Introduction

FortiSOAR Cloud is a cloud-hosted Security Orchestration & Automated Response (SOAR) platform. The FortiSOAR Cloud service subscription is available for purchase through an a la carte SKU. Running FortiSOAR on FortiCloud simplifies deployment, management, and scaling, eliminating the need to provision a VM in your environment.

FortiCloud sets up a cloud-based FortiSOAR instance with an embedded FortiSOAR secure message exchange under a user account. From release 7.6.0 onwards, FortiSOAR Cloud supports provisioning multiple FortiSOAR instances per account. This allows you to create an active-active cluster of FortiSOAR instances for horizontal scaling.

This section includes the following topics:

• Requirements

• Licensing

Requirements

• System Configuration for the FortiSOAR Cloud VM:
  • 8 available vCPUs
  • 32 GB available RAM
  • 1 TB available disk space: Recommended to have high-performance storage, preferably SSDs.
  • 1 vNIC

To provision an instance in FortiSOAR Cloud, you need the following:

• FortiCloud account: Create a FortiCloud account here if you do not have one. A primary FortiCloud account is required to access FortiSOAR Cloud. Primary FortiCloud accounts can invite secondary users to access FortiSOAR Cloud.

Licensing

License requirements are enforced upon logging into the FortiSOAR Cloud portal. You can purchase FortiSOAR Cloud licenses from Fortinet.

FortiSOAR Cloud requires the following licenses:

• FortiCloud Premium Subscription
• FortiSOAR Cloud Entitlement license

The expiration of either the FortiCloud Premium Subscription or the FortiSOAR Cloud entitlement license triggers a notification on the cloud portal.
The cloud portal displays the following notification when the FortiCloud Premium Subscription has expired:


A license expiration warning is displayed 30 days prior to the expiry date. Customers have a 3-day grace period to renew their contract and continue using the VM. After the grace period ends, the cloud portal becomes inaccessible to the customers:

FortiSOAR Cloud offers a licensing option for Threat Intelligence Management (TIM) Service, including FortiGuard Premium Threat Feeds. This service enables full utilization of TIM features, including unrestricted consumption of FortiGuard feeds. To know more about unrestricted FortiGuard threat feeds and premium TIM features and TIM SKU, see the Licensing chapter in the FortiSOAR "Deployment Guide." For more information on TIM, see the Threat Intel Management Solution Pack documentation.

FortiSOAR Cloud license contract registration

1. Ensure you have a FortiCare account.
2. Contact FortiSOAR Support for the FortiSOAR Cloud product SKU.
   Note: By default, the FortiSOAR Cloud product SKUs come with two users included. Additional users can be added by purchasing the 'Additional Users Entitlement' SKU.
3. Once you complete purchasing the FortiSOAR Cloud product SKU and/or the 'Additional Users' SKU, you will receive a service contract registration code on your registered email address.
4. Login to your FortiCare account and click Asset > Register/Activate to register your FortiSOAR Cloud product. Register your FortiSOAR Cloud product by following the instructions provided in the FortiCare registration wizard.
   Copy and paste the service contract registration code from the email to register FortiSOAR Cloud. After verification, click Complete to finalize the registration.