Fortinet FortiAP S221E, FortiAP S223E Quick Start Manual

FortiAP S221E, S223E

QuickStart Guide

4/12/2018

Copyright© 2018 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,

FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet,

Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be

registered and/or common law trademarks of Fortinet. All other product or company names

may be trademarks of their respective owners. Performance and other metrics contained

herein were attained in internal lab tests under ideal conditions, and actual performance and

other results may vary. Network variables, different network environments and other

conditions may affect performance results. Nothing herein represents any binding

commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied,

except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General

Counsel, with a purchaser that expressly warrants that the identified product will perform

according to certain expressly-identified performance metrics and, in such event, only the

specific performance metrics expressly identified in such binding written contract shall be

binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in

the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make

any commitment related to future deliverables, features, or development, and circumstances

may change such that any forward-looking statements herein are not accurate. Fortinet

disclaims in full any covenants, representations,and guarantees pursuant hereto, whether

express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise

revise this publication without notice, and the most current version of the publication shall be

applicable.

Box Includes

or

FortiAP device QuickStart

Guide

5 GHz

2.4 GHz

X2 2.4GHz
X2 5GHz
(Model S223E)

Wall Mounting Hardware (including Standard and

Recessed Brackets)

Antennae

3

Before YouBegin

Write down details typically provided by your network administrator or ISP.

Static IPaddress

IPaddress ___________________

Subnet Mask ___________________

Default Gateway ___________________

Primary/Secondary DNS ___________________

DHCP

It is normal to not require a hostname, but your ISP might require it.

Hostname ___________________

QuickStart Guide Video

https://video.fortinet.com/video/177/

fortigate-and-fortiap

4

FortiAP S221E - Device Front

O: System is o

Green: System is on
Blinking: System is booting

up or upgrading

Orange: Reserved for

customized conguration

LED5: Power/Status

O: WiFi link is o

Blue: 2.4GHz link is on
Blinking: Data transmitting

/receiving at 2.4GHz link

Orange: 5GHz link is on
Blinking: Data transmitting/

receiving at 5GHz link

Green: 2.4 GHz and 5GHz

link is on

LED2: WIFI

O: Bluetooth non-activity

Green: Bluetooth activity
Blinking: Data transmitting/

receiving

LED1: BT/BLE

O: Link is o

Green: Link is on
Blinking: Data is transmitting/

receiving at 1000Mbps

Blinking: Data is transmitting/

receiving at 100Mbps

LED3: LAN 2

LED4: LAN1

O: Link is o

Green: Link is on
Blinking: Data is transmitting/

receiving at 1000Mbps

Blinking: Data is transmitting/

receiving at 100Mbps

5

FortiAP S223E - Device Front

O: System is o

Green: System is on
Blinking: System is booting

up or upgrading

Orange: Reserved for

customized conguration

LED5: Power/Status

O: WiFi link is o

Blue: 2.4GHz link is on
Blinking: Data transmitting

/receiving at 2.4GHz link

Orange: 5GHz link is on
Blinking: Data transmitting/

receiving at 5GHz link

Green: 2.4 GHz and 5GHz

link is on

LED2: WIFI

O: Bluetooth non-activity

Green: Bluetooth activity
Blinking: Data transmitting/

receiving

LED1: BT/BLE

O: Link is o

Green: Link is on
Blinking: Data is transmitting/

receiving at 1000Mbps

Blinking: Data is transmitting/

receiving at 100Mbps

LED3: LAN 2

LED4: LAN1

O: Link is o

Green: Link is on
Blinking: Data is transmitting/

receiving at 1000Mbps

Blinking: Data is transmitting/

receiving at 100Mbps

6

FortiAP S221E - Device Rear

LAN/PoE

Power connection
for optional power
adapter.
12V DC,
center positive.

FortiAP S223E - Device Rear

LAN/PoE

Power connection
for optional power
adapter.
12V DC,
center positive.

5.0 GHz

Antenna

5.0 GHz
Antenna

2.4 GHz
Antenna

2.4 GHz
Antenna

7

Installation

Ceiling bracket install

slide direction

Mounting an AP below

a suspended ceiling

Ceiling T-Rail

Ceiling Bracket

The unit (S221E or S223E) can be mounted on a wall or ceiling using
the mounting hardware provided.

The electrical wall box must be pre-installed.

8

 Basic Connection

WAN/POE

Network Core/FortiGate

Connect the FortiAP device to a FortiGate controller or an Internet connection.

Ensure that the Power over Ethernet (PoE) cable is connected to an applicable
port on your FortiGate device or PoE injector.

Caution: Adequate grounding must be provided to the FortiAP unit and

the PoE injector, in compliance with your local electrical code or
regulations.

Warning: This device complies with IEEE 802.3af PoE specification. Do

not use any PoE injectors that are not IEEE 802.3af compliant as they
may damage your device.

9

FortiAPSetup

Deployment through a FortiGate

Ensure that you are running the Fortinet recommended version of
software. Please check support.fortinet.com for more information.

If FortiGate is on the same network as the FortiAP:

1.

Use FortiGate to preauthorize the FortiAP device.

2.

Refer to the “Access Point Deployment” section of the FortiWiFiand
FortiAP Configuration Guide found at http://forti.net/ap-docs.

3.

Plug the FortiAP into your local Ethernet connection. The FortiAP will self­configure.

Or

1.

Instead of preauthorizing, you can use the FortiGate to authorize the
FortiAP device after you have connected the FortiAP to the network.

2.

Within two minutes of connecting the FortiAP to the FortiGate, the device
appears on the Managed FortiAP page in the Web-based Manager:
authorize and assign a profile to the device.

10

If FortiGate is not on the same network as the FortiAP:

1.

Log into FortiAP directly (IP address: 192.168.1.2) with username admin
and no password, and specify the IP address of the controlling FortiGate.

2.

Connect to FortiAP via the CLI using the instructions in the “Connecting
to FortiAP CLI” section of the FortiWiFi and FortiAPConfiguration guide.

3.

Specify the IP address of the controlling FortiGate:

cfg -a AC_IPADDR_1=0.0.0.0

cfg -c

where 0.0.0.0 is the address of the FortiGate.

4.

The FortiAP device connects to FortiGate, and then you can authorize the
FortiAP.

11

Cautions and Warnings

Environmental specifications

Ambient operating temperature: 0C to 40C

Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature,

Storage Temperature, Humidity, and Altitude)

Référez à la Fiche Technique de ce produit pour les caractéristiques environnementales (Température

de fonctionnement, température de stockage, humidité et l'altitude).

Safety

Battery – Risk of explosion if the battery is replaced by an incorrect type. Do not dispose of batteries
in a fire. They may explode. Dispose of used batteries according to your local regulations.
IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to batteries.

Batterie – Risque d'explosion si la batterie est remplacée par un type incorrect. Ne jetez pas les
batteries au feu. Ils peuvent exploser. Jetez les piles usagées conformément aux réglementations
locales. IMPORTANT: Suisse: l'annexe 4.10 de SR814.013 s’appliquent aux batteries.

警告

本電池如果更換不正確會有爆炸的危險

請依製造商說明書處理用過之電池

Caution: This equipment is to be used in a Network Environment 0 per IECTR 62101. This product is
connected only to PoE networks without routing to the outside plant.

Attention: Ce matériel doit être utilisé dans un Environnement Réseau 0 par IECTR 62101. Ce produit
est uniquement connecté aux réseaux PoE sans installation externe de routage.

This product is intended to be supplied by a Listed Direct Plug-In Power Unit marked LPS or Class 2
and rated 12 Vdc, 2A or by 54 Vdc from PoE source.

12

Le produit doit être alimenté par un bloc d'alimentation à courant continu homologué UL de 12 Vdc, 2A
nominal marqué LPS ou Class 2 ou par une source d’alimentation par Ethernet de 54 Vdc (PoE).

Regulatory Notices

Federal Communication Commission (FCC) – USA

This device complies with Part 15 of FCC Rules. Operation is subject to the followingtwo conditions:

(1) this device may not cause harmful interference, and
(2) this device must accept any interference received; including interference that may cause
undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in residential installation. This equipment generates, uses, and can radiate
radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it
may cause harmful interference to radio communications. However, there is noguarantee that
interference will not occur in a particular installation.

If this equipment does cause harmful interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the followingmeasures:

Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
Consult the dealer or an experienced radio/TV technician for help.

WARNING: Any changes or modifications to this unit not expressly approved by the party responsible
for compliance could void the user’s authority to operate the equipment

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the radiator

13

and your body. This transmitter must not be co-located or operating in conjunction with any other
antenna or transmitter.

Caution: Operation of this device is restricted to indoor use only.

For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor environment.

This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules.

Industry Canada Equipment Standard for Digital Equipment (ICES)
– Canada

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.

Innovation, Science and Economic Development (ISED) – Canada

This device complies with ISED license-exempt RSS standard(s). Operation is subject to the following
two conditions: (1) this device may not cause interference, and (2)this device must accept any
interference, including interference that may cause undesired operation of the device.

Le présent appareil est conforme aux CNR d' ISED applicables aux appareils radio exempts de
licence. L'exploitation est autorisée aux deux conditions suivantes : (1) l'appareil ne doit pas produire
de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si
le brouillage est susceptible d'en compromettre le fonctionnement.

For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of
other channels is not possible.

Pour les produits disponibles aux États-Unis / Canada du marché, seul le canal 1 à 11 peuvent être
exploités. Sélection d'autres canaux n'est pas possible.

This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the radiator &
your body.

14

Cet équipement est conforme aux limites d'exposition aux rayonnements ISED établies pour un
environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de 20cm de
distance entre la source de rayonnement et votre corps.

The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the
equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point
operation as appropriate.

Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz)doit se
conformer à la limite de p.i.r.e. spécifiée pour l’exploitation point à point et non point à point, selon le
cas.

Caution: The device for the band 5150-5250 MHz is only for indoor usage to reduce potential for
harmful interference to co-channel mobile satellite systems.

Attention: Le dispositif de la bande 5150-5250 MHz est réservé à un usage intérieur afin de réduire
l'interférence nuisible potentielle aux systèmes mobiles par satellite co-canal.

This device has been designed to operate with an antenna having a maximum gain of 4.95 dBi for

2.4GHz and 5.83 dBi for 5GHz. Antenna having a higher gain is strictly prohibited per regulations of
ISED. The required antenna impedance is 50 ohms.

Under ISED regulations, this radio transmitter may only operate using an antenna of a type and
maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio interference
to other users, the antenna type and its gain should be so chosen that the equivalent isotopically
radiated power (e.i.r.p.) is not more than that necessary for successful communication.

Ce dispositif a été conçu pour fonctionner avec une antenne ayant un gain maximal de 4.95 dBi pour
2,4 GHz et 5.83 dBi pour 5GHz. Une antenne ayant un gain supérieur sont strictement interdites par la
réglementation d'ISED. L'impédance d'antenne requise est de 50 ohms.

Conformément à la réglementation d'ISED, cet émetteur radio peut fonctionner seulement avec une
antenne d’un type et d'un gain maximal (ouinférieur) approuvé pour l'émetteur par ISED. Dans le but
de réduire les risques de brouillage radioélectrique aux autres utilisateurs, il faut choisir le type

15

d'antenne et son gain de sorte que la puissance isotrope rayonnée équivalente (p.i.r.e.) ne dépasse
pas l'intensité nécessaire à l'établissement d'une communication réussie.

This radio transmitter (IC: 7280B-2507T021) has been approved by ISED to operate with the antenna
types listed below with the maximum permissible gain and required antenna impedance for each
antenna type indicated. Antenna types not included in this list, havinga gain greater than the maximum
gain indicated for that type, are strictly prohibited for use with this device.

Le présent émetteur radio (IC: 7280B-2507T021) a été approuvé par ISED pour fonctionner avec les
types d'antenne énumérés ci-dessous et ayant un gain admissible maximal et l'impédance requise
pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le gain est
supérieur au gain maximal indiqué, sont strictement interdits pour l'exploitation de l'émetteur.

This device and it's antennas(s) must not be co-located or operating in conjunction with any other
antenna or transmitter except in accordance with IC multi-transmitter product procedures.

Cet appareil et son antenne (s) ne doit pas être co-localisés ou fonctionnement en association avec une
autre antenne ou transmetteur.

Brand
Holder

Quantity Antenna Type Connector

Gain (dBi)

2.4GHz 5GHz

Internal antenna model

Senao

Networks, Inc

1 PIFA IPEX 4.36 -

Senao

Networks, Inc

1 PIFA IPEX 4.95 -

Senao

Networks, Inc

1 PIFA IPEX - 5.64

Senao

Networks, Inc

1 PIFA IPEX - 5.83

Bluetooth

Senao

Networks, Inc

1 PIFA IPEX 3.67 -

16

Brand
Holder

Quantity Antenna Type Connector

Gain (dBi)

2.4GHz 5GHz

External antenna model

Senao

Networks, Inc

2 Dipole

RP

SMAPlug

4.58 -

Senao

Networks, Inc

2 Dipole

RP

SMAPlug

- 5.35

Bluetooth

Senao

Networks, Inc

1 PIFA IPEX 3.67 -

European Conformity (CE) - EU

This is a Class B product. In a domestic environment, this product may cause radio interference, in
which case the user may be required to take adequate measures.

The product transmits within the frequency ranges and less than or equal to the power listed below:

2412-2472MHz less than 20dBm
5180-5240MHz less than 23dBm
5260-5320MHz less than 23dBm *
5500-5700MHz less than 28dBm *

Note: * Only with DFS bands certification.

This equipment should be installed and operated with minimum distance 32cm between the radiator &
your body.

17

Simplified EU Declaration of Conformity

This declaration is only valid for Fortinet products (including, combinations of software, firmware and
hardware) provided by Fortinet or Fortinet’s authorized partners to the end customer directly for use
within the EU or countries that have implemented the EU Directives and/or spectrum regulation. Any
Fortinet products not obtained directly from Fortinet or Fortinet’s authorized partners may not comply
with EU Directives and Fortinet makes no assurances for such products.

Бъл гар ски

Този продукт е в съответствие с Директива 2014/53/ЕС.

Česky

Tento produkt je v souladu se směrnicí 2014/53/EU.

Dansk

Dette produkt er i overensstemmelse med direktiv 2014/53/EU.

Deutsch

Dieses Produkt entspricht der Richtlinie 2014/53/EU.

Eesti

See toode vastab direktiivile 2014/53/EL.

English

This product is in compliance with Directive 2014/53/EU.

Español

Este producto cumple con la Directiva 2014/53/UE.

Ελλην ική

Το προϊόν αυτ ό συμμορφ ώ νετ α ι με τ ην Οδηγία 2014/53/ΕΕ.

Français

Ce produit est conforme à la Directive 2014/53/UE.

Hrvatski

Ovaj proizvod je u skladu s Direktivom 2014/53/EU.

18

Italiano

Questo prodotto è conforme alla Direttiva 2014/53/EU.

Latviski

Questo prodotto è conforme alla Direttiva 2014/53/EU.

Lietuvių

Šis gaminys atitinka direktyvą 2014/53/ES.

Malti

Dan il-prodott huwa konformi mad-Direttiva 2014/53/UE.

Magyar

Ez a termék megfelel a 2014/53/EU irányelvnek.

Nederlands

Dit product is in overeenstemming met Richtlijn 2014/53/EU.

Norsk

Dette produktet er i samsvar med direktiv 2014/53/EU.

Polski

Ten produkt jest zgodny z dyrektywą 2014/53/UE.

Português

Este produto está em conformidade com a Diretiva 2014/53/UE.

Rumunski

Acest produs este în conformitate cu Directiva 2014/53/UE.

Slovensky

Tento produkt je v súlade so smernicou2014/53/EÚ.

Slovensko

Ta izdelek je v skladu z Direktivo 2014/53/EU.

19

Suomi

Tämä tuote on direktiivin 2014/53/EU mukainen.

Svenska

Denna produkt överensstämmer med direktiv 2014/53/EU.

Note: The full declaration of conformity for this product is available at the link below:

https://site.fortinet.com/ProductRegulatory/EU

20

Fortinet Product License Agreement /
EULA and Warranty Terms

Trademarks and Copyright Statement

Fortinet®, FortiGate®, and FortiGuard® are registered trademarksof Fortinet, Inc., and other Fortinet namesmayalso be trademarks,
registered orotherwise, of Fortinet. Allother product orcompany names maybe trademarksof theirrespective owners.Copyright ©2016
Fortinet, Inc., All Rightsreserved. Contents and termsare subject tochange byFortinetwithout priornotice. No part of thispublication maybe
reproduced in anyform orby anymeansor used to make any derivative such as translation, transformation, oradaptation without permission
from Fortinet, Inc., as stipulated bythe United StatesCopyright Act of 1976.

Product License Agreement

The partiesto thisagreement are you, the end customer, and either (i) where you have purchased your Product within the Americas,Fortinet,
Inc., or(ii) where you have purchased yourProduct outside of the Americas, Fortinet Singapore Private Limited (each referred to herein as
"Fortinet"). CAREFULLY READ THE FOLLOWING LEGAL AGREEMENT (THE OR THIS“AGREEMENT” OR “EULA”). USEOR INSTALLATION
OF FORTINET PRODUCT(S) AND ANYUPDATESTHERETO, INCLUDING HARDWAREAPPLIANCE PRODUCTS, SOFTWARE AND
FIRMWAREINCLUDED THEREIN BY FORTINET, AND STAND-ALONE SOFTWARE PRODUCTSSOLD BY FORTINET (TOGETHER, THE
"PRODUCTS") CONSTITUTESACCEPTANCEBYYOU OFTHETERMSIN THISAGREEMENT, ASAMENDED OR UPDATED FROM TIME TO
TIME IN FORTINET’SDISCRETION BYFORTINET PUBLISHING ANAMENDED OR UPDATEDVERSION. FORTINET SHALL NOT BE BOUND
BY ANYADDITIONAL AND/OR CONFLICTING PROVISIONSIN ANYORDER, RELEASE, ACCEPTANCE OR OTHER WRITTEN
CORRESPONDENCE OR OTHER WRITTEN OR VERBAL COMMUNICATION UNLESSEXPRESSLYAGREED TOIN AWRITINGSIGNED BY
THE GENERAL COUNSEL OFFORTINET. IF YOUDONOT AGREE TOALL OF THE TERMSOF THIS AGREEMENT, DO NOT START THE
INSTALLATION PROCESSOR USE THE PRODUCTS. IF YOUDO NOT AGREE TOTHE TERMS OF THISAGREEMENT, YOU SHOULD
IMMEDIATELY, AND IN NO EVENTLATER THAN FIVE (5) CALENDAR DAYSAFTER YOUR RECEIPTOF THE PRODUCT IMMEDIATELY
NOTIFYTHE FORTINET LEGALTEAM IN WRITING [e-mail] OF REQUESTED CHANGESTO THISAGREEMENT.

1. License Grant.

Thisisa license, not a salesagreement, between you and Fortinet. The term "Software", as used throughout thisAgreement, includes all
Fortinet and third partyfirmware and software provided toyou with, orincorporated into, Fortinet appliancesand anystand-alone software
provided to you byFortinet, with the exception of any open source software contained in Fortinet’sProductswhich isdiscussed in detailin section
15 below,and the term “Software” includes anyaccompanying documentation, anyupdates and enhancements of the software orfirmware
provided to you byFortinet, at itsoption. Fortinet grantsto you a non-transferable (except asprovided insection 5("Transfer") and section 15
("Open Source Software") below), non-exclusive, revocable (in the event ofyour failure to complywith these terms orinthe event Fortinet is not
properlypaidforthe applicable Product) license to use the Software solelyforyour internalbusinesspurposes (provided, ifa substantialportion of
yourbusinessisto provide managed service provider services toyour end-customers,you mayuse the Software embedded in FortiGate and
supporting hardware appliancesto provide those services, subject to the other restrictions in thisAgreement), in accordance with the terms set
forth in thisAgreement and subject to anyfurther restrictions in Fortinet documentation, and solelyon the Fortinet appliance, or, in the case of
blades, CPUsordatabases,on the single blade, CPU ordatabase on which Fortinet installed the Software or, forstand-alone Software, solelyon
a single computer running a validly licensed copy ofthe operating system for which the Software wasdesigned unlessand except set forth in the
published documentation otherwise, or,in the case ofblades, CPUsor databases, on a single blade, CPU ordatabase. Forclarity,
notwithstanding anything to the contrary,alllicenses ofSoftware to be installed on blades, CPUsordatabasesare licensed on a per single blade,
solelyfor one blade and not formultiple blades thatmaybe installed in a chassis, persingleCPUor per single database basis, asapplicable. The
Software is"in use" on any Fortinet appliances when itisloaded into temporarymemory(i.e. RAM). You agree that, except forthe limited, specific
license rightsgranted in thissection 1, you receive no license rightsto the Software.

2. Limitation on Use.

You may not attempt to, and, if you are a corporation, you are responsible to prevent youremployeesand contractorsfrom attempting to, (a)
modify, translate, reverse engineer, decompile, disassemble, create derivative worksbased on, sublicense, ordistribute the Software; (b) rent or
lease anyrightsinthe Software in any form to anythirdpartyor make the Software available oraccessible to third partiesin anyother manner; (c)
except asprovided in section 5, transfer assign orsublicense rightto anyother person orentity, (d) remove anyproprietarynotice, labels,or marks

21

on the Software, Products,and containers,or (e) use the Software for third-partytraining, commercialtime-sharing orservice bureau use oruse
the Software to provide servicesto thirdpartiesexcept asexpresslyset forthin thisAgreement.

3. Proprietary Rights.

Allrights,title, interest, and allcopyrightsto the Software and any copymade thereof byyou and to anyProductremain with Fortinet. You
acknowledge that no title tothe intellectualpropertyin the Software orother Productsistransferred to you and you willnot acquire anyrightsto
the Software or otherProductsexcept forthe specific license asexpresslyset forthin section 1(“License Grant”) above. You expresslyagree and
acknowledge that Fortinet owns and shallretain allintellectualpropertyrights in and to,and you have no intellectualpropertyrightsin and to,the
Products and the Software other than the License Grant. You agree to keep confidential allFortinet confidentialinformation and onlyto use such
information for the purposes forwhich Fortinet disclosed it.

4. Term and Termination.

Except forevaluation and beta licensesorother licenses, such assubscription licenses,where the term ofthe license is limited per the
evaluation/beta or other agreement, in the ordering documentsor otherwise, the term of the license isfor the duration of Fortinet'scopyright in
the Software. Fortinet mayterminate thisAgreement, and the licensesand other rightsherein, immediatelywithoutnotice ifyou breach or failto
complywith anyof the terms and conditions of thisAgreement orforother reasons asstated in Fortinet’sotherdocumentation. You agree that,
upon such termination, you willcease using the Software and any Product and either destroyallcopiesof the Fortinet documentation orreturn all
materialsto Fortinet.

5. Transfer.

If you are a Fortinet contracted and authorized reseller ordistributorof Products, you may transfer (not rent orlease unlessspecificallyagreed to
inwriting byFortinet) the Software to one end user on a permanent basis, provided that: (i) you ensure that yourcustomer and the end user
receivesa copyof thisAgreement, is bound byitstermsand conditions, and, byselling the Product orSoftware, you herebyagree to enforce the
terms in thisAgreement againstsuch end user, (ii) you at alltimes complywith allapplicable United Statesexportcontrollawsand regulations,and
(iii) you agree to refund anyfeespaidto you byan end user who purchased Product(s) from you but does not agree to the terms contained in this
Agreement and therefore wishesto return the Product(s) as provided forinthisAgreement. Further, if you are a non-authorizedreseller of
Products, you are not authorized to sellProduct(s) orSoftware, but, regardless, byselling Product(s) orSoftware, you hereby agree you are
bound bythe restrictionsand obligations hereinand are bound to: (i)ensure that your customer and the end user receive a copy ofthis
Agreement and are bound in fullby allrestrictions and obligationsherein (ii) enforce the restrictionsand obligations in thisAgreement againstsuch
customerand/orend user, (iii) complywith allapplicable United Statesexportcontrollawsand regulations and allother applicable laws, and (iv)
refund anyfees paidto you bya customer and/orend user who purchased Product(s) from you but does not agree to the restrictions and
obligations contained in thisAgreement and therefore wishes to return the Product(s) asprovided for in thisAgreement. Notwithstanding
anything to the contrary,distributors,resellersand otherFortinet partners(a) are not agentsof Fortinet and (b) are not authorized to bind Fortinet
inany way.

6. Limited Warranty.

Fortinet providesthislimited warranty foritsproduct onlyto the single end-user person orentitythatoriginallypurchased the Product from Fortinet
or itsauthorized reseller ordistributorand paidfor such Product. The warrantyisonlyvalid forProducts which are properly registered on Fortinet’s
SupportWebsite, https://support.fortinet.com, orsuch otherwebsite asprovided byFortinet, orforwhich the warranty otherwise starts
according toFortinet’spolicies. The warrantyperiodsdiscussed belowwillstart according toFortinet’s policies posted at
http://www.fortinet.com/aboutus/legal.htmlorsuch other website as provided byFortinet. It is the Fortinet distributor’s and reseller’sresponsibility
to make clearto the end userthe date the product wasoriginallyshipped from Fortinet, and itisthe end user’s responsibilityto understand the
original ship date from the partyfrom which the end user purchased the product. Allwarrantyclaimsmustbe submitted in writing toFortinet
before the expiration of the warrantyterm or such claims are waived in full. Fortinet providesno warrantyfor any beta, donation orevaluation
Products, forany spare partsnot purchased directlyfrom Fortinet bythe end-user, forany accessories, orfor any stand-alone software. Fortinet
warrantsthat the hardware portion of the Products,including spare partsunlessnoted otherwise ("Hardware") willbe free from materialdefects
inworkmanshipascompared tothe functionalspecificationsfor the periodset forthasfollowsand applicable to the Producttype ("Hardware
Warranty Period"): a three hundred sixty-five (365) daylimited warranty forthe Hardware excluding spare parts, power supplies, and accessories
(provided, solelywith respect to FortiAP and Meru AP indoorWi-FiaccesspointHardware appliance productsand FortiSwitch Hardware
appliance productsotherthan the FortiSwitch-5000 series(forboth excluding spare parts,power supplies, and accessories), the warranty
herein shalllastfrom the startof the warrantyperiod asdiscussed above untilfive (5) yearsfollowing the product announced end-of-life date),
and, forspare parts, power supplies, and accessories,solelya ninety(90) dayslimited warranty. Fortinet'ssole obligation shallbe to repairor offer
replacement Hardware forthe defective Hardware at no charge to the originalowner. Thisobligation is exclusive of transportfees, labor, de-

22

installation, installation, reconfiguration, or return shipment and handling feesand costs,and Fortinet shallhave no obligation related thereto.
Such repairor replacement willbe rendered byFortinet at an authorized Fortinet service facilityas determined byFortinet. The replacement
Hardware need not be new orof an identicalmake, model, orpart; Fortinet may, in its discretion, replace the defectiveHardware (or anypart
thereof) withanyreconditioned Product thatFortinet reasonablydetermines issubstantially equivalent (orsuperior) in allmaterialrespectsto the
defective Hardware. The Hardware WarrantyPeriod forthe repaired orreplacement Hardware shallbe for the greaterof the remaining
Hardware Warranty Period orninetydaysfrom the deliveryof the repaired orreplacementHardware. If Fortinet determines in itsreasonable
discretion that a materialdefect is incapable of correction orthat it isnotpracticalto repairor replace defective Hardware, the price paidby the
original purchaser forthe defective Hardware willbe refunded byFortinet upon return to Fortinet ofthe defective Hardware. AllHardware (or part
thereof) that is replaced byFortinet, orfor which the purchase price isrefunded, shallbecome the propertyof Fortinet upon replacement or
refund. Fortinet warrantsthat the software asinitially shipped with the Hardware Productswill substantially conform to Fortinet'sthen current
functionalspecificationsfor the Software, as set forth in the applicable documentation fora period of ninety (90) days("Software Warranty
Period"), if the Software isproperlyinstalled on approved Hardware and operated as contemplated in itsdocumentation. Fortinet'ssole
obligation shallbe to repairoroffer replacement Software for the non-conforming Software with software that substantiallyconformsto
Fortinet's functionalspecifications.Thisobligation is exclusive of transportfees, labor, de-installation, installation, reconfiguration, orreturn
shipmentand handling feesand costs,and Fortinet shallhave no obligation related thereto. Except asotherwise agreed byFortinet in writing, the
warrantyreplacementSoftware isprovided onlyto the originallicensee, and issubjectto the termsand conditions of the license granted by
Fortinet forthe Software. The Software Warranty Period shallextend foran additionalninety(90) daysafter any warrantyreplacement software is
delivered. If Fortinet determinesin its reasonable discretion that a material non-conformance isincapable of correction orthat it isnotpracticalto
repairorreplace the non-conforming Software, the price paidby the originallicensee forthe non-conforming Software willbe refunded by
Fortinet; provided that the non-conforming Software (and allcopies thereof) isfirst returned toFortinet. The license granted respecting any
Software forwhich a refund is given automaticallyterminatesimmediatelyupon refund. Forpurpose of the above hardware and software
warranties,the term “functionalspecifications”meanssolelythose specificationsauthorized and published byFortinet that expresslystate in
such specificationsthat they are the functionalspecificationsreferred to in thissection 6 of thisAgreement, and, in the event no such
specificationsare provided to you with the Software or Hardware, there shallbe no warrantyon such Software.

7. Disclaimer of Other Warranties and Restrictions.

EXCEPTFOR THE LIMITED WARRANTY SPECIFIED IN SECTION 6 AB OVE, THE PRODUCT AND SOFTWARE AREPROVIDED "AS-IS"
WITHOUT ANYWARRANTYOF ANYKIND INCLUDING, WITHOUT LIMITATION, ANYIMPLIED WARRANTY, IMPLIED OR EXPRESS
WARRANTY OFMERCHANTABILITY,OR WARRANTYFOR FITNESSFOR A PARTICULAR PURPOSEAND NON-INFRINGEMENT. IF ANY
IMPLIED WARRANTY CANNOT BEDISCLAIMED IN ANYTERRITORYWHEREA PRODUCT ISSOLD, THE DURATION OF SUCH IMPLIED
WARRANTY SHALL BE LIMITED TO NINETY(90) DAYSFROM THE DATEOF ORIGINAL SHIPMENT FROM FORTINET. EXCEPT AS
EXPRESSLYCOVERED UNDER THE LIMITED WARRANTYPROVIDED HEREIN, THE ENTIRE RISKASTO THE QUALITY, SELECTION AND
PERFORMANCE OFTHE PRODUCT ISWITH THEPURCHASER OFTHE PRODUCT. NOTWITHSTANDING ANYTHING TOTHE CONTRARY,
THE HARDWARE WAR RANTY PERIOD DISCUSSED ABOVEDOES NOT APPLY TO CERTAIN FORTINET PRODUCTS, INCLUDING
FORTITOKENWHICH HASA 365 DAYWARRANTYFROM THE DATE OF SHIPMENT FROM FORTINET’S FACILITIES, AND THE SOFTWARE
WARRANTY DOESNOT APPLY TO CERTAIN FORTINET PRODUCTS, INCLUDING FORTIGATE-ONE AND VDOM SOFTWARE. YOU HEREBY
ACKNOWLEDGEAND AGREETHAT NO VENDOR CAN ASSURE COMPLETE SECURITYAND NOTHING HEREIN OR ELSEWHERE SHALL BE
DEEMED TO IMPLYA SECURITYGUARANTEEOR ASSURANCE.

The warranty in Section 6 above does not applyifthe Software, Product oranyother equipment upon which the Software isauthorizedto be
used (a) hasbeen altered, except byFortinet oritsauthorized representative, (b) hasnot been installed, operated, repaired, updated tothe latest
version, ormaintained in accordance with instructionssupplied byFortinet, (c) hasbeen subjected toabnormal physicalor electricalstress,
misuse, negligence, oraccident; (d) islicensed for beta, evaluation, donation, testing ordemonstration purposesor forwhich Fortinet does not
charge a purchase price orlicense fee. In the case of beta, testing, evaluation, donation orfree Software or Product, the end user
acknowledgesand agreesthat such Software orProduct maycontain bugsor errorsand could cause system failures, data lossand other
issues, and the end user agrees that such Software orProduct is provided “as-is”without anywarrantywhatsoever,and Fortinet disclaims any
warrantyor liabilitywhatsoever. An end user’s use of evaluation orbeta Software orProduct is limited to thirty(30) daysfrom originalshipment
unlessotherwise agreed in writing byFortinet.

8. Governing Law.

Anydisputesarising out ofthisAgreement orFortinet’slimited warrantyshallbe governed bythe lawsof the state of California, without regard to
the conflictof lawsprinciples. In the event ofany disputesarising out of thisAgreement orFortinet’slimited warranty, the parties submitto the
jurisdiction of the federal and state courtslocated in Santa Clara County, California, asapplicable.

23

9. Limitation of Liability.

TO THEMAXIMUM EXTENT PERMITTED BY LAWAND NOTWITHSTANDING ANYTHING TOTHE CONTRARY, FORTINET ISNOT LIABLE
UNDER ANYCONTRACT, NEGLIGENCE, TORT, STRICT LIABILITY, INFRINGEMENT OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY
LOSSOF USEOF THE PRODUCT OR SERVICE OR ANY DAMAGESOF ANYKIND WHATSOEVER, WHETHER DIRECT, SPECIAL, INCIDENTAL
OR CONSEQUENTIAL (INCLUDING, BUT NOT LIMITED TO, DAMAGESFOR LOSSOF GOODWILL, LOSSOF PROFIT, LOSSOF
OPPORTUNITY, LOSSOR DAMAGERELATED TOUSE OFTHEPRODUCT OR SERVICE IN CONNECTION WITH HIGH RISKACTIVITIES, DE­INSTALLATION AND INSTALLATION FEESAND COSTS, DAMAGETO PERSONAL OR REAL PROPERTY, WORKSTOPPAGE, COMPUTER
FAILURE OR MALFUNCTION, COMPUTER SECURITY B REACH, COMPUTER VIRUS INFECTION, LOSSOF INFORMATION OR DATA
CONTAINED IN, STORED ON, OR INTEGRATED WITH ANYPRODUCT INCLUDING ANY PRODUCT RETURNED TOFORTINET FOR
WARRANTY SERVICE) RESULTING FROM THEUSEOF THE PRODUCT, RELATING TOWARRANTYSERVICE, OR ARISING OUT OF ANY
BREACH OFTHE LIMITED WARRANTY IN SECTION 6 ABOVE, EVEN IF FORTINET HASBEEN ADVISED OF THE POSSIBILITYOF SUCH
DAMAGES. THE SOLE REMEDYFOR ABREACH OFTHELIMITED WARRANTYIS REPAIR, REPLACEMENT OR REFUND OF THE DEFECTIVE
OR NON-CONFORMING PRODUCT ASSPECIFICALLY STATED IN SECTION 6 ABOVE.

10. Import / Export Requirements; FCPA Compliance.

You are advised that the Products maybe subjectto the United States ExportAdministrationRegulationsand otherimport and exportlaws;
diversion contraryto United Stateslaw and regulation isprohibited. You agree to complywith allapplicable internationaland national laws that
applyto the Productsaswellasend user, end-use, and destination restrictionsissued byU.S. and other governments. For additionalinformation
on U.S. exportcontrolssee www.bis.doc.gov. Fortinetassumesno responsibilityor liabilityfor your failure to obtain anynecessaryimport and
exportapprovals,and Fortinet reserves the right to terminate orsuspend shipments, services and supportin the eventFortinet hasa reasonable
basisto suspect anyimportor exportviolation. You represent that neitherthe United StatesBureau of Industryand Securitynorany other
governmentalagencyhasissued sanctionsagainstyou or otherwise suspended, revoked ordenied yourexportprivileges. You agree not touse
or transfer the Productsforany use relating to nuclear, chemicalor biologicalweapons,or missile technology,unlessauthorized bythe United
States Government by regulation orspecific written license. Additionally, you agree not to directlyorindirectlyexport,import ortransmitthe
Products contraryto the lawsor regulations ofany other governmental entitythat has jurisdiction oversuch export, import, transmission oruse.
Furthermore, you represent that you understand, and you herebyagree to complywith, allrequirements of the U.S. Foreign Corrupt Practices
Act and allother applicable laws. For beta, testing, evaluation, donation orfree Productsand/or related services, you hereby agree, represent
and warrant toFortinet that(a) receiptof the Products and/orservicescomplywith allpoliciesand you have obtained allnecessaryapprovalsfor
such Productsand/or services, (b) the Products and/orservices are not provided in exchange for Fortinet maintaining current businessorfornew
businessopportunities, and (c) the Productsand/or servicesare not being received forthe benefitof, and are not being transferred to, any
government entity,representative oraffiliate.

11. U.S. Government End Users.

The Software and accompanying documentation are deemed tobe "commercialcomputer software" and "commercialcomputersoftware
documentation," respectively, pursuant to DFAR Section 227.7202 and FAR Section 12.212, asapplicable. Anyuse, modification,
reproduction, release, performance, display ordisclosure of the Software and accompanying documentation bythe United StatesGovernment
shallbe governed solelyby the termsof thisAgreement and shallbe prohibited except to the extent expresslypermitted by the termsof this
Agreement and itssuccessors.

12. Tax Liability.

You agree to be responsible for payment of anysalesor use taxesimposed at any time on thistransaction.

13. General Provisions.

Except as specificallypermitted and required in section 5 (“Transfer”) above, you agree not toassign thisAgreement ortransferany of the rights
or obligationsunder thisAgreement without the prior written consent of Fortinet. ThisAgreement shallbe binding upon, and inure tothe benefit
of, the successorsand permitted assignsof the parties. The United NationsConvention on Contracts forthe InternationalSalesof Goodsis
expresslyexcluded. ThisAgreement and otherFortinet agreementsmaybe amended orsupplemented onlybya writing thatrefersexplicitlyto
the agreement signed on behalfof both parties, or,for thisAgreement, asotherwise expresslyprovided in the lead-in above Section 1 above,
provided, notwithstanding anything to the contraryand except forthisAgreement which maybe amended or updated as expresslyprovided in
the lead-in above Section 1 above, for any amendment orother agreement tobe binding on Fortinet, such amendment orother agreement
mustbe signed byFortinet’s GeneralCounsel. No waiverwillbe implied from conduct orfailure toenforce rightsnor effective unlessin a writing
signed on behalfof the partyagainstwhom the waiverisasserted. If anypartof thisAgreement is found unenforceable, thatpart willbe enforced

24

to the maximum extentpermitted and the remainder shallcontinue infullforce and effect. You acknowledge that you have read thisAgreement,
understand it, and agree to be bound byitstermsand conditions.

14. Privacy.

Fortinet’s collection, use, protection and transfer of your personalinformation isgoverned by the Fortinet privacypolicyon the Fortinet web site
(http://www.fortinet.com/aboutus/privacy.html).

15. Open Source Software.

Fortinet’s productsmay include software modulesthat are licensed (or sublicensed) to the user under the GNU GeneralPublic License, Version
2, of June 1991 (“GPL”) orGNU LesserGeneralPublic License, Version 2.1, of February1999 (“LGPL”) or otheropen source software licenses
which, among other rights,permitthe user touse, copy,modifyand redistribute modules,or portionsthereof, and may also require attribution
disclosuresand accessto the source code ("Open Source Software"). The GPLrequiresthat forany Open Source Software covered underthe
GPL, which isdistributed tosomeone inan executable binaryformat, that the source code also be made available to those users.ForanyOpen
Source Software covered underthe GPL, the source code ismade available on thisCD or download package. If any Open Source Software
licenses require that Fortinet provide rightsto use, copy ormodifya Open Source Software program thatare broader than the rights granted in
thisagreement, then such rights shalltake precedence overthe rightsand restrictions herein. Fortinet willprovide, fora charge reflecting our
standard distribution costs, the complete machine-readable copy ofthe modified software modules.To obtaina complete machine-readable
copy,please send yourwritten request,along with a checkin the amount of US$25.00, to GeneralPublic License Source Code Request,
Fortinet, Inc., 899 KiferRd, Sunnyvale, CA94086 USA.In order to receive the modified software modules, you mustalso include the following
information: (a) Name, (b) Address, (c) Telephone number, (d) E-mailAddress, (e) Productpurchased (if applicable), (f) ProductSerialNumber (if
applicable). Allopen source software modules are licensed free of charge. There isno warrantyforthese modules,to the extent permitted by
applicable law. The copyright holdersprovide these software modules“AS-IS” without warrantyof any kind, either expressed orimplied. In no
event willthe copyright holderfor the open source software be liable to you fordamages, including anyspecial,incidentalor consequential
damagesarising out of the use orinabilityto use the software modules,even ifsuch holder hasbeen advised of the possibilityof such damages. A
fullcopy ofthislicense, including additionalopen source software license disclosuresand thirdpartylicense disclosures applicable tocertain
Fortinet products, may obtained bycontacting Fortinet’sLegalDepartment at [e-mail].

GNU GENERAL PUBLIC LICENSEGNU GENERAL PUBLIC LICENSE

Version 2, June 1991

Copyright (C) 1989, 1991 Free Software Foundation, Inc.

59 Temple Place, Suite 330, Boston, MA02111-1307 USA

TERMSAND CONDITIONS FOR COPYING, DISTRIB UTION AND MODIFICATION

ThisLicense appliesto anyprogram orother workwhich containsa notice placed bythe copyright holdersaying it maybe distributed underthe
terms ofthisGeneralPublic License. The "Program", below,refersto anysuch program or work, and a "workbased on the Program" means
eitherthe Program or any derivative workunder copyright law: that isto say, a workcontaining the Program ora portion ofit,either verbatimor with
modificationsand/or translated into another language. (Hereinafter, translation isincluded without limitation in the term "modification".) Each
licensee isaddressed as "you".

Activities other than copying, distribution and modification are not covered bythisLicense; theyare outside itsscope. The act of running the
Program isnot restricted, and the output from the Program iscovered onlyif itscontentsconstitute a workbased on the Program (independent of
having been made by running the Program). Whether that is true depends on whatthe Program does.

1. You may copyand distribute verbatimcopies of the Program's source code as you receive it, in anymedium, provided that you conspicuously
and appropriatelypublishon each copy an appropriate copyright notice and disclaimer ofwarranty; keep intact allthe noticesthat refer tothis
License and tothe absence of any warranty; and give anyotherrecipientsof the Program a copy ofthisLicense along with the Program. You
maycharge a fee for the physicalact of transferring a copy,and you may at youroption offerwarrantyprotection in exchange for a fee.

2. You may modifyyour copyor copiesof the Program or anyportion of it, thus forminga workbased on the Program, and copy and distribute
such modificationsor workunderthe terms of Section 1 above, provided thatyou alsomeet allof these conditions:

a) You must cause the modified filesto carryprominent noticesstating thatyou changed the files and the date of any change.
b) You must cause any workthat you distribute orpublish, that in whole orinpartcontains orisderived from the Program orany partthereof, tobe

licensed as a whole at no charge to allthirdparties under the termsof thisLicense.
c) If the modified program normallyreads commandsinteractivelywhen run, you mustcause it, when started running for such interactive use in

the mostordinaryway,to print ordisplayan announcement including an appropriate copyright notice and a notice that there isno warranty (or
else, saying thatyou provide a warranty) and thatusersmay redistribute the program under these conditions, and telling the userhow toview a

25

copyof thisLicense. (Exception: if the Program itselfisinteractivebut doesnot normally print such an announcement, yourworkbased on the
Program isnot required toprintan announcement.)

These requirementsapplyto the modified workasa whole. If identifiable sectionsof that workare not derived from the Program, and can be
reasonablyconsidered independent and separate worksin themselves, then thisLicense, and itsterms,do not applyto those sectionswhen you
distribute them asseparate works. But when you distribute the same sections as part of a whole which isa workbased on the Program, the
distribution of the whole mustbe on the terms of thisLicense, whose permissions forotherlicensees extend tothe entire whole, and thusto each
and everypartregardlessof who wrote it.. Thus,itisnot the intent of thissection toclaimrightsor contestyour rightsto workwritten entirelybyyou;
rather, the intent is toexercise the rightto controlthe distribution ofderivative or collective worksbased on the Program. In addition, mere
aggregation of another worknotbased on the Program with the Program (or with a workbased on the Program) on a volume of a storage or
distribution medium doesnotbring the otherworkunder the scope of thisLicense.

3. You may copyand distribute the Program (or a workbased on it, underSection 2) in object code orexecutable form under the terms of
Sections 1 and 2 above provided that you also do one of the following:

a) Accompany itwith the complete corresponding machine-readable source code, which must be distributed under the terms ofSections1 and
2 above on a medium customarilyused for software interchange; or,

b) Accompanyitwith a written offer, validfor at leastthree years, togiveanythirdparty, fora charge no more than your cost of physically
performing source distribution, a complete machine-readable copy ofthe corresponding source code, tobe distributed under the terms of
Sections 1 and 2 above on a medium customarily used forsoftware interchange; or,

c) Accompany itwith the information you received as tothe offer todistribute corresponding source code. (Thisalternativeisallowed onlyfor
noncommercialdistribution and onlyifyou receivedthe program in object code orexecutable formwith such an offer, in accord with Subsection
b above.)

Source code for a workmeansthe preferred form of the workformaking modificationsto it. For an executable work, complete source code
means allthe source code for allmodulesitcontains,plusanyassociated interface definitionfiles, plus the scriptsused to controlcompilation and
installation of the executable. However, as a specialexception, the source code distributed need not include anything that isnormally distributed
(in either source or binaryform) with the majorcomponents(compiler, kernel, and so on) of the operating system on which the executable runs,
unlessthat component itself accompaniesthe executable. If distribution ofexecutable orobject code ismade by offering accessto copyfrom a
designated place, then offering equivalent accessto copy the source code from the same place countsas distribution ofthe source code, even
though thirdparties are not compelled to copy the source along withthe object code.

4. You may not copy, modify,sublicense, ordistribute the Program except asexpresslyprovided under thisLicense. Any attempt otherwise to
copy,modify,sublicense or distribute the Program isvoid, and willautomaticallyterminate your rightsunderthisLicense. However, partieswho
have received copies,orrights,from you underthisLicense willnot have theirlicensesterminated so long assuch parties remainin full
compliance.

5. You are not required to accept thisLicense, since you have not signed it. However, nothing else grantsyou permission to modifyor distribute
the Program oritsderivativeworks. These actions are prohibited bylaw if you do not acceptthisLicense. Therefore, bymodifying ordistributing
the Program (or any workbased on the Program), you indicate youracceptance of thisLicense todo so, and allitsterms and conditionsfor
copying, distributing ormodifying the Program or works based on it.

6. Each time you redistribute the Program (or any workbased on the Program), the recipient automaticallyreceives a license from the original
licensorto copy,distribute or modifythe Program subject tothese terms and conditions. You maynot impose anyfurther restrictions on the
recipients'exercise of the rightsgranted herein. You are not responsibleforenforcing compliance by thirdparties tothisLicense.

7. If, as a consequence of a courtjudgment orallegation of patent infringement orfor any other reason (not limited topatent issues), conditions
are imposed on you (whether bycourtorder, agreementorotherwise) that contradict the conditions ofthisLicense, they do not excuse you from
the conditionsof thisLicense. If you cannot distribute so asto satisfysimultaneously your obligationsunder thisLicense and anyotherpertinent
obligations, then asa consequence you maynot distribute the Program atall. For example, if a patent license wouldnot permitroyalty-free
redistribution ofthe Program by allthose who receive copiesdirectlyorindirectlythrough you, then the onlywayyou couldsatisfyboth itand this
License would be to refrain entirelyfrom distribution of the Program.

If anyportion of thissection isheld invalid orunenforceable under anyparticularcircumstance, the balance of the section isintended to apply
and the section asa whole is intended toapplyin othercircumstances.

It is not the purpose of thissection to induce you toinfringe anypatentsor other propertyright claimsorto contestvalidityof any such claims; this
section hasthe sole purpose of protecting the integrityof the free software distribution system, which isimplemented bypublic license practices.
Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent
application of that system; it isup to the author/donor to decide if he orshe iswilling todistribute software through anyother system and a licensee
cannot impose that choice.

26

Thissectionisintended to make thoroughlyclearwhat is believed to be a consequence of the restof thisLicense.

8. If the distribution and/oruse ofthe Program isrestricted in certaincountrieseither by patentsor bycopyrighted interfaces,the originalcopyright
holder who placesthe Program underthisLicense may add an explicitgeographical distribution limitation excluding those countries,so that
distribution ispermitted onlyinor among countries not thus excluded. In such case, thisLicense incorporates the limitation as if written in the body
of thisLicense.

9. The Free Software Foundation may publish revised and/or new versionsof the GeneralPublic License from time to time. Such new versions will
be similar in spiritto the present version, but maydiffer in detailto addressnew problemsorconcerns. Each version isgiven a distinguishing version
number. If the Program specifiesa version numberof thisLicense which applies to itand "anylater version", you have the option of following the
terms and conditions either of that version orof anylater version published bythe Free Software Foundation. If the Program doesnot specifya
version numberof thisLicense, you maychoose anyversion ever published bythe Free Software Foundation.

10. If you wish to incorporate partsof the Program into other free programswhose distribution conditions are different, write to the author to ask
for permission. For software which iscopyrighted bythe Free Software Foundation, write to the Free Software Foundation; we sometimesmake
exceptionsfor this. Our decision willbe guided by the twogoalsof preserving the free status of allderivativesof our free software and of promoting
the sharing and reuse ofsoftware generally.

NO WARRANTY

11. BECAUSETHEPROGRAM ISLICENSED FREE OFCHARGE, THERE ISNOWARRANTYFOR THE PROGRAM, TOTHE EXTENT
PERMITTED BY APPLICABLE LAW.EXCEPT WHEN OTHERWISESTATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER
PARTIESPROVIDE THE PROGRAM "ASIS" WITHOUT WARRANTYOF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT
LIMITED TO, THEIMPLIED WARRANTIESOF MERCHANTABILITYAND FITNESSFOR APARTICULAR PURPOSE.THE ENTIRE RISKASTO
THE QUALITY AND PERFORMANCE OF THE PROGRAM ISWITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE
COST OF ALL NECESSARYSERVICING, REPAIR OR CORRECTION.

12. IN NOEVENT UNLESSREQUIRED BYAPPLICABLE LAWOR AGREED TOIN WRITING WILL ANYCOPYRIGHT HOLDER, OR ANYOTHER
PARTYWHO MAYMODIFYAND/OR REDISTRIBUTE THE PROGRAM ASPERMITTED ABOVE,BE LIABLE TO YOU FOR DAMAGES,
INCLUDING ANYGENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGESARISING OUT OFTHE USE OR INABILITY TO USETHE
PROGRAM (INCLUDING BUT NOT LIMITED TOLOSSOF DATAOR DATA BEING RENDERED INACCURATEOR LOSSESSUSTAINED BY
YOUOR THIRD PAR TIESOR AFAILURE OFTHE PROGRAM TO OPERATE WITH ANYOTHER PROGRAMS), EVENIF SUCH HOLDER OR
OTHER PARTYHASBEEN ADVISEDOF THE POSSIBILITYOF SUCH DAMAGES.

GNU LESSER GENERAL PUBLIC LICENSE

Version 2.1, February1999

Copyright (C) 1991, 1999 Free Software Foundation, Inc.

59 Temple Place, Suite 330, Boston, MA02111-1307 USA

TERMSAND CONDITIONS FOR COPYING, DISTRIB UTION AND MODIFICATION

0. ThisLicense Agreement applies toany software libraryor other program which containsa notice placed by the copyrightholder orother
authorized partysaying it maybe distributed underthe terms of thisLesserGeneral Public License (also called "thisLicense"). Each licensee is
addressed as "you".

A"library"meansa collection of software functionsand/or data prepared so asto be convenientlylinked with application programs(which use
some of those functionsand data) to formexecutables.

The "Library",below, refersto anysuch software libraryor workwhich has been distributed under these terms. A"workbased on the Library"
means either the Libraryorany derivative workunder copyrightlaw: thatisto say, a workcontaining the Libraryora portion of it, either verbatimor
with modificationsand/ortranslated straightforwardlyinto anotherlanguage. (Hereinafter, translation isincluded withoutlimitation in the term
"modification".)

"Source code" for a workmeansthe preferred form of the workformaking modificationsto it. For a library, complete source code meansallthe
source code for allmodulesitcontains,plusanyassociated interface definition files,plusthe scriptsused tocontrolcompilation and installation of
the library.

Activities other than copying, distribution and modification are not covered bythisLicense; theyare outside itsscope. The act of running a
program using the Libraryisnot restricted, and output from such a program iscovered onlyifitscontentsconstitute a workbased on the Library
(independent of the use of the Libraryin a toolforwriting it). Whether that istrue dependson what the Librarydoesand what the program that
uses the Librarydoes.

1. You may copyand distribute verbatimcopies of the Library'scomplete source code asyou receiveit,in any medium, provided thatyou
conspicuouslyand appropriatelypublish on each copyan appropriate copyright notice and disclaimer ofwarranty; keep intact allthe notices

27

that refer tothisLicense and to the absence of anywarranty; and distribute a copyof thisLicense along with the Library. You maycharge a fee
for the physicalact of transferring a copy, and you may at youroption offer warranty protection in exchange for a fee.

2. You may modifyyour copyor copiesof the Libraryor any portion of it, thus forming a workbased on the Library,and copyand distribute such
modificationsor workunder the termsof Section 1 above, provided thatyou alsomeet allof these conditions:

a) The modified workmustitself be a software library.
b) You must cause the files modified to carryprominent notices stating that you changed the filesand the date of any change.
c) You must cause the whole ofthe workto be licensed at no charge to allthirdparties under the terms of thisLicense.
d) If a facilityin the modified Libraryrefersto a function ora table of data to be supplied by an application program thatusesthe facility,other than

as an argument passed when the facilityisinvoked, then you mustmake a good faitheffort toensure that, in the eventan application doesnot
supplysuch function ortable, the facilitystilloperates, and performswhatever partof itspurpose remainsmeaningful.

These requirementsapplyto the modified workasa whole. If identifiable sectionsof that workare not derived from the Library, and can be
reasonablyconsidered independent and separate worksin themselves, then thisLicense, and itsterms,do not applyto those sectionswhen you
distribute them asseparate works. But when you distribute the same sections as part of a whole which isa workbased on the Library,the
distribution of the whole mustbe on the terms of thisLicense, whose permissions forotherlicensees extend tothe entire whole, and thusto each
and everypartregardlessof who wrote it. Thus, itisnot the intent of thissection toclaimrightsor contestyour rightsto workwritten entirelybyyou;
rather, the intent is toexercise the rightto controlthe distribution ofderivative or collective worksbased on the Library. In addition, mere
aggregation of another worknotbased on the Librarywith the Library(or with a workbased on the Library) on a volume of a storage or distribution
medium does not bring the other workunderthe scope of thisLicense.

3. You may opt to applythe termsof the ordinaryGNU GeneralPublic License instead ofthisLicense toa given copy of the Library. To do this,you
mustalter allthe notices that refer tothisLicense, so thatthey refer tothe ordinaryGNU General Public License, version 2 instead ofto this
License. (If a newer version than version 2 of the ordinaryGNU GeneralPublic License has appeared, then you can specifythat version instead if
you wish.) Do not make any otherchange in these notices.

Once thischange ismade in a given copy, itisirreversible forthat copy, so the ordinaryGNU GeneralPublic License applies to allsubsequent
copiesand derivative worksmade from that copy. Thisoption isusefulwhen you wish to copypartof the code of the Libraryintoa program thatis
not a library.

4. You may copyand distribute the Library(or a portion orderivative of it, underSection 2) in object code or executable formunder the termsof
Sections 1 and 2 above provided that you accompany it with the complete corresponding machine-readable source code, which mustbe
distributed under the termsof Sections1 and 2 above on a medium customarily used for software interchange.

If distribution of object code ismade byoffering accessto copy from a designated place, then offering equivalentaccessto copy the source
code from the same place satisfiesthe requirement todistribute the source code, even though thirdparties are not compelled to copy the
source along with the object code.

5. Aprogram that containsno derivative of any portion of the Library,butisdesigned to workwith the Libraryby being compiled orlinked with it,is
called a "workthatusesthe Library". Such a work, in isolation, isnota derivative workof the Library,and therefore fallsoutside the scope of this
License.

However, linking a "workthatusesthe Library" with the Librarycreatesan executable that is a derivativeof the Library(because itcontains
portions ofthe Library), rather than a "workthat usesthe library". The executableistherefore covered bythisLicense. Section6 states termsfor
distribution of such executables.

When a "workthat usesthe Library" usesmaterialfrom a headerfile that ispartof the Library,the object code for the workmaybe a derivative
workof the Libraryeven though the source code isnot.

Whetherthisistrue isespecially significant if the workcan be linked without the Library, orifthe workisitself a library. The thresholdfor thisto be true
isnot preciselydefined bylaw.

If such an object file uses onlynumericalparameters, data structure layoutsand accessors,and smallmacros and smallinline functions(ten lines
or lessinlength), then the use of the objectfile isunrestricted, regardlessof whether itislegallya derivative work. (Executablescontaining this
objectcode plusportions of the LibrarywillstillfallunderSection 6.) Otherwise, if the workisa derivative of the Library,you maydistribute the object
code for the workunder the terms of Section 6. Anyexecutablescontaining that workalso fallunderSection 6, whether ornot theyare linked
directlywith the Libraryitself.

6. Asan exception tothe Sectionsabove, you mayalso combine orlinka "workthat usesthe Library" with the Libraryto produce a work
containing portionsof the Library, and distribute that workunder terms of your choice, provided thatthe terms permitmodification of the workfor
yourown use and reverse engineering for debugging such modifications.You mustgive prominent notice with each copy of the workthat the
Libraryisused initand thatthe Libraryand its use are covered bythisLicense. You mustsupplya copyof thisLicense. If the workduring execution
displayscopyright notices,you mustinclude the copyright notice for the Libraryamong them, aswellasa reference directing the user to the copy
of thisLicense. Also, you mustdo one of these things:

28

a) Accompany the workwith the complete corresponding machine-readable source code for the Libraryincluding whateverchangeswere
used in the work(which mustbe distributed underSections1 and 2 above); and, if the workisan executable linked with the Library, with the
complete machine-readable "workthat usesthe Library",asobject code and/or source code, so that the user can modifythe Libraryand then
relinkto produce a modifiedexecutable containing the modified Library.(It isunderstood thatthe user who changes the contents of definitions
filesin the Librarywillnot necessarilybe able to recompile the application touse the modified definitions.)

b) Use a suitable shared librarymechanismfor linking with the Library. Asuitable mechanism isone that (1) usesat run time a copyof the library
alreadypresent on the user'scomputersystem, ratherthan copying libraryfunctionsinto the executable, and (2) willoperate properlywitha
modified version of the library, if the user installs one, aslong as the modified version isinterface-compatible with the version that the workwas
made with.

c) Accompany the workwith a written offer, valid forat least three years,to give the same userthe materialsspecified inSubsection 6a, above, for
a charge no more than the costof performing thisdistribution.

d) If distribution ofthe workismade byoffering accessto copy from a designated place, offer equivalent accessto copy the above specified
materialsfrom the same place.

e) Verifythat the user has already received a copyof these materialsor thatyou have already sent thisusera copy.
For an executable, the required form of the "workthat uses the Library"mustinclude any data and utilityprograms needed for reproducing the

executable from it. However, asa specialexception, the materialsto be distributed need not include anything thatisnormallydistributed (in either
source or binaryform) with the majorcomponents(compiler, kernel, and so on) of the operating system on which the executable runs,unless
that component itself accompanies the executable. Itmayhappen that thisrequirement contradictsthe license restrictions ofotherproprietary
librariesthat do not normallyaccompany the operating system. Such a contradiction meansyou cannot use both them and the Librarytogether
inan executable that you distribute.

7. You may place libraryfacilitiesthat are a workbased on the Libraryside-by-side in a single librarytogether with other libraryfacilitiesnot covered
bythisLicense, and distribute such a combined library,provided that the separate distribution of the workbased on the Libraryand ofthe other
libraryfacilities is otherwise permitted, and provided that you do these twothings:

a) Accompany the combined librarywith a copy ofthe same workbased on the Library, uncombined with any other libraryfacilities.Thismustbe
distributed under the termsof the Sectionsabove.

b) Give prominent notice with the combined libraryof the fact that partof itisa workbased on the Library,and explaining where tofind the
accompanying uncombined form of the same work.

8. You may not copy, modify,sublicense, linkwith, ordistribute the Libraryexcept as expresslyprovided under thisLicense. Any attempt otherwise
to copy, modify,sublicense, linkwith, ordistribute the Libraryisvoid,and willautomatically terminate yourrightsunderthisLicense. However,
partieswho have received copies,or rights,from you under thisLicense willnot have theirlicensesterminated so long as such parties remain in full
compliance.

9. You are not required to accept thisLicense, since you have not signed it. However, nothing else grantsyou permission to modifyor distribute
the Libraryor itsderivative works.These actions are prohibited bylaw if you do not accept thisLicense. Therefore, bymodifying ordistributing the
Library(or any workbased on the Library), youindicate youracceptance of thisLicense todo so, and allitstermsand conditions forcopying,
distributing or modifying the Libraryorworksbased on it.

10. Each time you redistribute the Library (or any workbased on the Library), the recipientautomaticallyreceives a license from the original
licensorto copy,distribute, linkwith ormodifythe Librarysubject to these terms and conditions. You maynot impose anyfurther restrictions on the
recipients'exercise of the rightsgranted herein. You are not responsibleforenforcing compliance by thirdparties with thisLicense.

11. If, asa consequence of a courtjudgment orallegation ofpatent infringement orfor any other reason (not limited to patent issues), conditions
are imposed on you (whether bycourtorder, agreementorotherwise) that contradict the conditions ofthisLicense, they do not excuse you from
the conditionsof thisLicense. If you cannot distribute so asto satisfysimultaneously your obligationsunder thisLicense and anyotherpertinent
obligations, then asa consequence you maynot distribute the Libraryat all. For example, ifa patent license wouldnot permitroyalty-free
redistribution ofthe Libraryby allthose who receive copiesdirectlyor indirectlythrough you, then the onlywayyou couldsatisfyboth itand this
License would be to refrain entirelyfrom distribution of the Library.

If anyportion of thissection isheld invalid orunenforceable under anyparticularcircumstance, the balance of the section isintended to apply,
and the section asa whole is intended toapplyin othercircumstances.

It is not the purpose of thissection to induce you toinfringe anypatentsor other propertyright claimsorto contestvalidityof any such claims; this
section hasthe sole purpose of protecting the integrityof the free software distribution system which isimplemented by public license practices.
Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent
application of that system; it isup to the author/donor to decide if he orshe iswilling todistribute software through anyother system and a licensee
cannot impose that choice. Thissection isintended to make thoroughlyclear whatisbelieved tobe a consequence of the restof thisLicense.

29

12. If the distribution and/or use of the Libraryisrestricted in certaincountrieseither by patentsor bycopyrighted interfaces,the original copyright
holder who placesthe Libraryunder thisLicense may add an explicitgeographicaldistribution limitation excluding those countries,so that
distribution ispermitted onlyinor among countries not thus excluded. In such case, thisLicense incorporates the limitation as if written in the body
of thisLicense.

13. The Free Software Foundationmaypublish revised and/ornewversionsof the LesserGeneralPublic License from time to time. Such new
versionswill be similarin spirit to the present version, but maydiffer in detailto addressnew problemsor concerns. Each version isgiven a
distinguishing version number. If the Libraryspecifiesa version number of thisLicense which appliesto it and "any laterversion", you have the
option offollowing the terms and conditionseither of that version or of anylater version published bythe Free Software Foundation. If the Library
doesnot specifya license version number,you maychoose anyversion ever published bythe Free Software Foundation.

14. If you wish to incorporate partsof the Libraryinto otherfree programswhose distribution conditionsare incompatible withthese, write to the
authorto askforpermission. For software which iscopyrighted bythe Free Software Foundation, write to the Free Software Foundation; we
sometimesmake exceptionsfor this.Ourdecision willbe guided bythe two goalsof preserving the free status ofallderivatives of our free software
and ofpromoting the sharing and reuse of software generally.

15. The warrantydisclaimercontained in Sections11 and 12 of the preceding GPL License isincorporated herein.

30

Fortinet Customer Service & Support

Create a support account, register and manage your products,

download updates, firmware images and release notes, and create

technical support tickets.

https://support.fortinet.com

Fortinet Document Library

Up-to-date versions of Fortinet publications for the entire family of

Fortinet products.

http://docs.fortinet.com

Training Services

Course descriptions, availability, schedules, and location of training

programs in your area.

http://www.fortinet.com/training

Technical Discussion Forums

Communicate with other customers and Fortinet partners about

Fortinet products, services, and configuration issues.

https://support.fortinet.com/forum

FortiGuard Threat Research and Response

Up-to-date information on vulnerabilities and threats, includes a

virus scanner, IP signature look-up, and web filtering tools.

http://www.fortiguard.com

Fortinet.com