Fortinet Distributor in Dubai: Reading FortiGate Licence Bundles and SKUs
When a Fortinet distributor in Dubai or one of its resellers quotes a FortiGate, the line that matters most is usually not the appliance. It is the bundle code next to it. Fortinet sells FortiGate security services in three curated bundles, Enterprise Protection, Unified Threat Protection (UTP) and Advanced Threat Protection (ATP), plus an SD-WAN bundle, and each bundle has its own SKU that can be bought with the hardware or separately. Knowing what each bundle adds, and how to read the part number, lets you check that a quotation contains what your security policy needs and nothing it does not.
The details below come from Fortinet's FortiGate Subscriptions and FortiGuard Bundles ordering guide (revision dated 4 May 2026), its FortiCare Services ordering guide, and the FortiGate 60F series data sheet dated 1 October 2026. Names and contents change, so check the current documents before you sign.
What a Fortinet distributor in Dubai actually supplies
Fortinet's partner directory lets you filter partners by type, with two options: Distributor and Reseller. Partners also show an Engage programme level, listed in the directory as Master, Global, Regional, Expert, Advanced or Select, and may hold specialisations such as Secure Networking or SD-WAN. In the usual model, a distributor holds stock, carries credit for resellers and processes the Fortinet orders, while the reseller or integrator quotes the end customer, configures the firewall and looks after the account.
Most UAE businesses therefore buy from a reseller who buys from a Fortinet distributor in Dubai. Either way, the SKUs on the quotation are Fortinet's own, and the same structure applies whoever prints the document. Our earlier note on buying Fortinet in the UAE and Saudi Arabia covers the service activation clock and what stops working when services lapse. This guide focuses on the bundles themselves.
The four bundles and what each one adds
Fortinet's ordering guide describes the Enterprise bundle as comprehensive attack surface security, UTP as essential web and network defence, and ATP as a first line of defence. The table summarises the main services in each, from the guide's comparison chart.
| Service | Enterprise | UTP | ATP | SD-WAN |
|---|---|---|---|---|
| IPS and malicious or botnet URLs | Yes | Yes | Yes | No |
| Advanced Malware Protection, including antivirus and FortiGate Cloud Sandbox | Yes | Yes | Yes | No |
| URL, DNS and video filtering | Yes | Yes | No | No |
| AI based inline malware prevention | Yes | No | No | No |
| Data loss prevention | Yes | No | No | No |
| Attack surface security, IoT detection, Security Rating | Yes | No | No | No |
| OT security | No | No | No | No (à la carte) |
| FortiCare Premium support | Yes | Yes | Yes | Yes |
The SD-WAN bundle is a different kind of product: it is built around SD-WAN underlay monitoring and overlay orchestration services rather than threat inspection, so it is not a cheaper substitute for UTP. The Enterprise bundle also includes Fortinet's FortiConverter configuration migration service, which helps when replacing another vendor's firewall. The FortiGate 60F data sheet shows OT security as available only à la carte on that model.
What every FortiCare contract already includes
Some services sit outside the bundles because Fortinet includes them with any FortiCare support contract. The ordering guide lists Application Control, inline CASB, device and OS detection, GeoIP, trusted CA certificates, the Internet Service Database and botnet IPs, dynamic DNS, PSIRT checks and anti phishing as base services. If a quotation charges separately for application control, ask why.
Zero day protection is handled differently by tier
According to the ordering guide, ATP and UTP detect zero day threats through the cloud based sandbox, while the Enterprise bundle adds AI based inline malware prevention, which Fortinet describes as returning sub second verdicts on unknown files. That inline service can also be bought à la carte. For an office that handles a lot of inbound files from outside parties, it is the main functional reason to step up from UTP.
Reading a FortiGate SKU
Fortinet's ordering guide uses the FortiGate 60F to show how the part numbers fit together. Once you know the pattern, any quotation becomes easier to check.
| What it is | Example SKU |
|---|---|
| Hardware only | FG-60F |
| Hardware plus Enterprise bundle | FG-60F-BDL-809-DD |
| Hardware plus UTP bundle | FG-60F-BDL-950-DD |
| Enterprise bundle, service only | FC-10-0060F-809-02-DD |
| UTP bundle, service only | FC-10-0060F-950-02-DD |
| ATP bundle, service only | FC-10-0060F-928-02-DD |
| 24x7 FortiCare support only | FC-10-0060F-247-02-DD |
Four things to read from those codes:
- BDL means hardware and services in one part number. In Fortinet's 60F example, hardware bundles are listed for Enterprise and UTP. ATP appears as a service SKU, so an ATP order is the hardware plus a separate FC service line.
- The three digit code names the service. 809 is Enterprise, 950 is UTP, 928 is ATP and 247 is FortiCare support on its own. À la carte services have their own codes, such as 108 for IPS and 577 for AI based inline malware prevention.
- The middle block names the model. 0060F in an FC code ties the service to the 60F. A service SKU for the wrong model will not apply to your unit.
- DD is the term. Fortinet's guides use DD as a placeholder. In the FortiCare guide, the three year example for a Priority RMA service ends in 36, so the final digits are the term in months.
When you receive a quotation, match each line against that pattern. A line that reads FG-60F with a separate FC-10-0060F-247 code is hardware with support only and no security services, which is a common way to make a quotation look cheaper than a competitor's bundled one.
Bundle or à la carte, and the extras people forget
Fortinet lets you skip the bundles and order individual services instead. The ordering guide lists à la carte codes for IPS, Advanced Malware Protection, web security, AI based inline malware prevention and OT security, each with FortiCare support bought separately. À la carte makes sense in a narrow set of cases, such as a firewall that only needs IPS at an internal boundary, or an industrial site that needs OT security without the web services. For a normal office edge, the bundles are designed to be the simpler and usually the more complete choice, so a quotation built from many à la carte lines deserves a question about why.
A few items sit outside every bundle and are easy to miss:
- Log retention. The ordering guide notes that the free version of FortiGate Cloud keeps logs for only seven days, and a FortiGate Cloud subscription extends that to a full year. If an auditor, insurer or internal policy expects longer log history, budget for this or for FortiAnalyzer.
- Zero touch provisioning. FortiDeploy is ordered once per purchase order and routes the devices on that order to Fortinet's zero touch portal, which helps when firewalls ship straight to branch sites.
- Managed services. Fortinet also lists a Managed FortiGate service and a SOC as a service option as separate subscriptions, for companies without their own security team.
None of these is required, but each one is cheaper to decide at the time of the first order than to add halfway through a term.
Model limits that change what a bundle delivers
A bundle is the same SKU family across models, but not every service runs on every appliance. The ordering guide and the 60F data sheet carry a footnote worth reading closely: content disarm and reconstruction, video filtering and inline CASB are not available on the FortiGate and FortiWiFi 40F, 60E, 60F, 80E and 90E series, or the FGR-60F, from FortiOS 7.4.4 onwards. The 60F data sheet adds DNS filtering to that list for the 60F series. On the 30G and 50G series they are not available in any OS build.
So a small office buying a FortiGate 60F with UTP is paying for a bundle some of whose services will not run once the unit is on FortiOS 7.4.4 or later. That is not a reason to avoid the 60F, which suits many small sites, but it is a reason to list the services your policy depends on and confirm they run on the model and firmware you are buying. If DNS or video filtering matters, compare a larger model such as the FortiGate 100F on the data sheet before deciding.
Throughput is the other model limit. Inspection services cost performance, and our guide to sizing a firewall for a UAE SME explains how to use the inspected figures rather than the headline ones.
Support levels, high availability pairs and hardware replacement
Premium or Elite
All bundles include FortiCare Premium, which the FortiCare guide describes as 24x7 support with one hour telephone escalation for priority one and two issues and next business day for priority three issues raised on the web. FortiCare Elite shortens those to 15 minutes and two hours, adds automated monitoring and alerts and an Elite portal, and extends end of support on designated long term support firmware releases. A bundle can be upgraded to Elite with a separate upgrade SKU.
HA pairs
For two firewalls in a high availability pair, the 60F data sheet lists FG-60F-HA SKUs that must be bought in pairs and allow the pair to share a single service contract, limited to the Enterprise, UTP and ATP bundles. If your design uses two units, ask whether the quotation uses the HA SKUs or simply two full bundles.
Replacement hardware
FortiCare Premium and Elite include next business day RMA delivery on a commercially reasonable efforts basis. Fortinet sells Priority RMA options for next calendar day delivery, four hour delivery, or four hour delivery with an onsite engineer, and a Secure RMA option that lets you keep and destroy a faulty unit rather than return it. The guide notes that Priority RMA is not available in all locations, so ask the supplier to confirm what is offered for your Dubai address before paying for it.
Fortinet distributor in Dubai: bundle questions answered
Which bundle does a typical UAE office need?
If your policy uses web filtering and you want standard antivirus, IPS and sandboxing, UTP covers it. Step up to Enterprise for data loss prevention, AI based inline malware prevention, IoT detection or Security Rating. ATP suits a firewall where web filtering is handled elsewhere.
Can I buy the hardware now and the bundle later?
Yes. Fortinet's guide describes ordering hardware only and adding FortiCare and FortiGuard services to it, or buying hardware with a bundle. Adding services later to an existing unit is normally aligned with a co term quotation so everything renews together.
Does every bundle include support?
Yes. Fortinet states that all bundles include FortiCare Premium 24x7 support. Elite is an optional upgrade.
Why do two quotations for the same FortiGate differ so much?
Usually because they quote different bundles, different terms or different support levels. Compare the three digit service codes and the final term digits line by line, not just the totals.
How do I check that a supplier is a Fortinet partner?
Use Fortinet's partner directory, which filters by country and by partner type, Distributor or Reseller, and shows Engage programme levels.
What to send with a FortiGate enquiry
Codeeo Tech supplies Fortinet hardware and services from Building A1, IFZA Business Park in Dubai Silicon Oasis, alongside switching and wireless from other vendors, with every item priced through Add to Quote. We are not Fortinet, and we do not claim any Fortinet partner status. Browse the Fortinet range, then send:
- Your internet bandwidth and the number of users and sites.
- The security services your policy actually uses, such as web filtering, DNS filtering or data loss prevention.
- Whether you need a single unit or a high availability pair.
- The term you want, in years, and whether FortiCare Elite or Priority RMA matters to you.
- Any existing FortiGate serial numbers, if the bundle is for a unit you already own.
Send those through our contact form and the quotation will list each SKU with its bundle code and term so you can check it against Fortinet's FortiGuard bundles ordering guide and the relevant FortiGate data sheet. To find a listed Fortinet distributor in Dubai yourself, use the Fortinet partner directory.
Cover photo: Cabling for the ALMA correlator (eso1253f) by ESO, via Wikimedia Commons (CC BY 4.0).
