The FortiGuard Renewal Audit Worksheet
One row per FortiGate. Today's entitlements on the left, the renewal quote on the right — and the sheet flags every mismatch: missing serials, downgraded bundles or support tiers, terms that run past end of support, and gaps after expiry.
Zero prices in the file. Structure only — so you can check any partner's quote, including ours.
What's inside
Four tabs. Paste in your FortiCloud export and the quote, and read the flags.
Tab 1
README
Where to get each value (FortiCloud, Product Life Cycle page, the quote) and what the flags mean.
Tab 2
Device Register
One row per serial: current bundle, FortiCare tier, expiry and end-of-support vs. the quote. Flags appear automatically.
Tab 3
15-Point Checklist
Inventory, entitlements, lifecycle and commercials — with how to check each one.
Tab 4
Companion Products
FortiAnalyzer, FortiManager, FortiToken, EMS and others that should renew on the same anniversary.
What it catches
The renewal problems we see most often on quotes that come to us for a second opinion.
Entitlements
Silent bundle downgrade
UTP today, ATP on the quote — web and DNS filtering stop on renewal day.
Entitlements
Support tier drop
FortiCare tier changes between years with barely any change in the total.
Lifecycle
Renewing past end of support
Three years of subscriptions on a model that reaches EOS in eighteen months.
Inventory
Wrong serial list
Missing devices lapse silently; extra serials are money for nothing. HA secondaries get forgotten.
Commercials
Gaps and overlaps
Late renewals that pay for the lapsed period, or overlapping terms that pay twice.
Companions
Forgotten add-ons
A FortiAnalyzer that lapses a month after the firewalls means a CERT-In log-retention gap.
Check the quote before you sign it
Renewals are where most FortiGate money is spent over a device's life — and where the least scrutiny happens. The quote arrives two weeks before expiry, it looks roughly like last year's, and it gets approved.
Run this worksheet 60 days before your earliest expiry and you have time to fix the serial list, get a second quote and decide on any refresh. Or send us your quote and we'll run it for you through our renewal review.
📦 In the file
- ✅ 100 device rows, one per serial
- ✅ Today vs. quote, side by side
- ✅ Automatic flags for 6 mismatch types
- ✅ 15-point checklist
- ✅ Companion-product co-term tracker
- ✅ Zero prices — works on any partner's quote
Common questions
If yours isn't here, mail [email protected] and an engineer will reply.
Where do I get the "today" values?
FortiCloud → Asset Management lists every registered device with its serial, model, active entitlements and expiry dates. End-of-support dates are on the Product Life Cycle page of the Fortinet support portal.
Does it work for HA pairs and FortiGate-VMs?
Yes. Add one row per unit — both HA members — and use the HA Role column. For VMs, put the vCPU tier in the Model column and check it against what is actually deployed.
Why no prices?
Channel pricing moves with FX, deal size and the quarter. The worksheet checks structure — the right serials, tiers and dates — which is where most renewal mistakes happen.
Will Ogma review our renewal quote?
Yes. Send us the quote or your FortiCloud export. We'll run these checks, flag what doesn't match, and quote line-for-line against the same structure.