FortiWeb pricing in India 2026 — appliance, VM, BYOL and Cloud

Pawan Sharma Published 22 Jun 2026  ·  By Pawan Sharma  ·  Network Security  ·  14 min read

FortiWeb is partner-quoted across all five deployment shapes — there's no published Fortinet price list. The shape of the price depends on what you buy: HW is one-time CAPEX + annual renewal, VM-S is annual subscription per tier, BYOL is the same VM-S subscription priced separately from cloud compute, FortiAppSec Cloud is per-bandwidth + per-app seats, Container is per Fortinet's container subscription. This guide walks the pricing model across all five shapes so you can build an internal estimate before the quote.

5 shapes

Pricing dimensions

HW, VM, BYOL, FortiAppSec Cloud, Container — each has its own pricing logic.

3 tiers

Std / Adv / Ent

Bundle tier determines feature set, support, threat intel coverage.

1/3/5 yr

Term options

Multi-year typically saves 5-15% over rolling annual.

2 days

Quote turnaround

INR + GST quote returned in 2 working days from sizing call.

Pricing by deployment shape

Each shape has a different commercial structure. Picking the wrong shape for your workload can double your bill.

ShapePricing modelTermBest for
HW Appliance (CAPEX)One-time HW + annual service renewal (~25-35% of HW/yr)HW: forever; service: 1/3/5 yrDC workloads, 5+ year horizon, predictable CAPEX
VM-S SubscriptionAnnual subscription per VM tier (VM01-VM16)1/3/5 yrPrivate cloud, hypervisor flexibility
Cloud BYOLSame VM-S SKUs above; cloud carries compute only1/3/5 yrPublic cloud production workloads, INR billing
FortiAppSec Cloud SaaSBandwidth seat (25 Mbps each) + Application seat (1 app each)Per month / annualPublic-facing apps, multi-region, zero infra appetite
ContainerContainer subscription per Fortinet container pricingAnnualKubernetes / CI-CD-native estates

HW appliance pricing logic

HW appliances are bought as a Hardware Bundle SKU (one-time) + a Renewal Bundle SKU (annually after year 1). Bundle determines feature set:

ModelHTTP throughputTypical price band (HW + 1yr Std bundle, INR ex GST)Annual renewal band (Standard)
100F100 Mbps~₹2.5–4 L~₹70–110K
400F500 Mbps~₹6–9 L~₹1.7–2.5 L
600F1 Gbps~₹10–14 L~₹2.7–4 L
1000F2.5 Gbps~₹16–22 L~₹4.5–6.5 L
2000F5 Gbps~₹28–38 L~₹8–11 L
3000F10 Gbps~₹45–60 L~₹13–18 L
4000F70 GbpsPartner-quotedPartner-quoted

Illustrative INR ranges as of 30 May 2026, ex GST, ex distributor discount. Ranges reflect typical end-customer pricing bands; actual quote depends on volume, term, bundle tier, and current distributor margins. Treat as order-of-magnitude estimate. Advanced bundle: typically +25-40% over Standard. Enterprise bundle: typically +30-50% over Advanced. Multi-year (3/5 yr) typically saves 5-15% over rolling 1-yr. HA pair = 2× the figures above.

VM-S subscription pricing logic

VM-S subscription is annual per VM tier per bundle. Cloud BYOL uses the same VM-S subscription — only the cloud compute (EC2 / Azure VM) sits outside the FortiWeb quote.

VM TierHTTP throughputStandard annual band (INR ex GST)Advanced annual bandEnterprise annual band
VM0125 Mbps~₹1.5–2.5 L~₹2.5–4 L~₹4–6 L
VM02100 Mbps~₹3–4.5 L~₹4.5–7 L~₹7–10 L
VM04500 Mbps~₹6–9 L~₹9–13 L~₹13–18 L
VM083 Gbps~₹11–16 L~₹16–22 L~₹22–30 L
VM166 Gbps~₹18–26 L~₹26–36 L~₹36–48 L

Illustrative INR ranges as of 30 May 2026, ex GST. Annual subscription pricing.

FortiAppSec Cloud pricing logic

FortiAppSec Cloud has two interlocking SKUs you must buy together:

Bandwidth seat

25 Mbps per seat. Buy as many seats as your peak Mbps / 25. Per-plan SKU (Standard / Advanced / Enterprise).

Application seat

1 web app per seat. Buy as many as you protect. Per-plan SKU.

SOCaaS add-on

Per-application priced; included with Enterprise plan. Required-when-purchased clause means all apps in the account must carry it.

Standalone services

GSLB (Global Server Load Balancing) priced separately per QPS + health-check count.

Bundle tier — Standard, Advanced, Enterprise

The bundle is the second sizing dimension. Same tiering applies across HW, VM-S, and FortiAppSec Cloud.

FeatureStandardAdvancedEnterprise
OWASP Top 10, signatures, IP rep, AV, FortiAI Assist
Cloud Sandbox, Credential Stuffing Defense, Threat Analytics
Advanced Bot Protection, Client-Side Protection, DLP
SOCaaSAdd-onAdd-onIncluded
Typical price step over previous tierbaseline+25-40%+30-50%

If you handle card payments (any PCI DSS 4.0 exposure), Enterprise is effectively non-optional. Client-Side Protection addresses PCI DSS 4.0 requirements 6.4.3 and 11.6.1, which became enforceable in 2025-26.

What drives the price

Throughput class

Largest single driver. VM01 to VM16 step roughly doubles cost at each tier. HW 100F to 4000F has wider price spread.

Bundle tier

Std → Adv: +25-40%. Adv → Ent: +30-50%. Pick by workload need, not by sales pressure.

Term length

3-yr: 5-10% off rolling annual. 5-yr: 10-15% off. Working-capital trade-off.

HA / multi-region

Active-passive or active-active: both 2× licence. Multi-region: per-region licence.

Add-ons

SOCaaS, FortiAI extended subscription, FortiManager / FortiAnalyzer integration.

Currency lock

BYOL via Ogma: INR + GST locked at quote. PAYG: USD-billed via cloud invoice with monthly FX exposure.

FAQ

Why doesn't Fortinet publish a price list?
Distribution policy. Pricing across the entire Fortinet portfolio (FortiGate, FortiWeb, FortiAnalyzer, FortiMail etc.) is partner-quoted. This is normal for the product class. Ogma sizes the right shape + tier + term and returns an INR quote in 2 working days.
What's the typical Standard vs Advanced vs Enterprise price step?
Advanced typically adds 25-40% over Standard (Sandboxing, ML, Threat Analytics, Credential Stuffing Defense). Enterprise typically adds 30-50% over Advanced (Advanced Bot Protection, Client-Side Protection, DLP, included SOCaaS). Specific deltas vary by model and term — Ogma quotes against your specific config.
Is the renewal cost the same as the new licence cost?
Renewal is typically 25-35% of the new HW cost per year for appliances (FortiCare premium + FortiGuard subscriptions). For VM-S subscriptions, renewal is the same annual subscription cost continued. FortiAppSec Cloud is continuous subscription.
Are multi-year terms worth it?
Usually yes. 3-year terms save ~5-10% over rolling 1-year. 5-year saves ~10-15%. Trade-off is renewal-management overhead vs working-capital commitment. For stable workloads with 3+ year horizons, multi-year wins on TCO.
What about FortiManager / FortiAnalyzer pricing?
Quoted separately. For multi-FortiWeb estates, FortiManager (policy push) + FortiAnalyzer (log retention) are standard. FortiManager is appliance/VM-based; FortiAnalyzer ditto with cloud option. We bundle these in the quote when sizing the FortiWeb estate.
Does the BYOL price include cloud compute?
No — BYOL is licence-only. You pay AWS / Azure separately for the EC2 / VM compute. PAYG via marketplace bundles compute + licence. See our BYOL vs PAYG post for the math.
Can I co-term FortiWeb with my FortiGate renewals?
Yes — co-term means renewals fall on a single date. Cleaner P&L, single PO, easier budget cycle. Common pattern when customer already runs FortiGate / FortiMail / FortiClient.
What's included in the 2-day quote turnaround?
Sizing call (1 hr), Ogma builds the BoM (shape + tier + term + HA + add-ons), distributor quote confirmed, INR + GST returned. The 2-day turnaround assumes you can answer sizing questions in the call.

Get a sized FortiWeb quote in INR

Right shape, right tier, right term — quote in 2 working days

Ogma sizes against your workload (throughput, apps, HA, PCI scope) and returns an INR + GST quote with sized HW model or VM tier and bundle recommendation.

Request the sized quote or explore the FortiWeb pricing landing

Sources

Related: BYOL vs PAYG savings math · 3-year TCO comparison · FortiWeb pricing landing

Stay ahead of cyber threats

One short email a week — curated Indian cybersecurity news, Fortinet releases, DPDPA updates. No fluff.


Cato Firewall as a Service
Cato ZTNA — Zero Trust Network Access
Cato SASE Solution