FULLPROXY LIMITED

FortiGate Firewall-as-a-service (Fortinet)

It's a cloud-based offering that provides firewall functionality to organisations without the need for on-premises hardware. With FWaaS, the firewall functions are delivered as a service over the internet, allowing organizations to leverage robust security features without the overhead of managing physical firewall appliances.

Features

• Advanced packet filtering and application control
• SSL/SSH inspection for secure traffic inspection
• Sandboxing for advanced threat analysis
• Application-aware routing and quality of service
• Reporting and analytics
• Unified visibility and control access
• Machine learning and artificial intelligence for threat detection
• Advanced malware protection
• Layer 7 protection including URL and DNS filtering

Benefits

• Comprehensive network security, multi-layered defense against threats.
• Secure SD-WAN, optimised WAN performance, branch networking.
• High performance, scalability, maximum uptime through clustering.
• Centralised visibility, control, security orchestration, and automation.
• Simplified management, lower TCO through consolidation.
• Compliance support, regulatory adherence, granular controls.
• Industry-leading solutions, continuous innovation, future-proof security
• The service is supported by FortiGuard Lab’s Global Threat Intelligence

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@fullproxy.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

319825603835052

Contact

Chris Templeton / Ewan Ferguson
0141 291 5500
sales@fullproxy.com

About your service

• Service categories:

  Systems Infrastructure Software

  Security

  • Security analytics
  • Governance, risk and compliance

  Identity and access management

  • Access
  • Privilege

  Network security

  • Trusted network access and protection
  • Active application security

  Data security

  • Information protection
  • Digital trust
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Other Fortinet Security Fabric products
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Details can be provided by FullProxy.
• System requirements:
  • Requirements dependent upon environment in which products are deployed
  • See vendor website or documentation for details
  • Minimum requirements are available upon request

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Response time SLAs are negotiable with the client
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes, at an extra cost
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AAA
• Web chat accessibility testing: N/A
• Onsite support: Yes, at extra cost
• Support levels: Access to Support differs with contract purchased.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: Pre-sales consultancy Online Training User documentation; Online training; User documentation
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: No user data is retained as part of the service.
• End-of-contract process: Renewal notice issued 90 days prior to contract end date.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: N/A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Vendor can provide documentation on the web interface upon demand.
• Accessibility standards: None or don’t know
• Description of accessibility: N/A
• Accessibility testing: FullProxy can provide further information on request.
• API: Yes
• What users can and can't do using the API: Configuration, Analysis
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: The underlying resources (CPU and Memory) are under the control of the client and can be extended if required. The product is sold based on per instance therefore a client may have to purchase multiple instances if usage goes beyond initially anticipated levels.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: F5, Fortinet, AppViewX, Zscaler, Cloudflare

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Configuration data can be archived in a compressed multi-file archive or single file format and downloaded. The API can also be used to export the config.
• Data export formats: Other
• Other data export formats:
  • Text
  • Zip
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Text
  • Zip

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Availability of the deployed service is the responsibility of the customer
• Approach to resilience: This information can be made available upon request
• Outage reporting: This information can be made available upon request

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Role based access control
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Security governance policies available upon request
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Documentation on configuration and change management approach can be provided on request.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Documentation on configuration and change management approach can be provided on request.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: .Documentation on proactive monitoring approach can be made available upon request.
• Incident management type: Supplier-defined controls
• Incident management approach: Documentation on Incident Management approach can be provided on request
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: A free or trial version/PoC can be requested from FullProxy. More details can be provided upon request.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 2%
• Between £250,000 and £500,000: 2%
• Between £500,001 and £1,000,000: 3%
• Between £1,000,001 and £2,500,000: 3%
• Between £2,500,001 and £5,000,000: 4%
• Over £5,000,001: 4%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Citation
• ISO/IEC 27001 accreditation date: Tuesday 16 December 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Citation
• ISO 9001 accreditation date: Monday 15 September 2025
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 904aa49f-db40-4154-a6f2-5e0b4facbc53
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 9314a5a7-a652-4eed-b44b-36ef8f283aa2
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@fullproxy.com. Tell them what format you need. It will help if you say what assistive technology you use.