Network Security
Fortinet for UAE Businesses
How the licensing works, why most firewalls are sized wrongly, and the cases where we would recommend something simpler.
FortiGate Certified Partner
A FortiGate is two purchases that get quoted as one: the appliance, and the subscription bundle that makes it more than a router. Businesses that only buy the first are running an expensive device with most of its security switched off.
The licensing model, which is where quotes diverge
The hardware is a one-off. The security services — intrusion prevention, web filtering, application control, antivirus, sandboxing — are subscriptions renewed annually, and a firewall without them inspects very little.
Two UAE quotes for the same model can therefore differ substantially because one includes a full bundle for three years and the other includes the box. Neither is wrong; only one of them is comparable to the other, and the front page rarely says which.
The renewal is the part most buyers underestimate. Subscriptions lapse, and a lapsed FortiGate keeps passing traffic while quietly no longer inspecting it — which is worse than an outage because nobody notices.
Appliance and subscription
Two separate costs, and a quote for one is not comparable to a quote for both.
Bundle contents
Which services are included and for how many years, asked explicitly.
Renewal exposure
What the second and third year cost, established before signing.
Lapse behaviour
A lapsed subscription passes traffic without inspecting it, and nothing alerts you.
Sizing, and the throughput number that misleads
Datasheet throughput is measured with inspection largely off. Turn on the features you bought it for — deep inspection of encrypted traffic in particular — and real throughput falls by a large factor.
That is how UAE offices end up with a firewall that was adequate on paper and is the bottleneck in practice. Sizing has to be done against inspected throughput and your actual user and session counts, not against the headline figure.
Undersizing is the common error; oversizing happens too, usually where a supplier is comfortable selling the larger model. We size against measured usage and explain what we left out.
Where a FortiGate is more than you need
A ten-person UAE office with no servers, everything in Microsoft 365 and no site-to-site connectivity is often better served by a simpler device properly configured than by a FortiGate running at ten per cent of its capability.
The features earn their place where there is something to protect — servers on site, multiple locations, remote access, segmentation between guest and production networks. A Sharjah or Mussafah operation with a warehouse, an office and staff connecting remotely is squarely in that territory. A single small office frequently is not, and we will say so.
Common questions
Decided it fits?
If a FortiGate is the right answer, the work is sizing it against real inspected throughput, configuring segmentation properly, and documenting the rules.