Fortinet FortiAuthenticator-1000C

Overview:

The FortiAuthenticator-1000C user identity management appliance strengthens enterprise security by simplifying and centralizing the management and storage of user identity information used for authentication. Designed as a central repository for user validation information, the FortiAuthenticator platform enables multiple authentication technologies for controlling user access including two-factor authentication, identity verification and network access control.

FortiAuthenticator-1000C Features & Benefits:

• Low cost per user with no user based licensing makes the FortiAuthenticator one of the most cost effective solutions in the market
• Standards-based secure authentication which works in conjunction with FortiTokens to deliver secure two-factor authentication to any third-party device capable of authentication via RADIUS or LDAP
• Hardened appliance that can be deployed in minutes to secure access to your network infrastructure
• Integrates with existing solutions such as LDAP or AD servers to lower the cost and complexity of adding strong authentication to your network
• User self-service password reset lowers your costs by allowing your users to reset their own password without administrator intervention
• Certificate Authority functionality simplifies your CA management and delivers user certificate signing, FortiGate VPN, or server x.509 certificates for use in certificate-based two-factor authentication
• Upgrade path from FortiGate/FortiToken allows you to maximize your existing investment and scale your two-factor deployment when needed.

Stronger Security with Two-factor Authentication

FortiAuthenticator extends two-factor authentication capability to multiple FortiGate appliances and to third party solutions that support RADIUS or LDAP authentication. User identity information from FortiAuthenticator combined with authentication information from FortiToken ensures that only authorized individuals are granted access to your organization's sensitive information. This additional layer of security greatly reduces the possibility of data leaks while helping companies meet audit requirements associated with government and business privacy regulations.

Two-factor authentication improves confidence in end-user identity by requiring something the user knows, such as a password, and something the user has, such as a physical token or one-time password. Two-factor authentication can be used to control access to applications such as FortiGate management, SSL and IPSEC VPN and Wireless Captive Portal login, third party networking equipment and web sites.

Simpler Management and User Experience

By providing all services and storage of user identity information on a single device, the FortiAuthenticator appliance significantly lowers the cost of delivering secure user authentication. The FortiAuthenticator system can be deployed in minutes rather than hours and has been designed to simplify all steps of the user authentication life cycle; from integration with existing authentication databases to zero impact token initialization. Users can recover their own credentials through a self-service portal by answering pre-agreed questions and providing a token PIN, further reducing administrative burden.

Fortinet Single Sign On (FSSO) improves the user experience by reducing the number of required user logins. FSSO Integration with Active Directory enables the creation of FortiGate Identity Based Policies to grant users access to the network and internet based on their AD group membership.

Features & Benefits:

• Simple deployment with a low cost upgrade path from existing FortiToken deployments.
• Centralized user authentication via standards based RADIUS or LDAP to support the widest range of network access servers.
• Integration with existing LDAP based authentication databases.
• Strong two-factor authentication delivering additional security and confidence in user identity over traditional password based authentication.
• Fortinet Single Sign-On integrates with existing Active Directory infrastructures to provide transparent network authentication and Identity Based Policies with FortiGate

Benefits

• Strengthens enterprise security by simplifying and centralizing the management of user identity information
• Extends the scope of and enhances existing FortiToken deployments
• Increases confidence in user identity with Two-factor Authentication
• Supports a wide range of thirdparty solutions via RADIUS and LDAP integration
• Enables FortiGate identitybased policies through integration with Active Directory
• Provides users with transparent network authentication via Fortinet Single Sign-On

Management Options

• Local Web-Based Management Interface
• Command Line Management Interface (CLI)
• Centralized management and analysis by FortiManager and FortiAnalyzer

Technical Specifications:

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiAuthenticator Datasheet (PDF).