Licensing

FortiSOC is a cloud service which requires licensing to access the portal and create an instance. The service has two tiers of licensing: Base and Advanced. Service add-ons can be purchased for either of these tiers for additional archive and analytics retention.

This topic summarizes the licensing information. For more details, see the FortiSOC Ordering Guide.

FortiSOC licenses

FortiSOC licensing is based on log ingestion volume (GB/day) and comes in two tiers.

License	SKU
FortiSOC Base Subscription	FC1-10-FSCLD-1310-02-DD
FortiSOC Advanced Subscription	FC1-10-FSCLD-1318-02-DD

Both tiers include the following:

• 1GB/day ingestion

• FortiCare premium and one-month analytics

• Support -1, -3, and -5 year terms

The Base tier supports Fortinet data sources and a curated set of third-party integrations with built-in SOAR automation. The Advanced tier delivers everything included with the Base tier as well as:

• full SIEM log ingestion,

• user entity and behavior analytics (UEBA) with advanced SIEM analytics,

• full access in the content hub to AI-assisted playbooks,

• and detection rules and playbooks for identity threat detection & response (ITDR).

For complete feature comparison, see the FortiSOC Ordering Guide.

FortiSOC service add-ons for data retention

In addition to the above licenses, service add-ons are available for data retention.

Service add-on	Description
Analytics Retention FC1-10-FSCLD-1311-02-DD	Adds one month of analytics retention per GB/day of licensed ingestion.
Archive Retention FC1-10-FSCLD-1312-02-DD	Adds one month of archive retention per GB/day of licensed ingestion.