Security: Network Appliances & Subscriptions

Business Class Security

Network Appliances & Subscriptions

Fortinet Unified Security Solutions

All-inclusive, cost-effective security solution	Fortinet offers a lower total cost of ownership with the most complete set of functions including: antivirus, intrusion prevention, antispyware, web content filtering, and antispam
Automated updates of antivirus, antispyware and IPS signatures	Around-the-clock protection against the latest threats. Virus and intrusion encyclopedia covers more than 60,000 different threats
High performance custom hardware	The Fortinet FortiASIC delivers superior performance and reliability, ensuring that the security appliance does not become a network bottleneck
Integrated multi-port switch	Eliminates the need for external switches and provides enhanced connectivity options
Secure Web UI for easy deployment and management	Quick and easy configuration wizard walks administrators through initial setup and graphical user interface offers at-a-glance security event and performance monitoring
Security hardened custom Operating System (OS)	Underlying FortiOS is ICSA-certified and offers a comprehensive command-line interface

Go to the top of this pageˆ

Technical Specifications

Technical Specifications
Hardware Specifications	FortiGate-60	FortiWifi-60A	FortiGate-100A
LAN Switching Interfaces	4	4	4
WAN Interfaces	2	2	2
DMZ Interfaces	1	1	2
Analog Modem	n/a	n/a	n/a
ADSL Interface	n/a	n/a	n/a
Wireless LAN 802.11a/b/g	No	Yes	No
USB Ports	2	2	2
System Performance
Firewall/VPN 3DES	70/20Mbps	70/20Mbps	100/40Mbps
Concurrent sessions	50,000	50,000	200,000
New sessions per second	2,000	2,000	4,000
Site-site IPSec VPN tunnels	50	50	80
Antivirus throughput	15Mbps	15Mbps	20Mbps
Security Features
Gateway antivirus protections (virus, spyware, trojan)	Yes	Yes	Yes
Integrated IPS (signature & anomaly detection)	Yes	Yes	Yes
Integrated URL filtering	Yes	Yes	Yes
Integrated spam filtering	Yes	Yes	Yes
VPN (IPSec, SSL, PPTP)	Yes	Yes	Yes
VOIP Security (H.323, SIP)	Yes	Yes	Yes
Networking Features
DHCP/PPPoE client/Static IP	Yes	Yes	Yes
DHCP Server	Yes	Yes	Yes
One-to-one NAT	Yes	Yes	Yes
Static and Dynamic routing (BGP, OSPF, RIP)	Yes	Yes	Yes
Traffic shaping	Yes	Yes	Yes
Management, Reporting, Logging
Centralized Management (FortiManager)	Yes	Yes	Yes
Centralized logging (FortiAnalyzer)	Yes	Yes	Yes
Syslog	Yes	Yes	Yes
Email notification of alerts, viruses	Yes	Yes	Yes
CLI (console, SSH, telnet)	Yes	Yes	Yes
Web UI (HTTPS, HTTP)	Yes	Yes	Yes
Compliance	FCC Class A, Part 15, UL/CUL, C Tick, CE, VCCI
Certifications	ICSA: Firewall, IPSec, SSL, Antivirus, IPS

Go to the top of this pageˆ

Reporting and Logging

FortiAnalyzer Logging and Reporting Features

Reporting and Logging
FortiAnalyzer supports:
Log Aggregation & Archiving	Analyze logs from multiple devices, by user, or by group of users, and generate a variety of reports that enable you to pro-actively secure networks as threats arise, avoid network abuses, manage bandwidth, monitor Web site visits, and ensure appropriate usage policies.
Data Mining, Trend & Forensic Analysis	Archived content is data mined to report on types of traffic on your networks as well as actual content of data transferred in Web, FTP, email and IM traffic. Security event summaries identify unwanted traffic in the network and the top traffic producers, while traffic summaries identify the type of traffic on your network. Reports identify high volume users, information leakage events and acceptable use policy violations. A Forensic Analysis tool is available to analyze archived content to track user activities by username, email address, or IM name. Supports FortiGuard™ Web Filtering reports to show Web site access and blocked Web sites per user.
Central Quarantine	For FortiGate units that do not have a hard disk, the FortiAnalyzer offers the ability to quarantine infected or suspicious files entering your network environment. A quarantine browser allows you to view the files to determine whether they are dangerous or not.
Log Browser	Log Browser enables you to view any log file or messages from registered devices. All log files and messages are searchable and can be filtered to drill down and locate specific information.
Real-Time Log Viewer	Real-time display of information allows you to follow real-time trends in network usage such as the source IP address and the destination URL for HTTP traffic or IM message traffic.
Network Analyzer	The Network Analyzer allows any available interface on the FortiAnalyzer to be used to monitor traffic on a segment of network. The FortiAnalyzer network analyzer functions as a sniffer to capture traffic data, save it to the FortiAnalyzer hard disk and display the data.
Vulnerability Scanner	Vulnerability scanner identifies vulnerabilities on a host or server, such as a mail server, FTP server or other UNIX or Windows host and generates vulnerability reports showing potential weaknesses to attacks that may exist for a selected device.

Go to the top of this pageˆ

FortiAnalyzer Features

FortiAnalyzer features
Feature	FortiAnalyzer-100B	FortiAnalyzer-400	FortiAnalyzer-800
Security Hardened Platform	Yes	Yes	Yes
Number of Licensed Network Devices	10	200	250
Number of FortiClient Devices	50	2000	2500
10/100 Ethernet	4	3	2
10/100/1000 Ethernet	0	0	0
Number of Hard Drives	1	4	4
Total Hard Drive Capacity	250GB	1TB	1TB standard/ 1.6TB optional
RAID Storage Management	n/a	Yes (0, 1, 5)	Yes (0, 1, 5)
LCD Display	No	Yes	Yes
Redundant Hot Swap Power Supplies	n/a	Yes	Yes
Dimensions (H, W, L)	2 x 13.5 x 6.75 in (5 x 33.7 x 17.5 cm)	9.5 x 6.6 x 14.5 in (24.1 x 16.7 x 36.8 cm)	1.75 x 16.9 x 22.4 in (4.45 x 42.9 x 56.9 cm)
Weight	4.4 lbs (2 kg)	23 lbs (10.4 kg)	26.5 lbs (12 kg)
Rack Mountable	n/a	n/a	Yes

Go to the top of this pageˆ

Subscriptions & Services

FortiGuard Security Subscription Service Features

FortiGuard Security Subscription Service Features
FortiGuard Services Include:
FortiGuard Antivirus / Antispyware Service	Provides fully automated updates to ensure protection against the latest blended threats. With a global high speed distribution network, fast and reliable access to critical signature updates is guaranteed. A premium version of this service is available which offers guaranteed Service Level Agreements (SLAs) for malware threats.
FortiGuard Intrusion Prevention Service	Arms Fortinet customers with the latest defenses against stealthy malicious and suspicious network-based threats. Fortinet’s Global Threat Research Team works with worldwide organizations around the clock to isolate the latest application and OS vulnerabilities – creating the latest detection and prevention technologies to keep customers one step ahead of the attackers.
FortiGuard Web Content Filtering Service	Enables Fortinet products to monitor and provide valuable insight into all web activities allowing customers to meet government regulations and enforce corporate internet usage policies. Massive web content rating databases power the industry’s most accurate web content filtering service. A premium version of this service is available which offers a higher quota of URL submissions for rating.
FortiGuard Antispam Service	Using a collection of spam probes, the Fortinet Global Threat Research Team develops and maintains accurate lists of spammers and spam content. Advanced antispam detection capabilities provide greater protection than standard Real Time Blacklists (RBLs).

Security Subscriptions and Services

Support Services	FortiCare 8x5	FortiCare 24x7	Service Bundles
On-Line Tools (Web Support, Documentation)	Yes	Yes	Yes
Firmware/Software Updates	Yes	Yes	Yes
Web-based Technical Support	Yes	Yes	Yes
Telephone-based Technical Support	8x5	24x7
Hardware Replacement	Return & Repair	Advanced Replacement
	FortiCare & FortiGuard Service Bundles are Available.