiving FortiGuard signature and threat intelligence updates for antivirus, mobile malware, botnet domain blocking, and cloud sandbox. The FortiGate 400E continues operating as a firewall and routing appliance, but file-layer and behavioral threat detection go offline. Renewing before expiry avoids any coverage gap; co-terming through a FortiCare quote aligns the renewal date automatically.
At what point does the UTP bundle make more economic sense than AMP alone?
If the FortiGate 400E also needs intrusion prevention, URL and DNS filtering, and application control, the UTP bundle (FC-10-0400E-950-02-12) packages those services alongside AMP and FortiCare Premium. The per-service cost of the bundle is substantially lower than purchasing each service à la carte. The Enterprise bundle (FC-10-0400E-809-02-12) adds DLP, inline CASB, and attack surface security for environments that require data-loss protection and SaaS visibility as well.