FortiGate next-gen firewalls with FortiAnalyzer behavioural analytics, deployed and managed by 912.
912 standardizes on FortiGate hardware for enterprise perimeter security across our 10-country footprint. We supply, deploy, configure, and manage Fortinet stacks with documented runbooks, three-year licence validity, and our Security Shield tiered monitoring retainer layered on top.
What 912 Deploys
The specific Fortinet capabilities we scope.
Product names identify technologies in scope. They do not by themselves imply partnership, authorization, certification, or a universal recommendation.
FortiGate 121G-BDL-809-36
Enterprise next-gen firewall with SP5 hardware acceleration. The standard 912 deployment for branch and HQ perimeters carrying SSL/TLS inspection, SD-WAN, and IPS at scale.
FortiAnalyzer VM
Centralized log aggregation, behavioural threat analytics, and automated compliance reporting. Pairs with FortiGate deployments and feeds our Security Shield monitoring tiers.
FortiGate SD-WAN integration
Branch-to-HQ connectivity with QoS, MPLS failover, and centralized policy. Deployed alongside Safaricom MPLS or third-party carriers depending on the site.
Why Fortinet
How the technology fits an operating decision.
The fit depends on the estate, licences, prerequisites, integrations, people, support responsibilities, and alternatives.
Hardware acceleration matters at SSL inspection scale
Software-only firewalls collapse under enterprise SSL/TLS inspection load. FortiGate's SP5 hardware path handles inspection without dropping throughput — the reason we choose Fortinet for HQ deployments with deep-packet inspection requirements.
FortiAnalyzer closes the visibility gap
Firewalls without centralized log aggregation are blind to lateral movement. FortiAnalyzer's behavioural analytics catches the patterns that single-device alerts miss — and produces the compliance reports our regulated clients need without manual stitching.
Three-year licence economics
Fortinet's three-year licence validity matches the capex cycle most of our African clients run. After year three, ~USD 4,000 covers the next three-year OPEX renewal — predictable economics, not surprise bills.
Engagement Model
How 912 deploys Fortinet, step by step.
The cadence we follow on every Fortinet engagement. Slots into the broader 912 six-phase engagement model — see How We Work for the full delivery cadence.
Step 01Baseline assessment
We audit the existing perimeter, network topology, VPN posture, and policy hygiene before recommending a FortiGate sizing. No oversized hardware quotes.
Step 02Procurement & deployment
Standard commercial structure: 60% deposit on LPO, balance on delivery. Six months of configuration support included. Hardware ships via authorized Fortinet distribution.
Step 03Configuration & runbook
Firewall rules, IPS signatures, VPN profiles, AD integration, 2FA, and time-based access — all configured, tested, and documented in a handover runbook.
Step 04Security Shield monitoring
Post-deployment, the FortiGate stack feeds Security Shield (Basic / Standard / Premium tiers) for weekly rule reviews, vulnerability scans, brute-force log analysis, and incident response.
Proof Points
Source-backed specifics, not vague claims.
These figures and terms are explicitly attributed in the review note below. Final commercial terms depend on the current vendor quote and the signed 912 scope.
Standard FortiGate 121G + FortiAnalyzer VM bundle
Licence validity per Fortinet commercial terms
Configuration support included on every deployment
Typical 3-year OPEX renewal after initial licence period
Pricing pattern sourced from an anonymized 2024 manufacturing firewall engagement. Final quotes reflect current Fortinet pricelist and any project-specific scope.
Related 912 Services
The 912 service pages that lean on Fortinet.
Each service brief includes the Fortinet components, the broader engagement model, and the FAQs around scope, pricing, and support.
Scope your Fortinet engagement in one call.
We’ll walk through your environment, recommend the right product set, and produce a written proposal you can hold us to.