Author
hossam-youssef
View
143
Download
14
Tags:
Embed Size (px)
DESCRIPTION
Fortinet ProductGuide January2013 R21
Fortinet Product Quick GuideJanuary, 2013
February 18, 20131
Content Product Overview FortiGate/FortiWifi FortiAP FortiClient FortiAnalyzer FortiManager FortiAuthenticator FortiDDoS FortiMail FortiWeb FortiDB FortiScan FortiBalancer FortiCache FortiDNS FortiSwitch
2
Product Overview
3
Broad Product Portfolio
FortiDDoS SERVICE PROVIDER FortiGate 3000-5000 Series FortiAuthenticator
SMALL/MEDIUM ENTERPRISE FortiGate 20-1000 Series
VM
LARGE ENTERPRISE FortiGate 1000-3000 SeriesFortiScan FortiManager FortiAnalyzer FortiMail FortiWeb
FortiSwitch
FortiAP
FortiDB
4
Fortinet Product PortfolioFortiGateNetwork Security Platform
FortiMailMessaging Security Gateway
FortiDBDatabase Security Solution
FortiDDoSApplication D/DOS Mitigator
SecurityFortiAPWireless Access
FortiWebWeb Application Firewall
FortiScanVulnerability Management
FortiAuthenticatorAccess Management
FortiBalancerApplication Delivery
FortiDNSHigh Performance DNS Server
FortiSwitchWired Access
FortiClientEndpoint Security
FortiCacheContent Caching
FortiVoiceVoIP & IP Telephony
Network Services
FortiToken2-Factor Authentication
FortiManagerCentralized Device Manager
FortiAnalyzerCentralized Logging & Reporting
Management
FortiGuardSecurity & Network Services
FortiCareSupport Services
FortiCloudHosted Services
Services
Also Available as Virtual Appliance
5
FortiGate/FortiWiFi
6
FortiGate: Integrated Architecture
Real-Time Protection
FortiGuard UpdatesAV Firewall WLAN IPS VPN VoIP Web Filter Antispam DLP SSL Insp WAN Opt HA App Ctrl VM
Fully Integrated Security & Networking Technologies
Traffic Shaping Load Balancing
Hardened Platform
Specialized OS Purpose-Built Hardware FortiCare FortiGuard Labs
High Performance
Support and Services
Purpose-built to deliver overlapping, complementary security Provides both flexibility & defense-in-depth capabilities7
Anatomy of a FortiGate
FortiCare Standard and extended hardware, software and support packages8x5 Enhanced: 8x5 Support, Return and Replace, Firmware Upgrades 24x7 Comprehensive: 24x7 Support, Advanced Hardware Replacement (NBD), Firmware Upgrades
Fortinet Premium Services Enhanced SLAs and TAM
Fortinet Prof. and Consultation Services Design and Implementation
Certification & Customized Courses In-depth Training Sessions
8
Anatomy of a FortiGate
FortiGate Hardware Appliance Purposed built high performance systems Acceleration chips Wired and Wireless Connectivity
FortiGate Virtual Appliance UTM solution for Cloud environment
Content Processor
Network Processor
Security Processor
9
Anatomy of a FortiGate
FortiOS Operating Systems Proprietary OS, eliminates vulnerabilities & issues associated with common OSes Harden and small footprint for security & efficiency Runs on flash, more reliable Nearly common feature set across all platform * Default with 10 VDOMs*WebUI, CLI Dashboard & Statistics SNMP Monitoring Syslogging
In-box Reporting *
Email Alerts
Content Archives
SFLOW
* Available on selected models.
10
Anatomy of a FortiGate
Features & Capabilities Available by default, no requirement for hidden charges and software upgradesHA: A-A, A-P, Virtual cluster, weightedFirewall VPN IPS App. Ctrl AntiVirus Web Filter
IPv6 FW + UTM Routing Protocols Wireless Controller
AntiSpam
DLP
NAC
Vuln Mgmt
Traffic Shaping
WAN opt.
Server LB
11
Anatomy of a FortiGate
FortiGuard Subscription ServicesFortiGuard AntiVirus Service FortiGuard IPS Service
FortiGuard WCF ServiceFortiGuard Antispam Service
Deliver real-time Automated Updates Industry Leading Threat Response Time Comprehensive Threat Library 24x7x365 Operations Power by Fortinet in-house Global Threat Research Team
12
FortiGate Small Business DevicesSecurity Appliances For Small/Home Offices & Small Branch Offices High performance, feature-rich multithreat security for Branch Offices, SoHo and telecommuters
Primary Benefits:FWF-20C FGT-20C FWF-40C FGT-40C FWF-60D FGT-60D High speed Firewall and IPSec VPN performance High Speed Application Control Accelerated IPS/AV performance
On board storage for WAN Optimization, local reporting and archivingFWF-80C FGT-80C FG-100D Integrated WiFi on certain models
13
FortiGate Small Business Devices: ComparisonFGT-20CFirewall (1518/512/64 byte UDP) 20 / 20 / 20 Mbps 10,000 1,000 20 Mbps 20 Mbps 12/20 Mbps 20 -
FGT-40C200 / 200 / 200 Mbps 40,000 2,000 60 Mbps 135 Mbps 20/40 Mbps 5 100 -
FGT-60C1/1/1 Gbps 400,000 3,000 70 Mbps 135 Mbps 20/40 Mbps 5 100 10 / 10
FGT-60D1.5 /1.5 /1.5 Gbps 500,000 3,200 1 Gbps 200 Mbps 35 /50 Mbps 5 100 10 / 10
FGT-80C1/1/1 Gbps 1 Mil 12,000 140 Mbps 350 Mbps 50/190 Mbps 16 100 10 / 10
FGT-100D2500 / 1000 / 200 Mbps 2.5 Mil 22,000 450 Mbps 950 Mbps 300/700 Mbps 32 1,000 10 / 10
Concurrent SessionsNew Sessions/Sec IPSec VPN IPS (HTTP) Antivirus (Proxy/Flow) Max FortiAP Max FortiToken VDOM (Default/Max)
Storage
2GB
4GB
8GBWiFi, Ana. Modem, Wifi + Ana. Modem, LENC, SFP, POE, ADSL
16 GB
8GB WiFi, Ana. Modem, Wifi + Ana. Modem, LENC
32GB
Variants
WiFi, LENC, ADSL
WiFi, LENC
WiFi
LENC
14
FortiGate Small Business Devices: Comparison
FWF20C
FWF40C
FWF60C
FWF60D
FWF80C FWF81CM
Thick APThin AP #of WiFi radios Supported Std
1 a/b/g/n
Option 1 a/b/g/n
Option 1 a/b/g/n
Option 1 a/b/g/n
Option 1 a/b/g/n
802.11nMax wireless association rate total SSIDs (incl. reserved)
2x2 MIMO300Mbps 7
2x2 MIMO300Mbps 7
2x2 MIMO300Mbps 7
2x2 MIMO300Mbps 7
2x3 MIMO300Mbps 7
15
FortiGate-20C
1x GbE Copper WAN Interface Ports 4x GbE Copper Switch Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 20/20/20 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 20 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
6 s10,000 1,000 5,000 20 Mbps NA
12 / 20 MbpsNA NA 20 100 NA
16
FortiWiFi-20C
1x GbE Copper WAN Interface Ports 4x GbE Copper Switch Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 20/20/20 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 20 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
6 s10,000 1,000 5,000 20 Mbps NA
12 / 20 MbpsNA NA 20 100 NA
17
FortiGate-20C-ADSL
1x ADSL Interface Ports 4x GbE Copper Switch Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 20/20/20 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 20 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
6 s10,000 1,000 5,000 20 Mbps NA
12 / 20 MbpsNA NA 20 100 NA
18
FortiWiFi-20C-ADSL
1x ADSL Interface Ports 4x GbE Copper Switch Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 20/20/20 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 20 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
6 s10,000 1,000 5,000 20 Mbps NA
12 / 20 MbpsNA NA 20 100 NA
19
FortiGate-40C
2x GbE Copper WAN Interface Ports 5x GbE Copper Switch Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 200/200/200 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 135 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
3 s40,000 2,000 5,000 60 Mbps 15 Mbps
20 / 40 MbpsNA 5 100 250 40
20
FortiWiFi-40C
2x GbE Copper WAN Interface Ports 5x GbE Copper Switch Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 200/200/200 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 135 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
3 s40,000 2,000 5,000 60 Mbps 15 Mbps
20 / 40 MbpsNA 5 100 250 40
21
FortiGate-60C
2x GbE Copper WAN Interface Ports 1x GbE Copper DMZ Interface Port 5x GbE Copper Configurable Ports ExpressCard Slot
Hardware PerformanceFirewall Throughput (1518/512/64) 1 / 1 / 1 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 135 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s400,000 3,000 5,000 70 Mbps 15 Mbps
20 / 40 Mbps10 / 10 5 100 500 60
22
FortiWifi-60C
2x GbE Copper WAN Interface Ports 1x GbE Copper DMZ Interface Port 5x GbE Copper Configurable Ports ExpressCard Slot
Hardware PerformanceFirewall Throughput (1518/512/64) 1 / 1 / 1 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 135 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s400,000 3,000 5,000 70 Mbps 15 Mbps
20 / 40 Mbps10 / 10 5 100 500 60
23
FortiWifi-60CM
2x GbE Copper WAN Interface Ports 1x GbE Copper DMZ Interface Port 5x GbE Copper Configurable Ports ExpressCard Slot
Hardware PerformanceFirewall Throughput (1518/512/64) 1 / 1 / 1 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 135 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s400,000 3,000 5,000 70 Mbps 15 Mbps
20 / 40 Mbps10 / 10 5 100 500 60
24
FortiGate-60C-SFP
1x SFP WAN Slot 2x GbE Copper WAN Interface Ports 5x GbE Copper Configurable Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 1 / 1 / 1 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 135 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s400,000 3,000 5,000 70 Mbps 15 Mbps
20 / 40 Mbps10 / 10 5 100 500 60
25
FortiGate-60C-POE
2 3 5
4x GbE POE+ Ports 20 x GbE POE Ports 1x GbE Management Port
Hardware PerformanceFirewall Throughput (1518/512/64) 1 / 1 / 1 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 135 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s400,000 3,000 5,000 70 Mbps 15 Mbps
20 / 40 Mbps10 / 10 5 100 500 60
26
FortiGate-60D
3 4 5
2x GbE WAN Ports 1x GbE DMZ Ports 7x GbE Ethernet Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 1.5 / 1.5 / 1.5 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 200 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s500,000 3,200 5,000 1 Gbps 30 Mbps
35 / 50 Mbps10 / 10 5 100 500 60
27
FortiWiFi-60D
3 4 5
2x GbE WAN Ports 1x GbE DMZ Ports 7x GbE Ethernet Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 1.5 / 1.5 / 1.5 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 200 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s500,000 3,200 5,000 1 Gbps 30 Mbps
35 / 50 Mbps10 / 10 5 100 500 60
28
FortiGate-80C
2x GbE Copper WAN Interface Ports 1x FE DMZ Interface Port 6x FE Configurable Ports ExpressCard slot
Hardware PerformanceFirewall Throughput (1518/512/64) 1900/700/120 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 350 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
45 s1 Mil 12 K 5,000 140 Mbps 70 Mbps
50/190 Mbps10/10 16 100 1,000 60
29
FortiGate-80CM
2x GbE Copper WAN Interface Ports 1x FE DMZ Interface Port 6x FE Configurable Ports ExpressCard slot
Hardware PerformanceFirewall Throughput (1518/512/64) 1900/700/120 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 350 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
45 s1 Mil 12 K 5,000 140 Mbps 70 Mbps
50/190 Mbps10/10 16 100 1,000 60
30
FortiWiFi-80CM
2x GbE Copper WAN Interface Ports 1x FE DMZ Interface Port 6x FE Configurable Ports ExpressCard slot
Hardware PerformanceFirewall Throughput (1518/512/64) 1900/700/120 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 350 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
45 s1 Mil 12 K 5,000 140 Mbps 70 Mbps
50/190 Mbps10/10 16 100 1,000 60
31
FortiGate-100D
2x GbE Copper WAN Interface Ports 1x GbE Copper DMZ Interface Port 1x GbE Copper Mgmt Interface Port 2x GbE Copper HA Interface Port 14x GbE Copper Configurable Ports 2x Shared Media interfaces pairs
Hardware PerformanceFirewall Throughput (1518/512/64) 2500 / 1000 / 200 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 950 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
37 s2.5 Mil 22,000 10,000 450 Mbps 300 Mbps
300 / 700 Mbps10 / 10 32 1,000 5,000 200
32
FortiGate-Rugged-100C
2x GbE Copper Interfaces 4x FE Copper Interfaces 4x 100Base-FX Interface (SC)
Hardware PerformanceFirewall Throughput (1518/512/64) 2000 / 1000 / 180 Mbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 950 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
34 s2.5 Mil 22,000 10,000 60 Mbps 100 Mbps
300 / 700 Mbps10 / 10 32 1,000 5,000 200
33
FortiGate Mid-Range DevicesMid-Range Security Appliances For Mid-Size Organizations & Large Enterprise Branch Offices High performance multi-threat security for medium-sized enterprises and branch offices of large enterprises. Higher price/performance ratio and more interfaces than any products in their class
FGT-1240B
FGT-1000C FGT-800C FGT600C FGT300C
Primary Benefits: High speed Firewall and IPSec VPN performance High Speed Application Control Accelerated IPS/AV performance On board storage for WAN Optimization, local reporting and archiving**FGT-200B requires optional HDD
FGT-200B FGT-200B-POE
34
FortiGate Mid Range Devices: Comparison
FGT-200BFirewall (1518/512/64 byte UDP) Concurrent Sessions New Sessions/Sec IPSec VPN IPS (HTTP) Antivirus (Proxy/Flow) Max FortiAP Max FortiToken VDOM (Default/Max) Storage Variants 5/5/4 Gbps 500 K 15,000 2.5 Gbps 650 Mbps 95 / 200 Mbps 32 1,000 64 GB opt. POE ,LENC
FGT-300C8/8/8 Gbps 2 Mil 50,000 4.5 Gbps 1.4 Gbps 200 / 550 Mbps 256 1,000 10 / 10 16 GB LENC
FG-600C16 / 16 /16 Gbps 3 Mil 70,000 8 Gbps 3 Gbps 1.3 /1.7 Gbps 512 1,000 10 / 10 64 GB DC, LENC
FG-800C20 / 20 / 20 Gbps 7 Mil 190,000 8 Gbps 6 Gbps 1.7 / 2.1 Gbps 512 1,000 10 / 10 64 GB -
FG-1000C20 / 20 / 20 Gbps 7 Mil 190,000 8 Gbps 6 Gbps 1.7 / 2.1 Gbps 512 3,000 10 / 250 128 GB DC
FG-1240B40-44 / 40-44 / 38-42 Gbps 5 Mil 120,000 16-18.5 Gbps 5-8 Gbps 1.2 / 1.6 Gbps 512 3,000 10 / 250 64 GB, 384 GB opt. DC
35
FortiGate-200B
4x GbE Copper NP2 accelerated Interface Ports 4x GbE Copper Interface Ports 8x FE Configurable Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 5/4/2.5 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 650 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
2 s500 K 15 K 10,000 2.5 Gbps 110 Mbps
95/200 Mbps10/10 32 1,000 2,000 200
36
FortiGate-200B-POE
4x 10/100/1000 NP2 accelerated Interface Ports 4x 10/100/1000 Interface Ports 8x 10/100 Configurable PoE Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 5/4/2.5 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 650 Mbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
2 s500 K 15 K 10,000 2.5 Gbps 110 Mbps
95/200 Mbps10/10 32 1,000 2,000 200
37
FortiGate-300C
8x 10/100/1000 NP2 accelerated Interface Ports 2x 10/100/1000 Interface Ports Redundant DC Power connector
Hardware PerformanceFirewall Throughput (1518/512/64) 8/8/8 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 1.4 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies ( System/VDOM) IPSec VPN Throughput SSL-VPN Throughput
2 s2 Mil 50,000 10,000 4.5 Gbps 200 Mbps
200 / 550 Mbps10 / 10 256 1,000 10,000 500
38
FortiGate-600C
16x 10/100/1000 NP4 accelerated Interface Ports 2x 10/100/1000 Interface Ports 2x Shared Media interfaces pairs 1 pair Bypass Interfaces
Hardware PerformanceFirewall Throughput (1518/512/64) 16/16/16 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 4 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
7 s3 Mil 70,000 10,000 8 Gbps 500 Mbps
1.3G / 1.7G Mbps10/10 512 1,000 50,000 1,000
39
FortiGate-800C
12x 10/100/1000 NP4 accelerated Interface Ports 2x 10Gb SF+ slots 2x 10/100/1000 Interface Ports 4x Shared Media interfaces pairs 2 pair Bypass Interfaces
Hardware PerformanceFirewall Throughput (1518/512/64) 20/20/20 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 6 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
6 s7 Mil 190,000 10,000 8 Gbps 1 Gbps
1.7/2.1 Gbps10/10 512 1,000 50,000 1,000
40
FortiGate-1000C
12x 10/100/1000 NP4 accelerated Interface Ports 2x 10Gb SFP+ slots 2x 10/100/1000 Interface Ports 4x Shared Media interfaces pairs 2 pair Bypass Interfaces
Hardware PerformanceFirewall Throughput (1518/512/64) 20/20/20 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 6 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
6 s7 Mil 190,000 100,000 8 Gbps 1 Gbps
1.7/2.1 Gbps10/250 512 3,000 50,000 3,000
41
FortiGate-1240B
24x Gigabit NP4 Accelerated SFP Interface Slots 14x 10/100/1000 NP4 accelerated Interface Ports 2x 10/100/1000 Interface Ports 1x Single-Width AMC Slot
Hardware PerformanceFirewall Throughput (1518/512/64) Concurrent Latency Concurrent Sessions New Sessions/Sec Firewall Policies 40/40/38 44/44/42 Gbps 7 s 5 Mil 120,000 100,000 IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens 5-8 Gbps 1.2/1.6 Gbps 10/250 512 3,000
IPSec VPN ThroughputSSL-VPN Throughput
16-18.5 Gbps370 Mbps
Client-to-Gateway IPSec VPN TunnelsConcurrent SSL-VPN Users (Recommended Max)
50,0001,500
42
FortiGate 3000 SeriesSecurity Appliances For Large Enterprises & Managed Service ProvidersFG-3040B
Ideal for securing traditional highbandwidth networks, as well as virtualized, or cloud-based infrastructures. Higher price/performance ratio and more interfaces than any products in their class Primary Benefits: Rich feature set for protecting next generation networks, including integrated IPS, application control, user-based policies, and endpoint policy enforcement On-board storage for WAN Optimization, local reporting and archiving
FG-3140B
FG-3240C
FG-3950B
Integration with FortiManager and FortiAnalyzer simplifies management, reporting and analysis for up to thousands of Fortinet devices
43
FortiGate 3000 Series: Comparison
FGT-3040BFirewall (1518/512/64 byte UDP) Concurrent Sessions New Sessions/Sec IPSec VPN IPS (HTTP) Antivirus (Proxy/Flow) Max FortiAP Max FortiToken VDOM (Default/Max) Storage Variants 40 / 40 / 40 Gbps 5 Mil 200,000 17 Gbps 6 Gbps 2.3 / 4.5 Gbps 1,024 5,000 10 / 250 64 GB, 256 GB opt. LENC
FGT-3140B58 / 55 /43 Gbps 10 Mil 200,000 22 Gbps 8.4 Gbps 2.3 / 4.5 Gbps 1,024 5,000 10 / 250 64 GB, 256 GB opt. LENC
FGT-3240C40 / 40 /40 Gbps 10 Mil 200,000 17 Gbps 8 Gbps 2.6 / 5 Gbps 1,024 5,000 10 / 500 64 GB DC, LENC
FGT-3950B20-120 / 20-120 / 20120 Gbps 20 Mil 250,000 8 50.5 Gbps 20 Gbps 4 / 15 Gbps 1,024 5,000 10 / 500 256 GB DC, LENC
44
FortiGate-3040B
10x Gigabit NP4 Accelerated SFP Interface Slots 8x 10G NP4 accelerated SFP+ Slots (2x transceivers default) 2x 10/100/1000 Interface Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 40/40/40 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 6 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s10 Mil 200,000 100,000 17 Gbps 500 Mbps
2.3/4.5 Gbps10/250 1,024 5,000 64,000 22,000
45
FortiGate-3140B
2x SP2 Accelerated SFP+ Slots 10x Gigabit NP4 Accelerated SFP Interface Slots 8x 10G NP4 accelerated SFP+ Slots (2x transceivers default) 2x 10/100/1000 Interface Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 58/55/43 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 8.4 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s10 Mil 200,000 100,000 22 Gbps 500 Mbps
2.3/5.7 Gbps10/250 1,024 5,000 64,000 22,000
46
FortiGate-3240C
16x Gigabit Accelerated SFP Interface Slots 12x 10G accelerated SFP+ Slots (2x transceivers default) 2x 10/100/1000 Interface Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 40/40/40Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 8 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s10 Mil 200,000 100,000 17 Gbps 1 Gbps
2.6/5 Gbps10/250 1,024 5,000 64,000 30,000
47
FortiGate-3950B
2x NP4 Accelerated 10-GbE SFP+ Interfaces (2x Transceiver included) 4x NP Accelerated 1-GbE SFP Slot 2x Non-Accelerated 10/100/1000 Interfaces 5x Fortinet Mezzanine Card (FMC) Expansion Slot
Hardware PerformanceFirewall Throughput (1518/512/64) 20/20/20 120/120/120 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 5-20 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s20 Mil 250,000 100,000 8 50.5 Gbps 1.2 G
4/5-15 Gbps10/500 1,024 5,000 64,000 25,000
48
FortiGate-3950B Modules
FMC-XD2Firewall (1518/512/64 byte UDP) 20 / 20 /20 Gbps
FMC-XG218 / 17 / 4.5 Gbps
FMC-F2020 / 20 /20 Gbps
FMC-C2020 / 20 /20 Gbps
FMC-XH019 / 19 / 10.5 Gbps
IPSec VPN
8 Gbps
6 Gbps
8.5 Gbps
8.5 Gbps
16.5 Gbps
IPS (HTTP)
-
2.5 Gbps
-
-
4 Gbps
AV (Flow Based)
-
2 Gbps
-
20 x 10/100/100 0 Mbps FortiASICaccelerated port
4 Gbps
Network Interface
2 x 10-GbE SFP+ FortiASICaccelerated port
22 x 10GbE SFP+ FortiASICSP2 port
20 x SFP FortiASICaccelerated port
NIL
49
FortiGate 5000 SeriesSecurity Appliances For Very Large Enterprises & Managed Service Provides Chassis-based platforms offer maximum performance, reliability, and scalability for high-speed service provider, large enterprise or telecommunications carrier networks. Fastest chassis-based firewall in the industry Flexibility enables protection of complex, multi-tenant cloudbased security-as-a-service and infrastructure-as-a-service environments. Primary Benefits: Native 10-GbE support for high speed requirements
ATCA-compliant architecture delivers carrier-grade performance, reliability, availability and serviceability Chassis support two, six, or fourteen FortiGate-5000 series blades, allowing customization and scaling FG-5140B50
Performance & Resiliency
Standard Based ATCA System Fully Redundant Hot swappable blades, power supplies and fans
5000 Series Chassis
5020Processing Slots Max Firewall Throughput Max IPS throughput2 80 Gbps 19.6 Gbps
50606 160 Gbps 39.2 Gbps
5140B14 160 Gbps 117.6 Gbps
Max Concurrent SessionMax CPSPerformance based on ELBC with FG5001C security Blades. FG-5020 relies LACP on external switches.
59 M420 K
118 M840 K
354 M2.52 M
51
Load Distribution & VirtualizationSecurity Blades
Most flexible chassis based solution in the market Ease of Maintenance hot swappable components Supports full hardware redundancy Supports various Inter and Intra HA configurations Chassis Networking BladesService Groups
VDOMs
ClusteringScales Traffic processing capacity linearly. Interoperates with external devices
Service GroupingAllows various groups of FortiGate Cluster to co-exist in a single chassis
VirtualizationFacilitates virtualized security components on FortiGate blades
52
FortiGate-5001B
8x NP4 Accelerated 10-GbE SFP+ Interfaces (2x Transceiver included) 2x 10/100/1000 Interface Ports Back plane connectivity: 2x base backplane 1Gbps, 2x fabric backplane 10Gbps
Hardware PerformanceFirewall Throughput (1518/512/64) 40/40/40 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 7.8 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s20 Mil 170 K 100,000 17 Gbps 530 Mbps
2/2.5 Gbps10/500 1024 5,000 64,000 20,000
53
FortiGate-5001C
2x NP4 Accelerated 10-GbE SFP+ Interfaces (2x Transceiver included) 2x 10/100/1000 Interface Ports Back plane connectivity: 2x base backplane 1Gbps, 2x fabric backplane 40Gbps
Hardware PerformanceFirewall Throughput (1518/512/64) 40/40/40 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 9.8 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s29.5 Mil 210 K 100,000 17 Gbps 850 Mbps
3/4 Gbps10/500 1024 5,000 64,000 30,000
54
FortiGate-5101C
4x SP3 Accelerated 10-GbE SFP+ Interfaces (2x Transceiver included) 2x 10/100/1000 Interface Ports Back plane connectivity: 2x base backplane 1Gbps, 4x fabric backplane 10Gbps
Hardware PerformanceFirewall Throughput (1518/512/64) 40/40/10 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 9.4 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
7 s10 Mil 235 K 100,000 22 Gbps 970 Mbps
2/5 Gbps10/500 1024 5,000 64,000 20,000
55
FortiSwitch-5003B
8x SFP+ slots for 10-gigabit interfaces (2x transceivers default) 2x front panel base backplane 10gigabit interfaces that connects to the base backplane channel 1x front panel base backplane 10/100/1000 interface
Hardware PerformanceSwitching throughput 225 Gbps
56
FortiController-5103B
10x SFP+ slots for 10GbE interfaces (2x transceivers default) 1x GbE Copper management interface
Hardware PerformanceTraffic throughput Concurrent Session 60 Gbps 110 Mil New Sessions/Sec 1.26 Mil
57
FortiSwitch-5203B
8x NP4 Accelerated 10-GbE SFP+ Interfaces (2x Transceiver included) 2 x 10GbE SFP+ 1x 10/100/1000 Interface Ports
Hardware PerformanceFirewall Throughput (1518/512/64) 40 Gbps IPS Throughput Antivirus Throughput (Proxy Based / Flow Based) Virtual Domains (Default / Max) Max Number of FortiAPs Max Number of FortiTokens Client-to-Gateway IPSec VPN Tunnels Concurrent SSL-VPN Users (Recommended Max) 7.8 Gbps
Concurrent LatencyConcurrent Sessions New Sessions/Sec Firewall Policies IPSec VPN Throughput SSL-VPN Throughput
4 s20 Mil 170 K 100,000 17 Gbps 530 Mbps
2/2.5 Gbps10/500 1024 5,000 64,000 20,000
58
FortiGate-VM
FG-VM00/ FG-VM00-XENvCPU (Min / Max) Network Interface (Min /Max) Memory (Min / Max) Storage Support (Min/Max) Max FortiAP VDOM (Default/Max) 1/1 2/10 512 MB / 512 MB 30 GB / 2TB 32 1/1
FG-VM01/ FG-VM01-XEN1/1 2/10 512 MB / 1 GB 30 GB / 2TB 256 10 / 10
FG-VM02/ FG-VM02-XEN1/2 2/10 512 MB / 3 GB 30 GB / 2TB 256 10 / 25
FG-VM04/ FG-VM04-XEN1/4 2/10 512 MB / 4 GB 30 GB / 2TB 512 10 / 50
FG-VM08/ FG-VM08-XEN1/8 2/10 512 MB / 12 GB 30 GB / 2TB 1,024 10/ 250
59
TransceiversAvailable SlotsFG60C-SPF FG100D FG600C FG800C/1000C FG1240B 1SFP 1SFP 2 SFP 4 SFP 2 SFP+ 24 SFP
Transceivers ShippedNIL NIL 2x Fiber SX SFP modules (1000BaseSX) 2x Fiber SX SFP modules (1000BaseSX) 2x Fiber SX SFP modules (1000BaseSX)
FG3040BFG3140B FG3240B FG3950B FG5001B FG5001C FG5101C FG5003B60
8 SFP+ 10 SFP10 SFP+ 10 SFP 12 SFP+ 18 SFP 2 SFP+ 4 SFP 8 SFP+ 2 SFP+ 4 SFP+ 10 SFP+
2x SFP+ (SR 10Gbps)2x SFP+ (SR 10Gbps) 2x SFP+ (SR 10Gbps) 2x SFP+ (SR 10Gbps) 2x SFP+ (SR 10Gbps) 2x SFP+ (SR 10Gbps) 2x SFP+ (SR 10Gbps) 2x SFP+ (SR 10Gbps)
Power Adapters & Redundant Power SuppliesSpare/Redundant Power Supplies Option FGT/FWF-20C FGT/FWF-40C, 60C FGT/FWF-80C, 60B, 50B, 30B Series FGT-200B FGT-200B-POE FGT-310B,300C FGT-311B FGT-600C, 800C FGT-620B, 621B FGT-1xxx above SP-FG20C-PA-XX SP-FG60C-PDC SP-FG80-PDC SP-FG310B-RPS FRPS-100 NIL SP-FG310B-RPS FRPS-100 Inbuilt dual PS SP-FG600C-PS (additional as option) SP-FG620B-RPS Inbuilt dual PS (hot swappable)
61
FortiOS 5
62
Supported Platform FG/FWF-20C FG/FWF-40C FG/FWF-60C FG-100D FG200B(POE) FG300C FG/FWF-80C(M) FG-110/111C
Desktop
Mid Range
FG310/311B FG-600C FG-620/621B
FG800C FG1000C FG1240B
3000 Series
FG-3016B FG-3040B FG-3140B FG-5001A-SW/DW
FG-3240C* FG-3810A FG-3950/51B FG-5001B/C FG-5101C
5000 Series
VMFortiGate-VM63
VM64* Available on patch release
Feature Matrix for Desktop ModelsFortiOS 5.0.1 Client Reputation* Device Identification Identity Based Policies SSL VPN SSL Inspection SSL Offloading Endpoint Control SSH Proxy Traffic Shaping DLP Fingerprint VLAN WAN Opt. / Web Cache Wireless Controller Vulnerability ScanFG/FWF-20C Series FG/FWF-40C Series FG/FWF-60C/D Series FG/FWF-80C Series
CLI CLI CLI -
CLI CLI -
-**
64
** Requires FMG/FAZ, FortiCloud for Monitoring, available in near future ** To be available in future patch release, requires hardware revision with local storage
Feature Matrix for Desktop ModelsFortiOS 5.0.1 HA Ping Server Remote Server DNS Server Explicit Proxy Dynamic Routing VDOMFG/FWF-20C Series FG/FWF-40C Series FG/FWF-60C/D Series FG/FWF-80C Series
CLI CLI -
CLI CLI CLI -
65
Services, Licenses & SubscriptionsBOLD: New Offerings
Included with FortiGate DNS Service DDNS Service NTP Service 2 FortiTokenMobile License* 10 FortiClient Endpoint License* 10 VDOMs License FortiCloud Service (trial)*
+ FortiTokenMobile License + Endpoint License** + VDOM License** + FortiCloud Storage Top-up + SMS Top-up
FortiCare Subscription Required Geography Updates BYOD Signatures Updates USB Modem DB Updates Vulnerability Scan Signature Updates Firmware Update
*Registration Required ** Available on selected Models
66
Services, Licenses & SubscriptionsBOLD: New Offerings
FortiGuard AV Subscription Botnet IP reputation DB FortiGuard Analytics Service Proxy & Flow based AV signatures
FortiGuard Web Filter Subscription DNS Based Web Categories Filtering Proxy & Flow based Web Categories DB
FortiGuard IPS Subscription IPS Signature Updates Application Control Signature Updates
FortiGuard Anti-spam Subscription Anti-spam Services
67
FortiAP
68
FortiAP Product Family3x3:3Dual Radio Dual BandResiliency Throughput
FAP-320B FAP-223B FAP-222B
FAP-221BFAP-220B
2x2:2Performance
1x1:1
Single Radio
FAP-210B
FAP-11C
FAP-112B
Personal69
Outdoor
Indoor
FortiAP-11C
2 x FE Interface
Hardware PerformanceTarget Environment Number of Antenna Number of Radio Tx / RX Stream (802.11n) Indoor 1 Internal 1 1x1 MIMO, 65 Mbps Simultaneous SSIDs Max Transmission Power PoE Support 16 (14 for client access, 2 for monitoring) 17 dBm (50mW) 802.3af
70
FortiAP-112B
2 x FE Interface
Hardware PerformanceTarget Environment Number of Antenna Number of Radio Tx / RX Stream (802.11n) Indoor/Outdoor 1 Internal 1 1x1 MIMO, 65 Mbps Simultaneous SSIDs Max Transmission Power PoE Support 8(7 for client access, 1 for monitoring) 24 dBm (250mW) 802.3af
71
FortiAP-221B
1 x GbE Copper Interface
Hardware PerformanceTarget Environment Number of Antenna Number of Radio Tx / RX Stream (802.11n) Indoor 4 Internal 2 2x2 MIMO with Dual Spatial streams, 600 Mbps Total Simultaneous SSIDs Max Transmission Power PoE Support 8(7 for client access, 1 for monitoring) 17 dBm (50mW) N.A
72
FortiAP-223B
1 x GbE Copper Interface
Hardware PerformanceTarget Environment Number of Antenna Number of Radio Tx / RX Stream (802.11n) Indoor 4 external 2 2x2 MIMO with Dual Spatial streams, 600 Mbps Total Simultaneous SSIDs Max Transmission Power PoE Support 16 (14 for client access, 2 for monitoring) 17 dBm (50mW) 802.3af
73
FortiAP-320B
2 x GbE Copper Interface
Hardware PerformanceTarget Environment Number of Antenna Number of Radio Tx / RX Stream (802.11n) Indoor 6 Internal 2 3x3 MIMO with 3 spatial streams, 900 Mbps Total Simultaneous SSIDs Max Transmission Power PoE Support 16 (14 for client access, 2 for monitoring) 24 dBm (250mW) 802.3af / 802.3at
74
FortiAP-Antennas
Specification
Compatible AP
FAP-222B Point to point antenna for 5Ghz bridging with N/R connectors. Mount Kit sold separately FAN-M22.
TypeAccessories
FAN-612N/R
Specification
Compatible AP Type
FAP-222B Directional 120 degree outdoor panel antenna Includes two 120cm Cables with N connector. Mount Kit sold separately FAN-22.
FAN-500N
Accessories
75
Hardware Overview FortiAP (Local)FAP-112B Wall mount, Ceiling Mount, indoor/outdoo r 1 FAP-210B FAP-220B FAP221B/223B* Smoke Detector Form Factor 2 1) 2.4 Ghz b/g/n 2) 2.4/5GHz a/b/g/n concurrent 802.3af 2x2 Dual stream, 600Mbps 4 internal 4 external* FAP-222B FAP-320B
Form Factor
Wall mount, Ceiling Mount
Wall mount, Ceiling Mount
Outdoor
Wall mount, Ceiling Mount
Radio
1 1) 2.4 or 5Ghz, switchable b/g/n or a/n 802.3af 1x2, Single stream, 300 Mbps 2 internal
2 1) 2.4 Ghz b/g/n 2) 2.4/5GHz a/b/g/n concurrent 802.3af 2x2 Dual stream, 600Mbps 4 internal
2 1) 2.4 Ghz b/g/n 2) 5GHz a/n concurrent
2 1) 2.4 Ghz b/g/n 2) 2.4/5GHz a/b/g/n concurrent 802.3af 3x3 Triple stream, 900Mbps 6 internal
Bands
2.4 Ghz b/g/n
PoE Rx / Tx Antennas Ethernet Interfaces
802.3af 1x1, Single stream, 65 Mbps 1 internal 2x FE
802.3at 2x2 Dual stream, 600Mbps 4 external
1x GbE Copper
1x GbE Copper
1x GbE Copper
1x GbE Copper
2x GbE Copper
76
Hardware Overview FortiAP (Remote)FAP-11C
Schedule Form Factor Radio Bands PoE Rx / Tx Antennas Ethernet Interfaces
Q4/12 Desktop 1 2.4 Ghz b/g/n NA 1x1, Single stream, 65 Mbps 1 internal 1x FE WAN 1x FE LAN
77
FortiAP Power AdaptorsPower Supply Type Power supply shipped with unit Yes - Integrated power plug Yes - Proprietary PoE injector and AC adaptor Yes Yes No (Spare) Power supply order SKU SP-FAP220B-PA- SP-FAP220B-PA- SP-FAP221B-PA + SP-ADAPTORPLUG-01 SP-FAP221B-PA + SP-ADAPTORPLUG-01 SP-FAP222B-PA (includes PoE injector) + SP-ADAPTORPLUG-01- SP-FG20C-PA- GPI-115 Support Yes Yes Yes
FAP-11C FAP-112B FAP-210B FAP-220B FAP-221B
AC PoE Proprietary PoE 8-2.11af PoE 8-2.11af PoE 8-2.11af
FAP-223BFAP-222B FAP-320B
PoE 8-2.11afPoE 8-2.11at/POE Proprietary PoE 8-2.11at
NoYes - Proprietary PoE+ injector and AC adaptor No
YesYes
78
FortiClient
79
Introducing FortiClient
Endpoint Security & ControlComprehensive end-point protection & security enforcement
Multifunctional Host Security Flexibility in deployment Fully integrated features, reduce needs for multiple client solutions
End Point Control Enforce compliance and security policies on mobile hosts
Centralized Logging and Reporting Via FortiGate for enterprise requirements
80
FortiClient V5.0
New in 4.0 MR3WindowsIPSec SSL 2FA Anti-Virus Web Filtering Application Firewall WAN Optimization Vulnerability Scanning
Mac OSX
iOS -
Andriod -
Off-net Config Sync.Logging (via FortiGate) Central Management
81
FortiAnalyzer
82
Introducing FortiAnalyzer
Centralized Reporting & AnalysisLogging, reporting and analysis from multiple Fortinet devices
Aggregated Logging Singular View of all Fortinet Devices Built-in Content Archiving Malicious File Quarantine
Centralized Reporting Predefined Summary & Device Reports Hundreds of Customizable Charts & Graphs
Analysis & Event Correlation Vulnerability Assessment Network & Log Analysis
Scalable Solution Hardware and VM Versions Available Collector/Analyzer Modes for Large Deployments High Performance Logs/Sec Processing Support for Internal or External SQL Databases
83
FortiAnalyzer SeriesFortiAnalyzerGB/Day
FAZ-200D5 18 Mil 200 150 4 1x 1 TB
FAZ-400C15 55 Mil 625 200 4 1x 2 TB
FAZ-1000C25 85 Mil 1,000 2,000 4 1x 2TB (8 TB Max) Yes, requires optional drives (RAID 0,1,10)
FAZ-2000B75 260 Mil 3,000 2,000 6 2x 2TB (12 TB Max) Yes, (RAID 0, 1, 5, 10, 50)
FAZ-4000B150 520 Mil 6,000 2,000 2 2 6x 1TB (24 TB Max) Yes, (RAID 0, 1, 5, 6, 10, 50, 60)
Sessions/DayMax Log rate Max. Devices/ADOM s10/100/100 ports 1 GbE SFP Storage capacity
RAID support
No
No
84
FortiAnalyzer-VM SeriesFortiAnalyzerGB/Day Sessions/Day Max Log rate Max. Devices/ADOMs
FAZ-VMBASE1 3.5 Mil -
FAZ-VMGB1+1 3.5 Mil -
FAZ-VMGB5+5 18 Mil -
FAZ-VMGB25+25 85 Mil -
FAZ-VMGB100+100 360 Mil -
Storage capacityRAID Support
200 GB-
+200 G-
+1 TB-
+ 8 TB-
+16 TB-
85
FortiManager
86
Introducing FortiManager
Centralized ManagementTools that effectively manage any size Fortinet security infrastructure, from a few to thousands of appliances Administrative Domains (ADOMs) Enables the primary admin to create Virtual Management Domains containing devices for other administrators to monitor and manage
Locally Hosted Security Content Allows administrators better control over security content updates and provides improved response time for rating databases. Run a local copy of AV, IPS, URL, A/S signature databases.*
Hierarchical Objects & Policy Management Create Global Objects and Policies Assign to ADOM or groups of ADOMS Create device configuration templates to quickly configure a new Fortinet appliance
Web Portal SDK JSON-based API allows MSSPs to offer administrative web portals to customers
* Capabilities varied by Models
87
FortiManager SeriesFortiManagerMax. Devices
FMG-200D30
FMG-400C300
FMG-1000C800
FMG-3000C5,000
FMG-5001A4,000
Max. ADOMsMax. Web Portals Max. Portal Users Interfaces Storage capacity Locally Hosted Security Content
304x GbE Copper 1x 1 TB AV, IPS, VM, WF, AS
3004x GbE Copper 1x 1 TB AV, IPS, VM, WF, AS
800800 800 4x GbE Copper 1x 2TB AV, IPS, VM, WF, AS
5,0005,000 5,000 4x GbE Copper, 2x SFP 2x 2TB AV, IPS, VM, WF, AS
4,0004,000 4,000 2x GbE Copper 1x 80 GB AV, IPS, VM, WF, AS
88
FortiManager-VM SeriesFortiManagerMax. Devices Max. ADOMs (default/Max) Max. Web Portals Max. Portal Users
FMG-VMBase10
FMG-VM10-UG+10
FMG-VM100-UG+100
FMG-VM1000-UG+1,000
FMG-VM5000-UG+5,000
FMG-VMU-UGUnlimited
1010 10
+10+10 +10
+100+100 +100
+1,000+1,000 +1,000
+5,000+5,000 +5,000
UnlimitedUnlimited Unlimited
Max. Virtual NICs (Min/Max)Storage capacity (Min/Max)
1/4
80 GB / 2 TB
89
FortiAuthenticator
90
Introducing FortiAuthenticator
Authentication ServerIdentity Management, User Access Control and multi-factor identificationAuthentication and Authorization RADIUS, LDAP, 802.1X
Two Factor Authentication FortiToken Tokenless, via SMS and email
Certificate Management X.509 Certificate Signing, Certificate Revocation Remote Device / Unattended Authentication
FortiTokenIssuing CA
Fortinet Single Sign on Active Directory Polling RADIUS IntegrationLDAP User Database
FortiAuthenticator
91
FortiAuthenticator SeriesFortiAuthenticatorMax. Local Users Max. Remote Users Max. FortiTokens Max. NAS Devices Max. User Groups Max. CA Certificates Max. User Certificates Interfaces Storage Capacity
FAC-200D500 500 500 50 25 2 500 4x 10/100/1000 Gbps 1 x 1 TB
FAC-400C2,000 2,000 2,000 200 50 10 500 4x 10/100/1000 Gbps 1 x 1 TB
FAC-1000C10,000 10,000 10,000 1,000 500 50 2,000 4x 10/100/1000 Gbps 1 x 1 TB
FAC-3000B20,000 20,000 20,000 2,000 2,000 250 200,000 4x 10/100/1000 Gbps 1 x 1 TB
92
FortiAuthenticator-VM SeriesFortiAuthenticatorMax. Local Users Max. Remote Users Max. FortiTokens Max. NAS Devices Max. User Groups Max. CA Certificates Max. User Certificates Interfaces (Min/Max) Storage Capacity (Min Max)
FAC-VM Base100 100 200 10 10 5 100
FAC-VM100-UG+100 +100 +200 +10 +10 +5 +100
FAC-VM1000-UG+1,000 +1,000 +2,000 +100 +100 +50 +1,000
FAC-VM10000-UG+10,000 +10,000 +20,000 +1,000 +1,000 +500 +10,000
FAC-VM100000-UG+100,000 +100,000 +200,000 +10,000 10,000 +500 +100,000
1/460 GB / 2 TB
93
FortiDDOS
94
Introducing FortiDDoS
Hardware Accelerated DDoS Defense Intent Based ProtectionRate Based Detection High performance protection using ASIC
ISP 1FortiDDoS
Web Hosting Center
Self Learning Baseline Ease Maintenance Maintain appropriate protection dynamically
Signature Free Defense Hardware based protection
Firewall
Inline Full Transparent Mode No MAC address changes
ISP 2Legitimate Traffic Malicious Traffic
Granular Protection Multiple thresholds to detect subtle changes and provide rapid mitigation
95
FortiDDoS SeriesFortiDDoSThroughput (Full Duplex)
FDD-100A1 Gbps
FDD-200A2 Gbps
FDD-300A3 Gbps
Simultaneous ConnectionsSession Setup/Teardown Latency Virtual Instances
1 Mil100,000 / Second 26 s 8 2 LAN Interfaces (Copper/SFP), 2 WAN Interfaces (Copper/SFP) 1x 1TB No
2 Mil200,000 / Second 26 s 8 4 LAN Interfaces (Copper/SFP), 4 WAN Interfaces (Copper/SFP) 2x 1TB Yes
3 Mil300,000 / Second 26 s 8 6 LAN Interfaces (Copper/SFP), 6 WAN Interfaces (Copper/SFP) 2x 1TB Yes
Interfaces
Storage Capacity (Min Max) RAID Support
96
FortiMail
97
Introducing FortiMail
Messaging SecurityAdvanced antispam and antivirus filtering capabilities, with extensive quarantine and archiving capabilities.
Specialized messaging security system Advanced, bi-directional filtering prevents spread of spam, viruses, phishing, worms, and spyware
Mail Servers
Flexible deployment options Transparent, Gateway, and Server modes that adapts to organizational needs and budget
FortiMail
Identity based encryption Secure, encrypted communication
Email archiving On-box archiving facilitates policy and regulatory compliance requirements
98
FortiMail SeriesFortiMailEmail Domains Server Mode Mailboxes Email Routing (Msg/hr, 3KB) FortiGuard Antispam+AV (Msg/hr, 3KB)
FML-200D50 200 200,000
FML-400C500 1,000 400,000
FML-2000B5,000 3,000 1.5 Mil
FMG-3000C5,000 3,000 2.0 Mil
FAZ-5002B10,000 3,000 2.3 Mil
175,000
320,000
1.2 Mil
1.6 Mil
2.0 Mil
10/100/100 portsStorage capacity Form Factor
4 1x 1TB Desktop
4 2x 1TB Rack mount, 1RU
6 2x 12TB (Opt. 6TB) Rack Mount, 2RU
4 2x 1TB (Opt. 6TB) Rack Mount, 2RU
3 1x 146GB ATCA Blade
99
FortiMail-VM SeriesFortiMailEmail Domains Server Mode Mailboxes Email Routing (Msg/hr, 3KB) FortiGuard Antispam+AV (Msg/hr, 3KB)
FML-VM0150 200 90,000
FML-VM02500 1,000 265,000
FML-VM045,000 3,000 1.32 Mil
FMG-VM085,000 3,000 1.76 Mil
77,000
185,400
1.05 Mil
1.4 Mil
Max vCPU supportedMax vNICs Storage capacity (Min/Max) Memory required (Min/Max)
1 4 50 GB / 1 TB 1 GB / 2 GB
2 4 50 GB / 1 TB 1 GB / 4 GB
4 4 50 GB / 2 TB 1 GB / 6 GB
8 4 50 GB / 2 TB 1 GB / 12 GB
100
FortiWeb
101
Introducing FortiWeb
Web Application SecurityWeb application firewall to protect, balance, and accelerate web applications.
Web Application Firewall Aids in PCI DSS 6.6 compliance Protection against OWASP Top 10 Application layer DDoS protection Auto Learn security profiles Geo IP data analysis and security
Web Application Servers
Web Vulnerability Scanner Scans, analyzes and detects web application vulnerabilities
FortiWeb
Application Delivery Assures availability and accelerates performance of critical web applications
SQL Injection, XSS
102
FortiWeb SeriesFortiWebThroughput Max HTTP transactions / Sec Latency 10/100/1000 ports 1GbE-SX ports
FWB-400C100 Mbps 10,000 Sub-ms 4 -
FWB-1000C500 Mbps 27,000 Sub-ms 2 + 2 Bypass -
FWB-3000C1 Gbps 40,000 Sub-ms 4 + 2 Bypass 2 (FWB-3000CFSX)
FWB-4000C2 Gbps 70,000 Sub-ms 4 + 2 Bypass 2
Storage capacityForm Factor
1x 1 TBRack mount, 1RU
1x 1 TBRack Mount, 2RU
2x 1 TB (Opt. 6 TB)Rack Mount, 2RU
2x 1 TB (Opt. 6 TB)Rack Mount, 2RU
103
FortiWeb-VM SeriesFortiWebThroughput Max HTTP transactions / Sec Max vCPU Supported Memory required (Min) Storage capacity (Min)
FWB-VM02100 Mbps 8,000 2
FWB-VM04500 Mbps 24,000 4 1 GB 40 GB
FWB-VM081 Gbps 36,000 8
104
FortiDB
105
Introducing FortiDB
Database Security and ComplianceDatabase Activity Monitoring and Vulnerability Assessment solution that allows quick and easy implementation of internal IT control frameworks for database activity monitoring, IT audit and regulatory compliance
Database Activity Monitoring (DAM) Real-time monitoring of key users and critical transactions User Activity Base lining Block database attacks in real time FortiDB
Vulnerability Assessment Sensitive data discovery in databases Vulnerability scanning with remediation advice Deployment options:Sniffer, Native Audit and Agents
Policy Driven Controls Automated process of establishing IT controls
Database Servers
Database Audit and Compliance For compliance and forensics analysis purpose
106
FortiDB Series#Licensed DB Instances FortiDB 400B FortiDB 1000C FortiDB 2000B 10 30 60 DB SupportedDB2 UDB V8 (VA only), DB2 UDB V9.x (VA only), DB2 UDB V9.5 MS SQL Server 2000, MS SQL Server 2005, MS SQL Server 2008 Oracle 10 gR1 (VA only), Oracle 10gR2, Oracle 11g Sybase ASE 12.5 (VA only), Sybase ASE 15.x, MySQL 5.1
107
FortiScan
108
Introducing FortiScan
Vulnerability and Compliance ManagementComprehensive end-point vulnerability & asset managementNetwork Discovery and Asset Management Baseline network discovery Manage assets and policy based end point control
Comprehensive Vulnerability Assessment and Management Both Network and Agent based technologies supported
Patch and Configuration Management Benchmarking against best practice deployment
Alert, Remediation & Audit Management Reducing security issue resolution effort
FortiScan
109
FortiScan Series
FortiScan Max Assets
FSC-3000C 20,000
FSC-VMBase 100
FSC-VM100-UG +100
FSC-VM1000-UG +1,000
FSC-VM5000-UG +5,000
FSC-VM20000-UG +20,000
110
FortiBalancer
111
Introducing FortiBalancer
Application Delivery ControllersOptimize the availability, user experience, performance and scalability of mobile, cloud and enterprise application delivery from anywhere-to-anywhere.
Application Availability Layer 2/3/4 and 7 load balancing techniques Application session persistence Proxy and transparent modes Global Server Load Balancing (GSLB) for geographic resilience Link Load Balancing
Web Application Servers
Application Acceleration TCP Optimization Memory based content caching Data compression SSL Offload and acceleration
Application Interoperability Implementation Guides for Microsoft Exchange, Lync, SAP etc.112
FortiBalancer SeriesFortiBalancerThroughput Max Connections Layer 7 RPS SSL TPS SSL Throughput Total Interfaces FBL-400 2 Gbps 1 Mil 140,000 7,500 1 Gbps 4x GbE Copper FBL-1000 4 Gbps 4 Mil 230,000 13,500 1.6 Gbps 8x GbE Copper, 2x GbE SFP Single/Dual FBL-2000 10 Gbps 8 Mil 1.15M 22,500 5 Gbps 12x GbE Copper, 4x GbE SFP Dual FBL-3000 30 Gbps 16 Mil 2M 45,000 10 Gbps 4x 10GbE, 16x GbE Copper, 4x GbE SFP Dual
Power Supply
Single
113
FortiCache
114
Introducing FortiCache
Web Caching ApplianceReduce the cost and impact of downloaded content, while increasing performance and end-user satisfaction by improving the speed of access
Web Content Caching High performance content caching Explicit or Transparent proxy cache FortiGuard Web FilteringFortiGuard Network
Video Caching Broad CDN Support Detects same video ID when content comes from different CDN hosts Supports seek forwards and backwards in video, detectd preceding adverts
Integrated FortiGuard Web Filtering
Internet
FortiCache
WN Optimization Bandwidth optimisation across congested WAN Links Interoperates with FortiGate
115
FortiCache SeriesFortiCacheThroughput Total Interfaces Storage Capacity
FCH-400C80Mbps 4x GbE Copper 1x 1 TB
FCH-1000C200 Mbps 4x GbE Copper 1x 2 TB (4 TB Max)
FCH-3000C500 Mbps 4x GbE Copper, 2x GbE SFP 4x 1 TB (6 TB Max)
116
FortiDNS
117
Introducing FortiDNS
Secure Caching DNS ServerRobust caching DNS server that improves security and performance
Secure Caching DNS High performance caching DNS server with focus on DNS Security Randomised Transaction ID UDP Source Port Randomization Case Query Randomisation Active spoofing detection switches user to TCP when under threat. Discard unsolicited answers Limit per user resources (queries per second) to prevent DoS Monitor top users and blacklist Futureproof with support for DNSSEC and IPv6
FortiDNS
DHCP Server High performance DHCP server with resource friendly high availability
118
FortiDNS Series
FortiDNS
FNS-400C
FNS-1000C
Total Interfaces Max Queries per Second Max DNS Clients Storage Capacity
4x GbE Copper 30,000 10,000 1x 1TB
4x GbE Copper 60,000 10,000 1x 1TB
119
FortiSwitch
120
Introducing FortiSwitchAccess level Gigabit Switches with with ease of use and low cost of ownershipFSW-80-POE
Outstanding price, performance, and scalability to organizations with diverse operational needs.
FSW-124B-POE
Primary Benefits:FSW-224B-POE High Port Density Integrated Power Over Ethernet Connect Access Points, Peripherals, Cameras, Phones
FSW-324-POE
Create an integrated, secure networkFSW-248B-DPS
FSW-548B121
FortiSwitch-80-POE
4x GbE Copper Ports 4x GbE PoE Ports
Hardware PerformanceSwitch Capacity MAC Address Storage Management Target application 16 Gbps 2000 unmanaged Installation of up to 4 wireless FAPs VLANs Supported Total Link Aggregation Group PoE Power Budget Fortified Switch N/A 3 62 W No
122
FortiSwitch-124B-POE
12x FE Ports 12x FE PoE Ports 2x pairs Shared GbE ports
Hardware PerformanceSwitch Capacity MAC Address Storage Network Latency (64bytes) 8.8 Gbps 8,000