Your Own Dedicated FortiManager & FortiAnalyzer
Your own platform. Every customer separated. Nothing to build, nothing to run.
- Yours to control
- Every customer separated
- No infrastructure
One price covers licences, FortiCare, cloud and maintenance. From $20 per device at scale. Subscribed through AWS Marketplace, with buyer protection and no new vendor onboarding.
- Several hundred FortiGates under management
- Multi-customer estates in production
Every customer you win re-runs the same cost
We take that cost off you. The margin stays yours.
Infrastructure
Storage only grows. It never shrinks. The bill compounds every year, and you have the budget conversation again every year.
Automation
FortiOS moves. APIs change. Scripts rot. Whoever builds it maintains it forever. The build is the cheap part.
Skills
You hire a cloud engineer and a developer. You keep paying them whether the work is there or not. Your Fortinet people end up doing cloud work.
Consume the platform instead of building it
One comprehensive price covers licences, FortiCare, cloud resources and maintenance. You get cloud-managed control, security analytics and compliance-ready logs, without planning, implementing or monitoring any infrastructure on an ongoing basis.
Device onboarding becomes plug-and-play through FortiZTP. Your customer unboxes hardware at each site, connects it to the internet, and the full configuration provisions itself.
- No licences or support entitlements bought separately
- No cloud expertise required, to subscribe or to run it
- Full control and privacy of the platforms and all the data: device configs, logs and reports
Why multi-tenancy needs a dedicated platform
Different deployment models suit different customers. If you serve several under one roof, the requirement is specific.
-
Separation is the requirement
If you serve multiple customers, their configurations, policies and logs have to be genuinely separated. Not filtered in a shared view.
-
On FortiManager and FortiAnalyzer, ADOMs deliver it
ADOMs are the mechanism that partitions one customer’s estate from another’s, with delegated administration per domain.
-
That needs a platform you control
Running your own tenancy model means a dedicated FortiManager and FortiAnalyzer platform that you control, with advanced ADOM mode available.
-
That is exactly what this platform provides
Your own platform, your own ADOM structure, your own tenancy model, delegated access per customer. Serve one tenant or many, without limits.
A platform you control, on infrastructure you never touch
Your own dedicated platform
FortiManager and FortiAnalyzer provisioned for you alone. No shared tenancy, no noisy neighbours.
You hold the keys
SDxWORx retains no FortiManager or FortiAnalyzer login after launch. An API user exists only if you choose to create one.
Your own multi-tenancy
Serve one tenant or many, with delegated access per customer. Devices moved, changes made and CoPilot runs are all unmetered within your tier.
Unlimited log retention
One month or many years, your call, with free cloud storage for your backups. Storage never becomes a capacity conversation.
No separate Fortinet SKUs
Licences and FortiCare are included in the price, not bought per device.
Choose your cloud region
Run it near your customers’ sites, for latency and data residency.
You own the Fortinet layer. We own everything beneath it.
The Fortinet layer
Config, policy, tenancy, firmware, every credential. We hold no login after handover.
The cloud platform underneath
Infrastructure, storage, cloud security, capacity, availability. Planned, operated and paid for by us.
Firmware upgrades stay with you, exactly as they would if you self-hosted. We assist if you want us to.
The real cost is the team you have to keep
Building it yourself is not a project. It is a payroll line, and it never closes.
You carry a full squad, permanently
Cloud, networking, security and development, all four disciplines, retained whether the work is there or not. Lose one and the platform stalls.
Every change is a chance to break production
Policy pushed to the wrong tenant. A log pipeline that stops quietly. Human error on a shared management core is expensive and slow to find.
Your customers wait while you build
Procurement, racking, configuration and automation all sit between the contract and the first managed device. Every week of that is revenue you have not billed.
Costs climb, your price does not
Storage grows with log volume. Automation needs reworking with every FortiOS and API change. Our price stays flat and CoPilot keeps gaining capability at no extra cost.
Operational work, reduced to a spreadsheet upload
ChatOps wired into the FortiManager, FortiAnalyzer and AWS APIs, operating as a private API user in your own Slack channel.
Onboard at scale. Whole estates from one spreadsheet, blueprint and policy applied, FortiZTP ready.
Push policy and objects. Rules, policy packages and firewall objects, uploaded rather than typed.
Run reporting and storage. Scheduled reports and cloud storage, handled from the same channel.
Need something specific? We build custom workflows for your business, for an additional fee.
Nothing is retained
All CoPilot processing runs in a customer-dedicated account, and no data is retained after the function completes.
Type ztp. Fill in the template. Upload it back. Every device onboarded in minutes.
From purchase order to a provisioned estate
Four steps between the purchase order and a fully provisioned estate.
One $100 FortiDeploy SKU per customer PO
Adding a FortiDeploy SKU to the customer’s purchase order associates a single bulk cloud key with every device at the factory. Nobody manages individual serial numbers, and the estate arrives already keyed for zero-touch provisioning.
Just an AWS account to subscribe. No cloud expertise needed.
Order with a FortiDeploy key
One $100 SKU on the customer PO keys every device at the factory. No serial numbers to chase.
Subscribe and register
Pick your tier and cloud region on AWS Marketplace. Access details arrive within minutes.
Onboard the estate from Slack
Fill in the CoPilot template, upload it back, and every device lands configured in FortiManager.
Ship the hardware
Your customer unboxes on site and connects to the internet. FortiZTP provisions the rest.
Your unit cost falls as you grow
The more you manage, the less each device costs. One line on your AWS invoice.
$3,996 per month · $47,952 per year
25 GB of logs per day
Half the unit cost of Standard.
FortiManager, FortiAnalyzer and CoPilot included. Private offer.
CoPilot is included at no extra cost for subscriptions started before 1 December 2026. Automation, onboarding and reporting, on every tier.
Free cancellation within 5 days of launching the service
A defined launch window to prove the platform does what this page says it does.
Purchased through AWS Marketplace against your existing AWS terms, with no new vendor onboarding.
What the same capability costs to run yourself
Every row on the right is a cost or a responsibility that stays with you, every year, for as long as you run the platform.
Swipe the table sideways to see both columns.
| With SDxWORx | Build it yourself | |
|---|---|---|
| Time to ready | Under an hour | Weeks to months |
| Compute | Included | Your cost, two servers to size and run |
| Log storage | Included, unlimited | Your cost, and it grows every year |
| Automation | CoPilot included | Build it, then maintain it permanently |
| Headcount | None | Permanent headcount, retained either way |
| Scaling | Move between tiers | Provision or decommission hardware |
| Skills required | Fortinet only | Fortinet, plus cloud/DC, security and day-2 ops |
| You are responsible for | The Fortinet layer | Platform, hosting, networking, security, access and ops |
Modernize Procurement with AWS Marketplace
AWS Marketplace is an online software store that helps customers securely transact, subscribe, and immediately start using services with peace of mind. Fortinet offerings by SDxWORx are seamlessly integrated into AWS Marketplace, eliminating the need for new partner setups or direct billing.
With paperless transactions, customers leverage existing terms with AWS to streamline procurement with ease. Simplified billing appears as a line item on customers’ AWS invoices. This offering qualifies for AWS PPA commitment retirement (formerly EDP).
Fortinet Fabric-Ready
SDxWORx is dedicated to innovation, continuously exploring inventive solutions to address customer challenges and advance the adoption of cutting-edge SDx & Cloud technologies. As an active participant in the Fortinet Fabric-Ready Technology Alliance Partner program, we collaborate closely with Fortinet to pioneer an Integrated Security Management Solution.
This ‘as a Service’ offering has simplified our quoting and sales process significantly. By combining FortiManager and FortiAnalyzer costs into a single management line item, we’ve reduced complexity and closed business faster.Tier-1 Service Provider
We don’t publish customer names. Our customers run security estates, and a public client list is an attack surface we won’t create for them.
Frequently asked questions
Why do I need a dedicated platform to run multi-tenancy?
Serving several customers from one platform means their configurations, policies and logs have to be genuinely separated. On FortiManager that separation is delivered by ADOMs, administrative domains, which require a dedicated platform under your control, with advanced ADOM mode available. That is what you get here.
Who holds the FortiManager and FortiAnalyzer credentials?
You do. SDxWORx does not retain a FortiManager or FortiAnalyzer login after launch. An API user exists only if you choose to create one, for example so that CoPilot can act on your behalf.
Who handles FortiManager and FortiAnalyzer firmware upgrades?
You do, exactly as you would if you self-hosted, because the Fortinet layer is yours. We assist if you want us to, and you can equally do it yourself.
Can I run multi-tenancy for my own customers?
Yes. Use the service to serve one tenant or multiple tenants without limitations, with your own tenancy model and delegated access per customer.
What am I paying for after the first year?
The same things that would otherwise sit on your own books. Infrastructure and storage that grows with log volume. Automation that needs reworking with every FortiOS and API change. And the four disciplines needed to run both.
Your price is flat and your log retention is unlimited, while the build-it-yourself alternative rises on two of its three components. Every new customer you win is another onboarding, so the launch benefit repeats rather than being consumed once. Capabilities are added to CoPilot at no extra cost.
How does AWS Marketplace purchasing work, and does it retire PPA commitment?
You subscribe through AWS Marketplace against your existing AWS terms, with no new vendor onboarding and no direct billing relationship to set up. Billing appears as a line item on your AWS invoice. This offering qualifies for AWS PPA commitment retirement (formerly EDP).
What happens beyond 100 devices?
Unit cost drops. Beyond 100 devices we quote from $20 per device per month, covering FortiManager, FortiAnalyzer and CoPilot. Tell us your device count and expected daily log volume and we will price it.
Does CoPilot store my configuration data or credentials?
No. All CoPilot processing runs in a customer-dedicated account, and no data is retained after the function completes.
How do I onboard devices at scale without visiting each site?
Add a $100 FortiDeploy SKU to the customer’s purchase order. That associates a single bulk cloud key with every device at the factory, so nobody manages individual serial numbers. CoPilot then onboards the estate from an Excel template, and once each device is plugged into the internet on site, FortiZTP provisions its full configuration automatically.
Running a smaller estate?
Our shared platform starts at $161/month for up to 7 devices and extends on request. Cloud-delivered, bought direct.
Launch your own dedicated platform
Pick a time. We will show you the platform, CoPilot and the onboarding flow end to end.
Free cancellation within 5 days of launching the service.