FORTIGATE FAMILY OVERVIEW – SOHO / Branch Office / SMB

24361.qx
2/18/04
12:10 PM
Page 1
FORTIGATE FAMILY OVERVIEW – SOHO / Branch Office / SMB
Feature List
FortiGate 50A
SOHO / Branch Office
FortiGate 60
FortiWiFi 60
FortiGate100
Small / Medium Business
FortiGate 200
FortiGate 300
10/100 Ethernet Ports
Gigabit Ethernet Ports (Copper/Fiber)
High Availability Port
WLAN
USB Ports
2
7
7
3
3
2
2
•
2
System Performance
Concurrent Sessions
New Sessions/second
Firewall Throughput (Mbps)
168-bit Triple-DES Throughput (Mbps)
Unlimited Concurrent Users
Policies
Schedules
25K
2K
50
10
•
200
256
50K
2K
70
20
•
500
256
50K
2K
70
20
•
500
256
200K
4K
95
25
•
1K
256
400K
4K
120
50
•
2K
256
400K
10K
200
65
•
5K
256
Antivirus / Worm
Detection &
Removal
(ICSA Certified)
Scans HTTP, SMTP, POP3, IMAP, FTP
and Encrypted VPN Tunnels
•
•
•
•
•
•
Automatic“Push” Virus Database Update
Quarantine Infected Messages
Block by File Size
•
•
•
•
•
•
•
•
•
•
•
•
•
•
NAT, PAT, Transparent (bridge)
Routing Mode (RIP v1, v2)
802.1q VLAN Support
User Group-based Authentication
H.323 NAT Traversal
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
VPN
(ICSA Certified)
Dedicated Tunnels
Encryption (DES, 3DES, AES)
PPTP, L2TP, VPN Client Pass Though
Hub and Spoke Architecture
IKE Certificate Authentication (X.509)
IPSec NAT Traversal
Interoperability with Major VPN Vendors
20
•
•
•
•
•
•
40
•
•
•
•
•
•
40
•
•
•
•
•
•
80
•
•
•
•
•
•
100
•
•
•
•
•
•
1.5K
•
•
•
•
•
•
Content Filtering
Content Policy Profiles
URL block, Keyword block, Exempt List
Java Applet, Cookies, Active X
Email Filtering (Keyword, Blacklist, Exempt List)
32
•
•
•
32
•
•
•
32
•
•
•
32
•
•
•
32
•
•
•
32
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
20G
•
•
20G
•
•
Interfaces
Firewall
(ICSA Certified)
Intrusion
Prevention for Over 30 Attacks
Detection / Prevention Detection for Over 1300 Attacks
(ICSA Certified)
Customizable Detection Signature List
Automatic Attack Database Update
Logging / Monitoring
High Availability
(HA)
Networking
System Management
Internal Logging Capacity
Email Notification of Viruses and Attacks
Syslog, SNMP
•
Active-Active, Active-Passive
Stateful Failover (FW and VPN)
Device Failure Detection and Notification
Redundant Power Supplies
Link Status Monitor
Multiple WAN Link Support
PPPoE
DHCP Client/Server
Policy-based Routing
3
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Console Interface (RS-232)
WebUI (HTTPS), Multi-language Support
Command Line Interface,
Secure Command Shell (SSH)
FortiManager System
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Administration
Multiple Administrators and User Levels
Upgrades and Changes via TFTP and WebUI
System Software Rollback
Trusted Host Enforcement (IP/MAC)
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
User Authentication
Internal Database
LDAP Database
RADIUS Database
IP/MAC Address Binding
Xauth Over RADIUS for IPSEC
VPN Authentication
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Traffic Shaping
Policy-based Traffic Shaping
Guarantee/Max/Priority Bandwidth
•
•
•
•
•
•
•
•
•
•
•
•
R E A L
T I M E
N E T W O R K
P R O T E C T I O N
24361.qx
2/18/04
12:10 PM
Page 2
FORTIGATE FAMILY OVERVIEW – Enterprise / Service Provider
Feature List
FortiGate 400
Enterprise
FortiGate 500 FortiGate 800
FortiGate 1000
Large Enterprise / Service Provider
FortiGate 3000 FortiGate 3600 FortiGate 4000
10/100 Ethernet Ports
Gigabit Ethernet Ports (Copper/Fiber)
High Availability Port
WLAN
USB Ports
4
12
4
2C
•
3
1C/2F
•
1
2C/4F
•
•
•
4 or 20*
•
System Performance
Concurrent Sessions
New Sessions/second
Firewall Throughput (Mbps)
168-bit Triple-DES Throughput (Mbps)
Unlimited Concurrent Users
Policies
Schedules
400K
10K
280
80
•
5K
256
400K
10K
280
90
•
8K
256
400K
10K
600
200
•
20K
256
600K
15K
1Gbps
250
•
30K
256
975K
20K
2.25Gbps
530
•
50K
256
1M
25K
4Gbps
600
•
50K
256
10M
200K
20Gbps
6Gbps
•
500K
2560
Antivirus / Worm
Detection &
Removal
(ICSA Certified)
Scans HTTP, SMTP, POP3, IMAP, FTP
and Encrypted VPN Tunnels
•
•
•
•
•
•
•
Automatic“Push” Virus Database Update
Quarantine Infected Messages
Block by File Size
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Firewall
(ICSA Certified)
NAT, PAT, Transparent (bridge)
Routing Mode (RIP v1, v2)
802.1q VLAN Support
User Group-based Authentication
H.323 NAT Traversal
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
VPN
(ICSA Certified)
Dedicated Tunnels
Encryption (DES, 3DES, AES)
PPTP, L2TP, VPN Client Pass Though
Hub and Spoke Architecture
IKE Certificate Authentication (X.509)
IPSec NAT Traversal
Interoperability with Major VPN Vendors
2K
•
•
•
•
•
•
2K
•
•
•
•
•
•
2K
•
•
•
•
•
•
3K
•
•
•
•
•
•
5K
•
•
•
•
•
•
5K
•
•
•
•
•
•
50K
•
•
•
•
•
•
Content Filtering
Content Policy Profiles
URL block, Keyword block, Exempt List
Java Applet, Cookies, Active X
Email Filtering (Keyword, Blacklist, Exempt List)
32
•
•
•
32
•
•
•
32
•
•
•
32
•
•
•
32
•
•
•
32
•
•
•
320
•
•
•
Intrusion
Prevention for Over 30 Attacks
Detection / Prevention Detection for Over 1300 Attacks
(ICSA Certified)
Customizable Detection Signature List
Automatic Attack Database Update
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Logging / Monitoring
Internal Logging Capacity
Email Notification of Viruses and Attacks
Syslog, SNMP
20G
•
•
20G
•
•
20G
•
•
20G
•
•
20G
•
•
20G
•
•
•
•
High Availability
(HA)
Active-Active, Active-Passive
Stateful Failover (FW and VPN)
Device Failure Detection and Notification
Redundant Power Supplies
Link Status Monitor
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Networking
Multiple WAN Link Support
PPPoE
DHCP Client/Server
Policy-based Routing
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
System Management
Console Interface (RS-232)
WebUI (HTTPS), Multi-language Support
Command Line Interface,
Secure Command Shell (SSH)
FortiManager System
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Administration
Multiple Administrators and User Levels
Upgrades and Changes via TFTP and WebUI
System Software Rollback
Trusted Host Enforcement (IP/MAC)
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
User Authentication
Internal Database
LDAP Database
RADIUS Database
IP/MAC Address Binding
Xauth Over RADIUS for IPSEC
VPN Authentication
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Policy-based Traffic Shaping
Guarantee/Max/Priority Bandwidth
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Interfaces
Traffic Shaping
4
4C
•
1
•
* FortiGate-4000P 20 1000BaseT ports; FortiGate-4000S 4 SFP or 10/100/1000BaseT ports
R E A L
T I M E
N E T W O R K
P R O T E C T I O N
Download PDF
Similar pages