Device count, not headcount
Most providers price per managed device: firewall, switches, access points. A 20-person office with one firewall and two switches is a small job; the same 20 people across six APs and a server VLAN is not.
Managed Firewall Cost
Most providers make you book a call to learn a price. Here are the 2026 market ranges we could verify from published guides and carrier price lists, the six variables that move a quote, and our own per-site prices. Last reviewed 2026-10-06.
The Market
Published guides and carrier price lists cluster tightly once you separate monitoring-only from managed. These are the ranges we could verify, with sources at the bottom.
| Offering | Typical price | What is usually included | Source type |
|---|---|---|---|
| Monitoring only, per device | $5 to $15 per device per month | Up/down, interface and health alerts; no changes | NOC providers |
| Managed firewall, 10 to 25 users | $325 to $425 per appliance per month | Monitoring, rule changes, patching, reporting | MSP pricing guides |
| Managed firewall, 26 to 100 users | $525 to $1,175 per appliance per month | Same, larger rule base and log review | MSP pricing guides |
| Managed firewall, 100 plus users or compliance | $1,175 to $1,475 plus | Adds compliance reporting, 40 to 60 percent premium | MSP pricing guides |
| Carrier managed firewall (monitoring tier) | $360 to $480 per month | Monitoring and alerting, carrier hardware | State contract price list |
| Carrier managed firewall (management tier) | $564 to $1,148 per month | Management, HA and IPS options | State contract price list |
| ISP security add-on | $40 to $60 per month | DNS filtering, not a managed firewall | ISP press release |
Ranges are from the sources below, fetched 2026-10-06. The spread inside each band comes from what is included: a plan with no change hours is not comparable to one with rule changes and patching bundled.
What Moves the Price
Vendors rarely say this plainly. These are the variables we price on and the ones to ask any provider about.
Most providers price per managed device: firewall, switches, access points. A 20-person office with one firewall and two switches is a small job; the same 20 people across six APs and a server VLAN is not.
Next-business-day versus same-day versus after-hours is the biggest multiplier. After-hours human response for a solo or small provider is a real cost; expect it as an add-on, or expect a higher base price that quietly includes it. We include 24/7 monitoring and alerting and handle after-hours emergencies hourly on request.
Some plans include zero engineering and bill every VLAN or VPN user change hourly; our Essential plan works that way. Others include one to three hours a month, as our higher plans do. Compare the hour allowance and the hourly rate behind it, not the sticker.
HIPAA, PCI or SOC 2 add quarterly policy reviews, access reviews and evidence packaging. That is 40 to 60 percent more work than a plain managed firewall and is priced that way everywhere.
Some bundles include the firewall and its subscriptions in the monthly fee; most do not. A FortiGate 70G with three years of UTP lists at $3,644.78, so a bundled price that looks high may simply include it.
A junior ticket queue costs less than a senior engineer. If the provider cannot name the engineer who will touch your firewall, that is the price difference.
Our Pricing
We publish per-site prices so you do not have to book a sales call to find out. Full comparison on the services page.
| Plan | Per site / month | Response | Included changes | Device ceiling |
|---|---|---|---|---|
| Edge Essential | $695 | Next business day | None ($225/hr, 30-min minimum) | 10 |
| Edge Secure | $1,295 | Same business day | 1 hr/month | 20 |
| Edge Compliance | $1,795 | Priority same day | 2 hrs/month | 30 |
| Edge Multi-Site | $2,495 first site + $995 each additional | Priority, named escalation | 3 hrs/month pooled | 30 per site |
Additional managed devices $25 each per month. Changes beyond the included hours bill at $225 per hour, 30-minute minimum, then 15-minute increments. Human response is business hours; an authorized contact can call in emergency work after hours, billed hourly. Hardware at Fortinet list. A senior Fortinet-certified engineer does the work; there is no first-level queue.
Track Record
We only do networks. That is not a limitation — it is why the outcomes are different.
Years of network-only practice. Architecture, security, and operations — not IT generalism.
Sites delivered. Healthcare clinics, law offices, financial branches, multi-site operations.
Design target for fully redundant builds with HA firewalls, diverse ISPs, and backed-up power.
Senior engineer–led. No junior handoffs. No ticket queue. No escalation chain.
Career aggregate. The 20+ years and 300+ sites span the operator’s full network-only practice, including prior-employer engagements. 99.99% availability, about 53 minutes of downtime per year, is an architecture design target for engagements that fund full redundancy. It is not a service guarantee or uptime SLA. Contracted response times and service levels are defined in each customer agreement.
Where We Work
Pre-staging and configuration happen remotely; cutover is on site or remote-hands guided, your choice. Local clients: see our Fortinet MSP in Sacramento and Fortinet MSP in San Francisco pages. Replacing a non-Fortinet firewall? See firewall migration. Want it watched afterward? See network monitoring.
FAQ
For a small business with one firewall and 10 to 25 users, published 2026 guides put managed firewall service at $325 to $425 a month. For 26 to 100 users, $525 to $1,175. Compliance scope adds 40 to 60 percent. Our plans are $695, $1,295 and $1,795 per site, with the change-hour allowance, the hourly rate and the device ceiling stated.
No. Monitoring-only runs $5 to $15 per device and sends alerts. Managed means someone makes the changes, patches firmware, backs up configuration and reviews policy. Ask which one you are being quoted.
Usually not. Hardware and its security subscriptions are a separate purchase or lease. We quote them at Fortinet list by exact part number so the term and contents are unambiguous.
Because a human has to be on call. Automated monitoring runs around the clock at low cost; a senior engineer answering at 2 a.m. does not. We include 24/7 monitoring and alerting on every plan. Human response is business hours; after-hours emergencies are handled at hourly emergency rates when an authorized contact asks, so businesses that rarely need it do not pay for it every month.
A published state-contract price list for one national carrier shows monitoring at $360 to $480 a month and management at $564 to $1,148, with the carrier's own hardware. Comparable to MSP pricing, with less flexibility on policy.
We price month to month with a 4 percent annual adjustment and 60-day termination after the first year. A longer commitment buys predictability, not a discount; we would rather earn the renewal.
Edge Essential at $695: 24/7 monitoring, configuration backup and next-business-day response. It includes no change hours; a change bills at $225 an hour with a 30-minute minimum, so a short one costs $112.50, not a full hour. It is the floor at which a senior engineer can stand behind the firewall.
Line them up on five fields: devices covered, response window, included change hours, what compliance work is in scope, and whether hardware and subscriptions are included. A quote missing any of those is not a quote yet.
Sources
Last reviewed 2026-10-06. Vendor documents and prices change; confirm against the linked pages before you decide.
Fortinet, FortiGate, FortiOS, FortiGuard and FortiCare are trademarks of Fortinet, Inc. Other vendor names are trademarks of their respective owners, used to identify the products discussed. Ambio Edge Networks is an independent Fortinet partner and is not affiliated with or endorsed by any vendor named here.
Get a Managed Firewall Quote
Send the firewall model, how many switches and access points, your internet speed, and whether you need compliance reviews. We recommend a plan from the published card and quote hardware at Fortinet list if you need it.
Response from a senior engineer within 1 business day.
A direct conversation — no sales team, no runaround.
An honest assessment of whether we are the right fit.
Clear next steps if we are — no pressure if we are not.