Without an active FortiGuard licence the appliance stops downloading signatures for IPS, antivirus and application control. Protection stays at the level of the day the licence expired.
Renew FortiCare, replace the appliance, or move to rental and invest nothing at all. Which one wins depends on how old the appliance is and how long you still want to run it. Send us the model and serial number and within 24 hours you get the price of all three.
Without an active FortiGuard licence the appliance stops downloading signatures for IPS, antivirus and application control. Protection stays at the level of the day the licence expired.
Without FortiCare you have no right to hardware replacement and no vendor support. When a power supply dies, you solve it from your own spares and your own time.
After support ends you no longer receive FortiOS security patches. On a perimeter device reachable from the internet that is the worst kind of debt.
Czech act 264/2025 requires vulnerability management and patching. An unmaintained perimeter is hard to defend in an audit - and it is the first thing asked about.
The fastest route when the appliance still performs and the vendor still supports it. Renewals come for 1 to 5 years. It makes sense until the model has an announced end of life - after that you pay support for something that will be replaced anyway.
On older generations a new appliance with support often beats support for the old one. We migrate the configuration rather than retype it - rules, VPNs and objects carry over, and the old appliance stays ready as a fallback until the new one proves itself.
Hardware, licences and management in one monthly payment, with no upfront investment. The appliance is not in your assets, so its refresh is not your problem - and neither is what to do with it at end of life.
You find both on the appliance label or in FortiOS under System → FortiGuard. One line and a phone number is all we need.
We look up the support end date and the model lifecycle and send the renewal price, the replacement price and the rental price side by side. None of them is conditional.
For a replacement we deliver an architecture proposal within 5 working days and schedule the cutover when it hurts operations least - typically outside business hours.
In FortiOS under System → FortiGuard you see the expiry date of every service, or in the support.fortinet.com portal by serial number. If you would rather not look it up, send us the serial number and we will find out for you.
The appliance does not stop working. What stops are the FortiGuard database updates (IPS, antivirus, application control, web filtering), the right to FortiOS fixes and the right to hardware replacement. Rules, NAT and VPNs keep running - just without new defence and without a safety net.
It comes down to the age and announced lifecycle of the model. For an appliance with several years ahead of it, renewal is usually much cheaper. On an older generation, support approaches the price of a new appliance and you pay for a model that will have to be replaced anyway. That is why we send both prices side by side and leave the decision to you.
No. We migrate the configuration rather than retype it - rules, objects, NAT, VPN tunnels and policies. The old appliance stays ready as a fallback until the new one proves itself. If you are coming from another vendor, we describe that separately under firewall migration.
Czech act 264/2025 requires vulnerability management and patch management. A perimeter device without security fixes is hard to defend against that and tends to be one of the first things an inspection asks about. We go through what that looks like in practice in our article on NIS2 and network security.
Within 24 hours you get the renewal price, the replacement price and the rental price. No commitment, no meeting.