FortiGate appliances sized from your real traffic, installed properly, and licensed without surprises. Ankara on site, Türkiye-wide remote.
✓ On-site deployment across Turkey ✓ Ankara-based · 24/7 support ✓ Free assessment & quote
FortiGate is the appliance we deploy most, and the one we see misconfigured most. The two failures are consistent: an appliance chosen from the datasheet headline figure rather than from inspection throughput, and a licence that quietly expired so the security services stopped updating months before anyone noticed.
Both are avoidable. We size from measured traffic with inspection assumed on, and we track every licence expiry date on your behalf rather than leaving it to a reminder in someone's calendar.
We supply, install and support the full FortiGate range, plus FortiSwitch managed switching and FortiAP wireless — which, managed through the firewall itself, gives one console for the whole edge instead of three.
From a desktop unit for a ten-person office to a data-centre class appliance. We supply, install and licence the full range.
Indicative groupings. The final decision comes from measurement, not from this table.
Offices of roughly 10–50 users, branch connections and small businesses. Desktop form factor, quiet, simple to manage.
Growing businesses of roughly 50–200 users, or smaller sites where SSL inspection must stay on across all traffic.
Larger organisations, multi-site cores and businesses running public-facing services.
Data centre and high-throughput environments where inspection has to run at line rate.
FortiGate is the centre of the family, but Fortinet's strength comes from the products talking to one another. Here is what we deploy and what each one actually does.
The firewall. Inspects traffic, applies policy, terminates VPN. It is also the management point for everything else.
Managed switching, administered through the FortiGate. Ports, VLANs and access policy from one screen.
Wireless access points. No separate controller to license or patch — the FortiGate does that job.
Log collection and reporting. This is usually what satisfies statutory log retention requirements.
Central management for multi-device estates. Push policy to dozens of branches from one console.
Endpoint agent. VPN connectivity, vulnerability scanning and reporting device posture back to the firewall.
E-mail security. Anti-phishing and attachment filtering, sitting in front of your mail platform.
Web application firewall. Protects internet-facing applications at the application layer.
Authentication and multi-factor sign-in. Ties user identity to network policy.
Hardware or mobile tokens for multi-factor authentication. Ends relying on a password alone for VPN.
Detonates unknown files in isolation and watches their behaviour — for malware with no signature yet.
Cellular backup connectivity. Keeps the site online when the fixed line drops.
You do not need all of them. For most businesses FortiGate + FortiSwitch + FortiAP covers it; add FortiAnalyzer where log retention is required.
You buy the appliance once and subscribe to the security services. That is the difference — and it is the part most often confused when comparing quotations.
| Capability | No licence | UTP | ATP | Enterprise |
|---|---|---|---|---|
| Firewalling, NAT | ✓ | ✓ | ✓ | ✓ |
| VPN (site-to-site, SSL) | ✓ | ✓ | ✓ | ✓ |
| SD-WAN steering | ✓ | ✓ | ✓ | ✓ |
| Antivirus | — | ✓ | ✓ | ✓ |
| Intrusion prevention (IPS) | — | ✓ | ✓ | ✓ |
| Web filtering | — | ✓ | — | ✓ |
| Application control | — | ✓ | — | ✓ |
| DNS filtering | — | ✓ | — | ✓ |
| Sandboxing (unknown files) | — | — | ✓ | ✓ |
| CASB, OT protocols | — | — | — | ✓ |
Bundle contents change between generations; we state the current official scope in writing when quoting. We will not recommend a bundle containing features you will never switch on — if you are not going to use web filtering, ATP may make more sense than UTP.
Not just racking the box.
We measure actual throughput, session counts and peak load before recommending a model.
You receive the reasoning, not just a part number — including cheaper options where they are adequate.
Deployment with a planned cutover window, and a documented rollback if anything is wrong.
Rules built from what the business actually needs, not a permissive ruleset that gets tightened 'later'.
Configured with the certificate distribution and exclusion list handled properly.
VLANs and inter-VLAN policy so a compromised workstation cannot reach the server network.
Site-to-site tunnels and client VPN with multi-factor authentication.
Link monitoring and per-application steering so failover is genuinely seamless.
Expiry dates tracked by us; renewal proposed before the services stop updating.
Turkish law No. 5651 requires businesses that provide internet access to retain access records. Hotels, cafés, shopping centres, hospitals and workplaces offering guest Wi-Fi all fall within its scope.
In practice two things are needed: a record of who connected, when, and to what address, and the ability to show that record has not been altered. Accurate clocks matter too — a log whose timestamps do not line up carries no evidential weight.
FortiGate produces the record; for retention and reporting we normally add FortiAnalyzer. A separate captive portal and authentication step is set up for the guest network so records can be tied to a person.
During installation we also configure the retention period, access permissions and time synchronisation. Selling the box is not enough for this requirement.
If you are not sure, ask. We will assess whether you fall within scope and, if so, design the right setup.
A firewall is not a finished product on the day it is installed. Firmware needs updating on a considered schedule, policies drift as the business changes, and licences expire. We keep a record of your firmware level, your licence dates and your policy set, and we raise these with you rather than waiting to be asked.
You also get the configuration. Full backup of the appliance config, an interface and VLAN map, and the credentials — held by you, not just by us.
It depends on your internet bandwidth, user count, VPN requirement and — critically — whether SSL inspection will be enabled. Inspection can reduce usable throughput several-fold, so a model chosen from the headline firewall figure is often undersized in practice. We measure your traffic before recommending.
The appliance includes basic firewalling. Content inspection features — antivirus, intrusion prevention, web filtering, application control, sandboxing — come through UTP or ATP subscription bundles. When the subscription lapses those features stop updating, which is where most surprises come from.
Yes. We audit the existing configuration, report what we find, and either correct it in place or rebuild the policy set. You get the documentation either way.
Yes. FortiGate handles dual-WAN failover and application-aware SD-WAN natively. We configure link health checks and per-application steering so failover is genuinely transparent.
Yes. Appliances ship anywhere in Türkiye and most FortiGate work — configuration, policy design, licence management, troubleshooting — is done remotely. On-site attendance is standard in Ankara.
Yes. Turkish law (No. 5651) requires certain access logs to be retained. FortiAnalyzer or an equivalent collector covers this, and we configure retention and time synchronisation as part of the build.
Tell us how many users you have and which line you use — we will size the right model together.
Prefer to talk right away:
0312 911 77 89