Beruflich Dokumente
Kultur Dokumente
FORTIGATE-60B
The FortiGate-60B appliance delivers complete security for branch offices, small offices, and home offices, as well as service provider CPE and mobile point-of-sale applications. Its FortiOS operating system offers a full suite of security services in one hardened platform: antivirus/antispyware/antimalware, IPS, web filtering, stateful firewall and traffic shaping, and IPSec/SSL VPN. This combination offers superior protection against threats such as IM/P2P traffic, phishing and pharming, and sophisticated blended threats. Rapid, turn-key deployment and easy management deliver low total cost of ownership and easily facilitate compliance with important legislative requirements such as PCI and Sarbanes-Oxley.
FortiGate-60B Benefits
Integrated, all-in-one security delivers enterprise-class multi-threat protection for small businesses, remote offices, and home offices. PC Card slot supports broadband wireless such as EV-DO, W-CDMA, HSPA, and GPRS, which provides mobile network connectivity for remote deployments, or as a backup solution. Dual WAN links for redundant ISP connections deliver higher availability with load balancing and failover. Integrated built-in analog modem for backup connectivity. DMZ link allows isolation of critical outward facing functions such as email for increased security. Six internal switch ports eliminate need for an additional hub, reducing equipment investment and management burden. High-availability support brings scalability and reliability to branch offices, SOHO, service provider CPE, and mobile point-of-sale applications. Available FortiManager and FortiAnalyzer appliances simplify security management and reduce operating expenses in multiple deployments. FortiGuard Subscription Services deliver automated, real-time, up-to-date protection against security threats and exploits.
FortiGate-60B Features
Maximum Antivirus Throughput 20 Mbps Maximum IPS Throughput 60 Mbps
Maximum Concurrent Sessions 70K Network Interfaces Additional connectivity Environmental Compliance 9 10/100 Base-T (6 switch/LAN, 2 WAN, 1 DMZ) PC Card slot for 3G WAN connectivity option Analog modem RoHS Compliant DMF Free
Key Problems
Small Ofces and Home Ofces (SOHO) are particularly vulnerable to cyber attacks due to the lack of resources and budgets to combat complex network and content based threats Deploying multiple point-products from di erent vendors does not provide integrated protection from blended threats and is costly to own and complex to maintain Adoption of WiFi wireless technology opens another window for attack from inside of the network SOX and PCI compliance requirements adds a new dimension of complexity to logging and reporting
Solutions
FortiGate-50B
All-in-one Unifed Threat Management (UTM) system provides multi-layer threat protection with automatic updates all in a cost-e ective package UTM security solutions provide tightly integrated protection services with a unied management, logging and reporting interface Built-in WiFi wireless ensures the same level of protection across both wired and wireless networks
FortiWiFi-50B
FortiGate-60B
FortiWiFi-60B
Unied tools with a common user interface simplify analyzing, reporting and managing compliance
FortiGate-100A
FortiGate 50-100 series appliances are designed to secure small size ofces and businesses.
Through the integration of essential security technologies, Fortinet protects both mobile workers and workstations at SOHO and ROBO locations. To keep resources safe, Fortinets advanced antivirus, antispyware, antispam, and intrusion prevention systems utilize the integrated FortiASIC processor and a combination of signature and heuristic detection engines to provide multi-layered, real-time protection against a multitude of attacks. The FortiWi series o ers the ability to broadcast multiple SSIDs (Service Set Identiers), maximizing infrastructure exibility in multi-provider environments and conserving spectrum. Moreover, di erent security policies can be set for each SSID, increasing security exibility. FortiGate 60-series models provide a PC card slot that allows a 3G/UMTS PC card to be used for secure network connectivity.
3G / UMTS PC CARD
3G / UMTS LINK
INTERNET
SECURE WIRELESS NETWORKS WiFi USER S
ANTIVIRUS / ANTISPAM
MULTI-THREAT SECURITY HTTP EMAIL IM & P2P VOIP , H.323,SIP DMZ 2 MULTI-THREAT SECURITY
CORPORA TE LAN
INTERNET
Workers at various remote ofces are tasked with vastly di erent business processes: some use messaging applications while others use database applications. Sales ofces that use email and IM applications are protected from blended threats that use multiple methods to attack a system: viruses that spawn dormant Trojans, rootkits, and bots, for example. Combining Fortinets antivirus and antispam technology with IM and P2P controls, employees are assured that email and IM messaging remain secure and wont result in lost revenue or lost data. Application and database users, such as a remote manufacturing site, are guaranteed secure connectivityvia rewalls and VPNsto the application servers it uses at the central ofce. Finally, Fortinet o ers a complete management solution for centralized monitoring, reporting, logging, and analysis to ensure that remote ofces remain up and running.
INTERNET
ROUTER
MSSP NETWORK
MULTI-THREAT SECURITY
CUSTOMER 4
FortiGate-50B
FortiWiFi-50B
FortiGate-60B
FortiWiFi-60B
FortiGate-100A
LAN Switching Interfaces....................................................... 3 ...................................... 3................................ 6................................. 6 ................................. 4 ................................. WAN Interfaces .............................................. 2 ...................................... 2................................ 2 ................................ 2 ................................. 2 ................................. DMZ Interfaces ........................................................................................................................... 1................................. 1 ................................. 2 ................................. Analog Modem ........................................................................................................................... Yes.............................. Yes.................................................................. Wireless LAN 802.11a/b/g............................................................................................. 802.11 b/g ..................................................... 802.11 a/b/g ................................................... USB Ports ........................................................ 2 ....................................... 2................................ 2................................. 2 ................................. 2 ................................. Power Over Ethernet (PoE) ......................................................................... Yes ............................................................................................................................... ......... PC Card Slot* .............................................................................................................................. Yes.............................. Yes.................................................................. Supported VDOMs ........................................... 10 ..................................... 10.............................. 10............................... 10............................... 10 ...............................
* PC card is sold separately
SYSTEM PERFORMANCE * Firewall Throughput ....................................... VPN IPSecThroughput .................................... Antivirus Throughput ....................................... IPS Throughput ............................................... Dedicated IPSec VPN Tunnels .......................... Unlimited User Licenses ................................. Concurrent sessions ....................................... New Sessions/Second ..................................... Policies ...........................................................
50 Mbps ........................... 48 Mbps ........................... 19 Mbps.......................... 30 Mbps.......................... 20 .................................... Yes................................... 25,000............................. 2,000............................... 2,000...............................
50 Mbps..................... 48 Mbps..................... 19 Mbps..................... 30 Mbps..................... 20............................... Yes ............................. 25,000........................ 2,000.......................... 2,000..........................
100 Mbps................... 64 Mbps..................... 20 Mbps..................... 60 Mbps..................... 50............................... Yes.............................. 70,000........................ 3,000.......................... 2,000..........................
100 Mbps .................... 64 Mbps ...................... 20 Mbps ...................... 60 Mbps ...................... 50............................... Yes.............................. 70,000........................ 3,000.......................... 2,000..........................
100 Mbps .................... 40 Mbps ...................... 20 Mbps ...................... 70 Mbps ...................... 80 ............................... Yes.............................. 200,000...................... 4,000 .......................... 2,000 ..........................
* Antivirus performance is measured based on HTTP trafc with 32Kbyte le attachments and IPS performance is measured base on UDP trafc with 512 byte packet size. Actual performance may vary depends on network trafc and environment
1.38 inches...................... 8.63 inches...................... 5.8 inches........................ 1.5 lbs ............................. 6W...................................
1.38 inches ................. 8.63 inches ................. 5.8 inches ................... 1.5 lbs........................ 6W..............................
1.75 inches ................. 10.87 inches ............... 6.13 inches ................. 5.5 lbs ........................ 15W............................
1.75 inches ................. 10.87 inches ............... 6.13 inches ................. 5.5 lbs ........................ 15W.............................
1.75 inches.................. 10.87 inches ................ 6.13 inches.................. 3.35 lbs........................ 14W .............................
Operating temperature: 32 to 104 deg F (0 to 40 deg C) ................................................................ Storage temperature: -13 to 158 deg F (-25 to 70 deg C) Humidity: 5 to 95% non-condensing FCC Class A Part 15 (FG-100A), FCC Class B Part 15 (FG-50-60), ......................................................... UL/CUL, C Tick, CE, VCCI ICSA Labs Certied: Firewall, Antivirus, IPS, IPSec VPN, SSL-VPN .......................................................... NSS Labs Approved (UTM), Common Criteria (EAL 4+), FIPS 140-2
(Please contact your Fortinet Sales Representative for a complete list of product certications)
Fortinets ASIC-Based Advantage FortiASIC is the foundation of Fortinets unique Solutions hardware technology. FortiASIC is a family of purpose built, high-performance network and Fortinet o ers a lower total cost of ownership with the most complete set of functions including: antivirus, content processors that uses an intelligent intrusion prevention, antispyware, web content ltering, proprietary content scanning engine and multiple and antispam algorithms to accelerate compute-intensive security services. FortiASIC provides the performance Around-the-clock protection against the latest threats. required to deliver enterprise and carriers-class Virus and intrusion encyclopedia covers more than UTM services. Coupled with the FortiOS security 60,000 di erent threats hardened Operating System, FortiASIC delivers The Fortinet FortiASIC delivers superior performance and extreme performance and security.
reliability, ensuring that the security appliance does not become a network bottleneck
Eliminates the need for external switches and provides enhanced connectivity options Quick and easy conguration wizard walks administrators through initial setup and graphical user interface o ers at-a-glance security event and performance monitoring
TM Underlying FortiOS is ICSA Labs-certied and o ers a comprehensive command-line interface
FortiOS: Developed for Security FortiOS is the software foundation of FortiGate multi-threat security platforms. Developed solely for security, performance and reliablity, it is a purpose-built operating system that leverages power of the the FortiAISC content and network processors. FortiOS enables a comprehensive suite of security services content inspection rewall, IPS, antivirus, web ltering, antispam, IM/P2P, virtual network security and bandwidth shaping. FortiOS is a complete suite of UTM security services and is certied for Common Criteria EAL 4+.
FortiGate-50-100 Series
FortiGate-50B FortiWiFi-50B FortiGate-60B FortiWiFi-60B FortiGate-100A
FIREWALL
ICSA Labs Certied (Enterprise Firewall) NAT, PAT, Transparent (Bridge) Routing Mode (RIP v1 & v2, OSPF, BGP, & Multicast) Policy-Based NAT Virtual Domains (NAT/Transparent mode) VLAN Tagging (802.1Q) User Group-Based Authentication SIP/H.323 NAT Traversal WINS Support Customized Protection Proles
WEB FILTERING
URL/Keyword/Phrase Block URL Exempt List Content Proles Blocks Java Applet, Cookies, Active X FortiGuard Web Filtering Support
LOGGING/MONITORING
ICSA Labs Certied (IPSec & SSL) PPTP, IPSec, and SSL Dedicated Tunnels DES, 3DES, and AES Encryption Support SHA-1/MD5 Authentication PPTP, L2TP, VPN Client Pass Through Hub and Spoke VPN Support IKE Certicate Authentication IPSec NAT Traversal Dead Peer Detection RSA SecurID Support ICSA Labs Certied (NIPS) Protection From Over 3000 Threats Protocol Anomaly Support Custom Signature Support Automatic Attack Database Update
Real-Time Blacklist/Open Relay Database Server MIME Header Check Keyword/Phrase Filtering IP Address Blacklist/Exempt List Automatic Real-Time Updates From FortiGuard Network
ANTISPAM
Internal Logging Log to Remote Syslog/WELF server Graphical Real-Time and Historical Monitoring SNMP Email Notication of Viruses And Attacks VPN Tunnel Monitor Optional FortiAnalyzer Logging
TRAFFIC SHAPING
Policy-based Trafc Shaping Di erentiated Services (Di Serv) Support Guarantee/Max/Priority Bandwidth
Multiple WAN Link Support PPPoE Support DHCP Client/Server Policy-Based Routing Dynamic Routing (RIP v1 & v2, OSPF, BGP, & Multicast) Multi-Zone Support with Routing Between Zones Route Between Virtual LANs (VDOMS)
NETWORKING/ROUTING
Console Interface (RS-232) WebUI (HTTP/HTTPS) and Command Line Interface Telnet / Secure Command Shell (SSH) ANTIVIRUS Role-Based Administration ICSA Labs Certied (Gateway Antivirus) Multi-language Support Includes AntiSpyware and Worm Prevention HTTP/SMTP/POP3/IMAP/FTP/IM and Encrypted VPN Tunnels Multiple Administrators and User Levels Upgrades and Changes Via FTP and WebUI Automatic Push Virus Database Update System Software Rollback File Quarantine Support Central Management via FortiManager (optional) Block by File Size or Type
MANAGEMENT/ADMINISTRATION OPTIONS
Active-Active, Active-Passive Stateful Failover (FW and VPN) Device Failure Detection and Notication Link Status Monitor Link failover
GLOBALHEADQUARTERS Fortinet Incorporated 1090 Kifer Road, Sunnyvale, CA 94086 USA Tel +1-408-235-7700 Fax +1-408-235-7737 www.fortinet.com/sales
EMEA S ALES OFFICE -FRANCE Fortinet Incorporated 120 Rue Albert Caquot 06560 Sophia Antipolis, France Tel +33-4-8987-0510 Fax +33-4-8987-0501
APAC S ALES OFFICE -SINGAPORE Fortinet Incorporated 3 Temasek Avenue, Level 21 Centennial Tower Singapore 039190 Tel: +65-6549-7050 Fax: +65-6549-7259
Copyright 2006-2008 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, and FortiGuard, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other prod or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions. Network variables, di erent network environments a conditions may a ect performance results, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding contract with a purchaser that expressly warrants that the id product will perform according to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinets internal lab tests. Fortinet disclaims in guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Certain Fortinet products are licens U.S. Patent No. 5,623,600. DAT137-0908-R9