FortiGate® Multi-Threat Security

FortiGate® Multi-Threat Security
Firewall • VPN • Antivirus • Intrusion Prevention • Antispam • Web Filtering • Traffic Shaping
MSSP AND LARGE ENTERPRISE SYSTEMS
Product (Chassis)
Firewall
Throughput
(512 Byte)
IPSec VPN
Throughput
Concurrent
Sessions
Sessions
Per Sec
Antivirus
Throughput
Intrusion Prevention
Throughput
Number of
VDOMs
Network Interfaces
Chassis Slots
/ Max # of
Blades
Power
Source
Recommended
# of Blades
Max Fabric
Blades
FortiGate-5140 Chassis
Up to 480 Gbps
Up to 204 Gbps
Up to 132 M
Up to 1152 K
Up to 18 Gbps
Up to 60 Gbps
Up to 3000
See modules below
14 / 14
DC / AC
12
2
FortiGate-5060 Chassis
Up to 240 Gbps
Up to 102 Gbps
Up to 66 M
Up to 576 K
Up to 9 Gbps
Up to 30 Gbps
Up to 1500
See modules below
6/6
DC / AC
6
2
FortiGate-5050 Chassis
Up to 110 Gbps
Up to 42.5 Gbps
Up to 10 M
Up to 250 K
Up to 2.5 Gbps
Up to 20 Gbps
Up to 1250
See modules below
5/5
DC / AC
5
2
FortiGate-5020 Chassis
Up to 44 Gbps
Up to 17 Gbps
Up to 4 M
Up to 100 K
Up to 1 Gbps
Up to 8 Gbps
Up to 500
See modules below
2/2
AC
2
0
FortiGate-5001B
40 Gbps
17 Gbps
11 M
96 K
1.5 Gbps
5 Gbps
Up to 250
8 10GbE SFP+ and 2 10/100/100 Port with 64GB local storage
FortiGate-5001A-SW / DW
(with AMC)
2 Gbps
(13 / 22 Gbps)
800 Mbps
(7 / 8.5 Gbps)
2M
50 K
500 Mbps
2 Gbps (4 Gbps)
Up to 250
2 GbE 10/100/1000 port and Double- or Single-Width AMC slot. Supports 10GbE
modules.
FortiGate-5005FA2
5 Gbps
800 Mbps
1.2 M
30 K
300 Mbps
3 Gbps
Up to 250
6 GbE SFP ports and 2 FortiASIC-accelerated SFP ports
FortiGate-5001SX and
FortiGate-5001FA2
4 Gbps
600 Mbps
1.2 M
20 K
250 Mbps
2 Gbps
Up to 250
5001SX: 4-GbE SFP, 4-GbE 10/100/1000
5001FA2: 2 GbE SFP, 4 GbE 10/100/1000, and 2 FortiASIC-accelerated SFP ports
FortiSwitch-5003B
FortiSwitch-5003A
FortiSwitch-5003
Switch Fabric Blades
FortiSwitch-5003B and FortiSwtich-5003A delivers high availability 10GbE switching for FortiGate-5140, -5060 and -5050
chassis. Each FortiGate-5001A requires a 10GbE Rear Transition Module (RTM) for switching across the backplane fabric.
FortiSwitch-5003 delivers high availability switching across the high-speed chassis backplane fabric.
FortiSwitch-5003B : 9-10GbE SFP+, 2-GbE 10/100/100 (Mgnt)
FortiSwitch-5003A : 9-10GbE SFP+, 2-GbE 10/100/100 (Mgmt)
FortiSwitch-5003 : 3-GbE 10/100/1000, 1-GbE 10/100/1000 (Mgmt)
RTM-XB2 or RTM-XD2: 10 GbE Rear Transition Module for FG-5000 Series
FortiController-5208 Load
Balancing Fabric
Delivers high-bandwidth load balancing for antivirus and intrusion prevention applications.
2-10GbE XFP, 8-GbE SFP, 1-GbE 10/100/1000 (Mgmt)
ENTERPRISE APPLIANCES
Product
Firewall
Throughput
(512 Byte)
IPSec VPN
Throughput
Concurrent
Sessions
Sessions
Per Sec
Antivirus
Throughput
Intrusion
Prevention
Throughput
10/100
Interface
GbE
Interface
SFP
SFP+
Interface (10GbE)
Interface
Modular Expansion Slots
Base SysHot-Swappable
tem Storage Power
Supplies
VDOMs
(Max)
FortiGate-3950B / 3951B
(with FMC)
20 Gbps
(120/100 Gbps)
8 Gbps
(48/40 Gbps)
10 M
175 K
1.5 Gbps
(12.5/10
Gbps)
0
2
(100/80)
4
(100/80)
2
(12/10)
5 / 4 FMC,
0 / 4 FSM
0 / 64 GB
Yes
Up to 250
FortiGate-3810A
(with AMC)
7 Gbps
(55 Gbps)
1 Gbps
(23 Gbps)
2M
40 K
500 Mbps
4 Gbps
0
8
2
0
2 SW and 2
DW AMC
0
Yes
Up to 250
FortiGate-3600A
(with AMC)
6 Gbps
(10 Gbps)
800 Mbps
(3.8 Gbps)
1.1 M
40 K
400 Mbps
3 Gbps
0
8
2
0
1 SW AMC
0
Yes
Up to 250
FortiGate-3040B
40 Gbps
16 Gbps
4M
100 K
1.2 Gbps
5 Gbps
0
2
10
8
4 FSM
64 GB
Yes
Up to 250
FortiGate-3016B
(with AMC)
16 Gbps
(20 Gbps)
12 Gbps
(15 Gbps)
1.1 M
25K
300 Mbps
2 Gbps
0
2
16
0
1 SW AMC
0
Yes
Up to 250
FortiGate-1240B
(with AMC)
40 Gbps
(44 Gbps)
16 Gbps
(18.5 Gbps)
2M
100 K
900 Mbps
1.5 Gbps
0
16
24
0
1 SW AMC and
6 FSM
64 GB
Yes
Up to 25
FortiGate-800 / 800F
1 Gbps
200 Mbps
800 K
10 K
150 Mbps
600 Mbps
4
4/0800F
0/4800F
0
No
0
No
10
FortiGate-621B / 621B-DC
16 Gbps
12 Gbps
1M
25 K
350 Mbps
1 Gbps
0
20
0
0
No
64 GB
Opt. Ext. Red.
AC Power
10
FortiGate-620B / 620B-DC
(with AMC)
16 Gbps
(20 Gbps)
12 Gbps
(15 Gbps)
1M
25 K
350 Mbps
1 Gbps
0
20 (24)
0
0
1 SW AMC
0
Opt. Ext. Red.
AC Power
10
FortiGate-310B / 310B-DC
FortiGate-311B (with AMC)
8 Gbps
(12 Gbps)
6 Gbps
(9 Gbps)
600 K
20 K
160 Mbps
800 Mbps
0
10
0
0
1 SW AMC
2 FSM (311B)
1 x 64 GB
(311B)
Yes Opt. (310B)
Yes (311B)
10
FortiGate-200B / 200B-POE
5 Gbps
2.5 Gbps
500 K
15 K
95 Mbps
500 Mbps
8
8
0
0
1 FSM
0
No
10
FortiGate-224B / 200A
150 Mbps
70 Mbps
400 K
4K
30 Mbps
100 Mbps
26 / 8
0/2
0
0
No
0
No
10
SMB/ROBO/SOHO APPLIANCES
Product
Firewall
Throughput
(512 Byte)
IPSec VPN
Throughput
Concurrent
Sessions
Sessions
Per Sec
Antivirus
Throughput
Intrusion
Prevention
Throughput
Switch/
LAN Interfaces
WAN
Interfaces
Wireless
Interfaces
Other Interfaces
VDOMs
(Max)
FortiGate-110C / 111C
500 Mbps
100 Mbps
400 K
10 K
65 Mbps
200 Mbps
8 FE
2 GbE
No
USB, COM, 64 GB SSD (111C)
10
FortiGate Voice-80C
500 Mbps
100 Mbps
400 K
10 K
65 Mbps
200 Mbps
8 FE
2 GbE
No
4 FXO, Concurrent Calls: 20
10
FortiWiFi Voice-80CS
500 Mbps
100 Mbps
400 K
10 K
65 Mbps
200 Mbps
6 / 1 FE
DMZ
2 GbE
802.11 a/b/g/n
Concurrent Calls: 20
10
FortiGate-82C
350 Mbps
80 Mbps
100 K
5K
50 Mbps
100 Mbps
0
4 GbE
No
1TB Storage & 3 open slots
10
FortiGate-80C / 80CM
FortiWiFi-80CM / 81CM
350 Mbps
80 Mbps
100 K
5K
50 Mbps
100 Mbps
6 / 1 FE
DMZ
2 GbE
FW-80CM/ 81CM
WiFi a/b/g/n
ExpressCard Slot, Modem (80/81CM), 32 GB
SSD (81CM)
10
FortiGate-60C
FortiWiFi-60C
1 Gbps
70 Mbps
80 K
3K
20 Mbps
60 Mbps
5 GbE / 1
FE DMZ
2 FE
FW-60C a/b/g/n
ExpressCard Slot, 4 GB storage, 1 USB-A and 1
USB-B port, POE-Powered (FW-60C)
10
FortiGate-50B / 51B
FortiWiFi-50B
50 Mbps
48 Mbps
25 K
2K
19 Mbps
30 Mbps
3 FE
2 FE
FW-50B WiFi b/g
POE-Powered (FortiWiFi), USB, COM, 32GB SSD
(51B)
10
FortiGate/WiFi-30B
30 Mbps
5 Mbps
5K
1K
5 Mbps
10 Mbps
3 / 4 FE
1 FE
FW-30B WiFi b/g
USB, COM
0
Expansion Modules
Advanced Mezzanine Card (AMC) Modules
[Double-Width (DW) Modules:] • ADM-XD4: 4-port 10GbE FortiASIC Module • ADM-XB2: 2-port 10GbE FortiASIC Module • ADM-XE2: 2-port 10GbE Security Processing Module • ADM-FB8: 8-port GbE FortiASIC Module
• ADM-FE8: 8-port GbE Security Processing Module [Single-Width (SW) Modules:] • ASM-FB4: 4-port GbE FortiASIC Module • ASM-CE4: 4-port GbE Security Processing Module • ASM-S08: 80 GB Hard Disk Storage Module • ASM-CX4: 4-port GbE TX By-Pass Module • ASM-FX2: 2-port GbE SX By-Pass Module • ASM-ET4: 4-port T1/E1 WAN Module
Fortinet Mezzanine Card (FMC) Modules
• FMC-XD2: 2-port 10GbE Firewall Module • FMC-XG2: 2-port 10GbE IPS Module • FMC-C20: 20-port 1GbE Firewall Module with RJ45 interface • FMC-F20: 20-port 1GbE Firewall Module with SFP interface
This document is provided as a convenient comparison of Fortinet products and services. The datasheet for any product or service can be
found on www.fortinet.com should be consulted for the most updated specifications.
Antivirus performance is measured based on HTTP traffic with 32Kbyte file attachments. FW &IPS performance is measured base on UDP traffic with 512 byte packet size. Actual
performance may vary depends on network traffic and environment.
Managing & Analyzing • Secure Messaging • Database & Web Security
• Endpoint Security Software • Security and Support Services
MANAGEMENT, ANALYSIS, & REPORTING APPLIANCES
PRODUCT
10/100/1000
Ethernet
10/100
Ethernet
0
Base System
Storage Capacity
Administration
Domain
Administrative
Web Portals
Web Portal
Users (Max)
80 GB
100
100
4,000
FortiManager-5001A
2
FortiManager-3000C
4 and 2 SFP
0
2 TB
200
100
4,000
FortiManager-1000C
4
0
1 TB
50
50
500
Local Hosted
Security Content
Hardware Form
Factor
AV, IPS, VM, WF, AS
Network
Devices (Max)
FortiClient
Devices
ATCA Blade
4,000
100,000
AV, IPS, VM, WF, AS
Rack Mount (2-RU)
5,000
AV, IPS, VM, WF, AS
Rack Mount (1-RU)
800
Model
Restrictions
Redundant
Power
None
Yes
120,000
None
Yes
25,000
FG-5000 Series
No
FortiManager-400B
4
0
500 GB
10
10
200
AV, IPS, VM
Rack Mount (1-RU)
200
10,000
FG-5000 Series
No
FortiManager-100C
2
1
1 TB
10
10
200
AV, IPS, VM
Desktop
20
2,500
FG-5000 Series
No
PRODUCT
10/100/1000
Ethernet
10/100
Ethernet
Base System
Storage Capacity
Network Devices (Max)
FortiClient
Agents (Max)
Centralized
Quarantine
Number of Hard
Drives
RAID Storage
Management
Data Receive
Rate
Log Perf.
(Logs / Sec)
Recommended
Device
Redundant
Power
FortiAnalyzer-4000B
2 and 2 SFP
0
6 TB
2,000
No Restriction
Yes
6 (Plus 18 Optional)
0, 1, 5, 6, 10, 50, 60
24 Mbps
Up to 6,000
All Models
Yes
FortiAnalyzer-2000B
6
0
2 TB
2,000
No Restriction
Yes
2 (Plus 4 Optional)
0, 1, 5, 10, 50
12 Mbps
Up to 3,000
All Models
Yes
2,000
FortiAnalyzer-1000C
4
0
1 TB
No Restriction
Yes
1 (Plus 3 Optional)
Opt - 0, 1, 10
4 Mbps
Up to 1,000
All Models
No
FortiAnalyzer-400B
4
0
500 GB
200
2000
Yes
1 (Plus 1 Optional)
Opt - 0, 1
2 Mbps
Up to 500
All Models
No
FortiAnalyzer-100C
2
1
1 TB
100
100
Yes
1
N/A
800 Kbps
Up to 200
All Models
No
Server Mode
Mailboxes
Hardware Form
Factor
Profiles (Domain / Sys)
Email Routing
(Mgs / Hr)
Antispam
(Mgs / Hr)
SECURE MESSAGING APPLIANCES
PRODUCT
10/100/1000
Ethernet
10/100
Ethernet
0
Base System
Storage Capacity
RAID Storage
Management
80 GB
N/A
Email Domains
10,000
Policies (Domain/Sys)
1,500 / 7,500
3,000
ATCA Blade
50 / 600
1.4 Million
Redundant
Power
FortiMail-5001A
2
1.3 Million
Yes
FortiMail-3000C
4 and 2 SFP
0
2 x 1 TB
0, 1, 5, 10, 50
5,000
1,500 / 7,500
3,000
Rack Mount (2-RU)
50 / 600
1.3 Million
1.3 Million
Yes
FortiMail-2000B
6
0
2 x 1 TB
0, 1, 5, 10, 50
5,000
1,500 / 7,500
3,000
Rack Mount (2-RU)
50 / 600
1.1 Million
1.1 Million
Yes
FortiMail-400B
4
0
500 GB
Opt - 0,1
500
600 / 3,000
1,000
Rack Mount (1-RU)
50 / 200
264,600
234,000
No
FortiMail-100C
2
1
1 TB
N/A
50
60 / 300
200
Desktop
50 / 60
90,000
85,000
No
DATABASE and WEB SECURITY APPLIANCES
PRODUCT
10/100/1000
Ethernet
# Database
Instances
Base System
Storage Capacity
Total Storage
Capacity
Redundant
Power
FortiDB-2000B
4
60
1 TB
6 TB (Opt)
Yes
FortiDB-1000C
4
30
1 TB
2 TB (Opt)
No
500 GB
1 TB (Opt)
No
Base System
Storage Capacity
Total Storage
Capacity
Redundant
Power
FortiDB-400B
Database Support / Asset Agent Licenses
Repository Database
Support
DB2 UDB V8, DB2 UDB V9; Microsoft SQL Server 2000, Microsoft SQL Server 2005;
Oracle 8.1.6, Oracle 8.1.7.4, Oracle 9.2.0.x, Oracle 10.2.0.x, Oracle 11.1.0.x; Sybase
ASE 12.5.4, Sybase ASE 15.0.2
Apache Derby 10.x, DB2 UDB
v9, Microsoft SQL Server 2005,
Oracle 10gR2, PostgreSQL 8.3
4
10
10/100/1000
Ethernet
Throughput
(HTTP)
FortiWeb-3000C
6
1 Gbps
2 TB
6 TB (Opt)
Yes
40,000
FortiWeb-1000C
4
500 Mbps
1 TB
2 TB (Opt)
No
27,000
FortiWeb-400B
4
100 Mbps
500 GB
1 TB (Opt)
No
10,000
Throughput (Max)
PoE Ports
PoE Power
Budget
PRODUCT
Max HTTP
Trans / sec
Comprehensive WAF and
XML Security Features
Other
Features
XML schema validation and expression limiting, WSDL Vertifcation, Form Field Tampering Validation and others
SSL and XML ecnryption and co-processing,
Content base Routing.
VLAN Supported
SWITCHING PLATFORMS
PRODUCT
10/100/1000
Ethernet
10 GbE
Ports
FortiSwitch-248B
48
4 (SFP+)
FortiSwitch-80-PoE
8
0
176 Gbps
2 Gbps
MAC Address
Storage
Link Agg Group Size
Total Link Agg
Groups
Layer 2 / Layer
3 Swtich
Switch Type
Redundant
Power
0
N/A
32,000
512
Up to 8 ports
8
Layer 2
Managed
No
4 - 802.3af
62 W
2,000
N/A
N/A
N/A
Layer 2
Unmanaged
No
ENDPOINT SECURITY SOFTWARE
PRODUCT
Personal
Firewall
IPSec VPN
Antivirus &
AntiSpyware
WAN
Optimization
Intrusion
Prevention
Email
Antispam
FortiManager
Management
Web Content Filtering
Address Book
Protection
SMS Filtering
& Antispam
Supported
Platforms
FortiClient - Windows
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
No
No
Window 7, Vista, XP, 2000,
Server 08, 03, 64 and 32 bit
FortiMobile - Symbian
Yes
No
Yes
No
No
No
Yes
No
No
Yes
SymbianOS S60 7/8/9
FortiMobile - WinMobile
No
Yes
Yes
No
No
No
Yes
No
Yes
Yes
Windows Mobile 2003/SE, 5, 6
FORTIGUARD SECURITY SUBSCRIPTION SERVICES
Product
AV
IPS
AS
WF
VM
AC
DB
FortiGate
Yes
Yes
Yes
Yes
Yes
Yes
No
FortiAnalyzer
No
No
No
No
Yes
No
No
FortiClient
Yes
No
Yes
Yes
No
Yes
No
FortiDB
No
No
No
No
No
No
Yes
FortiMail
Yes
No
Yes
No
No
No
No
FortiScan
No
No
No
No
Yes
No
No
INTEGRATED WIRELESS SECURITY AND ACCESS SOLUTIONS
AV = Antivirus
IPS = Intrusion Prevention
AS = Antispam
WF = Web Filtering
VM = Vulnerability
Management (including
Compliance Benchmarking)
AC = Application control
DB = Database Security
Product
Freq - Radio 1
Freq - Radio 2
Ethernet Port
# of SSIDs
POE
FortiAP-210B
802.11 b/g/n or a/n
(Selectable)
-
1x
10/100/100
7 - client, 1 monitoring
Yes
(802.3 af)
FortiAP-220B
802.11 b/g/n or a/n
(Selectable)
802.11 b/g/n
1x
10/100/1000
14 - client, 2 monitoring
Yes
(802.3 af)
FORTIGUARD ANALYSIS AND MANAGEMENT SERVICE
FortiGuard Analysis and Management Service is licensed per device. All FortiGate systems are supported.
Yearly Plan available
10 GB Storage Quota per license. Multple licenses can be combined to increase storage.
Copyright© 2010 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal
lab tests under ideal conditions. Network variables, different network environments and other conditions may affect performance results, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding contract with a purchaser that expressly warrants that the identified product will perform according to the
performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication
shall be applicable. Certain Fortinet products are licensed under U.S. Patent No. 5,623,600.
BRO103-R27-201101
Better security by providing a comprehensive multi-threat
security solution
Higher performance through ASIC-acceleration
Lower total cost of ownership (OpEx and CapEx) by
integrating best-of-breed security applications into a single
device
Fortinet Incorporated | 1090 Kifer Road, Sunnyvale, CA 94086 USA
Tel +1-408-235-7700 Fax +1-408-235-7737 | www.fortinet.com/sales
Contact your Authorized FortiPartner or visit www.fortinet.com/partners to
find a FortiPartner near you.
Fortinet is the only unified security solutions provider that owns all of its
technology. Fortinet solutions were built from the ground up by Fortinet to
integrate multiple levels of security protection—including firewall, antivirus,
intrusion prevention, VPN, spyware prevention, Web filtering, antispam and
traffic shaping—providing customers a way to protect against multiple
threats today and into the future.
Fortinet protection solutions include a range of high-end chassis based
systems, appliance-based solutions, and management and reporting tools.
These capabilities allow our customers to cost-effectively protect their critical
assets while delivering unparalleled flexibility in deployment.
•
•
•
Fortinet® is the pioneer and leading provider of integrated network security
solutions that protect your network against today’s constantly changing
threats. Fortinet provides solutions for the world's largest organizations, like
large enterprises and service providers, to small offices with 25 users—and
every size in between. Unlike providers of point products, Fortinet offers
an innovative security platform that incorporates the essential security
applications and services required to enable a safe and clean communications
environment regardless of size. Fortinet delivers
Security • Performance • Cost • Flexibility
Product Matrix
FortiAnalyzer™ Appliances—Centralized logging and reporting
that securely aggregates and analyzes log data from multiple
Fortinet products
FortiManager™ Appliances—Centralized command and control,
configuration management and monitoring solution
FortiMail™ Appliances—An enterprise-class family of
specialized email security solutions providing antispam and
antivirus protection
The FortiASIC processor is the foundation of Fortinet’s unique technology.
FortiASICs use an intelligent, proprietary content scanning engine that accelerates
compute-intensive actions. They also contain acceleration algorithms for
encryption so that FortiGate security devices can perform antivirus scanning
on VPN tunnels, ensuring clean and controlled communications. Coupling our
custom ASIC with proprietary network processor acceleration, Fortinet’s security
systems deliver improved security, extreme performance, and a compelling total
cost of ownership.
The FortiASIC™ Advantage
•
•
•
The FortiGate® family of multi-threat security appliances range in performance
and physical features to meet network requirements of all sizes and topologies.
Additionally, Fortinet delivers a complete line of product extensions that enable
network managers to control, monitor, and operate networks simply and
powerfully:
The FortiGuard Network is a combination of people and technology which
enhance the value of Fortinet solutions. Over 100 members strong, the FortiGuard
Global Threat Research Team ensure that FortiGuard Security Subscription
Services are always up-to-date and providing protection from the latest threats.
Delivering the latest security content is the FortiGuard Distribution Network,
which is comprised of geographically dispersed systems which can optionally
push updates to Fortinet devices anywhere in the world within minutes.
FortiGuard® Security Services
Fortinet’s FortiOS was developed with security and performance as top priorities.
FortiOS features full routing (BGP, OSPF, RIP), complete logging and auditing
capabilities for forensic analysis, granular Virtual Security Domain (VDOM)
support, and a complete command line interface (CLI). No third party software
applications are included that could lead to a vulnerability. It is Common Criteria
Certified EAL 4+ and Federal Information Processing Standard (FIPS) 140-2
validated.
FortiOS™ Operating System: Developed for Security
Download PDF
Similar pages