Intelligent Security. Without Compromise.
AI-powered protection and high-performance networking unified through FortiGate NGFW and FortiGuard Security Services.
Available Packages
FortiGuard AI-Powered Security Bundles
FortiGuard Security Bundles offer a curated set of advanced, AI-driven services designed to defend against known, unknown, zero-day, and emerging threats across your network, users, applications, and devices.
These bundles protect your environment from:
Malicious content and file-based attacks
Web-based threats and risky applications
IT, OT, and IoT vulnerabilities
Internal lateral movement and east-west breaches
Advanced Threat Protection
Delivers AI-powered defense against both network- and file-based threats, ensuring deep protection across your infrastructure.
Includes:
Intrusion Prevention (IPS)
Anti-Malware (Antivirus + Cloud Sandbox)
Application Control
FortiCare Premium Support
Ideal for data centers and IPS replacement scenarios where advanced threat visibility and control are critical.
Data Center Firewalls
Protect north-south traffic flowing into and out of your data center with high-performance, AI-driven security. FortiGate firewalls ensure low latency, deep inspection, and scalable protection for business-critical environments.
Internal Segmentation Firewalls (ISFW)
Secure east-west traffic between internal users, applications, and workloads to prevent lateral movement of threats. FortiGate ISFWs deliver microsegmentation, visibility, and control across your internal network supporting zero trust architecture and compliance.
IPS Replacements
Enhance or replace legacy intrusion prevention systems with advanced IPS that defends against both network- and file-based threats. FortiGuard-powered IPS delivers real-time threat detection, signature-based protection, and seamless integration into your NGFW strategy.
Unified Threat Protection (UTP) Bundle
The UTP bundle enhances the Advanced Threat Protection (ATP) offering with advanced web security providing stronger defense against web-borne threats, including DNS-level attacks and command-and-control (C2) communications.
Includes:
All ATP Bundle features
DNS Filtering
URL Filtering
Video Filtering
Anti-Botnet & C2 Communications Protection
Ideal for organizations seeking robust internet security at the edge, protecting users from modern threats across web, DNS, and command channels.
Edge Firewalls
Protect users and applications with direct internet access using FortiGate NGFW + UTP or Enterprise Protection bundles.
Data Center Firewalls
Secure north-south traffic and critical apps with ZTNA, threat inspection, and deep visibility. Best deployed with Enterprise Protection bundles.
SASE
Extend security to cloud-delivered infrastructure with Fortinet’s SASE-ready solutions, protected by UTP or Enterprise bundles for DNS, botnet, and content-layer control.
Enterprise Protection Bundle
The Enterprise Protection bundle delivers the most comprehensive value for organizations with complex environments, expanding upon the Unified Threat Protection (UTP) bundle with enhanced security for SaaS, data, IoT, and the entire attack surface.
This bundle includes AI-driven inline malware prevention and advanced tools to help enterprises detect, assess, and respond to emerging threats — while ensuring full visibility and control across hybrid networks.
Includes:
All features in the UTP Bundle
Cloud Access Security Broker (CASB) for SaaS application control
Data Loss Prevention (DLP) for sensitive information protection
IoT Detection & Vulnerability Correlation
AI-Based Inline Malware Prevention
Attack Surface Monitoring & Risk Scoring
Designed for enterprises requiring high-assurance, scalable protection across users, apps, devices, and infrastructure.
Regulatory Compliance
Ensure compliance across headquarters, branch offices, and campus environments with built-in security controls that align with regulatory frameworks like HIPAA, PCI-DSS, GDPR, and CIPA.
SD-WAN Requirements
Meet strict compliance and data protection mandates with Fortinet’s secure SD-WAN solutions integrated with FortiGuard AI-powered threat protection, encrypted traffic inspection, and application-aware routing.
Comparing Bundles
| FortiGuard Security Services | Available A La Carte | Advanced Threat Protection | Unified Threat Protection | Enterprise Protection |
|---|---|---|---|---|
| Intrusion Prevention System (IPS) | ✔ | ✔ | ✔ | ✔ |
| Advanced Malware Protection (AMP) | ✔ | ✔ | ✔ | ✔ |
| Antivirus | ✔ | ✔ | ✔ | ✔ |
| Botnet | ✔ | ✔ | ✔ | ✔ |
| Mobile Malware | ✔ | ✔ | ✔ | ✔ |
| Outbreak Prevention | ✔ | ✔ | ✔ | ✔ |
| Sandbox SaaS (detection only) | ✔ | ✔ | ✔ | ✔ |
| AI-based Inline Malware Prevention | ✔ | ✔ | ||
| Web Security | ✔ | ✔ | ✔ | |
| Web and Content Filtering | ✔ | ✔ | ✔ | |
| Secure DNS Filtering | ✔ | ✔ | ✔ | |
| Video Filtering | ✔ | ✔ | ✔ | |
| Attack Surface Security Rating | ✔ | ✔ | ||
| IoT Security | ✔ | ✔ | ||
| Security Self-check | ✔ | ✔ | ||
| Inline SaaS Application Security (CASB) | ✔ | ✔ | ✔ | ✔ |
| Data Loss Prevention | ✔ | ✔ | ||
| OT Security | ✔ | |||
| OT Device Detection | ✔ | |||
| OT Virtual Patching | ✔ | |||
| OT Industrial Signature | ✔ | |||
| SD-WAN and SASE Services | Available A La Carte | Advanced Threat Protection | Unified Threat Protection | Enterprise Protection |
| SD-WAN Underlay Bandwidth and Quality Monitoring | ✔ | |||
| SD-WAN Overlay Orchestration Management | ✔ | |||
| SD-WAN Connector for SASE Secure Private Access | ✔ | |||
| SASE for FortiGate (including 10 Mbps) | ✔ | |||
| NOC and SOC Services | Available A La Carte | Advanced Threat Protection | Unified Threat Protection | Enterprise Protection |
| FortiConverter | ✔ | ✔ | ||
| FortiManager Cloud | ✔ | |||
| FortiAnalyzer Cloud | ✔ | |||
| Indicator of Compromise Detection | ✔ | |||
| Outbreak Alerts | ✔ | |||
| Managed FortiGate (NOC) | ✔ | |||
| SOC-as-a-service | ✔ |
Available FortiCare Support
| FortiCare Included Features | Per-device Service Options | |
|---|---|---|
| FortiCare Premium (included) | FortiCare Elite (upgrade) | |
| RMA | Advanced replacement (PRMA available) | Advanced replacement (PRMA available) |
| Web Support | ✓ | ✓ |
| Telephone Support | ✓ | ✓ |
| Firmware Updates | ✓ | ✓ |
| Asset Management Portal | ✓ | ✓ |
| Response Time (critical issue) | 1 hour | 15 mins |
| Response Time (non-critical issue) | Next business day | 2 business hours |
| Extended End-of-Engineering-Support (E-EoES) for Long Term Supported Firmware (LTS) of 18 months* | — | ✓ |
| Device Insights and Monitoring Portal (FortiCare Elite Portal) | — | ✓ |
FortiGuard AI-Powered Security Services
FortiGuard Labs is Fortinet’s global cybersecurity intelligence and research division a team of elite threat hunters, engineers, analysts, and data scientists dedicated to staying ahead of the threat landscape.
Their expertise powers FortiGuard Security Services, delivering:
Inline Malware Prevention
Intrusion Prevention System (IPS)
Data Loss Prevention (DLP)
Advanced Threat Intelligence
AI-Driven Analysis & Automation
FortiGuard Antivirus Service
Real-time protection against viruses, ransomware, and polymorphic malware, powered by FortiGuard Labs. Blocks known and emerging threats across email, web, and endpoints.
FortiGuard AI-Based Inline Malware Prevention
Uses AI-powered real-time file inspection to block zero-days and unknown threats instantly without sandbox delays or performance impact.
FortiGuard IPS Service
Delivers real-time deep packet and SSL inspection to detect and block malicious traffic, exploits, and vulnerabilities including threats hidden in encrypted sessions
FortiGuard DNS Security Service
Enables DNS traffic visibility and blocks high-risk domains, including malicious NRDs and parked domains, to stop threats at the source.
FortiGuard URL Filtering Service
Blocks malicious URLs in real time using AI-driven behavior analysis and correlation with near-zero false positives.
FortiGuard Attack Surface Security Service
Evaluates your Security Fabric posture against best practices and compliance standards with visibility into IoT device risk.
FortiGuard Anti-Botnet & C2 Service
Blocks unauthorized communications with malicious command-and-control (C2) servers to prevent data exfiltration and remote attacks.
FortiGuard Data Loss Prevention (DLP) Service
Prevents data breaches and exfiltration by detecting over 500 sensitive data types, helping ensure regulatory compliance and insider threat protect
FortiGuard Application Control Service
Enables granular control over applications by allowing, blocking, or restricting access to malicious, risky, or unwanted apps.
FortiGuard CASB Service
Delivers inline and API-based cloud app security to monitor usage, enforce policies, and protect SaaS data.
FortiGuard OT Security Service
Extends IPS to secure ICS/OT/SCADA protocols, detecting and blocking exploits targeting OT vulnerabilities.
FortiGuard AntiSpam Service
Reduces unwanted and malicious email with multi-layered spam filtering at the network perimeter.