Fortinet ASM-CX4 Bypass Module

Overview:

Hardware Bypass Options for FortiGate® Multi-Threat Security Systems

IT administrators are faced with the challenge of securing a network while also ensuring that the network is always available. For critical network segments, this could mean that network availability is valued over ensuring that all traffic is inspected for malicious activity. High availability solutions, where a system fails over to either an active or standby unit, can reduce the risk of a network outage while still providing security services. To further reduce the risk of a network outage due to a power failure or a security device malfunction, bypassing the device altogether with a fail-to-wire solution can ensure network continuity at times when security cannot be provided.

Fortinet ASM-CX4 and ASM-FX2 modules provide bypass functionality to FortiGate multi-threat security systems equipped with an available single-width Advanced Mezzanine Card (AMC) expansion bay. The ASM-CX4 is a single-width AMC module which provides four (4) 10/100/1000 copper (RJ-45) Ethernet interfaces for two protected segments of network traffic. The ASM-FX2 is a single-width AMC module which provides two (2) gigabit fiber (LC, 850nm) Ethernet interfaces for a single protected segment of network traffic. Operating in transparent mode during normal operation, both modules automatically bridge network traffic in the event of a system failure or power outage to ensure mission-critical network continuity.

Fortinet Bypass Modules Benefits:

• Fail-to-Wire bypass functionality maximizes network uptime by using Fortinet bypass modules to automatically fail-to-wire in the event of a power outage or any other type of event that would cause the host device to degrade the availability of the network segment. The modules automatically return to normal operating mode when conditions permit.
   
• The modular form factor of the Fortinet bypass modules empower customers with the ability to add bypass functionality to existing systems with an available single-width AMC expansion bay or to customize a new solution to match defined requirements.
   
• FortiOS™ integration increases the administrator's ability to monitor and control the bypass status of interfaces remotely, with the ability to view mode of operation, manually switch interfaces into bypass or normal operation mode, and configure thresholds for automatic bypass fail-to-wire.

Ensure Network Continuity:

IT administrators are faced with the challenge of securing a network while also ensuring that the network is always available. For critical network segments, this could mean that network availability is valued over ensuring that all traffic is inspected for malicious activity. High availability solutions, where a system fails over to either an active or standby unit, can reduce the risk of a network outage while still providing security services. To further reduce the risk, however, of a network outage due to a power failure or a security device malfunction, bypassing the device altogether with a fail-to-wire solution can ensure network continuity at times when security cannot be provided.

Fortinet ASM-CX4 and ASM-FX2 modules provide bypass functionality to FortiGate multi-threat security systems equipped with an available singlewidth Advanced Mezzanine Card (AMC) expansion bay. The ASM-CX4 is a single-width AMC module which provides four (4) 10/100/1000 copper (RJ-45) Ethernet interfaces for two protected segments of network traffic. The ASM-FX2 is a single-width AMC module which provides two (2) gigabit fiber (LC, 850nm) Ethernet interfaces for a single protected segment of network traffic. Operating in transparent mode during normal operation, both modules automatically bridge network traffic in the event of a system failure or power outage to ensure mission-critical network continuity.

Key Features: Benefits: Fail-to-Wire Bypass Maximize network uptime by using Fortinet bypass modules to automatically fail-to-wire in the event of a power outage or any other type of event that would cause the host device to degrade the availability of the network segment. The modules automatically return to normal operating mode when conditions permit. Modular Form Factor Empowers customers with the ability to add bypass to existing systems with an available single-width AMC expansion bay or to customize a new solution to match defined requirements. FortiOS™ Integration Increases the administrator’s ability to monitor and control the bypass status of interfaces remotely, with the ability to view mode of operation, manually switch interfaces into bypass or normal operation mode, and configure thresholds for automatic bypass fail-to-wire.

FortiGate Multi-Threat Security Solutions: FortiGate multi-threat security solutions provide an integrated set of security services in a single, easyto- manage platform that is capable of supporting a wide range of deployment scenarios. FortiGate systems provide essential security services, with fully integrated firewall, Virtual Private Network (VPN), intrusion prevention, antivirus/antispyware, Web filtering, antispam, and application control. To ensure that the security effectiveness of the FortiGate solutions remains at the highest levels possible, Fortinet offers FortiGuard® subscription services that include antivirus updates, intrusion prevention updates, an antispam rating service, and a Web filtering rating service. A wide range of hardware models is available for any network size—from the remote office or branch office to the high-speed core or data center.

Technical Specifications:

Fortinet Bypass Modules Specifications
Bypass Modules Models
	ASM-CX4	ASM-FX2
Hardware Specifications
10/100/1000 Interfaces (Copper, RJ-45)	4	0
1Gb Optical Interfaces (Fiber, LC, 850mm)	0	2
AMC Expansion Slots	1 Single-Width	1 Single-Width
Module Performance
Normal Operation	Varies, Dependant on System Performance
Bypass Operation	Link Speed
Environmental
Operating temperature	32 to 104 deg F (0 to 40 deg C)
Storage temperature	-13 to 158 deg F (-25 to 70 deg C)
Humidity	5 to 95% non-condensing
Compliance
Compliance	FCC Class A, Part 15, UL/CUL, C Tick, CE, VCCI

Services & Support:

FortiGuard Security Subscription Services:

• Antivirus
• Intrusion Prevention
• Web Filtering
• Antispam
• Premier Signature Service
  Includes Antivirus and Intrusion Prevention Updates with additional service level agreements

FortiCare Support Services:

Includes:

• 24/7/365 Web-Based Technical Support
• Technical Account Management Service (Optional)
• 24-Hour Phone-Based Support (Optional)
• Professional Services (Optional)
• 1-Year Limited Hardware Warranty
• 90-Day Limited Software Warranty

Documentation:

Download the Fortinet Bypass Modules Datasheet (.PDF)