FortiVoice

Training

• Instructor-Led Courses: Fortinet provides instructor-led courses that cover the installation, configuration, and management of FortiVoice systems. These courses are designed to equip IT administrators with the necessary skills to effectively manage the system.
• On-Demand Labs: Users can access on-demand labs to practice and hone their skills in a controlled environment. This hands-on training is crucial for understanding the nuances of the system.
• Certification Programs: Fortinet offers certification programs that validate the skills and knowledge of IT professionals in managing FortiVoice systems. These certifications can be beneficial for career advancement and ensuring that the organization has qualified personnel to manage the communication infrastructure.

Support

• Technical Support: Fortinet provides robust technical support services, including troubleshooting, configuration assistance, and firmware updates. This support is accessible through the Fortinet Technical Support website and is often included in the support contracts.
• User Portal: The FortiVoice user portal offers extensive resources for end-users, including access to call logs, voicemail management, contact directories, and call handling settings. This portal helps users manage their communication preferences and troubleshoot common issues independently.
• Documentation and Online Resources: Fortinet offers detailed documentation, including administration guides and user manuals, which provide step-by-step instructions for configuring and using the system. Additionally, online resources such as video tutorials, blogs, and knowledge base articles are available to assist users

FortiVoice incorporates a range of security measures to protect data and ensure secure communications. Key security features include:

• Encryption: FortiVoice uses Secure Real-time Transport Protocol (SRTP) and Transport Layer Security (TLS) to encrypt voice and signaling data, preventing unauthorized access and eavesdropping.
• Firewall Integration: The system can be integrated with FortiGate next-generation firewalls to provide an additional layer of security, including intrusion prevention and advanced threat protection.
• Policy Management: FortiVoice allows administrators to set detailed security policies, including password policies, user privileges, and access controls, to ensure that only authorized users can access the system and its features.
• Proactive Monitoring: The system includes tools for real-time monitoring and logging of call activities, helping administrators detect and respond to potential security incidents promptly.
• Multi-Factor Authentication (MFA): FortiVoice supports MFA for administrative access, adding an extra layer of security to prevent unauthorized access.

FortiVoice releases updates regularly to enhance functionality and address security vulnerabilities. The process for managing updates includes:

• Regular Releases: FortiVoice provides periodic firmware updates that include new features, security patches, and performance improvements. The exact frequency can vary, but updates are typically released several times a year.
• Update Management: Administrators can manage updates through the FortiVoice web-based management console. The system allows for easy downloading and installation of firmware updates, ensuring that the system remains up-to-date with the latest security enhancements and features.
• Notification System: FortiVoice includes a notification system that alerts administrators to available updates, ensuring timely installation and minimizing the risk of running outdated software.

FortiVoice's policy on data ownership and portability is designed to ensure that businesses retain control over their data. Key aspects include:

• Data Ownership: Fortinet's data privacy practices emphasize that customers retain ownership of their data. Fortinet acts as a data processor, handling data according to the customer's instructions and applicable legal requirements.
• Data Portability: FortiVoice supports data portability, allowing businesses to export their data if they decide to switch to a different provider or require data for other purposes. This includes call logs, recorded calls, and other communication data, which can be exported in standard formats.
• Compliance: Fortinet ensures that its data handling practices comply with regulations such as the General Data Protection Regulation (GDPR), providing transparency and control over how personal data is collected, processed, and stored

FortiVoice offers flexible terms for scaling up or down to meet changing organizational needs. The platform supports a variety of deployment models, including on-premises, virtual environments, and cloud-based solutions, allowing businesses to adjust their communication infrastructure as needed. Key points include:

• Modular Licensing: FortiVoice uses a modular licensing approach, enabling businesses to add or remove features and extensions based on their current requirements. This flexibility ensures that organizations only pay for what they need.
• Pay-as-You-Go: For cloud deployments, FortiVoice offers pay-as-you-go pricing, allowing businesses to scale their usage up or down without long-term commitments. This model is particularly beneficial for organizations with fluctuating communication needs.
• Easy Expansion: The system is designed to support seamless expansion. Additional extensions, VoIP trunks, and features can be added with minimal disruption to existing services.
• Centralized Management: FortiVoice's web-based management console simplifies the process of scaling, allowing administrators to easily configure and manage new users and features from a single interface.

Contract Renewal

Contract renewal for FortiVoice involves extending or continuing an existing agreement, typically with the opportunity to renegotiate terms. Important aspects include:

• Advance Discussions: Renewal discussions should begin well in advance of the contract expiration date, ideally three to six months prior, to allow sufficient time for negotiations and amendments.
• Review and Amendments: During renewal, both parties can reassess and modify the contract terms to better align with current needs and market conditions. This might involve renegotiating pricing, service levels, and other key terms.
• Automatic Renewal: Some contracts may include automatic renewal clauses, which can save time but also require careful review to avoid being locked into unfavorable terms.

Cancellation

Terms and conditions for contract cancellation typically include:

• Notice Period: Most contracts require a notice period for cancellation, which must be adhered to in order to avoid penalties. The specific notice period will be outlined in the contract.
• Grace Period: Fortinet provides a grace period for service contracts, allowing customers some flexibility in managing their subscriptions. For example, there is a 365-day grace period for service contracts purchased for FortiGate VM and other products, during which the service can be activated without forfeiting the contract.
• Termination Fees: Early termination of a contract may incur fees, depending on the terms agreed upon. These fees are designed to cover the costs associated with the early cancellation of services.
• Data Portability: Upon cancellation, FortiVoice supports data portability, allowing businesses to export their data, such as call logs and recorded calls, ensuring they retain control over their information.

FortiVoice software meets several key compliance standards, ensuring that it adheres to industry regulations and best practices for data security and privacy. The primary compliance standards that FortiVoice adheres to include:

• PCI DSS (Payment Card Industry Data Security Standard): FortiVoice helps organizations comply with PCI DSS by securing payment card data and ensuring that communication systems meet the stringent requirements of this standard.
• HIPAA (Health Insurance Portability and Accountability Act): FortiVoice supports HIPAA compliance by protecting health information and ensuring that communication systems are secure and private, which is essential for organizations handling sensitive healthcare data.
• GDPR (General Data Protection Regulation): FortiVoice helps organizations comply with GDPR by managing and protecting personal data according to the stringent requirements of this European regulation.
• ISO 27001: FortiVoice aligns with ISO 27001, which is a widely recognized standard for information security management systems (ISMS). This standard helps organizations manage the security of assets, including financial information, intellectual property, and employee details.
• SOX-COBIT (Sarbanes-Oxley Act and Control Objectives for Information and Related Technologies): FortiVoice supports compliance with the SOX Act using COBIT guidelines, helping organizations manage and report on their internal controls and financial reporting.
• NIST 800-53 and NIST 800-171: FortiVoice adheres to these NIST standards, which provide guidelines for securing federal information systems and protecting controlled unclassified information in non-federal systems.