FortiGate 60C PDF
FortiGate/FortiWiFi®-60C Series
Integrated Threat Management for Frontline Locations
Enterprise-Class Protection for Remote Offices, Retail, and Customer Premise Equipment
FortiGate/FortiWiFi-60C series of consolidated security appliances deliver
comprehensive enterprise-class protection for smaller locations, branch offices,
customer premise equipment (CPE) and retail networks. An integrated set of
essential security technologies deployed in a single device protects all of your
applications and data. Simple per-device pricing, an integrated management
console, and remote management capabilities significantly reduce your procurement,
deployment and administration costs.
Comprehensive Protection and Optional Wireless Capability
FortiGate consolidated security appliances deliver an unmatched range of security
technologies. They integrate essential firewall, IPSec and SSL VPN, application
control, intrusion prevention, antivirus, and web filtering protection into a single device
at a single price, all managed from a “single-pane-of-glass” console. They also
include other security technologies, such as data loss prevention (DLP), encrypted
SSL inspection, endpoint NAC, and vulnerability management.
FortiWiFi-60C/CM/CX appliances deliver the protection and performance you need
with the convenience of wireless networking. Dual-band capabilities and support
for 802.11a/b/g/n standards ensure compatibility with your existing network
infrastructure. Multiple SSID support allows you to create multiple wireless access
networks, enabling unencrypted guest or contractor access to the Internet while
limiting access to corporate networks.
Compact yet robust
security appliances
• Ideal for smaller locations, branch
offices, customer premise equipment
(CPE) and retail networks
• Runs on FortiOS 5 - the most powerful
security operating system in the
world delivers more security to fight
advanced threats, more control to
secure mobile devices, and more
intelligence to build secure policies
• Purpose-built FS1 SoC processor
delivers Gigabit firewall throughput
• FortiExplorer setup utility provides
easy setup and configuration
• Backed by Fortinet’s global FortiCare
technical support and FortiGuard
threat research teams for around-theclock protection and support
Key Features & Benefits
Unified Security Architecture
Multi-threat protection from a single device increases security
and lowers costs
Simple Licensing
Hassle-free unlimited user licensing and comprehensive featureset increases ease of deployment and maintenance
Multi-Port Interfaces
Multiple network interfaces and optional wireless/ADSL
connectivity enables flexible deployment and improves protection
with multiple security zones
FortiCare
FortiGuard
Worldwide 24x7 Support
Threat Research & Response
support.fortinet.com
www.fortiguard.com
www.fortinet.com
hardware
The Fortinet FS1 System-on-a-Chip
The FortiGate/FortiWiFi-60C series represent a new
generation of desktop network security appliances from
Fortinet, and include the first Fortinet System-on-a-chip
(SoC), the FS1. Integrating FortiASIC acceleration logic
together with a RISC-based main processor and other
system components, the FS1 SoC simplifies appliance
design and enables breakthrough performance for smaller
networks.
INTERNAL I/O
PCIe / RAM / FLASH
FORTIASIC
NETWORK
PROCESSOR
FORTIASIC
CONTENT
PROCESSOR
The FS1 and resulting FortiGate/FortiWiFi-60C series
appliances allow large distributed enterprises to provide
integrated, multi-threat protection across all points on their
network without sacrificing performance.
FortiGate-60C-SFP
FortiWiFi-60C
FortiWiFi-60CM
FortiWiFi-60CX-ADSL-A
(Wireless antennas not shown)
2
EXTERNAL I/O
ETHERNET / SERIAL / USB
FortiGate-60C
(Wireless antennas not shown)
RISC-BASED
GENERAL
PURPOSE
PROCESSOR
(Wireless antennas not shown)
FortiGate-60C-POE
highlights
Complete and Real-time Security
PCI Compliance Out-of-the-Box
Fortinet designed FortiOS to deliver the advanced
protection and performance that standalone products
simply cannot match. The integrated technologies work
together as a system to provide better visibility and
mitigation of the latest network and application threats,
stopping attacks before damage can occur. FortiGuard
Subscription Services provide automated, real-time, upto-date protection against security threats.
Fortinet simplifies your network security assessmentready PCI compliance without sacrificing performance.
Retail, health care, and other affected industries can ease
the process of PCI DSS assessment-readiness with an
ISO security framework and unified threat management
approach.
World-Class Technical Support and
Documentation
Industry Validation
The FortiGate family of physical and virtual appliances
has earned more certifications than any other vendor by
consistently meeting rigorous third-party standards. Our
industry-leading technology provides you with air-tight
security.
Fortinet FortiCare support offerings provide
comprehensive global support for all Fortinet products
and services. You can rest assured your Fortinet security
products are performing optimally and protecting your
users, applications, and data around the clock.
FortiOS Dashboard - Single Pane of Glass Management
Unique Visibility and Control
FortiOS gives you greater visibility and more consistent,
granular control over users, devices, applications and
data. Dashboard widgets allow administrators to quickly
view and understand real-time network activities and
threat situations while reputation-based analysis quickly
identifies potentially compromised systems.
Ease of Use
FortiOS lowers costs and reduces IT staff workloads.
Physical or virtual FortiGate appliances give you the
flexibility to match your security to your environment while
enforcing a uniform security policy. Single pane of glass
management and centralized analysis ensure consistent
policy creation and enforcement while minimizing
deployment and configuration challenges.
FortiOS - The World’s Most Advanced Security Operating System
• Client reputation measurements to
identify compromised systems in real
time
• Mobile device identification that lets
you apply specific access policies to
smartphones and tablets
• On-device behavior-based heuristic
engine for protection against advanced
threats
• Next Generation Firewall functions,
including Application Control and IPS
• Cloud-based threat protection with
operating system sandbox
• Web filtering to prevent access to
malicious or inappropriate web sites
• Web-based GUI, ‘single pane of glass’
management console and on-board
reporting for unmatched visibility and
control
• Data Loss Prevention to protect critical
information
For complete,up-to-date and detailed feature set, please
refer to the Administration Handbook and FortiOS Datasheet
3
specifications
FORTIGATE-60C
FORTIGATE-60C-SFP
FORTIGATE-60C-POE
FORTIWIFI-60C
FORTIWIFI-60CM
FORTIWIFI-60CX-ADSL-A
10/100/1000 WAN Interfaces (RJ45)
2
2
1
10/100/1000 Switch Interfaces (RJ45)
5
5
-
2
2
2
5
5
GbE SFP WAN Interfaces
-
1
-
-
-
4
-
10/100/1000 POE+ / POE Switch
Interfaces (RJ45)
-
-
4 / 20
-
-
-
10/100 Switch Interfaces (RJ45)
-
-
-
-
-
4
10/100/1000 DMZ Interfaces (RJ45)
1
-
-
1
1
-
ADSL2+ Annex A and M Interface
-
-
-
-
-
1
Wireless Interface
-
802.11 a/b/g/n
802.11 a/b/g/n
802.11 a/b/g/n
Modem Port
-
-
-
-
1
-
Hardware Specifications
Management Console Interface (RJ45)
USB Interfaces (Client / Server)
ExpressCard Slot
1
1/1
1/1
1/0
1/1
1/1
1/1
1
-
-
1
1
1
System Performance
Firewall Throughput (1518 / 512 / 64
byte UDP packets)
1 / 1 / 1 Gbps
Firewall Latency (64 byte UDP
packets)
4 μs
Firewall Throughput (Packets Per
Second)
1.5 Mpps
Concurrent Sessions (TCP)
400,000
New Sessions/Sec (TCP)
3,000
Firewall Policies
5,000
IPSec VPN Throughput (512 byte
packets)
70 Mbps
Gateway-to-Gateway IPSec VPN
Tunnels
50
Client-to-Gateway IPSec VPN Tunnels
500
SSL-VPN Throughput
19 Mbps
Concurrent SSL-VPN Users
(Recommended Max)
100
IPS Throughput
135 Mbps
Antivirus Throughput (Proxy Based /
Flow Based)
20 / 40 Mbps
Virtual Domains (Max / Default)
10 / 10
Max Number of FortiAPs (Tunnel /
Local Bridge)
5/5
Max Number of FortiTokens
100
Max Number of Registered FortiClients
200
High Availability Configurations
Active / Active, Active / Passive, Clustering
Unlimited User Licenses
Yes
Dimensions
Height x Width x Length (in)
Weight
1.50 x 8.50 x 5.83 in
(38 x 216 x 148 mm)
1.50 x 8.50 x 5.91 in
(38 x 216 x 15 mm)
1.75 x 17.32 x 12.28 in
(44 x 440 x 312 mm)
1.50 x 8.50 x 6.18 in
(38 x 216 x 15 mm)
1.50 x 8.50 x 6.18 in
(38 x 216 x 15 mm)
1.75 x 13.56 x 8.27 in
(44 x 344 x 210 mm)
1.9 lbs (0.9 kg)
1.9 lbs (0.9 kg)
10.2 lbs (4.7 kg)
1.9 lbs (0.9 kg)
1.9 lbs (0.9 kg)
1.9 lbs (0.9 kg)
11 / 13 W
11 / 13 W
263 / 310 W
11 / 13 W
11 / 13 W
11 / 13 W
-
-
185 W
-
-
-
49 BTU/h
49 BTU/h
1058 BTU/h
49 BTU/h
49 BTU/h
49 BTU/h
Environment
Power Required
Power Consumption (Avg / Max)
PoE Power Budget
Heat Dissipation
Operating Temperature
100-240 VAC, 50-60 Hz
32 - 104 °F (0 - 40 °C)
Storage Temperature
-31 - 158 °F (-35 - 70 °C)
Humidity
20 to 90% non-condensing
Compliance
FCC Part 15 Class B, C-Tick, VCCI, CE, UL/cUL, CB
Certifications
ICSA Labs: Firewall, IPSec, IPS, Antivirus, SSL VPN; FIPS 140-2 Level 2 (hardware); CC EAL4+
Note: All performance values are “up to” and vary depending on system configuration. Antivirus performance is measured using 44 Kbyte HTTP files. IPS performance is measured using 1 Mbyte HTTP files.
4
Order Information
SKU
Description
FG-60C
8 x GE RJ45 ports (Including 2 x WAN ports,1 x DMZ port, 5 x switch ports), ExpressCard slot
FG-60C-SFP
7 x GE RJ45 ports (Including 1 x WAN ports,1 x DMZ port, 5 x switch ports), 1 x GE SFP Slot
FG-60C-POE
25 x GE RJ45 Ports (including 1 x Management port, 20 x PoE ports, 4 x PoE+ ports)
FWF-60C
8 x GE RJ45 ports (Including 2 x WAN ports,1 x DMZ port, 5 x switch ports), Wireless (802.11a/b/g/n), ExpressCard slot
FWF-60CM
8 x GE RJ45 ports (Including 2 x WAN ports,1 x DMZ port, 5 x switch ports), Wireless (802.11a/b/g/n), ExpressCard slot, analog V.90 modem
FWF-60CX-ADSL-A
6 x GE RJ45 ports (including 2 x WAN ports, 4 x switch ports), 4 x FE switch ports, Wireless (802.11a/b/g/n), ADSL2+ Annex A interface, ExpressCard slot
FORTIWIFI-60C SERIES SKU SUFFIX
Region/Country
International
Korea
Japan
Configurable
SKU Suffix
-I
-K
-J
No Suffix
Frequency Range (GHz)
2.400 - 2.483
5.100 - 5.250
2.400 - 2.483
5.150 - 5.250
5.725 - 5.825
2.400 - 2.483
5.150 - 5.250
5.250 - 5.350*
5.470 - 5.725*
2.400 - 2.483
5.150 - 5.250
5.725 - 5.850
*Requires FortiOS 4.3.10 or later with DFS feature enabled
GLOBAL HEADQUARTERS
EMEA SALES OFFICE
APAC SALES OFFICE
LATIN AMERICA SALES OFFICE
Fortinet Inc.
1090 Kifer Road
Sunnyvale, CA 94086
United States
Tel: +1.408.235.7700
Fax: +1.408.235.7737
120 rue Albert Caquot
06560, Sophia Antipolis,
France
Tel: +33.4.8987.0510
Fax: +33.4.8987.0501
300 Beach Road #20-01
The Concourse
Singapore 199555
Tel: +65.6513.3730
Fax: +65.6223.6784
Prol. Paseo de la Reforma 115 Int. 702
Col. Lomas de Santa Fe,
C.P. 01219
Del. Alvaro Obregón
México D.F.
Tel: 011-52-(55) 5524-8480
Copyright© 2013 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other
product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions, and performance may vary. Network
variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether
express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according
to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any guarantees.
Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Certain Fortinet products are licensed
under U.S. Patent No. 5,623,600.
FST-PROD-DS-GT60CFGFWF-60C-DAT-R17-201308
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising