Fortinet FortiGate 224B

Integrated Network Access Edge Security

Threats from the Outside – Threats on the Inside

Broadband and wireless technologies are enabling flexible virtual offices with network access anytime, anywhere, and from any device. Increased productivity, enhanced customer service and reduced costs are all welcome benefits. Not so welcome are the increasing number of security threats originating from devices inside the network. Laptops, PDAs and other mobile devices are frequently used outside the corporate network, over un-trusted connections, and exposed to viruses, worms and other security threats. Back in the corporate network, these devices are typically treated as trusted assets and given unrestricted network access. At this point the security threats acquired outside, having completely bypassed perimeter defenses, now proceed to wreak havoc. Similarly guests, such as partners or suppliers, typically access your network while onsite from within the secured perimeter, using unmanaged devices that represent a completely unknown threat to other network assets.

As a result of the rise in internal threats, administrators are finding that securing the network from the inside is equally as important as securing the network from the outside. In today’s mobile work environment, achieving and maintaining regulatory compliance means that network access must be controlled from all points of access in order to ensure adequate security of your organization’s assets. To accomplish this goal, you could use multiple point product security solutions, including endpoint software agents, policy servers and other security gateways. The problem with this approach is that these solutions are not only costly to own and manage, but also degrade performance and reduce network availability.

All-in-One Network Access Security Solutions

The FortiGate™-224B system provides the industry’s most effective network access security solution by tightly integrating a high-performance Layer 2 switch with a Fortinet multi-layered security gateway. The FortiGate-224B simplifies the challenge of network access-layer security while providing the highest level of performance and protection. Performance is maximized by tightly integrating the purpose built FortiASIC™ network processor with the Layer 2 switch. Utilizing the FortiOS™ suite of security solutions, threats from endpoint devices are automatically identified and blocked before they enter the network. Devices that are not compliant with security policies or exhibit any type of threat will be placed in quarantine. The FortiGate-224B provides self-remediation features that allow users to resolve security violations and regain network access without involving the IT or security staff.

The Network Access Protection Cycle

Effective network access protection requires the ability to:

1. Implement access controls that evaluate the security state of a user or device
2. Continually monitor the security state of users that are already connected
3. Quarantine users or devices based on network access and system policies
4. Allow flexible policy management and self-remediation control

Optimal solutions provide high performance and reliability yet are cost effective to manage and maintain.

FortiGate-224B Integrated Appliance for Network Access Security

FortiGate Topology:

Specifications:

Interfaces
Security Hardened Platform
10/100 Switch Ports	24
10/100/1000 Switch Ports	2
10/100 WAN Ports	2
USB Ports	2
RS-232 Console Connection Port
System Performance
Layer 2 Switch Performance	4.4 Gbps
Concurrent sessions	400,000
New sessions/second	4,000
Firewall throughput (Mbps)	150
VPN 168-bit Triple-DES throughput (Mbps)	70
Anti Virus Throughput (Mbps)	40
Dedicated IPsec VPN tunnels	200
Policies	2,000
Layer 2 Switching
802.1x Authentication
Port-Based L2 Forwarding (Wire-Speed)
Spanning Tree Features Supports STP, RSTP, PVST+
802.3ad Link Aggregation
802.1Q VLAN Tagging
802.1P Class of Service
Per Port Queuing and QOS
Antivirus, Worm Detection & Removal (ICSA Certified)
Scans HTTP,FTP,SMTP,POP3,IMAP, and IM encrypted VPN Tunnels
Automatic "push" Virus Database Update
Quarantine infected messages
Block by file size
Block by file Type
Automatic Real-Time Updates From FortiGuard Network
Firewall Modes and Features
NAT, PAT,Transparent (bridge)
Routing mode (RIP v1, v2, OSPF, BGP, & Multicast)
Policy-Based NAT
Virtual domains (NAT/Transparent Mode)
802.1q VLAN Tagging
User Group-based authentication
SIP/H.323 NAT Traversal
WINS Support
Customized Protection Profiles
VPN
PPTP, IPsec, and SSL
Dedicated tunnels
Encryption (DES, 3DES, AES)
SHA-1/MD5 Authentication
PPTP, L2TP, VPN Client pass through
Hub and Spoke VPN Support
IKE Certification Authtentication
IPsec NAT Traversal
Dead Peer Detection
RSA SecurID Support
Web Content Filtering
URL/Keyword/Phrase Block
URL Exempt List
Content Profiles
Blocks Java Applet, Cookies, ActiveX
Automatic Real-Time Updates from FortiGuard Network
Dynamic Intrusion Detection and Prevention
Prevention for over 2000 attacks
Customizable dynamic detection signature list
Automatic attack database update
Anti-Spam
Real-time Blacklist/Open Relay Database Server
MIME header check
Keyword/phrase filtering
IP address blacklist/exempt list
Automatic Real-Time Updates from FortiGuard Network
High Availability (HA)
Active-active, Active-passive
Stateful failover (FW and VPN)
Device failure detection & notification
Link Status Monitor
Link Failover
Networking
Multiple WAN link support
PPPoE client
DHCP client/server
Policy-based routing
Dynamic Routing (RIP V1 & V2, OSPF, BGP and Multicast)
Multi-Zone Support
Route Between Zones
Route Between Virtual LANs
System Management
Console interface (RS-232)
WebUI (HTTP/HTTPS)
Telnet
Multi-language support
Command line interface
Secure Command Shell (SSH)
Dimensions
Height (inches)	1.75
Width (inches)	16.8
Length (inches)	10
Weight	7.3 lb (3.3 kg)
Rack Mountable
Power
AC input voltage	100-240 VAC
AC input current	1.6A
Environmental
Operating Temperature	32 to 104°F (0 to 40°C)
Storage Temperature	-13 to 158°F (-25 to 70°C)
Humidity (non-condensing)	5 to 95%
Compliance
FCC Class A Part 15
CE

 

Download the Fortinet FortiGate 224B Data Sheet (PDF).