Partly, and "AI versus AI" oversells it. FortiGate does use machine learning in several places: FortiGuard Labs says its AI and machine-learning systems analyse more than 100 billion security events a day to produce the signatures and reputation data FortiGate devices download, and the Enterprise Protection bundle adds AI-based inline malware prevention that gives verdicts on unknown files in under a second. FortiOS also has a generative AI assistant, FortiAI-Assist, for configuration and troubleshooting. What AI does not do is make a firewall infallible. The value is speed: spotting new threats sooner and pushing protection to every device faster than human analysts alone could. IBM's 2025 Cost of a Data Breach Report found organisations using AI and automation extensively in security saved an average of US$1.9 million per breach. At SourceIT, the Fortinet FortiGate 70G with 1-year Unified Threat Protection is S$2,630.40 (listed 30 Oct 2026).
Where does AI appear in FortiGate and FortiGuard?
| Feature | What it does | Licence | Model notes |
|---|---|---|---|
| FortiGuard threat intelligence | ML-assisted analysis behind IPS, antivirus, URL, DNS and reputation updates | Any FortiGuard bundle (ATP, UTP, Enterprise) | All models |
| Cloud sandbox zero-day detection | Detonates unknown files to see what they do | ATP and UTP | All models |
| AI-based inline malware prevention | Sub-second verdicts on unknown files as they pass | Enterprise Protection only | Check model support with us |
| Generative AI application control | Identifies and controls ChatGPT and other AI apps | FortiCare | All models |
| Agentic AI protocol detection | Recognises MCP and A2A traffic used by AI agents, with AI-specific logs | Database updates need a support contract | FortiOS 8.0 |
| FortiAI-Assist | Generative AI help with documentation, diagnostics and CLI scripts | FortiCare Premium; 2 million tokens a month per unit | Not on models with 2 GB RAM or less, such as the 40F |
| FortiGuard Inline AI Security Service | Inspects AI prompts, responses and agent tool calls; masks sensitive data | Not yet published | Announced 26 Oct 2026 |
From Fortinet's FortiGate security bundles page, FortiGuard ordering guide (May 2026), FortiOS 8.0 documentation and Fortinet's 26 Oct 2026 announcement.
What can AI-based defence do that signatures cannot?
Signatures recognise what has been seen before. AI-assisted analysis looks at what a file or connection is like: its structure, its behaviour, where it came from. That helps against the AI-generated malware described in AI Can Write Malware in Seconds. Can Your Firewall Keep Up?, which changes its code to avoid fingerprints. Scale matters too. FortiGuard says it blocked 3.8 trillion exploitation attempts in 2025. When one sensor somewhere sees a new attack, the protection reaches subscribed FortiGates everywhere, so a small office benefits from what Fortinet sees across millions of devices.
The AI that protects you is mostly invisible: it is the speed at which a threat seen elsewhere becomes a block on your firewall.
What can't it do?
- Stop threats it cannot see. Without SSL deep inspection, most web traffic is opaque. Without a subscription, updates stop.
- Fix the basics. An exposed admin page, an unpatched firmware release or a reused password defeats any detection engine. Several critical FortiOS vulnerabilities have been exploited in the wild in 2024 to 2026, so patching the firewall itself matters.
- Replace endpoint and email security. Attacks that start with a user running a command, or arrive by USB, never cross the firewall.
- Replace people. Someone still has to read alerts and decide. AI shortens the work; it does not remove it.
Which bundle should an SME choose?
- UTP suits most offices: IPS, antivirus, cloud sandboxing, web, DNS and video filtering and botnet blocking, with FortiCare Premium support. The FortiGate G-series listings at SourceIT are sold with UTP.
- Enterprise Protection adds AI-based inline malware prevention, data loss prevention, IoT detection and attack-surface rating. It suits companies with regulated data or a higher risk profile.
- ATP is the leaner option, without web and DNS filtering; few offices should choose it today.
The full comparison of what each licence includes is in Buying a FortiGate Without FortiGuard.
How do attackers' AI and defenders' AI compare?
Attackers have the advantage of choosing targets and needing to succeed only once. Defenders have the advantage of data: a security vendor sees attacks across millions of devices, while an attacker sees only their own campaign. Anthropic's November 2025 case report noted that the same AI capabilities that helped attackers also helped its own team analyse the attack. For a small business, the practical takeaway is to use a defence that pools intelligence across many customers, keep it subscribed and patched, and back it up with good basics. The attacker side is covered in The Next Hacker Might Not Be Human.
Buying in Singapore
SourceIT supplies FortiGate firewalls with UTP bundles and local warranty: the FortiGate 50G (S$1,819.20 with 1-year UTP), 70G (S$2,630.40), 90G (S$6,094.80) and 120G (S$9,036), and can quote Enterprise Protection bundles on request. Prices listed 30 Oct 2026. Browse the FortiGate firewall collection. For a quotation, use Request for Quotation on the product page, call (65) 6978 3502, email Sales@sourceit.com.sg or use our contact page.
Frequently asked questions
Does FortiGate use AI? Yes. FortiGuard threat intelligence uses AI and machine learning to analyse more than 100 billion events a day, and the Enterprise Protection bundle adds AI-based inline malware prevention.
What is FortiAI-Assist? A generative AI assistant in FortiOS for documentation, diagnostics and CLI scripting. It needs FortiCare Premium and is not supported on FortiGate models with 2 GB of RAM or less.
Which FortiGuard bundle has AI-based malware prevention? Enterprise Protection. ATP and UTP include cloud sandbox-based zero-day detection instead.
Can AI security stop every AI-powered attack? No. It speeds up detection and response, but patching, MFA, endpoint security, backups and people reading alerts are still needed.
What is the FortiGuard Inline AI Security Service? A service Fortinet announced on 26 Oct 2026 to inspect AI prompts, responses and agent tool calls passing through FortiGate. Licensing and availability had not been published at the time of writing.
SourceIT Approved
Researched and verified by the SourceIT team for Singapore buyers.
