Fortinet FortiGate 1000A and 1000AFA2

Fortinet Security Leadership.

FortiGate™ Multi-Threat security systems are dedicated ASIC-based appliances that deliver comprehensive network protection scalable to multi-gigabit speeds. Utilizing the industry’s first hardware-accelerated content inspection engines, Fortinet Complete Content Inspection and Reassembly technology provides the most advanced ASIC-accelerated network-based security products available today.

The FortiGate-1000A Security System is a high performance solution that delivers gigabit throughput with exceptional reliability for the most demanding large enterprise. The FortiGate-1000AFA2 optionally provides 2 ports featuring FortiAccel technology enhancing small packet performance. All FortiGate-1000A products deploy easily in existing networks and can be used for antivirus and content filtering only or can be deployed as a complete network protection solution. High Availability (HA) operation and redundant hot-swappable power supplies ensure non-stop operation in mission-critical applications. The FortiGate-1000A is kept up to date automatically by Fortinet’s FortiGuard network, which provides continuous updates for FortiGuard Subscription Services that ensure protection against the latest viruses, worms, trojans and other threats - around the clock.

Sophisticated Security Solution

The FortiGate-1000A/FA2 systems deliver critical security functions in a hardened security platform that is tuned for reliability, usability, rapid deployment, low operational costs and most importantly, a superior detection rate against known and unknown anomalous threats. Backed by Fortinet’s proactive real-time subscription services, the FortiGate security systems are unbeatable for value, performance and functionality.

Powerful Security

Effectively protecting organizations from a new generation of attacks requires a comprehensive security strategy that contains multiple layers of network-based defenses at the edge and at the core of your network. The FortiGate-1000A delivers a high-performance appliance that tightly integrates multiple security solutions to combat blended attacks. Integrated antivirus and anti-spyware engines inspect email, HTTP and FTP downloads for malicious content, dynamic IPS detects and blocks attacks aimed at exploiting application vulnerabilities, antispam filtering blocks the transport of malicious files, comprehensive web content filtering blocks access to offensive and malicious internet sites and a stateful firewall is used as a first line of defense.

Management for all FortiGate platforms is easily performed with a policy based Web UI or via Fortinet’s FortiManager for central management. FortiManager can manage hundreds of FortiGate devices for configuration and policy changes via a single console. Fortinet’s management ensures consistent policy enforcement across all FortiGate platforms. FortiAnalyzer provides a central logging facility that aggregates and analysis logs from all centrally managed FortiGate platforms. Together FortiManager and FortiAnalyzer provide a unified architecture for complete network management.

• POWERFUL - Combine’s Stateful Firewall, Antivirus, Intrusion Prevention Systems, IPSec, SSLVPN, Antispam, Web Content Filtering and FortiGuard Subscription Services in a single security solution
• INTELLIGENT - Proactive real-time detection for network-based threats; viruses, worms, trojans, spyware and other malicious content to ensure that the latest attacks are detected and blocked.
• SOPHISTICATED - Fortinet's Dynamic Threat Prevention System provides advanced detection techniques combining stateful inspection, signature matching, deep packet inspection, heuristics, protocol anomaly checking, full content reassembly and activity inspection using the industry's only integrated threat correlation engine.

Flexible By Design

The FortiGate-1000A system’s flexible architecture allows it to quickly adapt to emerging technologies and threats such as IM, P2P and VOIP applications and Identity theft methods such as spyware, phishing and pharming attacks. Flexible deployment options such as NAT, Route and Transparent modes allow the FortiGate-1000A to be easily deployed into most network designs. Core networking features such as High Availability (HA) and support for dynamic routing protocols RIP, OSPF and BGP allow the FortiGate-1000A to be deployed into complex full mesh network environments that require maximum network availability. To reduce deployment costs, The FortiGate-1000A appliance supports security zones and virtual security domains to secure multiple internal networks or external customers on a single, easy to manage platform.

Specifications:

INTERFACES
10/100/1000Base-T Ports (Copper)	10
FortiAccel SFP Ports	2*
Modem Ports	1
USB	1
Console	1
SYSTEM PERFORMANCE
Concurrent sessions	600,000
New sessions/second	15,000
Firewall throughput (Gbps)	2
168-bit Triple-DES throughput (Mbps)	280
Unlimited concurrent users
Policies	30,000
Schedules	256
ANTIVIRUS, SPYWARE, WORM & TROJAN PROTECTION
Scans HTTP,FTP,SMTP,POP3,IMAP, and encrypted VPN Tunnels
Quarantine infected messagess
Block/exempt by file size & extension
IM File transfer scanning	**
DYNAMIC INTRUSION PREVENTION
Protocol anomaly detection
Comprehensive attack signatures
Customizable detection signatures
P2P blocking
FIREWALL MODES
NAT, PAT,Transparent (bridge)
Routing mode (RIP v1, v2)
Virtual domains	10 TP, 2 NAT
802.1q VLAN Support
User Group-based authentication
H.323, SIP application layer gateway
Protection Profiles	200
CONTENT FILTERING
URL/keyword/phrase block
URL exempt list
Blocks Java Applet, Cookies and Active X
FortiGuard Web Content Filtering support
Automatic real-time updates
VPN
PPTP, L2TP, & IPSec
Dedicated tunnels	5000
Encryption (DES, 3DES, AES)
SSL	**
SHA-1 / MD5 authentication
PPTP, L2TP, VPN client pass through
Hub & Spoke VPN architecture
IKE certificate authentication (X.509)
IPSec NAT Traversal
Aggressive mode
Replay protection
Dead peer detection
VPN tunnel monitor
ANTISPAM
RBL/ORDBS support
FortiGuard Antispam support
MIME header check
Keyword/phrase filtering
IP address blacklist/exempt
LOGGING / MONITORING
Log to remote Syslog/WELF server
SNMP
Graphical real-time & historical monitoring
Email notification of viruses & attacks
FortiAnalyzer support
Web Dashboard for real-time device monitoring
HIGH AVAILABILITY (HA)
Clustering
Active/Active and Active/Passive HA
Stateful failover (FW and VPN)
Device failure detection and notification
Redundant power supplies (hot-swappable)
NETWORKING
Multiple WAN link support
DHCP client/server/relay
Route between zones
Policy-based routing
VLAN tagging (802.1q)
SYSTEM MANAGEMENT
Console interface (RS-232)
WebUI (HTTPS)
Multi-language support
Command line interface
Secure Command Shell (SSH)
FortiManager System
ADMINISTRATION
Role-based administration
Multiple administrators and user levels
Upgrades and changes via TFTP & WebUI
USER AUTHENTICATION
Internal database
External LDAP/RADIUS database Support
RSA SecureID
Xauth over RADIUS for IPSec VPN
IP/MAC address binding
Windows Active Directory	**
TRAFFIC MANAGEMENT
DiffServ support
Policy-based traffic shaping
Guaranteed/Maximum/Priority bandwidth
DYNAMIC ROUTING
RIP v1, v2
BGP4	**
OSPF
Static
INSTANT MESSENGER - ACCESS CONTROL
AOL-IM
Yahoo
MSN
ICQ
DIMENSIONS
Height (inches)	1.75
Width (inches)	17
Length (inches)	12.6
Weight	11.9 lbs (5.4 kgs)
POWER
AC input voltage	100 to 240VAC
AC input current	1.6A
ENVIRONMENTAL
Operating Temperature	32 to 104°F (0 to 40°C)
Storage Temperature	-13 to 158°F (-25 to 70°C)
Humidity (non-condensing)	5 to 95%
COMPLIANCE
FCC Class A Part 15
CSA/CUS
CE
UL
ICSA Antivirus
ICSA Firewall
ICSA IPSec
ICSA Intrusion Detection

* Available in FGT-1000AFA2
** Available with FortiOS-3.0

Download the Fortinet FortiGate 1000A Data Sheet (PDF).