Short answer
Your storage bundle is a hard ceiling, but FirstNet monitors ingestion trends and alerts you before you reach it so the bundle can be stepped up. There are no silent overage charges.
In detail
What you need to know:
- Logs above the ceiling are dropped, not queued, so acting on FirstNet's alerts matters
- Bundles step up in 50 GB increments, so an uplift is a straightforward change
- FirstNet monitors capacity and ingestion continuously as part of the managed service
- Log volume can change quickly; switching on full SSL deep inspection mid-contract, for example, can double daily volume overnight
Because log estimates are only estimates, FirstNet recommends re-baselining log volume after about six months. That check confirms whether your bundle still matches your devices, inspection settings and retention period.
To avoid gaps in your log history, tell FirstNet before changes that increase logging, such as adding sites or widening SSL inspection, so the bundle can be adjusted in advance rather than after an alert.
Source: FirstNet Hosted Firewall & Network Security service page →
Didn’t answer your question?