Industrial control systems and SCADA environments carry a category of risk that generic firewall subscriptions weren’t designed to see. Unpatched PLCs, proprietary protocols, and long-lived OT hardware create persistent exposure points. The FortiGate 201G 3-Year FortiGuard OT Security Service (FC-10-F2H1G-159-02-36) brings purpose-built OT intelligence to the FG-201G appliance for a three-year term, giving security teams the device visibility, vulnerability context, and protocol-level control that OT environments require.
What the OT Security Service covers
This subscription activates three core OT security capabilities on the FortiGate 201G:
- OT Device Detection: An actively maintained signature database identifies PLCs, HMIs, RTUs, SCADA servers, industrial controllers, and other operational assets on the network. Unknown devices are queried against FortiGuard servers for metadata and classification, so the asset inventory stays current without manual effort.
- OT Vulnerability Correlation and Virtual Patching: Detected device types are matched against known CVEs. Where a vulnerability applies, the FortiGate deploys a virtual patch through its IPS engine, blocking exploitation at the network level. This protects hardware that cannot be taken offline for firmware updates — no vendor coordination and no production downtime required. FortiGuard Labs maintains over 1,000 active virtual patch signatures for OT equipment.
- OT Application Control and IPS: Over 1,100 OT application signatures and more than 3,300 industrial protocol rules extend the FortiGate’s deep-packet inspection to industrial traffic. Modbus, DNP3, EtherNet/IP, PROFINET, IEC 104, BACnet, and other protocols become inspectable and policy-enforced, enabling granular control over what commands and traffic cross the IT/OT boundary.
OT dashboards and compliance-ready reporting are included, giving operations and security teams a shared view of OT risk posture integrated with the FortiGate’s standard logging and reporting interface.
Who deploys this service
The FortiGate 201G sits in mid-size and branch locations where OT and IT traffic converge on one device. The OT Security Service is the right add-on when that device is protecting environments such as:
- Manufacturing facilities running PLCs, HMIs, or robotics networks that require protocol-level segmentation
- Energy and utilities organizations with SCADA or DCS infrastructure subject to IEC 62443, NERC CIP, or NIS2 compliance requirements
- Transportation and building automation sites with distributed OT sensors and controllers
- Organizations that need OT-specific dashboards and audit-ready reports for internal or regulatory review
The FG-201G provides up to 9 Gbps IPS throughput and 6 Gbps Threat Protection throughput, so OT traffic inspection operates at full line rate without becoming a bottleneck on the production network.
Activation and delivery
The FortiGuard OT Security Service is delivered electronically. After your order is confirmed, DataCenter360.ca sends the license key by email within 0 to 1 business days. You register the key through the Fortinet Support Portal against the FortiGate 201G’s serial number. The service activates on that device immediately after registration, and the 3-year term runs from the activation date.
No physical shipment, no hardware changes. The subscription is tied to the specific FortiGate 201G unit by serial number and is not transferable between devices.
OT Security as a standalone add-on
Service code 159 is an à-la-carte subscription. The OT Security Service is not included in the ATP, UTP, or Enterprise Protection FortiGuard bundles. Organizations already running one of those bundles on the FG-201G can add this service on top to extend OT-specific coverage to their existing subscription set. For appliances without any active bundle, pairing OT Security with a FortiCare Premium subscription ensures the device also has firmware access and technical support throughout the 3-year term.
Buying from DataCenter360.ca
A 3-year term covers a common IT refresh cycle, keeping OT Security coverage aligned with typical network planning horizons without committing to a 5-year lock-in. DataCenter360.ca is a Fortinet Select Partner with the full FortiGuard service catalog in stock. If a shorter initial commitment fits better, the 1-year version is available as FC-10-F2H1G-159-02-12. For volume orders or multi-site deployments, contact DataCenter360.ca with the SKU and quantity for a custom quote.
Does the FortiGuard OT Security Service come included in the standard ATP, UTP, or Enterprise bundles?
No. The OT Security Service (service code 159) is sold as a separate à-la-carte subscription and is not part of any FortiGuard bundle tier. It is an additive service that works alongside whichever bundle is active on the FortiGate 201G.
Is this license delivered globally, or only to Canada?
The FortiGuard OT Security Service is an electronic subscription delivered to any country. DataCenter360.ca sends the registration key by email after your order is confirmed. The key is tied to the FortiGate 201G’s serial number, not to a geographic region.
How does virtual patching protect OT devices that cannot be updated regularly?
When the OT Security Service detects a device type with a known CVE, the FortiGate 201G deploys a virtual patch through its IPS policy. This blocks traffic patterns that would exploit the vulnerability at the network layer, protecting the unpatched device without requiring any change to the OT hardware or its firmware. FortiGuard Labs maintains over 1,000 OT virtual patch signatures, updated continuously over the subscription term.
Why choose a 3-year term rather than annual renewal?
A 3-year subscription reduces the per-year cost compared to renewing annually and eliminates the administrative overhead of tracking a yearly renewal date. For OT environments where the security posture needs to remain stable over a planning cycle, locking in 3 years also avoids any coverage gap that could occur if an annual renewal is missed or delayed.
Can the OT Security Service be added mid-contract to a FortiGate 201G already running other subscriptions?
Yes. The OT Security Service is independent of any existing FortiCare or FortiGuard subscription on the device. It can be added at any point and co-exists with other active subscriptions. The term begins on activation and does not need to align with existing subscription end dates, though aligning renewal dates simplifies administration.
