FortiGate Licence Bundles Explained: ATP vs UTP vs Enterprise vs Hardware Only

For most small and mid-sized offices the Unified Threat Protection (UTP) bundle is the right FortiGate licence. It adds web and DNS filtering to the intrusion prevention and anti-malware in the Advanced Threat Protection (ATP) bundle. Enterprise Protection adds data and cloud-application controls on top. A hardware-only FortiGate with no subscription still routes traffic, but its threat intelligence stops updating.

What does each bundle include?

Source: Fortinet FortiGuard security bundle documentation. Compiled 12 November 2026. Fortinet revises bundle contents from time to time; confirm the current list on your quotation.

Which bundle suits which office?

• ATP suits a site where the firewall only needs to block attacks and malware, and web filtering is handled elsewhere.
• UTP suits most offices. Blocking malicious and unwanted websites is the feature staff-facing networks use every day.
• Enterprise suits firms that must control what data leaves through cloud applications, or that need the extra visibility services for audits.

The cheapest bundle is the one that matches what you will actually switch on. Paying for Enterprise and configuring only web filtering is the common waste.

How do you read a Fortinet SKU?

The code in each listing tells you the bundle and the term.

What do bundles and renewals cost?

Listed prices for the F-series show the pattern. Prices listed 12 Nov 2026; prices change; ask for a current quotation.

Renewal for a FortiGate 40F, one year: ATP S$335, UTP S$525, Enterprise S$645.

CALC, five-year cost of a 40F on UTP bought one year at a time: S$1,065 + (4 x S$525) = S$3,165. The renewals, at S$2,100, cost about twice the first-year bundle. Budget for the subscription, not only the box.

CALC, renewal as a share of the first purchase: S$525 / S$1,065 = 49 percent each year.

What happens if the subscription lapses?

The firewall keeps passing traffic and existing policies keep working. Signature databases stop updating, cloud-rated services such as web filtering stop classifying new sites, and firmware updates and hardware replacement need an active FortiCare contract. An unpatched firewall on the internet edge is a known target, so a lapse is a risk, not a saving. For the renewal steps see our FortiGate renewal guide.

One year, three years or five?

Multi-year terms usually cost less per year and remove the risk of a missed renewal. One-year terms keep the option to change model sooner. If the hardware is new, a three-year term that matches your refresh plan is a reasonable default. Ask for one, three and five year prices on the same quotation.

Buying in Singapore

Current G-series hardware is listed without a bundle: FortiGate 70G at S$1,668 and FortiGate 90G at S$3,796.80 (listed 12 Nov 2026; prices change; ask for a current quotation). Bundles for G-series models are price on request. To choose between those two, see FortiGate 70G vs 90G.

To start, use Request for Quotation on the product page, call (65) 6978 3502, email Sales@sourceit.com.sg or use our contact page.

Frequently asked questions

Can I use a FortiGate without a licence? It will route and apply basic firewall rules, but threat signatures and web filtering will not stay current.

What is the difference between UTP and ATP? UTP adds web, DNS and video filtering and antispam to everything in ATP.

Can I upgrade from UTP to Enterprise later? Yes, at renewal or by buying the higher bundle; ask how remaining term is treated.

Is FortiCare included in the bundles? Yes. The ATP, UTP and Enterprise bundles include FortiCare support.