Fortinet FortiRecon External Attack Surface Management in Africa
Gain an outside-in view of the digital assets, services, vulnerabilities, configuration weaknesses, exposed credentials, and web applications that attackers may identify before your internal teams do. FortiRecon External Attack Surface Management gives security and risk teams a structured way to discover internet-facing exposure, understand which findings matter most, and coordinate remediation across complex business environments. FourTeck helps organizations select the correct monitored-asset tier, subscription term, supporting modules, and deployment approach for their operational and regulatory needs.
Request QuoteCheck Africa Availability
Quick Product Information
Fortinet
FortiRecon External Attack Surface Management
Cloud-delivered security subscription
Discover and assess internet-facing digital exposure
Monitored asset tier, bundle, and subscription term
SaaS service registered through FortiCloud
SOC, risk, vulnerability, infrastructure, and security teams
Contact FourTeck for current licensing options
Pre-sales review, quote help, and renewal guidance
Features vary by selected bundle and add-ons
Product Overview
The modern business perimeter is no longer defined by one office, one data centre, or one firewall. Public websites, cloud workloads, remote access gateways, APIs, externally reachable servers, acquired companies, temporary campaign domains, third-party services, and forgotten development environments can all become part of an organization’s attack surface. Internal asset inventories often provide only a partial picture because they reflect what teams believe they own. An attacker begins from a different position: they investigate what is visible from the internet, connect related infrastructure, test exposed services, and search for weaknesses that may not appear in a traditional internal list.
Fortinet FortiRecon External Attack Surface Management is designed to provide that outside-in perspective. The service identifies known and unknown external assets associated with an organization, brings them into a central view, and highlights security issues that may increase the likelihood of compromise. Depending on the selected bundle and entitlements, teams can review domains, subdomains, IP addresses, address ranges, autonomous system information, exposed ports, web applications, certificate concerns, leaked credentials, configuration problems, and vulnerabilities connected to public-facing infrastructure. This helps replace fragmented spreadsheets and occasional manual checks with a repeatable exposure-management process.
The value is not simply finding more items. Security teams already face alert overload, limited staff, and multiple remediation owners. FortiRecon supports risk-based prioritization so analysts can focus on exposures that present greater business concern rather than treating every finding as equal. The platform can help security operations, vulnerability teams, network teams, cloud administrators, and business application owners discuss findings using a shared record. It also supports executive communication by presenting the attack surface in a way that links technical exposure to business risk and remediation progress.
For Africa organizations expanding digital services, migrating workloads to public cloud, integrating acquired businesses, or operating across several countries, external visibility is especially important. Growth can create unmanaged domains, inconsistent ownership, legacy public services, and supplier connections that are difficult to track centrally. FourTeck assists buyers with service scoping, monitored-asset estimates, bundle selection, licensing terms, optional modules, and project quotation. The objective is to match the subscription to the actual environment rather than selecting a tier only by product name.
Key Business Benefits
External attack surface management becomes useful when it changes decisions, not when it simply produces another dashboard. The following benefits explain how FortiRecon can support practical security governance, resource allocation, and exposure reduction.
◆ Discover Unknown Exposure
Digital assets can appear outside approved inventories through cloud projects, subsidiaries, acquisitions, agency work, temporary environments, and individual business units. Continuous discovery helps teams find externally visible infrastructure that may otherwise remain unmanaged. Earlier identification reduces the chance that forgotten services, old domains, or untracked hosts stay exposed without a responsible owner.
◆ Prioritize Remediation Work
A long list of findings can overwhelm technical teams. Risk context helps organizations decide what should be fixed first, who should own the work, and which exposures require immediate escalation. Prioritization supports a more defensible remediation programme because decisions can consider exploitability, asset importance, exposure, and potential business impact.
◆ Improve Asset Accountability
Security findings often remain open because asset ownership is unclear. A structured external inventory makes it easier to group assets, assign responsible teams, separate legitimate services from false positives, and document action. This improves collaboration among security, infrastructure, cloud, development, compliance, and business units that share responsibility for reducing exposure.
◆ Support Digital Growth Safely
New applications, online services, cloud migrations, and acquisitions can increase revenue and service reach, but they also expand the internet-facing footprint. FortiRecon helps security leaders monitor that growth and identify gaps without blocking business initiatives. This gives management a clearer way to balance digital expansion with practical exposure controls.
◆ Strengthen Reporting
Executives and audit teams need more than raw vulnerability counts. A centralized view of discovered assets, notable issues, exposure trends, and remediation status helps security leaders communicate what is changing and where attention is needed. Better reporting supports governance meetings, risk reviews, investment decisions, and accountability across technical and business teams.
◆ Reduce Manual Reconnaissance
Periodic manual checks can become outdated quickly and may depend heavily on specialist staff. A subscription service provides a repeatable process for discovery and assessment, allowing skilled analysts to spend more time validating important findings, coordinating fixes, and improving controls instead of repeatedly rebuilding the same external inventory.
Product Highlights
FortiRecon is delivered as a service rather than a hardware appliance. This matters because the platform is intended to observe an organization from outside its perimeter and continually update the relationship between public assets, exposed services, and associated security issues. Buyers do not size the solution by processor, memory, or rack space. They size it by monitored assets, required service modules, subscription duration, add-on capacity, and the amount of operational support needed around the findings.
Identifies external domains, subdomains, public addresses, address ranges, and related internet-facing assets associated with the organization.
Surfaces exposed services, vulnerable technologies, certificate issues, configuration weaknesses, and other findings that deserve review.
Helps teams identify credential exposure associated with monitored domains and incorporate it into broader response activity.
Provides visibility into externally reachable web applications and helps teams review exposed endpoints and identified weaknesses.
Supports connections with selected cloud platforms and Fortinet technologies, with broader workflow options available through the service.
Organizations can choose EASM alone or combine it with Brand Protection and Adversary Centric Intelligence, subject to licensing.
Exact capabilities depend on the ordered bundle and current Fortinet licensing terms. Continuous scanning, analyst support, takedown allocation, executive monitoring, vendor monitoring, playbook capacity, and other entitlements should be confirmed during quotation. FourTeck can help translate a security requirement into an appropriate license structure so that the proposal reflects the number of assets and the operating model of the customer.
Technical Specifications and Licensing
| Specification | Details |
|---|---|
| Brand | Fortinet |
| Product family | FortiRecon |
| Service type | Continuous threat exposure management and external attack surface management subscription |
| Delivery model | SaaS, registered and accessed through FortiCloud services |
| Core bundle options | EASM; EASM with Brand Protection; EASM with Brand Protection and Adversary Centric Intelligence |
| Monitored asset tiers | Available in tiers from up to 500 monitored assets through large enterprise tiers reaching up to 1,000,000 assets; final selection is configuration dependent |
| Subscription terms | Multiple term options are available depending on SKU and commercial programme; confirm current one-year, multi-year, new, and renewal options |
| External asset discovery | Domains, subdomains, public IP addresses, IP blocks, autonomous system information, exposed services, and related assets |
| Security issue coverage | Vulnerabilities, exposed ports and services, certificate concerns, configuration issues, web application findings, and other identified risks |
| Credential monitoring | Leaked credential visibility associated with the organization and monitored domains |
| Asset management | Asset grouping, tagging, status management, manual additions, removals, and false-positive handling |
| Integrations | Selected integrations include AWS, Microsoft Azure, Google Cloud Platform, FortiDAST, FortiGate, REST API, and orchestration options; confirm bundle requirements |
| Optional services | Internal attack surface management, additional takedowns, executive monitoring, vendor monitoring, and added orchestration capacity, subject to current licensing |
| Support | FortiCare and analyst-support entitlements vary by bundle and SKU; review the selected commercial option |
| Availability | Subject to license type, tier, subscription term, supplier status, regional commercial terms, and order approval |
How to choose the correct license
Start by estimating the number of external assets the service may discover, not only the assets in the current configuration database. Include public domains, subdomains, cloud services, public IP ranges, subsidiaries, acquired businesses, internet-facing applications, and other infrastructure associated with the organization. Choose a tier with sensible room for growth, because digital expansion and improved discovery can increase the monitored count after onboarding.
Next, decide whether the requirement is limited to external asset discovery and issue assessment or also includes brand impersonation, phishing monitoring, executive exposure, threat actor intelligence, vendor intelligence, and automated workflows. Confirm the required term, whether the order is new or a renewal, and whether optional services are needed. FourTeck can review these details with the buyer and prepare a quote based on a specific Fortinet SKU rather than a generic service description.
Configuration and Buyer Guidance
A successful FortiRecon deployment begins with a clear operating model. The service can discover exposures, but the organization still needs people and processes to validate ownership, assess business impact, assign remediation, track exceptions, and close findings. Before purchasing, identify the team that will administer the platform and the groups that will receive remediation tasks. In many businesses, the primary owner is the security operations centre or vulnerability management team, while network, cloud, application, and infrastructure teams complete the corrective work.
1. Define the monitored scope
List the parent domains, registered entities, public IP ranges, cloud accounts, subsidiaries, brands, and known internet-facing applications that should anchor discovery. A strong seed list helps the onboarding team establish a reliable organizational footprint.
2. Estimate asset growth
Consider planned cloud migrations, new digital channels, mergers, new branches, and business-unit projects. A license tier that fits only today’s known inventory may leave little space when unknown assets are discovered or the business expands.
3. Select the bundle
Choose EASM for outside-in visibility. Add Brand Protection where impersonation, phishing, rogue applications, executive risk, or online reputation are important. Add Adversary Centric Intelligence where the security team needs curated threat actor, darknet, supply-chain, and technical intelligence.
4. Plan remediation workflow
Decide how findings will move into ticketing, orchestration, incident response, or change-management processes. Confirm whether standard integrations are sufficient or whether API work and custom playbooks are required.
5. Review access and governance
Define administrators, analysts, business viewers, reporting expectations, and escalation paths. Organizations operating across multiple entities should agree how assets are grouped and which teams may view each part of the environment.
6. Confirm commercial terms
Validate the exact SKU, term, asset capacity, new or renewal status, included support, add-on entitlements, billing currency, and renewal date. Ask for an itemized quote so future expansion costs are easier to understand.
Buyers should also consider data handling, internal approval requirements, regulatory obligations, and security review procedures for cloud-delivered services. Confirm whether procurement needs a data-processing review, vendor risk assessment, or legal assessment before activation. FourTeck can assist with product and licensing clarification, while the customer’s security, legal, compliance, and privacy teams should approve internal governance requirements.
Ideal Business Use Cases
Financial Services Exposure Monitoring
Banks, insurers, payment companies, and fintech businesses operate high-value online services and face strong regulatory expectations. FortiRecon can help identify public assets, exposed services, certificate concerns, web application risks, and leaked credentials that may affect customer-facing systems. The platform supports structured review across security, infrastructure, fraud, digital banking, and compliance teams.
Telecommunications and Service Providers
Telecom operators and service providers manage large public address ranges, multiple platforms, customer portals, cloud services, and partner connections. Outside-in discovery helps identify forgotten services, inconsistent exposure, and assets created by distributed technical teams. Large monitored-asset tiers can support environments where the external footprint extends far beyond a small list of registered domains.
Government and Public Services
Government departments, agencies, municipalities, and public institutions often maintain many domains, citizen portals, legacy systems, and outsourced applications. The service can help central security teams develop a more complete external inventory and prioritize exposures across decentralized owners. Reporting also supports governance discussions where technical remediation must be coordinated across several departments.
Healthcare and Education Groups
Hospitals, clinics, universities, and education networks frequently operate websites, learning platforms, research systems, remote access services, and externally hosted applications. Limited security staffing can make manual discovery difficult. FortiRecon helps teams identify internet-visible assets and focus remediation effort on issues with greater exposure or business relevance.
Multi-Company and Acquisition Oversight
Groups with subsidiaries or recent acquisitions may not have a unified asset inventory. Attackers can target the least controlled entity as a route into the wider organization. External discovery supports early assessment of acquired domains, public infrastructure, and security issues while integration and remediation plans are still being developed.
Managed Security and Consulting Services
Managed security providers, system integrators, and consulting teams can use structured external exposure information to support customer risk reviews, remediation programmes, and ongoing monitoring services, subject to licensing and service agreements. Clear asset grouping and reporting can improve communication between the provider and customer stakeholders.
The service is also relevant to retailers, logistics companies, manufacturing groups, energy operators, hospitality businesses, technology firms, and any organization whose digital footprint has grown faster than its asset records. The strongest use case exists where teams need continuous visibility and have a defined process for acting on what the platform discovers.
FortiRecon Asset Discovery and Outside-In Visibility
External exposure begins with ownership. Security teams cannot protect what they do not know exists, yet ownership on the internet is often indirect. A forgotten subdomain may point to an old cloud service. A public address block may contain systems managed by another department. A subsidiary may operate a separate website and remote-access service. A development team may create a test endpoint without adding it to the central inventory. Attackers do not need an approved asset list; they connect these signals through public records, domain relationships, certificate data, network information, service fingerprints, and observable infrastructure.
FortiRecon uses an outside-in approach to map assets associated with the monitored organization. The goal is to identify both known and previously unknown elements, then provide analysts with details that support ownership validation. Assets can be reviewed, tagged, grouped, manually added, removed, or marked as false positives. This is important because discovery is not a one-time exercise. Digital estates change continuously as services are launched, migrated, retired, acquired, or transferred to third parties.
For the buyer, the practical advantage is a more credible external inventory. A centralized view helps security leaders compare discovered exposure with internal records, identify gaps, and establish accountability. It also supports projects such as merger assessments, cloud migration reviews, domain consolidation, public IP clean-up, certificate governance, and reduction of obsolete services. Teams can use the findings to ask better questions: Who owns this service? Is it still needed? Is the software maintained? Should the port be open? Is the domain legitimate? Does the asset contain sensitive functionality?
Asset discovery should be paired with a validation process. Not every discovered relationship means the organization directly controls the asset, and not every public service is a problem. The platform provides evidence and context, while internal teams confirm ownership and acceptable use. FourTeck recommends identifying asset owners early in the project so that newly discovered items can be investigated quickly rather than accumulating without action.
FortiRecon Risk Prioritization and Remediation Focus
Discovery alone can increase workload because it reveals more assets and more issues than the team previously knew about. A useful exposure-management programme therefore needs prioritization. Security teams must distinguish between a low-impact informational finding and an exposure that combines a valuable asset, exploitable weakness, internet reachability, and evidence of active adversary interest. Treating every item as urgent creates fatigue, weakens credibility, and makes it harder to direct limited engineering time toward meaningful risk reduction.
FortiRecon is intended to provide context around security issues so organizations can work in a controlled order. Findings may include vulnerable services, unsafe configurations, certificate problems, exposed ports, web application weaknesses, leaked credentials, and other external concerns. Analysts can review the asset, issue details, related evidence, and remediation guidance, then determine the appropriate response based on internal business importance. This supports a workflow where the platform identifies and organizes exposure while the customer applies its own risk tolerance, asset criticality, change process, and regulatory obligations.
The business benefit is improved use of security and infrastructure resources. A vulnerability team can focus on public assets with higher exploitation concern. Network engineers can review services that should not be internet-accessible. Application owners can address exposed endpoints and obsolete technologies. Identity teams can respond to leaked credentials. Management can track whether the most significant issues are decreasing rather than relying on a total count that may rise as discovery improves.
Buyers should define remediation targets before onboarding. Decide how quickly critical, high, medium, and low findings should be reviewed; who may accept an exception; how false positives are handled; and how evidence of closure is recorded. Without these decisions, even good exposure information may remain unused. FourTeck can help buyers clarify the platform capabilities and integration options, while the organization should establish its own governance, service levels, and escalation authority.
FortiRecon Integration, Reporting, and Security Workflow
External exposure affects several operational teams, so the information must move beyond the platform dashboard. FortiRecon supports integrations with selected cloud and Fortinet technologies, an open REST API, reporting functions, and security orchestration capabilities. Depending on the bundle and entitlement, organizations can connect findings to workflows that assign tasks, enrich incidents, generate indicator reports, or trigger predefined and custom playbooks. The aim is to reduce the delay between discovery and action.
Cloud integrations can help relate the outside-in view to services running in AWS, Microsoft Azure, or Google Cloud Platform. FortiGate and FortiDAST connections can support broader Fortinet security workflows. The API allows organizations or service providers to retrieve relevant information for dashboards, ticketing systems, governance reports, or internal tools, subject to current interface capabilities and customer development resources. Security Orchestration can assist with repetitive tasks, but buyers should verify included playbook capacity and any add-on requirements.
Reporting should serve different audiences. Analysts need asset and issue detail. Infrastructure owners need specific remediation actions. Security leaders need trends, aging, ownership, and high-risk exposure. Executives need a concise explanation of business relevance and progress. Before implementation, identify these audiences and decide which reports will be issued weekly, monthly, or during risk committee meetings. A clear reporting plan prevents the platform from becoming a specialist tool that provides little visibility to decision-makers.
Integration effort is configuration dependent. Standard connectors may be straightforward, while custom workflows can require API design, authentication planning, data mapping, testing, and ongoing maintenance. Buyers should include this work in project planning and determine whether internal staff, a managed provider, or professional services will own it. FourTeck can help align licensing and pre-sales requirements with the intended workflow so the selected subscription supports the planned operational model.
What Buyers Should Check Before Purchase
FortiRecon should be quoted against a defined security requirement, not as a generic software item. The monitored-asset tier, service bundle, term, support level, and optional capacity can materially change the proposal. Before requesting a quote, buyers should prepare enough information for FourTeck to recommend a specific SKU and explain any dependencies.
Configuration Fit
Confirm whether the requirement is EASM only, EASM with Brand Protection, or the broader bundle that also includes Adversary Centric Intelligence. Explain the business problem, not only the desired product name. A financial institution concerned about phishing and executive impersonation may need a different bundle from a manufacturer focused mainly on unknown public assets and vulnerable services.
Asset Count
Estimate public domains, subdomains, IP addresses, address ranges, subsidiaries, cloud services, and externally reachable applications. Ask how monitored assets are counted and what happens when usage approaches or exceeds the licensed capacity. Select a tier that allows for unknown discoveries and expected growth.
Subscription and Renewal
Verify the term, activation requirements, start date, renewal date, support entitlement, and whether the quote is for a new subscription or renewal. Ask how add-ons align with the main term and whether expansion during the subscription is possible. Long-term cost should include future asset growth and optional services, not only the first order.
Compatibility and Workflow
List the cloud platforms, firewalls, vulnerability tools, ticketing systems, orchestration platforms, and reporting tools involved in remediation. Confirm which integrations are native, which require additional licensing, and which may need API development. Include authentication, data access, and change-management requirements in the project scope.
Operational Ownership
Identify the platform administrator, analyst users, remediation owners, executive recipients, and support contacts. Decide how frequently findings are reviewed, how tickets are raised, and how exceptions are approved. The service provides value when the organization has a routine for validating and reducing exposure.
Add-ons and Required Services
Ask whether internal attack surface management, extra takedown credits, executive monitoring, vendor monitoring, analyst support, or added playbook executions are required. Confirm default entitlements and current limits. Optional services should be mapped to a specific operational need so the customer does not under-license or purchase unused capacity.
Data and Governance Review
Cloud security services may require privacy, legal, procurement, and vendor-risk review. Determine who will approve the service, what organizational data will be entered, how users will authenticate, and how access will be removed. Check internal policy requirements before the planned activation date to avoid procurement delays.
Quote Preparation
Provide the legal organization name, countries of use, estimated asset count, required modules, subscription term, new or renewal status, preferred currency, billing location, support expectations, deployment timeline, and any project documentation requirements. This information allows FourTeck to prepare a more accurate and comparable proposal.
Also ask for guidance on similar bundles and replacement options if a preferred SKU is unavailable or has changed. Fortinet licensing evolves, and a commercial description may differ from an older procurement record. FourTeck can review the current ordering structure and help the buyer compare the requested scope with available tiers without assuming that a previous part number remains the best fit.
Africa Availability and Service Support
FourTeck supports FortiRecon inquiries across Africa with assistance for license interpretation, monitored-asset sizing, bundle selection, term review, quote preparation, procurement documentation, and regional delivery coordination. Availability may vary according to the requested SKU, asset tier, subscription duration, new or renewal status, support entitlement, supplier position, billing country, currency, order quantity, and commercial approval.
Because FortiRecon is a service subscription, purchasing involves more than arranging physical delivery. Buyers should confirm the correct company details, FortiCloud account requirements, activation process, administrator contacts, start date, and entitlement registration. FourTeck can help the procurement and security teams align these commercial details before order placement. Customers should also confirm internal readiness, including the owners who will administer the service and respond to findings after activation.
Warranty guidance for a cloud-delivered subscription is different from hardware warranty handling. The relevant considerations are service support, entitlement term, renewal, technical assistance, and current Fortinet service conditions. FourTeck can help clarify the support line items shown in a quotation and guide customers toward the documentation needed for approval. Exact service commitments remain subject to the purchased SKU and vendor terms.
Africa Country and Regional Coverage
Businesses across Africa, including Kenya, Uganda, Nigeria, Ghana, Tanzania, Rwanda, Ethiopia, South Africa, Zambia, Botswana, Senegal, and nearby regional markets, can contact FourTeck for product availability, license review, configuration guidance, and quotation support. The team can assist organizations ranging from growing companies and educational institutions to banks, telecom operators, government agencies, healthcare providers, and large enterprise groups.
Regional requirements can differ. Some buyers need centralized licensing for one legal entity, while others operate several subsidiaries and require a coordinated proposal. Billing currency, tax treatment, procurement documentation, local compliance review, activation contacts, and service start dates may also vary. FourTeck helps collect these requirements and coordinate the commercial request so the buyer receives an option aligned with the intended countries of use.
For project supply, share the expected rollout schedule, number of entities, estimated asset count for each environment, preferred subscription term, and whether onboarding or managed assistance is required. Early planning is useful where the purchase must pass through tender, board, regulatory, donor, or public-sector approval processes.
GCC, Middle East and Africa Availability
FourTeck Africa can support product inquiries for organizations across Africa while also guiding regional technology requirements through selected FourTeck platforms serving GCC and Middle East markets. Businesses with operations in the UAE, Saudi Arabia, Qatar, Oman, Bahrain, Kenya, Uganda, Nigeria, Ghana, Tanzania, Rwanda, Ethiopia, and South Africa can request assistance with licensing structure, cross-regional requirements, and commercial coordination.
Availability, billing, delivery coordination, service activation, warranty guidance, and configuration support may differ by country, legal entity, supplier route, asset tier, subscription term, and order value. A multinational buyer should identify the contracting entity, service users, deployment countries, preferred billing currency, and whether one centralized entitlement or separate regional orders are required. These details can influence the most practical procurement path.
Other Fortinet Security Options Buyers May Consider
FortiRecon addresses exposure visibility outside the traditional perimeter. Many organizations combine it with preventive controls, centralized analytics, incident management, and vulnerability validation. The following solutions serve different roles and should be selected according to the broader security architecture rather than treated as direct replacements.
FortiGate Next-Generation Firewall
Suitable for controlling network traffic, applying security inspection, supporting VPN access, and protecting branches, campuses, data centres, and cloud environments. FortiGate provides enforcement, while FortiRecon helps identify exposure that exists across the wider digital footprint.
FortiAnalyzer
Designed for centralized log collection, analytics, reporting, event investigation, and security visibility across supported Fortinet deployments. It can complement an exposure programme by helping teams review activity and operational security data from controlled environments.
FortiSIEM
Suitable for organizations that need security information and event management, infrastructure monitoring, correlation, and broader operational visibility. It serves a different role from EASM but can contribute to centralized detection and incident-management processes.
FortiSOAR
Built for security orchestration, automation, incident response, and coordinated workflow. Organizations with mature SOC processes may consider it where exposure findings and other security alerts need richer case management and automated response across multiple tools.
FortiDAST
Designed for dynamic application security testing of web applications and APIs. It can complement external asset discovery where teams need deeper testing and validation of application-layer vulnerabilities under an approved assessment programme.
FortiRecon Brand Protection
A suitable extension where the business must monitor typosquatting, phishing, impersonation, rogue applications, executive exposure, fraudulent social accounts, or external brand abuse. It can be purchased as part of an appropriate FortiRecon bundle.
Why Buyers Choose FourTeck
Cybersecurity subscriptions can be difficult to procure because a familiar product name may represent several asset tiers, bundles, terms, support entitlements, and renewal conditions. FourTeck approaches the request as a business requirement rather than simply sending the first matching part number. The team can review the customer’s desired scope, clarify what information is needed, and coordinate a quote that identifies the relevant license line items.
FourTeck works with procurement teams, IT managers, security leaders, resellers, integrators, and project buyers who need practical commercial assistance.
Buyers can request help comparing EASM, Brand Protection, intelligence bundles, asset tiers, terms, and optional service capacity.
The team helps organize the required commercial details so the proposal can be reviewed by security, finance, procurement, and management stakeholders.
FourTeck supports inquiries involving different African markets, multinational entities, project schedules, currencies, and regional procurement routes.
Where the requirement includes firewalls, analytics, orchestration, application testing, cloud security, or managed services, related options can be discussed together.
Customers can request clarification on new versus renewal licensing, service terms, entitlement dates, and support items before submitting a purchase order.
FourTeck does not replace the customer’s internal security assessment. The buyer remains responsible for defining scope, approving the service, validating governance, and operating the remediation process. FourTeck’s role is to help make the procurement and product-selection process clearer, reduce configuration mistakes, and coordinate the commercial request efficiently.
Frequently Asked Questions
What is FortiRecon External Attack Surface Management used for?
It is used to discover and assess an organization’s internet-facing digital assets from an outside-in perspective. The service helps identify known and unknown assets, exposed services, vulnerabilities, certificate concerns, web application issues, configuration weaknesses, and leaked credentials. Security teams can use the information to validate ownership, prioritize remediation, and track external exposure across a changing digital environment.
Is FortiRecon available for organizations in Africa?
FourTeck supports FortiRecon inquiries for organizations across Africa. Current availability depends on the required bundle, monitored-asset tier, subscription term, support entitlement, supplier status, billing country, and order approval. Share your organization details, countries of use, asset estimate, and preferred term so the team can request a current commercial option.
How are FortiRecon licenses sized?
Licensing is primarily based on the number of monitored assets, the selected solution bundle, and the subscription duration. Asset tiers range from smaller environments through very large enterprise estates. Buyers should include expected unknown discoveries and future growth when choosing a tier. FourTeck can help review the estimated external footprint and map it to a suitable ordering option.
What is the difference between EASM and the wider FortiRecon bundles?
EASM focuses on external asset discovery, exposure visibility, security issues, and related risk management. A broader bundle can add Brand Protection for phishing, impersonation, rogue applications, and external brand abuse. The most extensive bundle can also add Adversary Centric Intelligence for curated threat actor, darknet, technical, and supply-chain intelligence. Exact features should be confirmed against the current SKU.
Can FourTeck help select the correct configuration?
Yes. FourTeck can review the intended use, number of entities, estimated asset count, required modules, subscription term, support expectations, and integration needs. The team can then coordinate a quotation for a specific license option. Final technical and governance decisions should be approved by the customer’s security, IT, procurement, legal, and compliance stakeholders.
Does FortiRecon require a hardware appliance?
The external attack surface management service is delivered as SaaS and does not require a dedicated FortiRecon hardware appliance. Registration and access are handled through FortiCloud services. Optional internal attack surface capabilities may involve an internal scanning component, so buyers should confirm deployment requirements if IASM is included in the project.
Can FortiRecon integrate with existing security tools?
FortiRecon supports selected integrations with public cloud platforms and Fortinet products, along with REST API and orchestration capabilities. Integration depth depends on the selected bundle, entitlement, target system, and customer workflow. Buyers should list the tools they need to connect and confirm whether native integration, API development, or additional licensing is required.
What information should I provide for a quote?
Provide the legal entity name, billing country, deployment countries, estimated monitored-asset count, required bundle, subscription term, new or renewal status, preferred currency, desired start date, support expectations, and any optional services. Also describe the business use case and required integrations. This allows FourTeck to prepare a more relevant and clearly structured proposal.
Can businesses request multi-year or bulk project supply?
Organizations can request multi-year options, large monitored-asset tiers, or coordinated supply for several entities, subject to current licensing and commercial approval. Share the project schedule, asset count by entity, term, activation plan, and procurement requirements. FourTeck can help coordinate a consolidated request and explain whether one or several subscriptions are more practical.
What support and renewal guidance is available?
Support and analyst entitlements vary by bundle and SKU. FourTeck can clarify the support items shown on the quotation, the subscription term, activation expectations, and renewal timing. Customers should maintain accurate entitlement records and begin renewal planning before expiration so asset capacity, optional services, and changing operational requirements can be reviewed without unnecessary delay.
Need Help Choosing the Right FortiRecon License?
FourTeck can help you review monitored-asset capacity, bundle options, subscription terms, optional services, regional purchasing requirements, and quote documentation. Share your environment and business goals to begin a structured licensing discussion.
Reviews
There are no reviews yet.