Fortinet FortiGate 1000AFA2

Overview:

The FortiGate-1000 Series appliances offer a cost-effective solution for multi-threat protection of the enterprise perimeter. They offer (10) 10/100/1000 Base-T interfaces and support up to ten virtual domains (VDOMs) for segmentation by customer, business unit, or any other logical division.

FortiGate-1000 Series Benefits:

• Ten (10) 10/100/1000 Base-T interfaces for flexible deployment.
• The FortiGate-1000AFA2 variation offers two additional ASIC-accelerated Gigabit Ethernet SFP interfaces for wire-speed firewall performance at all packet sizes.
• Complement or upgrade existing security infrastructure by enabling only the services needed.
• Segment the network by customer, business unit, or any other logical division for more control with support for up to 10 virtual domains (VDOMs).
• Redundant, hot-swappable power supplies minimize single-point failures.
• Available FortiManager and FortiAnalyzer integration simplifies security management, reporting, and analysis while reducing operating expenses.
• FortiGuard Subscription Services deliver automated, real-time, and up-to-date protection against security threats.

High Performance Enterprise Network Security:

FortiGate enterprise security solutions deliver next-generation firewall technology and multi-threat protection integrated into cost-effective security platforms that effectively block blended network threats. Point-product security solutions do not provide protection against a new breed of blended threats that utilize a multitude of attack vectors. Furthermore, assembling an array of point products is costly and requires significant expertise to engineer, maintain and manage. FortiGate solutions cost-effectively deliver complete multi-threat protection against: unauthorized access, intrusion attempts, viruses, worms, trojans, spyware, phishing attempts, spam and other types of content-based and network-based threats.

Industry-Leading Unified Threat Management (UTM):

Fortinet incorporates ICSA Labs-certified UTM functions into a single ASIC-based appliance that is simple to install and manage. Stateful firewall, IPSec and SSL-VPN, intrusion prevention, antivirus, antispam, and Web filtering features combine to form a complete enterprise-focused network security platform that offers compelling total cost of ownership.

Fortinet’s Multi-Layered Security Solution:

Fortinet’s multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Deployments:

FortiGate multi-threat security solutions are designed for enterprise networks.

Secure Network Perimeters / Internal Segmentation

Firewall and VPN services are deployed at the perimeter of the internal network to securely connect remote offices and mobile users to an organization’s private resources while at the same time preventing any other unauthorized access. Intrusion prevention, antivirus and Web filtering services ensure that network-based threats and contentbased threats are stopped inbound as well as outbound.

Inside the network, segmentation can be achieved using firewall, intrusion prevention and antivirus technologies. Internal segmentation effectively isolates outbreaks before they are allowed to spread throughout an organization’s network.

Virtual Security Domains / Distributed Enterprises

FortiGate platforms support multiple security zones and virtual security domains to customize a network’s security policy anywhere requirements demand. Virtual Domains (VDOMs) can also be used to provision services for external customers.

All FortiGate solutions start from the same flexible high performance architecture. Core networking features found in every model such as High Availability (HA) and support for dynamic routing protocols enable the FortiGate to be deployed into highly distributed and fully meshed network environments.

Datacenter and Critical Applications Security

Effectively protecting an organization’s mission critical applications from a new generation of application-based threats that are now targeting Web 2.0, VoIP and even IPTV applications requires a comprehensive security strategy that contains multiple layers of network-based defenses. Unfortunately, many of these new applications are time-critical, forcing administrators to choose between performance and security. The FortiGate family of multi-gigabit performance solutions deliver real-time protection against multi-layered security threats which target application servers. In addition to protecting against these new threat types, advanced antispam filtering relieves the ever evolving problem of unsolicited bulk mail while also filtering mail for spyware and security policy violating content.

Technical Specifications:

FortiGate 1000-3800 Series Specifications
FortiGate Models
	FortiGate-1000A	FortiGate-1000AFA2	FortiGate-3016B	FortiGate-3600A	FortiGate-3810A
Hardware Specifications
10/100/1000 Interfaces (Copper)	10	10	2	8	8
1Gb SFP Interfaces	0	2	16 - 20*	2 - 6*	2 - 26*
SFP Transceivers Provided	NA	2 (SX)	4 (SX) / 4 (TX)	2 (SX)	2 (SX)
USB Ports	1	1	2	2	1
AMC Expansion Slots	0	0	1 single width	1 single width	2 single width 2 double width
System Performance
Concurrent Sessions	600,000	600,000 with optional license	1,000,000	1,000,000	2,000,000
New Sessions/Second	15,000	15,000	25,000	40,000	40,000
Firewall Throughput (Gbps)	2 Gbps	2 Gbps	16 - 20* Gbps	6 - 10* Gbps	7 - 37* Gbps
VPN Throughput (IPSec)	400 Mbps	400 Mbps	12 - 15* Gbps	0.8 - 3.8* Gbps	1 - 19* Gbps
IPS Throughput	1 Gbps	1 Gbps	2 Gbps	3 Gbps	4 Gbps
Antivirus Throughput	200 Mbps	200 Mbps	300 Mbps	400 Mbps	500 Mbps
Unlimited Concurrent Users	Yes	Yes/	Yes	Yes	Yes
Dedicated IPSec VPN Tunnels	10,000	10,000	64,000	64,000	64,000
Policies	100,000	100,000	100,000	100,000	100,000
Virtual Domains (VDOMS)	10 / NA	10 / NA	10 / 500	10 / 500	10 / 500.
(standard / with optional license)
Physical Specifications
Dimensions (H, W, L, weight)	3.5 in (88.9 mm) 16.75 in (425.5 mm) 20.5 in (520.7 mm) 17.5 lbs (8 kg)	3.5 in (88.9 mm) 16.75 in (425.5 mm) 20.5 in (520.7 mm) 17.5 lbs (8 kg)	3.5 in (88.9 mm) 16.9 in (429.3 mm) 18.3 in (464.8 mm) 25.6 lbs (11.6 kg)	3.5 in (88.9 mm) 16.9 in (429.3 mm) 16.9 in (429. 3mm) 26 lbs (11.8 kg)	3.5 in (88.9 mm) 16.9 in (429.3 mm) 18.5 in (469.9 mm) 36 lbs (16.4 kg)
AC Power Option	Dual 100-240 VAC, 50-60 Hz, 8 Amp (Max)
DC Power Option	N/A	N/A	N/A	N/A	-48V DC (Normal)(-36 ~ -72V DC / 500W Max)
(AC power standard / DC power is a factory installed option)
Power Consumption (AVG)	220W	220W	168W	220W	275W
Environmental	Operating temperature: 32 to 104 deg F (0 to 40 deg C) Storage temperature: -13 to 158 deg F (-25 to 70 deg C) Humidity: 5 to 95% non-condensing
Compliance	FCC Class A, Part 15, UL/CUL, C Tick, CE, VCCI
Certifications	ICSA Labs, NSS Labs, Common Criteria, FIPS 140-2. * Higher Values Include Properties of Optional Expansion Modules
* Higher Values Include Properties of Optional Expansion Modules

Fortinet Advanced Mezzanine Card (AMC) Expansion Modules
The AMC standard, also known as AdvancedMC, was developed by the PCI Industrial Computers Manufacturers Group (PICMG), which has over 100 companies building to the specification. AdvancedMC has been developed to meet the requirements for the next generation of carrier grade equipment.
	10-Gigabit Ethernet AMC Module 2-Port FortiASIC hardware accelerated 10-Gigabit Ethernet module (Includes 2x SR XFP transceivers) 11 Gbps Firewall performance 6 Gbps IPSec (3DES) VPN performance Requires double-width slot (FG-3810A)
	8-Port FortiASIC hardware accelerated Gigabit Ethernet module (Includes 4x SX SFP transceivers) 8 Gbps Firewall performance 6 Gbps IPSec (3DES) VPN Performance Requires double-width slot (FG-3810A)
	4-Port FortiASIC hardware accelerated Gigabit SFP module (Includes 4x SX SFP transceivers) 4 Gbps Firewall performance 3 Gbps IPsec (3DES) VPN performance Requires single-width slot (FG-3016B/FG-3600A/FG-3810A)
	80 Gigabyte hard disk drive storage module High duty cycle hard drive design Requires single-width slot (FG-3016B/FG-3600A/FG-3810A)

Benefits:
 

Fortinet’s ASIC-Based Advantage:

FortiASIC is the foundation of Fortinet’s unique hardware technology. FortiASIC is a family of purpose built, high-performance network and content processors that uses an intelligent proprietary content scanning engine and multiple algorithms to accelerate compute-intensive security services. FortiASIC provides the performance required to deliver enterprise and carriers-class UTM services. Coupled with the FortiOS security hardened Operating System, FortiASIC delivers extreme performance and security.

FortiOS: Developed for Security:

FortiOS is the software foundation of FortiGate multi-threat security platforms. Developed solely for security, performance and reliablity, it is a purpose-built operating system that leverages power of the the FortiAISC content and network processors. FortiOS enables a comprehensive suite of security services – content inspection firewall, IPS, antivirus, web filtering, antispam, IM/P2P, virtual network security and bandwidth shaping. FortiOS is a complete suite of UTM security services and is certified for Common Criteria EAL 4+.

Features:

FortiGate-1000-3800-series platforms provide the following security features:
 

Services & Support:

FortiGuard Security Subscription Services:

With FortiGuard™ Security Subscription services enabled, customers can rest assured that their Fortinet security platforms are performing optimally and protecting their corporate assets with the latest security intelligence. FortiGuard services deliver the latest security content directly to Fortinet products. Fortinet offers four standard subscription services: Antivirus, Intrusion Prevention, Web Filtering and Antispam services to protect against multiple types of new and emerging threats. FortiGuard services are updated by the Fortinet Global Threat Research Team, a team of experts working around the clock and around the world to keep Fortinet customers secure. The Fortinet Global Threat Research Team enables Fortinet to deliver comprehensive multi-threat protection, including zero-day protection from new and emerging threats. The FortiGuard Network is a network of global data centers that automatically deliver updates quickly and reliably to Fortinet products.

For customers requiring guaranteed response time to suspicious malware threats, Fortinet offers a premier version of the FortiGuard Antivirus Security Subscription service. Along with Service Level Agreements (SLAs), the premier service provides the customer with a direct conduit to the Fortinet Global Threat Research Team.

Fortinet also offers a premier version of the FortiGuard Web Filtering Security Subscription service. This higher-tier service offering includes guaranteed SLAs and a larger quota for rating URLs submitted to the Fortinet Global Threat Research Team.

FortiCare Support Services:

Includes:

• 24/7/365 FortiCare Web-based support
• 8x5 telephone-based technical support (24x7 - optional)
• 1-Year limited hardware warranty
• 90-day limited software warranty
• Technical account management service available
• Professional services available

Documentation:

Download the Fortinet FortiGate 1000-3800 Series Datasheet (.PDF)