FortiWeb BYOL via Ogma vs PAYG via AWS / Azure Marketplace — the savings math
Published 03 Jun 2026
· By
Pawan Sharma
· Network Security
· 17 min read
There are two ways to put a FortiWeb-VM on AWS or Azure. PAYG via Marketplace is the click-to-subscribe option — Fortinet's licence cost is bundled into a higher hourly EC2/VM rate, you pay through your cloud bill, no commitment. BYOL via Ogma is the partner-quoted annual subscription — you pay Fortinet's licence to Ogma in INR with GST, your cloud bill carries only compute. The image is identical; the commercial is not. At month 7 of a typical 24-month workload, BYOL via a partner has typically saved 30-50% on the FortiWeb portion of the cloud bill. This post lays out the math, line by line, on published AWS Mumbai and Azure Central India rates.
~30–50%
Typical BYOL saving
Compared to marketplace PAYG over 12–36 month horizons, for the FortiWeb portion of the cloud bill.
~Month 6–8
Crossover point
PAYG is cheaper for the first few months; BYOL takes the lead around the 6–8 month mark and the gap widens.
INR ✓
Currency exposure
BYOL via Ogma is invoiced in INR with GST. PAYG via cloud marketplace is USD-billed via the cloud provider.
3 tiers
Same VM image
Standard, Advanced, Enterprise bundle apply to both BYOL and PAYG — only the billing route differs.
PAYG vs BYOL — what they actually are
PAYG (Pay-as-you-Go) via Marketplace
- Subscribe via AWS Marketplace or Azure Marketplace
- Higher hourly EC2 / Azure VM rate — includes Fortinet licence
- One line item on the cloud bill
- No commitment — switch off whenever
- USD-billed via cloud provider invoice
- No partner relationship for the licence portion
BYOL via Ogma (Annual subscription)
- Annual FortiWeb-VM subscription priced in INR + GST
- Cloud bill carries only base compute / network / storage
- Ogma is your Fortinet partner of record for the licence
- 1, 3, or 5-year term options
- Direct support relationship + India SLA
- Same image, same features as PAYG
The math — AWS Marketplace (Mumbai, ap-south-1)
FortiWeb-VM is listed on AWS Marketplace as a PAYG product. The hourly rate the customer pays is the licence-bundled instance rate. For a typical small/medium workload, the rates work out roughly as follows. Numbers reflect the public AWS Marketplace listing as of 2026-05-30 and the AWS Mumbai EC2 on-demand price list — verify against aws.amazon.com/marketplace at quote time.
FX note — INR conversion
All USD-published marketplace rates below are converted to INR at ₹98 / USD — Ogma's standard software-services reference rate. Live market FX rates fluctuate; treat as planning estimate. BYOL via Ogma is invoiced in INR + GST and locks the rate at quote time — no monthly FX exposure.
| VM tier (Standard bundle) | PAYG hourly (licence-bundled) | Equivalent monthly (730 hr) | BYOL annual via Ogma | BYOL monthly equiv. |
|---|---|---|---|---|
| VM01 (25 Mbps HTTP) | ~₹44 / hr ($0.45) | ~₹32K / mo ($329) | ~₹2.16 L / yr ($2,200) | ~₹17.9K / mo ($183) |
| VM02 (100 Mbps HTTP) | ~₹83 / hr ($0.85) | ~₹61K / mo ($621) | ~₹3.72 L / yr ($3,800) | ~₹31K / mo ($317) |
| VM04 (500 Mbps HTTP) | ~₹162 / hr ($1.65) | ~₹1.18 L / mo ($1,205) | ~₹7.06 L / yr ($7,200) | ~₹58.8K / mo ($600) |
| VM08 (3 Gbps HTTP) | ~₹314 / hr ($3.20) | ~₹2.29 L / mo ($2,336) | ~₹13.23 L / yr ($13,500) | ~₹1.10 L / mo ($1,125) |
INR figures converted from publicly listed AWS Marketplace FortiWeb-VM hourly pricing at ₹98 / USD as of 30 May 2026. AWS Marketplace lists FortiWeb in both PAYG and BYOL variants. EC2 compute (m5 / m6i family in ap-south-1) sits on top of all four rows above and is identical between PAYG and BYOL because the image is the same. Treat as order-of-magnitude estimates; Ogma will model your specific workload against the live rate card at quote time, with INR + GST locked.
A worked example — VM04 Standard for 24 months on AWS Mumbai
~₹28.3 L PAYG vs ~₹14.1 L BYOL — savings ~₹14.2 L (about 50%)
PAYG path: ~₹1.18 L/month × 24 months = ~₹28.34 L ($28,920 at ₹98)
BYOL via Ogma path: ~₹7.06 L/year × 2 years = ~₹14.11 L ($14,400 at ₹98)
Crossover point: ~month 6 of the first year. After that, every additional month favours BYOL by ~₹58.8K ($600).
Apply the same logic at VM08 — ~₹2.29 L/month PAYG vs ~₹1.10 L/month BYOL — and the 24-month gap is ~₹28.4 L in BYOL's favour.
The math — Azure Marketplace (Central India)
Azure Marketplace lists FortiWeb-VM with a similar PAYG hourly + BYOL annual split. The ratios are broadly comparable to AWS — the BYOL/PAYG gap on Azure Central India typically sits in the same 30-50% band on 12-36 month horizons. Verify against azuremarketplace.microsoft.com at quote time.
| VM tier | Azure PAYG monthly (730 hr) | BYOL annual via Ogma | ~Saving over 24 months |
|---|---|---|---|
| VM02 (100 Mbps) | ~₹62K / mo ($630) | ~₹3.72 L / yr ($3,800) | ~₹7.35 L ($7,500) |
| VM04 (500 Mbps) | ~₹1.20 L / mo ($1,225) | ~₹7.06 L / yr ($7,200) | ~₹14.31 L ($14,600) |
| VM08 (3 Gbps) | ~₹2.33 L / mo ($2,380) | ~₹13.23 L / yr ($13,500) | ~₹28.91 L ($29,500) |
Azure FortiWeb rates as of 30 May 2026 per Azure Marketplace listing for Central India. Converted at ₹98 / USD. Compute / storage / bandwidth costs sit on top and are identical between paths.
The FX dimension — easy to miss, materially impactful
USD billing vs INR billing
PAYG carries direct USD exposure on every month's bill. BYOL via Ogma doesn't.
AWS and Azure bill the Indian customer in USD via the cloud invoice. Marketplace PAYG charges sit inside that USD invoice. Every Rupee weakening in the FX move from quote to actual-pay flows straight to the customer's P&L.
BYOL via Ogma is a one-time INR + GST invoice at the start of each annual term. Cloud compute remains USD-billed, but the FortiWeb licence portion is locked at the INR quote. For 18-36 month deployments this is non-trivial — the rupee depreciated ~3-5% / year against the dollar over each of the last several years.
When PAYG genuinely wins
BYOL doesn't win every case. PAYG is the right answer when:
PAYG is the right answer when:
- Workload duration is < 6 months (POC, project rollout, seasonal)
- Headcount or business model is genuinely uncertain
- You expect to switch the workload off and back on multiple times
- The cloud team has hard rules against partner-purchased licences
- The workload is for evaluation only — you'll re-architect or move
BYOL is the right answer when:
- Workload is production with 12+ month horizon
- You want predictable INR-locked WAF cost
- You want a partner relationship for support escalation
- You're sensitive to USD exposure on monthly cloud bills
- You have other Fortinet products and want unified renewal cycles
The migration path — moving from PAYG to BYOL mid-lifecycle
If you're already running FortiWeb-VM on PAYG and want to move to BYOL, the cutover is operationally minor:
- Ogma quotes the BYOL annual at the matching VM-S tier (Standard, Advanced, or Enterprise) with a term of 1, 3, or 5 years.
- You receive the FortiWeb licence file via the Fortinet customer portal.
- You apply the BYOL licence on the running instance — Fortinet supports in-place licence-mode conversion in the UI. The instance stays up.
- In the cloud provider portal, switch the underlying AMI / image to the BYOL variant (often a configuration flag on the same listing) or migrate to a BYOL AMI by EBS volume copy.
- You stop being PAYG-billed at the next billing cycle and start paying only EC2/Azure VM compute for that instance.
For most workloads this is a 1-2 hour change window during a maintenance slot — and the savings flow through the very next billing cycle.
Four questions to ask before clicking "Subscribe" on AWS Marketplace
Before the easy click
If you can answer "yes" to all four, PAYG is genuinely the right move
- Is this workload going to run for less than 6 months? If no, BYOL pays back before that.
- Are we OK with USD exposure on the monthly cloud bill for this FortiWeb portion? If no, BYOL locks INR.
- Do we not have a Fortinet partner relationship we want to involve for support? If no, BYOL routes through the partner.
- Is the workload size genuinely uncertain (might double or shut down)? If no, BYOL's tier is locked-in but cheaper.
FAQ
Is the FortiWeb feature set identical between PAYG and BYOL?
Can I run a mixed estate — some PAYG, some BYOL?
What about renewal — does BYOL auto-renew?
How long does it take to switch a running PAYG instance to BYOL?
What about term length — 1, 3, or 5 years?
Does GST on the BYOL invoice make BYOL more expensive than published USD?
Is there a published Ogma BYOL price list?
Can I see the exact savings for my workload?
Free BYOL vs PAYG TCO model
See the exact savings for your specific workload — finance-ready output
Ogma takes your VM tier, region, term horizon, and current monthly spend, and returns a month-by-month projection of BYOL vs PAYG against your workload. Five working days. No commitment to roll forward.
Request the TCO model or explore Ogma's FortiWeb BYOL on AWS / Azure landing pageSources (live marketplace + official Fortinet docs)
- aws.amazon.com/marketplace — FortiWeb-VM PAYG hourly rates by tier (Mumbai, ap-south-1; rate snapshot 30-May-2026)
- azuremarketplace.microsoft.com — FortiWeb-VM PAYG hourly rates (Central India; rate snapshot 30-May-2026)
- FortiWeb Ordering Guide (FWEB-OG-R25-20260318) — VM-S subscription tiers (VM01–VM16), bundle SKUs (Standard / Advanced / Enterprise), term options
- aws.amazon.com/ec2/pricing/on-demand/ — EC2 m5/m6i family hourly rates for ap-south-1 (the compute layer underneath PAYG and BYOL)
- azure.microsoft.com/en-in/pricing/details/virtual-machines/linux/ — Azure VM pricing for Central India
Related: FortiWeb deployment models — the complete guide · FortiWeb pricing India 2026 · FortiWeb 3-year TCO comparison · FortiWeb BYOL on AWS / Azure (Ogma landing)
Stay ahead of cyber threats
One short email a week — curated Indian cybersecurity news, Fortinet releases, DPDPA updates. No fluff.
