The typical implementation process for Fortinet products, including FortiVoice, usually involves several stages:
Planning and Design: Understanding the business requirements and designing a solution that fits.
Installation: Setting up the software/hardware in the client's environment.
Configuration: Customizing the solution according to specific business needs.
Testing: Ensuring everything works as expected before going live.
Deployment: Going live with the solution.
Training: Providing training to the users.
The duration of the implementation can vary depending on the complexity of the business environment and the specific requirements. It could range from a few days to several weeks.
Customisation
FortiVoice software is highly customizable to fit specific business needs. It allows businesses to tailor various aspects of the system, including call routing, auto attendants, voicemail settings, and user privileges. The platform supports integration with third-party services like Twilio and Singlewire InformaCast, enabling businesses to extend its functionality further. Additionally, FortiVoice offers REST API support, which allows for deeper customization and integration with other business applications. This flexibility ensures that the system can be adapted to meet the unique requirements of different organizations, enhancing operational efficiency and user experience.
Additional Costs
Setup Fees
The initial cost for setting up FortiVoice can vary depending on the deployment model (on-premises vs. cloud) and the scale of the implementation. For instance, an on-premises setup might involve purchasing hardware appliances, whereas a cloud deployment would primarily involve subscription fees. A typical setup might include costs for VoIP trunks, extensions, and any additional hardware required.
Maintenance and Support Charges
FortiVoice offers various support options, including FortiCare Premium Support, which provides ongoing technical assistance and firmware updates. These support contracts are typically purchased separately and can vary in cost based on the level of service required. Additionally, businesses might incur costs for periodic software updates and feature enhancements, although these are often included in the support contracts.
Subscription Fees
For cloud deployments, FortiVoice charges a subscription fee based on the number of extensions and VoIP trunks. For example, a typical annual cost might be $600 for two VoIP trunks and $100 per extension, leading to a total cost of $1600 per year for a setup with ten extensions.
Training
Training
Instructor-Led Courses: Fortinet provides instructor-led courses that cover the installation, configuration, and management of FortiVoice systems. These courses are designed to equip IT administrators with the necessary skills to effectively manage the system.
On-Demand Labs: Users can access on-demand labs to practice and hone their skills in a controlled environment. This hands-on training is crucial for understanding the nuances of the system.
Certification Programs: Fortinet offers certification programs that validate the skills and knowledge of IT professionals in managing FortiVoice systems. These certifications can be beneficial for career advancement and ensuring that the organization has qualified personnel to manage the communication infrastructure.
Support
Technical Support: Fortinet provides robust technical support services, including troubleshooting, configuration assistance, and firmware updates. This support is accessible through the Fortinet Technical Support website and is often included in the support contracts.
User Portal: The FortiVoice user portal offers extensive resources for end-users, including access to call logs, voicemail management, contact directories, and call handling settings. This portal helps users manage their communication preferences and troubleshoot common issues independently.
Documentation and Online Resources: Fortinet offers detailed documentation, including administration guides and user manuals, which provide step-by-step instructions for configuring and using the system. Additionally, online resources such as video tutorials, blogs, and knowledge base articles are available to assist users
Security Measures
FortiVoice incorporates a range of security measures to protect data and ensure secure communications. Key security features include:
Encryption: FortiVoice uses Secure Real-time Transport Protocol (SRTP) and Transport Layer Security (TLS) to encrypt voice and signaling data, preventing unauthorized access and eavesdropping.
Firewall Integration: The system can be integrated with FortiGate next-generation firewalls to provide an additional layer of security, including intrusion prevention and advanced threat protection.
Policy Management: FortiVoice allows administrators to set detailed security policies, including password policies, user privileges, and access controls, to ensure that only authorized users can access the system and its features.
Proactive Monitoring: The system includes tools for real-time monitoring and logging of call activities, helping administrators detect and respond to potential security incidents promptly.
Multi-Factor Authentication (MFA): FortiVoice supports MFA for administrative access, adding an extra layer of security to prevent unauthorized access.
Updates
FortiVoice releases updates regularly to enhance functionality and address security vulnerabilities. The process for managing updates includes:
Regular Releases: FortiVoice provides periodic firmware updates that include new features, security patches, and performance improvements. The exact frequency can vary, but updates are typically released several times a year.
Update Management: Administrators can manage updates through the FortiVoice web-based management console. The system allows for easy downloading and installation of firmware updates, ensuring that the system remains up-to-date with the latest security enhancements and features.
Notification System: FortiVoice includes a notification system that alerts administrators to available updates, ensuring timely installation and minimizing the risk of running outdated software.
Data Ownership and Portability
FortiVoice's policy on data ownership and portability is designed to ensure that businesses retain control over their data. Key aspects include:
Data Ownership: Fortinet's data privacy practices emphasize that customers retain ownership of their data. Fortinet acts as a data processor, handling data according to the customer's instructions and applicable legal requirements.
Data Portability: FortiVoice supports data portability, allowing businesses to export their data if they decide to switch to a different provider or require data for other purposes. This includes call logs, recorded calls, and other communication data, which can be exported in standard formats.
Compliance: Fortinet ensures that its data handling practices comply with regulations such as the General Data Protection Regulation (GDPR), providing transparency and control over how personal data is collected, processed, and stored
Scaling Up / Down
FortiVoice offers flexible terms for scaling up or down to meet changing organizational needs. The platform supports a variety of deployment models, including on-premises, virtual environments, and cloud-based solutions, allowing businesses to adjust their communication infrastructure as needed. Key points include:
Modular Licensing: FortiVoice uses a modular licensing approach, enabling businesses to add or remove features and extensions based on their current requirements. This flexibility ensures that organizations only pay for what they need.
Pay-as-You-Go: For cloud deployments, FortiVoice offers pay-as-you-go pricing, allowing businesses to scale their usage up or down without long-term commitments. This model is particularly beneficial for organizations with fluctuating communication needs.
Easy Expansion: The system is designed to support seamless expansion. Additional extensions, VoIP trunks, and features can be added with minimal disruption to existing services.
Centralized Management: FortiVoice's web-based management console simplifies the process of scaling, allowing administrators to easily configure and manage new users and features from a single interface.
The terms & conditions for contract renewal and cancellation
Contract Renewal
Contract renewal for FortiVoice involves extending or continuing an existing agreement, typically with the opportunity to renegotiate terms. Important aspects include:
Advance Discussions: Renewal discussions should begin well in advance of the contract expiration date, ideally three to six months prior, to allow sufficient time for negotiations and amendments.
Review and Amendments: During renewal, both parties can reassess and modify the contract terms to better align with current needs and market conditions. This might involve renegotiating pricing, service levels, and other key terms.
Automatic Renewal: Some contracts may include automatic renewal clauses, which can save time but also require careful review to avoid being locked into unfavorable terms.
Cancellation
Terms and conditions for contract cancellation typically include:
Notice Period: Most contracts require a notice period for cancellation, which must be adhered to in order to avoid penalties. The specific notice period will be outlined in the contract.
Grace Period: Fortinet provides a grace period for service contracts, allowing customers some flexibility in managing their subscriptions. For example, there is a 365-day grace period for service contracts purchased for FortiGate VM and other products, during which the service can be activated without forfeiting the contract.
Termination Fees: Early termination of a contract may incur fees, depending on the terms agreed upon. These fees are designed to cover the costs associated with the early cancellation of services.
Data Portability: Upon cancellation, FortiVoice supports data portability, allowing businesses to export their data, such as call logs and recorded calls, ensuring they retain control over their information.
Compliance
FortiVoice software meets several key compliance standards, ensuring that it adheres to industry regulations and best practices for data security and privacy. The primary compliance standards that FortiVoice adheres to include:
PCI DSS (Payment Card Industry Data Security Standard): FortiVoice helps organizations comply with PCI DSS by securing payment card data and ensuring that communication systems meet the stringent requirements of this standard.
HIPAA (Health Insurance Portability and Accountability Act): FortiVoice supports HIPAA compliance by protecting health information and ensuring that communication systems are secure and private, which is essential for organizations handling sensitive healthcare data.
GDPR (General Data Protection Regulation): FortiVoice helps organizations comply with GDPR by managing and protecting personal data according to the stringent requirements of this European regulation.
ISO 27001: FortiVoice aligns with ISO 27001, which is a widely recognized standard for information security management systems (ISMS). This standard helps organizations manage the security of assets, including financial information, intellectual property, and employee details.
SOX-COBIT (Sarbanes-Oxley Act and Control Objectives for Information and Related Technologies): FortiVoice supports compliance with the SOX Act using COBIT guidelines, helping organizations manage and report on their internal controls and financial reporting.
NIST 800-53 and NIST 800-171: FortiVoice adheres to these NIST standards, which provide guidelines for securing federal information systems and protecting controlled unclassified information in non-federal systems.