OT environments often start a FortiGuard OT Security deployment with a one-year commitment — enough time to validate coverage, observe real detection events, and measure the value of OT-specific intelligence before locking in a longer term. The FortiGate 201G 1-Year FortiGuard OT Security Service (FC-10-F2H1G-159-02-12) activates the full OT Security feature set on the FG-201G appliance for a 12-month term, giving operations and security teams immediate visibility into industrial assets, protocol-level control, and network-side vulnerability compensation.
What the OT Security Service covers
This subscription activates three core OT security capabilities on the FortiGate 201G:
- OT Device Detection: An actively maintained signature database identifies PLCs, HMIs, RTUs, SCADA servers, industrial controllers, and other operational assets on the network. Unknown device types are queried against FortiGuard servers for metadata and classification, so the asset inventory updates without manual tracking.
- OT Vulnerability Correlation and Virtual Patching: Detected device types are matched against known CVEs. Where a vulnerability applies, the FortiGate deploys a virtual patch through its IPS engine, blocking exploitation at the network level. This protects hardware that cannot be taken offline for firmware updates, with no vendor coordination and no production downtime. FortiGuard Labs maintains over 1,000 active virtual patch signatures for OT equipment.
- OT Application Control and IPS: Over 1,100 OT application signatures and more than 3,300 industrial protocol rules extend deep-packet inspection to industrial traffic. Modbus, DNP3, EtherNet/IP, PROFINET, IEC 104, BACnet, and other protocols become inspectable and policy-enforced, enabling granular control over what commands and traffic cross the IT/OT boundary.
OT dashboards and compliance-ready reporting are included, giving operations and security teams a shared view of OT risk posture integrated with the FortiGate’s standard logging interface.
Who deploys this service
The FortiGate 201G targets mid-size and branch locations where OT and IT traffic converge on a single device. The OT Security Service makes the most sense when that device is protecting environments such as:
- Manufacturing facilities running PLCs, HMIs, or robotics networks that require protocol-level segmentation
- Energy and utilities sites with SCADA or DCS infrastructure subject to IEC 62443, NERC CIP, or NIS2 requirements
- Transportation and building automation deployments with distributed OT sensors and controllers
- Organizations evaluating OT-specific coverage before committing to a multi-year subscription term
The FG-201G delivers up to 9 Gbps IPS throughput and 6 Gbps Threat Protection throughput, so OT traffic inspection runs at full line rate without becoming a bottleneck.
Activation and delivery
The FortiGuard OT Security Service is delivered electronically. After your order is confirmed, DataCenter360.ca sends the license key by email within 0 to 1 business days. You register the key in the Fortinet Support Portal against the FortiGate 201G’s serial number, and the service activates immediately. The 1-year term begins from the activation date.
No physical shipment required. The subscription is tied to the specific FortiGate 201G unit by serial number and is not transferable between devices.
OT Security as a standalone add-on
Service code 159 is an à-la-carte subscription. The OT Security Service is not included in the ATP, UTP, or Enterprise Protection FortiGuard bundles. Organizations already running one of those bundles on the FG-201G can add this service on top to extend OT-specific coverage. For appliances without any active bundle, pairing this subscription with a FortiCare Premium plan ensures the device also has firmware access and technical support throughout the year.
Buying from DataCenter360.ca
A 1-year term is a practical choice for initial OT Security deployments or for sites on annual budget cycles. DataCenter360.ca is a Fortinet Select Partner stocking the full FortiGuard service catalog. If your planning horizon calls for a longer commitment, the 3-year (FC-10-F2H1G-159-02-36) and 5-year (FC-10-F2H1G-159-02-60) versions are available with a lower per-year cost. Contact DataCenter360.ca for volume pricing or multi-site orders.
Is the FortiGuard OT Security Service included in the ATP, UTP, or Enterprise bundles?
No. The OT Security Service (service code 159) is an à-la-carte subscription sold separately. It works alongside any FortiGuard bundle active on the FortiGate 201G but is not bundled within ATP, UTP, or Enterprise Protection tiers.
Can this license be delivered outside Canada?
Yes. The FortiGuard OT Security Service is an electronic subscription with worldwide delivery. DataCenter360.ca sends the registration key by email after order confirmation. The key activates against the FortiGate 201G serial number and is not restricted to any geographic region.
What does virtual patching do for OT devices that cannot be patched directly?
When the OT Security Service identifies a device with a known vulnerability, the FortiGate 201G deploys a virtual patch through its IPS policy. This blocks the specific traffic patterns that would exploit the CVE at the network level, protecting the asset without requiring changes to the OT hardware or its firmware. FortiGuard Labs maintains over 1,000 OT virtual patch signatures, updated continuously over the subscription term.
When does the 1-year term start?
The term begins on the date you activate the license key in the Fortinet Support Portal. It does not start from the purchase date. If you buy the key now and activate it a few weeks later, those weeks are not deducted from the 1-year coverage window.
Can OT Security be added to a FortiGate 201G that already has other active subscriptions?
Yes. The OT Security Service is independent of existing FortiCare or FortiGuard subscriptions. It can be applied at any time and co-exists with other active licenses. The 1-year term runs from activation and does not need to align with existing subscription end dates, though aligning renewals simplifies ongoing administration.
