Call a Specialist Today! 800-886-5787

Fortinet FortiCore 3800E
SDN Security Appliances

Fortinet FortiCore 3800E

Fortinet FortiCore-3700E Series
FortiCore-3700E
FortiCore-3800E SDN Security Appliance - 2 x 100GE QSFP28, 32 x 10GE SFP+, 1 x GE RJ45 Management
#FCE-3800E
Our Price: $180,000.00

Click here to jump to more pricing!

Overview:

The FortiCore E-Series of Software-Defined Networking (SDN) security appliances provide the ability to scale network-based security solutions to meet the performance demands of emerging cloud and data center architectures. Using programmable flow forwarding, the FortiCore can redirect and distribute traffic of interest to associated sets of network security devices, at link speeds up to 100G.

Securing Software Defined Networking (SDN) Architectures

Within SDN architectures, the seperation of the control and data planes adds security challenges to protect SDN controllers and applications from data plane-based attacks. Additionally, as SDN architectures are multipath environments, connecting and scaling stateful network security devices, requires the ability to programmatically direct and distribute traffic through them. The FortiCore as an SDN security appliance connects to SDN architectures, supporting both very large numbers of programmable flows and effective line-rate performance required to secure SDN architectures.

Highlights

  • The FortiCore E-Series models: 3600E (10 GE), 3700E (40 GE), and 3800E (100 GE)
  • Supports over 200K programmed flows in a single-table pipeline (REGEX)
  • Supports over 2M programmed flows in a multi-table pipeline (Simple Match)
  • Up to 1 Tbps aggregate lowlatency throughput, needed to transect a 100 GE link and distribute traffic to a set of network security appliances
  • Supports OpenFlow 1.3, with wide support with available SDN controllers
  • Full control/data plane separation, with an internal 40 Gbps path in support of a robust new flow rate
  • Cardinal Flow Processing (CFP) architecture, support large flow table sizes without sacrificing performance
Features & Benefits
Scalable Network-Based Security Solutions With all FortiCore models supporting 32x 10G interfaces, scalable stacks of security appliances can be programmatically attached to the network.
Effective Line-Rate Performance Combining FortiCore’s hardware-accelerated switching with its Cardinal Flow Processing (CFP) technology, no sacrifices are made in supporting large programmable flow tables with line-rate performance up to 800 Gbps.
OpenFlow 1.3 Compatible Provides ease of integration in hetergenous SDN environments, with support for a wide array of SDN controllers, including OpenDaylight and ONOS.

Features

OpenFlow 1.3 Compatible

  • Support by all OpenFlow 1.3 compliant SDN controllers
  • Flexible multi-table pipeline support, up to 256 tables
  • Can support >200K flows in a single-table pipeline, at a flow modication rate >10,000 flow-mods/sec

Cardinal Flow Processing

  • Assignment of ports to cardinal direction (N,E,S,W), with dedicated flow processing hardware per direction
  • Optimized for high-speed link transection, with support for 10G/40G/100G interfaces, depending on model

Hardware:

FortiCore 3700E

FortiCore 3700E Hardware

Interfaces

  1. Console Port
  2. 2x USB Ports
  3. 10/100/1000 RJ45 Management Port
  4. 32x 10 GE SFP+ Ports
  5. High-Speed Network Interfaces (none for 3600E, 4x 40G QSFP for 3700E, 2x 100 G QSFP28 for 3800E)

Cardinal Flow Processing (CFP)

  • The FortiCore architecture eliminates scaling limitations in SDN switching by distributing programmed flow across four independent CFP units
  • Each interface is assigned to a CFP unit based cardinal direction (Northbound, Southbound, Eastbound, Westbound), analogous to data center design
  • Cardinal Flow Processing units can support wildcard flows that are applied to all associated interfaces, providing greater flexibility in programming flows
  • Each CFP unit can sustain up to 200 Gbps of aggregate traffic forwarding, with support for over 50K programmed REGEX flows per unit using a single-table pipeline, and an additional 500K simple-match programmed flows per unit when using a multi-table pipeline
  • This results in an effective line-rate SDN forwarding appliance, with the exceptional programmed flow scalability needed for network-based security solutions

SDN Data Plane Switching

The FortiCore’s Local Switch Processor supports very highperformance and low-latency switching functions required for emerging core-routed and data center architectures:

  • All models support 32x 10G interfaces
  • The FortiCore 3700E includes an additional 4x 40G interfaces
  • The FortiCore 3800E includes an additional 2x 100G interfaces

Generous Control Plane Resources

The FortiCore’s control plane was designed to support the current OpenFlow 1.3 protocol requirements at exceptional rates for new programmed flows, as well as future-proofing for emerging SDN protocol requirements:

  • Dual 8-core Intel CPUs
  • 64 GB of RAM
  • Internal 40 Gbps forwarding path between control/data planes

Deployment:

Scaling Security Beyond Datasheet Limits

The principal goal of the FortiCore is the creation of scalable network-based security solutions that go well beyond the datasheet limits of an individual security appliance. FortiCore’s massive performance and flow capacitance allow the creation of provision-able solutions using the programmable capabilities of software-defined networking (SDN).

Combined with an SDN controller and SDN applications, FortiCore solutions can be integrated into carrier/cloud programmable provisioning systems.

Scaling Security Beyond Datasheet Limits

Next Generation Data Center Security

The FortiCore deploys in a path-centric fashion, allowing you to connect an array of network security functions onto any given high-performance link within a core routed environment, including 100G links. The security devices associated with the FortiCore can be varied, based on traffic inspection requirements. Using the capabilities of SDN to program network flows onto the FortiCore, traffic-of-interest can be redirected through a variety of network security devices, while maintaining the symmetric traffic requirements of each device.

In leaf-spine data center architectures, where all leaf switches are connected to every spine switch, resulting in all hosts within a data center being one-hop from each other, the FortiCore as a security leaf allows the deployment of centralized traffic inspection to protect data center resources.

Next Generation Data Center Security

Defending Programmable Networks

FortiCore supports very high numbers of programmed flows, allowing it to operate proactively, learning all required flows, thus allowing other SDN switches to forward unknown flows to the FortiCore, rather than up to the control plane. This defends the SDN control and applications planes from DoS and other attacks from the data plane.

Specifications:


FORTICORE 3600E FORTICORE 3700E FORTICORE 3800E
Hardware Specifications
Packet Throughput 1 Tbps 1 Tbps 1 Tbps
Programmed Flows — Single-Table (REGEX Match) 200,000 200,000 200,000
Programmed Flows — Multi-Table (Exact Match) 2,000,000 2,000,000 2,000,000
Control Plane CPU 2x 8-core Intel CPU 2x 8-core Intel CPU 2x 8-core Intel CPU
Memory 64 GB 64 GB 64 GB
SDN Protocols OpenFlow 1.3 OpenFlow 1.3 OpenFlow 1.3
Network Interfaces 32x 10 G SFP+ 32x 10 G SFP+, 4x 40 G QSFP 32x 10 G SFP+, 2x 100 G QSFP28
10/100/1000 Management Interface 1 1 1
Storage 2x 480 GB (960 GB total) 2x 480 GB (960 GB total) 2x 480 GB (960 GB total)
Management GUI, SSH CLI, Direct Console DB9 CLI, SNMP GUI, SSH CLI, Direct Console DB9 CLI, SNMP GUI, SSH CLI, Direct Console DB9 CLI, SNMP
Power Supply Dual Dual Dual
Environment
Form Factor 3U Appliance 3U Appliance 3U Appliance
Input Voltage 100–240V AC, 50–60 Hz 100–240V AC, 50–60 Hz 100–240V AC, 50–60 Hz
Power Consumption (Average / Maximum) 613 W / 834 W 633 W / 858 W 633 W / 858 W
Maximum Current 120V/12A, 240V/7A 120V/12A, 240V/7A 120V/12A, 240V/7A
Heat Dissipation 2847 BTU/h 2929 BTU/h 2929 BTU/h
Operating Temperature 32–104°F (0–40°C) 32–104°F (0–40°C) 32–104°F (0–40°C)
Storage Temperature -13–158°F (-25–70°C) -13–158°F (-25–70°C) -13–158°F (-25–70°C)
Humidity 20–90% non-condensing 20–90% non-condensing 20–90% non-condensing
Compliance
Regulatory Compliance FCC Part 15 Class B, VCCI, CE, CB, UL/c FCC Part 15 Class B, VCCI, CE, CB, UL/c FCC Part 15 Class A, VCCI, CE, CB, UL/c
Safety CSA, CE, UL CSA, CE, UL CSA, CE, UL
Dimensions
Height x Width x Length (inches) 5.16 x 17.24 x 26.18 5.16 x 17.24 x 26.18 5.16 x 17.24 x 26.18
Height x Width x Length (mm) 131 x 438 x 665 131 x 438 x 665 131 x 438 x 665
Weight 55.98 lbs (25.39 kg) 57.25 lbs (25.97 kg) 57.17 lbs (25.93 kg)

Documentation:

Download the Fortinet FortiCore Series Datasheet (.PDF)

Pricing Notes:

Fortinet FortiCore-3800E Series
FortiCore-3800E
FortiCore-3800E SDN Security Appliance - 2 x 100GE QSFP28, 32 x 10GE SFP+, 1 x GE RJ45 Management
#FCE-3800E
Our Price: $180,000.00
8x5 FortiCare Contract
*8x5 Support, Hardware Replacement, Firmware and General Upgrades, VPN, Traffic Management
2 Year 8x5 FortiCare Contract for FortiCore-3800E
#FC-10-C3800-311-02-24
Our Price: $50,625.00
3 Year 8x5 FortiCare Contract for FortiCore-3800E
#FC-10-C3800-311-02-36
Our Price: $70,875.00
24x7 FortiCare Contract
*24x7 Support, Advanced Hardware Replacement (Next Business Day), Firmware and General Upgrades, VPN, and Traffic Management
2 Year 24x7 FortiCare Contract for FortiCore-3800E
#FC-10-C3800-247-02-24
Our Price: $84,375.00
3 Year 24x7 FortiCare Contract for FortiCore-3800E
#FC-10-C3800-247-02-36
Our Price: $118,125.00