Greetings! Welcome to the eleventh and final lesson of the course . On we covered the main points related to device administration. Now, to complete the course, I want to introduce you to the product licensing scheme. ΠΈ - usually these schemes raise quite a few questions.
As usual, the lesson will be presented in two versions - in text form, as well as in the video lesson format, which is located at the bottom of the article.
Let's start with a variation of technical support. In Fortinet terminology, technical support is referred to as FortiCare. There are three support options:
8Γ5 is one of the standard technical support options. By purchasing this type of technical support, you get access to the technical support portal, from where you can download images for updates, as well as additional software. It becomes possible to leave tickets - applications for solving technical problems. But in this case, the response time to your request depends not only on the specific SLA, but also on the working hours of the engineers (and, accordingly, on the time zone). It is worth noting that Fortinet is gradually moving away from this type of technical support.
The second option - 24x7 - is the second standard option for technical support. It has the same parameters as 8x5, but with some differences - SLA ceases to depend on the mode of operation of engineers and the difference in time zones. It also becomes possible to purchase an extended hardware replacement program, but more on that later.
And the third option - Advanced Services Engineering or ASE - it also involves 24/7 support, but with a special, reduced SLA. In the case of ASE, ticket processing is handled by a specialized team of engineers. This type of technical support is currently only available for FortiGate devices.
Now let's go through the subscriptions. There are many individual subscriptions, as well as packages that contain multiple subscriptions. Some technical support is also included in the package. You can see the list of existing subscriptions for FortiGate in the figure below.
All of the above subscriptions can be part of the following packages:
360 Protection, Enterprise Protection, UTM Protection, Advanced Threat Protection. At this stage, it is important to remember that the 360 ββProtection package always includes ASE type technical support, the Enterprise package always includes 24/7 support, for the UTM package there are still two variations - a package with 8/5 technical support enabled and with 24 technical support enabled /7.
And the last package - Advanced Threat Protection - always includes 24/7 support.
Technical support also includes warranty replacement of equipment. However, 24x7 and ASE support types support Premium RMA purchases, which can reduce hardware replacement time and provide additional benefits. There are 4 types of Premium RMAs:
- Next Day Delivery - spare equipment will be delivered the next day after the current equipment incident is confirmed.
- 4 Hours On-Site Parts Delivery - Spare equipment will be delivered by courier within 4 hours of incident confirmation.
- 4 Hours On-Site Engineer - Spare equipment will be delivered by courier service within 4 hours after the incident is confirmed. An engineer will also be involved to assist in the replacement of equipment.
- Secure RMA - This service is designed for customers with stringent data protection requirements within their physical environment. Firstly, it allows you to erase sensitive data with a specific command without voiding the warranty. Secondly, it allows you not to return failed equipment, and therefore, to protect data within the physical environment.
But this is all βon paperβ, in reality it all depends on many circumstances, for example, geographical location. Therefore, when purchasing, I advise you to consult with a partner and clarify possible details.
We have disassembled in parts all the proposals of Fortinet, which relate specifically to FortiGate. Now it's time to put it all together. Let's start with subscription packages. The figure below shows the individual subscriptions that I listed earlier. This shows which packages each subscription is included in. Also, do not forget about the appropriate technical support for each package. Using this data, you can choose a subscription package that suits your needs.
Here we come almost to the most important thing. What are the purchase options? There are several options to choose from:
- A single position in the form of a physical device and a specific subscription package (you can also choose the duration of the package - 1 year, 3 years, 5 years)
- Single item as a physical device, as well as a single item as a package of subscriptions (you can also choose the duration of the package)
- Line item as a physical device, and specific subscriptions as line items. In this case, the type of technical support must also be selected separately - it will also be displayed as a separate item
For virtual machines, there are two options:
- Single line item for virtual machine license and separate subscription package with related technical support
- Single line item for virtual machine license, separate required subscriptions, and separate technical support.
Premium RMA services are not included in any package and are purchased as a separate subscription.
This is the licensing scheme. That is, FortiGate license does not limit either the number of users (both regular and VPN users), or the number of connections, nothing. Here everything rests only on the performance of the device itself.
The cost of renewal or the cost of annual ownership is determined as follows:
Either this is the cost of the selected package, or the cost of individual subscriptions and separate technical support. This price does not include anything else.
With FortiAnalyzer, things are a little easier. In the case of buying a physical device, you buy the device itself, as well as separately technical support, a subscription to the service of indicators of compromise and RMA services. In this case, the annual cost of ownership will be the amount of services purchased annually - marked in green in the figure.
About the same with a virtual machine. You buy a license for a base virtual machine, if necessary, you buy parameter extensions for this virtual machine. Other services are similar to services provided to a physical device. The annual cost of ownership is calculated in the same way as for a physical device - the services included in it are also marked in green on the slide.
As promised, I also attach a video lesson on this topic. It is suitable for those who are closer to the video format, since it contains exactly the information that was presented above.
In the future, new articles, lessons or courses on this or other topics may be released. In order not to miss them, stay tuned for updates on the following channels:
You can also leave suggestions for new lessons or courses on Fortinet topics using .
Source: habr.com