Fortinet FortiSandbox 1000D User manual

FortiSandbox 1000D
QuickStart Guide

April 01, 2014
34-110-214953-20140401
Copyright© 2014 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
FortiCare® and FortiGuard®, and certain other marks are registered trademarks
of Fortinet, Inc., and other Fortinet names herein may also be registered and/or
common law trademarks of Fortinet. All other product or company names may be
trademarks of their respective owners. Performance and other metrics contained
herein were attained in internal lab tests under ideal conditions, and actual
performance and other results may vary. Network variables, different network
environments and other conditions may affect performance results. Nothing
herein represents any binding commitment by Fortinet, and Fortinet disclaims
all warranties, whether express or implied, except to the extent Fortinet enters a
binding written contract, signed by Fortinet’s General Counsel, with a purchaser
that expressly warrants that the identified product will perform according to
certain expressly-identified performance metrics and, in such event, only the
specific performance metrics expressly identified in such binding written contract
shall be binding on Fortinet. For absolute clarity, any such warranty will be limited
to performance in the same ideal conditions as in Fortinet’s internal lab tests.
Fortinet disclaims in full any covenants, representations,and guarantees pursuant
hereto, whether express or implied. Fortinet reserves the right to change, modify,
transfer, or otherwise revise this publication without notice, and the most current
version of the publication shall be applicable.

Table of Contents
Package Contents 1
Installation 2
SFP Transceivers 4
Configuring Your Device 6
Technical Specifications 8
LED Specifications 1 9
LED Specifications 2 10
Cautions and Warnings 11
Regulatory Notices 13
Documentation and Links 14
Register Your Product 15
Product License Agreement 16

This page intentionally left blank.

Package Contents
Tools and Documentation
FortiSandbox 1000D
QuickStart Guide
Tools and
Documentation
CD
QuickStart Guide
2 Rack-Mount
Brackets
2 Power Cables Console Cable
4 Rubber
Feet
12 Bracket
Screws
2 Grounding
Screws
Ethernet Cable
Fortinet’s consolidated security solutions provide an integrated set
of core security and network services in a single, easy-to-manage,
high-performance appliance that is capable of supporting a wide
range of deployment scenarios.
Your box contains the following:
FortiSandbox 1000D Ethernet Cable
QuickStart Guide 4 Rubber Feet
Tools and Documentation CD 2 Grounding Screws
2 Power Cables 12 Bracket Screws
Console Cable 2 Rack-Mount Brackets
Page 1
Note: Accessories may not be exactly as shown.

The FortiSandbox unit can be placed on any flat surface, or mounted in any
standard 19 inch rack unit with the provided rack-mount brackets and screws.
Please read the Cautions and Warnings section prior to installing your device.
Caution: Electrostatic discharge (ESD) can damage your Fortinet equipment.
Caution: Do not place heavy objects on the unit.
To install the FortiSandbox unit into a rack:
Caution: To avoid personal injury or damage to the unit, it is recommended that
two or more people install the unit into the rack.
1. Ensure that the FortiSandbox unit is placed on a stable surface prior to rack-
mount installation.
2. Attach the provided rack-mount brackets to the sides of the unit using the
provided screws.
a. If you are installing the unit into a four-post rack, attach the rack-mount brackets
with the handles aligned with the front of the unit.
b. If you are installing the unit into a two-post rack, attach the rack-mount brackets
with the handles aligned with the middle of the unit.
Installation
Page 2

3. Position the FortiSandbox unit in the rack. Ensure there is enough room around
the unit to allow for sufficient air flow.
4. Line up the rack-mount bracket holes to the holes on the rack and ensure that the
FortiSandbox unit is level.
5. Finger tighten four rack-mount screws to attach the unit to the rack.
6. Verify that the spacing around the FortiSandbox unit conforms to requirements
and that the unit is level, then tighten the rack-mount screws with an appropriate
screwdriver.
7. Using the provided power cables, plug the cables into the rear of the unit, and
then into a grounded electrical outlet or a separate power source such as an
uninterruptible power supply (UPS) or a power distribution unit (PDU).
Note: If the unit has a redundant power supply, each power cable should be
connected to a different power source. In this way, if one power source fails, the
other may still be operational and the unit will not lose power.
To install the unit on a flat surface:
1. Ensure that the surface onto which the FortiSandbox unit to be installed is clean,
level, and stable and that there is at least 1.5in (3.8cm) of clearance on all sides to
allow for adequate airflow.
2. Attach the provided rubber feet to the bottom of the FortiSandbox unit.
3. Place the unit in the designated location.
4. Verify that the spacing around the FortiSandbox unit conforms to requirements
and that the unit is level.
5. Using the provided power cables, plug the cables into the rear of the unit, and
then into a grounded electrical outlet or a separate power source such as an
uninterruptible power supply (UPS) or a power distribution unit (PDU).
Note: If the unit has a redundant power supply, each power cable should be
connected to a different power source. In this way, if one power source fails, the
other may still be operational and the unit will not lose power.
Page 3
1.5in 1.5in

Caution: SFP transceivers are static sensitive devices. Use an ESD wrist strap or
similar grounding device when handling transceivers.
Caution: Do not install or remove SFP transceivers while fiber-optic cables are still
attached. This can cause damage to the cables, cable connectors, and the optical
interfaces. It may also prevent the transceiver from latching correctly into the socket
connector.
Note: Installing and removing SFP transceivers can shorten their useful life. Do not
install or remove transceivers more than is necessary.
To install the SFP transceivers:
1. Ensure that you are properly grounded.
2. Remove the caps from SFP cage sockets on the front panel of the unit.
3. Position the SFP transceiver in front of the cage socket opening and ensure that
the transceiver is correctly oriented.
When the transceiver is correctly oriented, the extraction lever will be level with
the socket latch.
Note: SFP cage socket orientation may vary. Ensure that the SFP transceiver
module is correctly oriented each time that you are inserting a transceiver.
4. Hold the sides of the SFP transceiver and slide it into the cage socket until it clicks
into place.
SFP Transceivers
Extraction Lever
Transmit
Optical Bore
Receive
Optical Bore Socket Latch
SFP Cage Sockets
Page 4

Caution: Do not force the SFP transceivers into the cage slots. If the transceiver
does not easily slide in and click into place, it may not be aligned correctly or may
be upside down. If this happens, remove the SFP transceiver, realign it or rotate it
and slide it in again.
5. Press the transceiver firmly into the cage socket with your thumb.
6. Verify that the transceiver is latched correctly by grasping the sides of the
transceiver and trying to pull it out without lowering the extraction lever.
If the transceiver cannot be removed, it is installed and latched correctly.
If the transceiver can be removed, reinsert it and press harder with your thumb.
If necessary, repeat this process until the transceiver is securely latched into the
cage socket.
To remove the SFP transceivers:
1. Ensure that you are properly grounded.
2. If applicable, disconnect the fiber-optic cable from the transceiver connector and
install a clean dust plug in the transceiver’s optical bores.
3. Pull the extraction lever out and down to eject the transceiver.
If you are unable to use your finger to open the lever, use a small flat-head
screwdriver or other similar tool to open the lever.
4. Hold the sides of the transceiver and carefully pull it away from the cage socket.
5. Replace the cap on the SFP cage socket and place the removed SFP transceiver
into an antistatic bag.
Note: Follow proper fiber-optic handling procedures when installing and removing
SFP transceivers to ensure the devices remain clean and are not damaged.
Page 5

Configuring Your Device
The FortiSandbox unit requires some basic configuration to add it to
your network. These basic steps include assigning IP addresses, DNS
settings, and the default gateway. Until these steps are completed
traffic will not flow through the device.
The FortiSandbox unit can be configured using the Web-based
Manager.
To connect to the Web-based Manager:
1. Connect the FortiSandbox unit Ethernet port 1 to a management
computer using the provided Ethernet cable.
2. Configure the management computer to be on the same subnet as
the internal interface of the FortiSandbox unit:
• IP address: 192.168.0.2
• Netmask: 255.255.255.0
3. To access the FortiSandbox unit Web-based Manager, start a
browser of your choice and browse to https://192.168.0.99.
4. Type admin in the Name field, leave the Password field blank, and
select Login.
You can now proceed with configuring your FortiSandbox unit.
Note: The FortiSandbox uses Ethernet port 3 to provide scanned
executable files outgoing communication. This is done to help
determine if the file is malicious. For this reason, Ethernet port 3
should be connected to an isolated network behind a firewall.
Note: Ethernet port 1 only supports HTTPS, HTTP, SSH, and Telnet
services. With the exception of https, these services can be disabled
using the Web-based Manager.
Page 6

A limited Command Line Interface (CLI) is available for basic device
configuration and debugging purposes. The FortiSandbox device is
primarily configured using the Web-based Manager.
To connect to the CLI:
1. Connect the FortiSandbox unit console port to the management
computer using the provided console cable.
2. Start a terminal emulation program on the management computer.
Select the COM port and use the following settings:
• Baud Rate: 9600
• Data bits: 8
• Parity: None
• Stop bits: 1
• Flow Control: None
3. Press Enter on your keyboard to connect to the CLI.
4. Type admin in the Name field, leave the Password field blank, and
press Enter.
You can now proceed with configuring your FortiSandbox unit.

Technical Specifications
Page 8
FortiSandbox 1000D
USB 1 2 3 4 5 6 7 8
HDD
STA
PWR
CONSOLE
14 5 62 3
# Interface Type Description
1 Hard Drive SATA Two 2TB hard drives and two additional hard
drive slots.
2 Console RJ-45 Optional RS-232 serial connection to the
management computer. Provides access to the
CLI.
3 USB USB-A Two USB server ports.
4 Power Supplies 100-240V AC, 5-3A, 50-60Hz, redundant power
supplies
5 Ethernet Ports
1-6
RJ-45 Gigabit Ethernet ports for connection to your
network and the Internet.
6 SFP Ports 7-8 SFP 1Gbps/auto small form-factor pluggable
transceiver ports.

Page 9
LED Specifications 1
FortiSandbox 1000D
USB 1 2 3 4 5 6 7 8
HDD
STA
PWR
CONSOLE
1 2 3 5
4
# LED State Description
1 HDD Off This LED is not used.
2STA Off The unit is operating normally.
Red The unit has a major alarm.
3 PWR Green The system is on.
Off The system is off.
4 Power Supplies
Green The power supply is running.
Flashing Green The power supply is functional but not
running.
Red The power supply has failed.
Flashing Red Only this power supply is not powered.
Flashing Red
and Green Power supply warning.
Off The power supply is not powered.
5Hard Drive Power
(Top LED)
Blue Hard drive installed and powered.
Off No hard drive detected.
5 Hard Drive Status
Flashing Green Hard drive activity.
Red Hard drive failure.
Off Hard drive is idle.

Page 10
LED Specifications 2
FortiSandbox 1000D
USB 1 2 3 4 5 6 7 8
HDD
STA
PWR
CONSOLE
1 2
# LED State Description
1Ethernet Ports
Activity
Amber Port is active.
Flashing Amber Port is transmitting and receiving data.
Off Port is not connected.
1Ethernet Ports
Speed
Green Port is connected at 1Gbps.
Amber Port is connected at 100Mbps.
Off Port is connected at 10Mbps or not in use.
2SFP Ports
Activity
Yellow Port is active.
Flashing Yellow Port is transmitting and receiving data.
Off Port is not connected.
2 SFP Ports Link Orange Port is connected at 1Gbps.
Off Port is not connected

Cautions and Warnings
Environmental Specications:
Operating Temperature - 0 to 40°C (32 to 104°F) If this device is installed in a closed or
multi-unit rack assembly, the rack’s ambient temperature may be greater than the room’s
ambient temperature. Make sure the rack environment is compatible with the manufacturer’s
maximum rated ambient temperature (Tma) .
Température ambiante élevée — 0 à 40 ° C (32 à 104 ° F) Si cet appareil est installé dans
un cabinet fermé, la température ambiante du cabinet peut être supérieure à la température
ambiante de la pièce . Assurez- vous que l’environnement dans le cabinet est compatible
avec la température ambiante maximale du fabricant (Tma) .
Storage temperature — -25 to 70°C (-13 to 158°F)
Température d’entreposage — 25 à 70 ° C (-13 à 158 ° F)
Humidity — 5 to 95% non-condensing
Humidité — 5 à 95% sans condensation
Operating altitude — < 2250 m (7380 ft)
Altitude opérationnelle — <2250 m (7380 pi)
Rack mount instructions:
Reduced Air Flow - For rack installation, make sure that the amount of air flow required for
safe operation of the equipment is not compromised. For free-standing installation, make
sure that the appliance has at least 2 inches (5 cm) of clearance on each side to allow for
adequate air flow and cooling.
Ventilation — Pour une installation dans un cabinet, assurez-vous que la ventilation
nécessaire au fonctionnement de l’équipement n’est pas compromise. Pour une installation
autonome, assurez-vous que l’appareil dispose d’au moins 2 pouces (5 cm) de dégagement
de chaque côté pour permettre l’écoulement de l’air et un refroidissement adéquat.
Mechanical Loading - To avoid personal injury or damage to the appliance, Fortinet
recommends that 2 or more people together install the appliance into the rack. Balance the
equipment to avoid uneven mechanical loading and tipping. Do not place heavy objects on
the appliance.
Installation – Pour éviter des blessures ou des dommages à l’appareil, Fortinet recommande
que deux personnes ou plus installent ensemble cet équipement dans un cabinet .
L’installation du matériel à l’intérieur de la baie doit être effectuée de façon à éviter toute
situation dangereuse liée à une installation non conforme . Ne placez pas d’objets lourds sur
l’appareil, celui-ci n’étant pas conçu pour soutenir un poids additionnel.
Circuit Overloading - To avoid overloading, use the ratings on the label . Consider the
equipment’s connection to the supply circuit and the effect that circuit overloading might
have on current protection and supply wiring .
Surtension — Pour éviter de surcharger le circuit d’alimentation, référez-vous aux notes sur
l’étiquette de l’équipement . Envisagez l’effet que la surtension du circuit pourrait avoir sur la
protection de surtension et le câblage d’alimentation .
Page 11

Page 12
Reliable Earthing - Make sure all rack-mounted equipment is grounded. This includes supply
connections (e .g . power strips), not only direct connections to the branch circuit.
Mise à la terre – Assurez-vous que tout l’équipement est mis à la terre . Ceci comprend les
connexions d’alimentation (par exemple, les barres d’alimentation) en plus des connexions
directes au circuit de dérivation.
Interference – If possible, use Shielded Twisted Pair (STP) Ethernet cables instead of
Unshielded Twisted Pair (UTP) .
Interférence — Si possible, utilisez des câbles Ethernet de paire torsadée blindée (STP)
plutôt que de paire torsadée non blindée (UTP) .
Grounding — Disconnect power cables before servicing . Do not connect or disconnect
cables during lightning; this may damage your device or cause personal injury . Connections
that enter from outside the building should pass through a lightning / surge protector, and be
properly grounded . To prevent damage to your equipment, use an electrostatic discharge
workstation (ESD) and/or wear an anti-static wrist strap while you work . For DC installations,
a readily accessible UL Listed disconnect device (e .g . circuit breaker) with over current
protection suitable for local code must be incorporated in the building installation wiring . In
addition to the grounding terminal of the plug, on the back panel, there is another, separate
terminal for earthing . For your safety, qualified service personnel must permanently connect
this terminal to the ground using a green-with-yellow conductor, minimum size #14 AWG .
Mise à la terre — Débranchez les cordons de la source d’alimentation avant tout entretien .
Ne pas brancher ou débrancher les câbles lors d’un orage afin de ne subir aucun dommage
corporel et éviter d’endommager votre appareil . Assurez-vous que les branchements qui
entrent à partir de l’extérieur du bâtiment passent par un parafoudre / parasurtenseur et sont
correctement mis à la terre . Pour éviter d’endommager votre matériel, utilisez un poste
de travail de décharge électrostatique (ESD) et / ou portez un bracelet anti-statique lorsque
vous travaillez . En cas d’alimentation en courant continu (DC en anglais), un dispositif
facilement accessible de déconnexion UL (par exemple, disjoncteur) avec protection contre
les surintensités adapté à la réglementation locale doit être incorporé dans l’installation
électrique du bâtiment . Ce produit possède une borne de mise à la terre qui est prévu à
l’arrière du produit, à ceci s’ajoute la mise à la terre de la prise . Cette séparation protège
la borne de mise à la terre qui doit être en permanence reliée au conducteur à rayure verte
et jaune de taille minimum #14 AWG . Seul un technicien qualifié est autorisé à effectuer le
raccordement.
Battery:
Caution: Risk of explosion if battery is replaced by an incorrect type. Dispose of used batteries
according to your local regulations.
Attention: Risque d’explosion si vous remplacez la batterie par un modèle incompatible. Jetez
les piles usagées selon les réglementations locales en vigueur.
IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to batteries.
IMPORTANT: Suisse: Annexe 4.10 de SR814.013 s’appliquant aux batteries.
警告
本電池如果更換不正確會有爆炸的危險
請依製造商說明書處理用過之電池
Multiple power sources:
Caution: Disconnect power supply cords before servicing.
Attention: Débranchez les cordons de la source d’alimentation avant tout entretien.

Page 13
Regulatory Notices
Federal Communication Commission (FCC) – USA
This device complies with Part 15 of FCC Rules. Operation is subject to the following two
conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received; including interference that may cause
undesired operation.
This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio frequency energy, and
if it is not installed and used in accordance with the instruction manual, it may cause harmful
interference to radio communications. Operation of this equipment in a residential area is likely
to cause harmful interference, in which case the user will be required to correct the interference
at his own expense.
WARNING: Any changes or modifications to this product not expressly approved by the party
responsible for compliance could void the user’s authority to operate the equipment
Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada
CAN ICES-3 (A) / NMB-3 (A)
This digital apparatus does not exceed the Class A limits for radio noise emissions from digital
apparatus set out in the Radio Interference Regula¬tions of the Canadian Department of
Communications.
Le présent appareil numérique n’emet pas de bruits radioélectriques dép¬assant les limites
applicables aux appareils numeriques de la classe A préscrites dans le Règlement sur le
brouillage radioélectrique édicte par le ministère des Communications du Canada.
European Conformity (CE) - EU
This is a Class A product. In a domestic environment, this product may cause radio interference,
in which case the user may be required to take adequate measures.
Voluntary Control Council for Interference (VCCI) – Japan
この装置は、クラスＡ情報技術装置です。 この装置を 家庭環境で使用すると電波妨害を
引き起こすことがあります。 この場合には使用者が適切な対策を講ずるよう要求される
ことがあります。ＶＣＣＩ－Ａ
Bureau of Standards Metrology and Inspection (BSMI) – Taiwan
這是甲類的資訊產品，在居住的環境中使用時，可能會造成射頻干擾，在這種情況下，使用
者會被要求採取某些適當的對策。
China
此为A级产品，在生活环境中，该产品可能会造成无线电干扰。这种情况下，可能需要用户
对其采取切实可行的措施

Documentation and Links
The following Fortinet web pages provide information and resources for your
Fortinet product:
1. Fortinet Customer Service & Support: https://support.fortinet.com
On this page you can create a support account with Fortinet, register and
manage your products, download updates, firmware images and release
notes, and create technical support tickets.
2. Fortinet Document Library: http://docs.fortinet.com
This page provides the most up-to-date versions of Fortinet publications
for the entire family of Fortinet products.
3. Technical Discussion Forums: http://support.fortinet.com/forum
This page allows you to communicate with other customers and Fortinet
partners about Fortinet products, services, and configuration issues in a
forum environment.
4. Fortinet Training Services: http://campus.training.fortinet.com
This page provides course descriptions, availability, schedules, and
locations of training programs in your area.
5. FortiGuard Threat Research and Response: http://www.fortiguard.com
This page provides up-to-date information on vulnerabilities and threats,
and includes a virus scanner, Internet Protocol (IP) signature look-up, web
filtering tools, and related information.
Tools and Documentation CD
The tools and documents on this CD are current as of shipping time.
Comments on Technical Documentation
Please send comments or information about any errors or omissions in this
or any Fortinet technical documents to [email protected].
Page 14

Register Your Product
If you have not registered your Fortinet product, please register your product
now.
Register
Register your Fortinet product in order to receive:
• Technical Support • New product features • Protection from new threats
Enregistrer
Vous devez enregistrer le produit pour recevoir:
• Support technique • Nouvelles fonctionnalitées du produit • Protection
contre de nouvelles menaces
Registra
La reistrazione ti permette di usufruire di:
• Supporto Tecnico • Nuove funzionalita • Proteezione dalle ultime
minaccce
Registrar
Debe registrar el producto para recibir:
• Apoyo técnico • Nuevas funcionalidades del producto • Protección contra
ataques
登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート • 新機能の追加 • 新しい脅威への防御
请马上注册
您的飞塔产品
您在注册以后才能得到技术支持、新产品特点信息、最新威胁防护
Web: https://support.fortinet.com/
Toll free: 1 866 648 4638
Phone: [phone]
Fax: [phone]
Email: r[email protected]
Page 15

Product License Agreement
Fortinet Product License Agreement / EULA and Warranty Terms
Trademarks and Copyright Statement
Fortinet®, FortiGate®, and FortiGuard® are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks, registered or otherwise, of Fortinet. All other prod-
uct or company names may be trademarks of their respective owners. Copyright © 2002-2012 Fortinet, Inc., All Rights reserved. Contents and terms are subject to change by Fortinet without
prior notice. No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission
from Fortinet, Inc., as stipulated by the United States Copyright Act of 1976.
Product License Agreement
The parties to this agreement are you, the end customer, and either (i) where you have purchased your Product within the Americas, Fortinet, Inc., or (ii) where you have purchased your
Product outside of the Americas, Fortinet Singapore Private Limited (each referred to herein as “Fortinet”) .CAREFULLY READ THE FOLLOWING LEGAL AGREEMENT (THE OR THIS “AGREEMENT”
OR “EULA”). USE OF FORTINET PRODUCT(S) AND ANY UPDATES THERETO, INCLUDING HARDWARE APPLIANCE PRODUCTS, SOFTWARE AND FIRMWARE INCLUDED THEREIN BY FORTINET, AND
STAND-ALONE SOFTWARE PRODUCTS SOLD BY FORTINET (TOGETHER, THE “PRODUCTS”) CONSTITUTES ACCEPTANCE BY YOU OF THE PROVISIONS IN THIS AGREEMENT. FORTINET SHALL
NOT BE BOUND BY ANY ADDITIONAL AND/OR CONFLICTING PROVISIONS IN ANY ORDER, RELEASE, ACCEPTANCE OR OTHER WRITTEN CORRESPONDENCE OR OTHER WRITTEN OR VERBAL
COMMUNICATION UNLESS EXPRESSLY AGREED TO IN A WRITING SIGNED BY THE GENERAL COUNSEL OF FORTINET. YOUR INSTALLATION OR USE OF ANY PRODUCT REPRESENTS AGREEMENT
TO THE TERMS HEREIN, AS AMENDED OR UPDATED FROM TIME TO TIME IN FORTINET’S DISCRETION BY FORTINET PUBLISHING AN AMENDED OR UPDATED VERSION. IF YOU DO NOT AGREE TO
ALL OF THE TERMS OF THIS AGREEMENT, DO NOT START THE INSTALLATION PROCESS OR USE THE PRODUCTS. IF YOU DO NOT AGREE TO THE PROVISIONS OF THIS AGREEMENT, YOU SHOULD
IMMEDIATELY, AND IN NO EVENT LATER THAN FIVE (5) CALENDAR DAYS AFTER YOUR RECEIPT OF THE PRODUCT RETURN THE PRODUCTS TO THE LOCATION WHERE YOU OBTAINED THEM FOR A
FULL REFUND FROM THE PARTNER SELLING TO YOU.
1. License Grant.
This is a license, not a sales agreement, between you and Fortinet. The term “Software”, as used throughout this Agreement, includes all Fortinet and third party rmware and software
provided to you with, or incorporated into, Fortinet appliances and any stand-alone software provided to you by Fortinet, with the exception of any open source software contained in Fortinet’s
Products which is discussed in detail in section 15 below, and the term “Software” includes any accompanying documentation, any updates and enhancements of the software or rmware
provided to you by Fortinet, at its option. Fortinet grants to you a non-transferable (except as provided in section 5 (“Transfer”) and section 15 (“Open Source Software”) below), non-exclusive,
revocable (in the event of your failure to comply with these terms or in the event Fortinet is not properly paid for the applicable Product) license to use the Software solely for your internal
business purposes (provided, if a substantial portion of your business is to provide managed service provider services to your end-customers, you may use the Software embedded in FortiGate
and supporting hardware appliances to provide those services, subject to the other restrictions in this Agreement), in accordance with the terms set forth in this Agreement and subject to any
further restrictions in Fortinet documentation, and solely on the Fortinet appliance, or, in the case of blades, CPUs or databases, on the single blade, CPU or database on which Fortinet installed
the Software or, for stand-alone Software, solely on a single computer running a validly licensed copy of the operating system for which the Software was designed, or, in the case of blades,
CPUs or databases, on a single blade, CPU or database. For clarity, notwithstanding anything to the contrary, all licenses of Software to be installed on blades, CPUs or databases are licensed
on a per single blade, solely for one blade and not for multiple blades that may be installed in a chassis, per single CPU or per single database basis, as applicable. The Software is “in use” on
any Fortinet appliances when it is loaded into temporary memory (i.e. RAM). You agree that, except for the limited, specic license rights granted in this section 1, you receive no license rights
to the Software.
2. Limitation on Use.
You may not attempt to, and, if you are a corporation, you are responsible to prevent your employees and contractors from attempting to, (a) modify, translate, reverse engineer, decompile,
disassemble, create derivative works based on, sublicense, or distribute the Software; (b) rent or lease any rights in the Software in any form to any third party or make the Software available or
accessible to third parties in any other manner; (c) except as provided in section 5, transfer assign or sublicense right to any other person or entity, or (d) remove any proprietary notice, labels,
or marks on the Software, Products, and containers.
3. Proprietary Rights.
All rights, title, interest, and all copyrights to the Software and any copy made thereof by you and to any Product remain with Fortinet. You acknowledge that no title to the intellectual property
in the Software or other Products is transferred to you and you will not acquire any rights to the Software or other Products except for the specic license as expressly set forth in section 1
(“License Grant”) above.
4. Term and Termination.
Except for evaluation and beta licenses or other licenses where the term of the license is limited per the evaluation/beta or other agreement or in the ordering documents, the term of the license
is for the duration of Fortinet’s copyright in the Software. Fortinet may terminate this Agreement, and the licenses and other rights herein, immediately without notice if you breach or fail to
comply with any of the terms and conditions of this Agreement. You agree that, upon such termination, you will cease using the Software and any Product and either destroy all copies of the
Fortinet documentation or return all materials to Fortinet. The provisions of this Agreement, other than the license granted in section 1 (“License Grant”), shall survive termination.
5. Transfer.
If you are a Fortinet contracted and authorized reseller or distributor of Products, you may transfer (not rent or lease unless specically agreed to in writing by Fortinet) the Software to one end
user on a permanent basis, provided that: (i) you ensure that your customer and the end user receives a copy of this Agreement, is bound by its terms and conditions, and, by selling the Product
or Software, you hereby agree to enforce the terms in this Agreement against such end user, (ii) you at all times comply with all applicable United States export control laws and regulations, and
(iii) you agree to refund any fees paid to you by an end user who purchased Product(s) from you but does not agree to the terms contained in this Agreement and therefore wishes to return the
Product(s) as provided for in this Agreement. Further, if you are a non-authorized reseller of Products, you are not authorized to sell Product(s) or Software, but, regardless, by selling Product(s)
or Software, you hereby agree you are bound by the restrictions and obligations herein and are bound to: (i) ensure that your customer and the end user receive a copy of this Agreement and
are bound in full by all restrictions and obligations herein (ii) enforce the restrictions and obligations in this Agreement against such customer and/or end user, (iii) comply with all applicable
United States export control laws and regulations and all other applicable laws, and (iv) refund any fees paid to you by a customer and/or end user who purchased Product(s) from you but
does not agree to the restrictions and obligations contained in this Agreement and therefore wishes to return the Product(s) as provided for in this Agreement. Notwithstanding anything to the
contrary, distributors, resellers and other Fortinet partners (a) are not agents of Fortinet and (b) are not authorized to bind Fortinet in any way.
6. Limited Warranty.
Fortinet provides this limited warranty for its product only to the single end-user person or entity that originally purchased the Product from Fortinet or its authorized reseller or distributor and
paid for such Product. The warranty is only valid for Products which are registered on Fortinet’s Support Website: https://support.fortinet.com; or on the TalkSwitch support website: http://global.
talkswitch.com; or such other website as provided by Fortinet. For the below software warranty to start, registration must take place within three hundred sixty-ve (365) days from the date
the Product was originally shipped from Fortinet’s facilities or the warranty is null and void and will not be honored. For the hardware warranty, such warranty starts on the earlier of the date of
Product registration on Fortinet’s Support Website or ninety (90) days from the date that the Product was originally shipped from Fortinet’s facilities. It is the Fortinet distributor’s and reseller’s
responsibility to make clear to the end user the date the product was originally shipped from Fortinet, and it is the end user’s responsibility to understand the original ship date from the party
from which the end user purchased the product. All warranty claims must be submitted in writing to Fortinet before the expiration of the warranty term or such claims are waived in full, i.e.
ninety (90) days from the earlier of registration or the automatically started term for hardware and spare parts claims and three hundred sixty-ve (365) days from registration within three
hundred sixty-ve (365) days from shipment for software claims. Fortinet provides no warranty for any beta, donation or evaluation Products, for any spare parts not purchased directly from
Fortinet by the end-user, for any accessories, or for any stand-alone software.
Fortinet warrants that the hardware portion of the Products, including spare parts unless noted otherwise (“Hardware”) will be free from material defects in workmanship as compared to
the functional specications for the period set forth as follows and applicable to the Product type (“Hardware Warranty Period”): a three hundred sixty-ve (365) day limited warranty for the
Hardware excluding spare parts, , power supplies, and accessories (provided, solely with respect to FortiAP indoor Wi-Fi access point Hardware appliance products and FortiSwitch Hardware
appliance products other than the FortiSwitch-5000 series (for both excluding spare parts, power supplies, and accessories), the warranty herein shall last from the start of the warranty period
as discussed above until ve (5) years following the product announced end-of-life date), and, for spare parts, power supplies, and accessories, solely a ninety (90) days limited warranty.
Fortinet’s sole obligation shall be to repair or replace the defective Hardware at no charge to the original owner. This obligation is exclusive of transport fees, labor or installation costs, and any
other cost which are not directly associated to the Product. Such repair or replacement will be rendered by Fortinet at an authorized Fortinet service facility as determined by Fortinet. The re-
placement Hardware need not be new or of an identical make, model, or part; Fortinet may, in its discretion, replace the defective Hardware (or any part thereof) with any reconditioned Product
that Fortinet reasonably determines is substantially equivalent (or superior) in all material respects to the defective Hardware. The Hardware Warranty Period for the repaired or replacement
Hardware shall be for the greater of the remaining Hardware Warranty Period or ninety days from the delivery of the repaired or replacement Hardware. If Fortinet determines in its reasonable
discretion that a material defect is incapable of correction or that it is not practical to repair or replace defective Hardware, the price paid by the original purchaser for the defective Hardware
will be refunded by Fortinet upon return to Fortinet of the defective Hardware. All Hardware (or part thereof) that is replaced by Fortinet, or for which the purchase price is refunded, shall become
the property of Fortinet upon replacement or refund.
Fortinet warrants that the software portion of Hardware Products will substantially conform to Fortinet’s then current functional specications for the Software, as set forth in the applicable
Page 16