Fortinet FortiSOAR Cloud Threat Intel Management Service + FortiGuard Premium Threat Feed — 1 Year, 1 License

Elevate your security operations with a future-ready threat intelligence backbone. The Fortinet FortiSOAR Cloud Threat Intel Management Service paired with FortiGuard Premium Threat Feed delivers a tightly integrated, cloud-based solution that feeds your SOC with real-time, credible indicators. This 1-year, 1-license subscription renewal ensures uninterrupted access to automated threat enrichment, streamlined incident response, and seamless orchestration across Fortinet’s security ecosystem. Designed for modern security operations centers, this offering combines the power of FortiSOAR’s orchestration and automation with FortiGuard’s premium threat intelligence to help you detect, validate, and contain threats faster, with less manual effort and fewer false positives. Whether you’re protecting a single FortiSOAR deployment or coordinating across multiple teams, this renewal keeps your threat landscape up to date and your response playbooks primed for action.

• The FortiSOAR Cloud Threat Intel Management Service provides centralized control over threat intelligence, enabling you to ingest, normalize, correlate, and distribute indicators across your security workflows. This reduces the time security analysts spend on data wrangling and ensures consistent enrichment across incidents, alerts, and automations. With a cloud-based management plane, you gain scalable access, easier maintenance, and streamlined updates—so your team can focus on remediation rather than administration.
• FortiGuard Premium Threat Feed delivers a curated, high-fidelity stream of indicators, including IPs, domains, URLs, file hashes, and other context-rich data. By feeding trusted intelligence directly into FortiSOAR, your playbooks can automatically enrich incidents, prioritize threats, and trigger protective measures with minimal human intervention. The premium feed is designed to stay ahead of emerging campaigns, helping you recognize evolving tactics with greater confidence.
• Automation and orchestration are at the core of this solution. With FortiSOAR’s playbooks and workflows, threat indicators from FortiGuard are automatically consumed, mapped to your incident taxonomy, and used to drive automated responses. This results in faster containment, reduced dwell time, and consistent enforcement of security policies across teams—without sacrificing accuracy or oversight.
• Licensing that keeps pace with your needs. This is a renewal license for 1 year and 1 license, giving your organization predictable costs and uninterrupted access to critical threat intelligence services. The subscription model simplifies procurement, renewal reminders, and license management, helping you maintain continuous protection for your Fortinet ecosystem.
• Comprehensive coverage for a broad threat landscape. The combined FortiSOAR and FortiGuard offering supports protection against a wide array of threats, from malware and ransomware campaigns to phishing, botnets, exploit kits, and targeted intrusions. By aligning threat intel with automated response, you gain a proactive defense that reduces false positives while accelerating incident triage and evidence collection for forensics and compliance reporting.

Technical Details of Fortinet FortiSOAR Cloud Threat Intel Management Service + FortiGuard Premium Threat Feed

• Licensing: Subscription renewal for 1 license, valid for 12 months, renewable through Fortinet’s Customer Portal.
• Delivery model: Cloud-based Threat Intel Management Service integrated with FortiSOAR, enabling scalable, centralized control of threat feeds and enrichment workflows.
• Threat feeds: FortiGuard Premium Threat Feed provides curated indicators (IPs, domains, URLs, file hashes, and enrichment data) updated in real time to support rapid detection and response.
• Automation readiness: Seamless integration with FortiSOAR playbooks to automate enrichment, correlation, ticketing, and containment actions based on trusted indicators.
• Security coverage: Broad risk intelligence spanning malware campaigns, phishing infrastructure, botnets, exploit activity, and evolving threats across regions and industries.
• Support and renewal: Access to Fortinet support services and renewal management through the Fortinet Customer Portal for ongoing maintenance and updates.

How to install Fortinet FortiSOAR Cloud Threat Intel Management Service + FortiGuard Premium Threat Feed

Step 1: Sign in to your Fortinet Customer Portal and validate your account eligibility for the FortiSOAR Cloud Threat Intel Management Service and FortiGuard Premium Threat Feed renewal. Ensure your account has the appropriate permissions to manage licenses and connect FortiSOAR to FortiGuard feeds.

Step 2: Initiate the license renewal for 1 license covering a 12-month period. Confirm the renewal details, including start date, expiration date, and renewal terms. This process ensures continuous access to the cloud threat intel management features and premium threat feeds without interruption.

Step 3: In FortiSOAR, navigate to the Threat Intel or Feeds configuration area and authorize the FortiGuard Premium Threat Feed as a data source. Establish the connection using the provided credentials or API keys, and verify that indicators are streaming into FortiSOAR as expected.

Step 4: Configure ingestion and enrichment settings. Map threat indicators to your incident types and enrichment fields, set update frequencies (real-time or near real-time), and decide how indicators influence playbooks. This step ensures that the right data is fed into the right workflows for accurate detection and fast response.

Step 5: Review and tailor automation playbooks. Enable or customize existing FortiSOAR playbooks to automatically enrich incidents with FortiGuard indicators, correlate indicators with internal telemetry, and trigger restorative actions or containment steps. Test each playbook in a controlled environment to validate logic and outcomes before prod deployment.

Step 6: Validate the health of the feed and monitor performance. Use FortiSOAR dashboards to confirm indicator freshness, feed latency, and error rates. Set up alerts for interruptions or degraded performance to guarantee timely remediation and preserve SOC efficacy.

Step 7: Document governance and renewal processes. Record licensing details, renewal dates, and escalation paths for license issues. Establish a renewal calendar to avoid gaps in threat intelligence coverage, and align the renewal with your annual security review cycles.

Frequently asked questions

• What is included in the FortiSOAR Cloud Threat Intel Management Service + FortiGuard Premium Threat Feed renewal? This renewal provides cloud-based threat intel management within FortiSOAR and access to the FortiGuard Premium Threat Feed, including real-time indicators, enrichment data, and automated integration through FortiSOAR playbooks, valid for 12 months for 1 license.
• How does FortiGuard Premium Threat Feed enhance FortiSOAR? The Premium Threat Feed supplies high-quality indicators that enrich incidents, improve threat visibility, and enable automated responses. It complements FortiSOAR’s orchestration by delivering timely, context-rich data that strengthens detection and containment workflows.
• Do I need to renew annually, and how is renewal managed? Yes, this is an annual subscription. Renewal is managed through the Fortinet Customer Portal, with reminders and license provisioning designed to minimize downtime of threat intelligence services.
• Can this license be used across multiple FortiSOAR deployments? The license is for a single license and is typically scoped to a defined deployment. For multi-tenant or multi-deployment environments, verify licensing terms in the Fortinet portal or consult your Fortinet sales representative.
• What outcomes can I expect after enabling the integrated feed? Expect faster threat identification, more accurate enrichment of security events, streamlined incident workflows, and automated containment actions that reduce mean time to detect and respond.