Fortinet FortiGate 3000

Real-time Network Protection for Large Enterprise and Service Providers

FortiGate™ Antivirus Firewalls are dedicated, hardware-based units that deliver complete, real-time network protection services at the network edge. Based on Fortinet’s revolutionary FortiASIC™ Content Processor chip, the FortiGate platforms are the only systems that can detect and eliminate viruses, worms, and other content-based threats without reducing network performance — even for realtime applications like Web browsing. FortiGate systems also include integrated firewall, content filtering, VPN, intrusion detection and prevention, and traffic shaping functions, making them the most cost effective, convenient, and powerful network protection solutions available.

The FortiGate-3000 Antivirus Firewall addresses the requirements for gigabit performance and exceptional reliability in large enterprise and service provider applications. Providing 3 gigabit-per-second interfaces, the FortiGate-3000 establishes new levels of price performance, and offers a complete array of antivirus, firewall, content filtering, VPN, network-based intrusion detection/prevention (IDP), and traffic shaping capabilities. The FortiGate-3000 deploys easily in existing networks and can be used for antivirus and content filtering only or can be deployed as a complete network protection solution. Highly available operation and redundant hot-swappable power supplies add to the robust reliability of the FortiGate-3000 to ensure non-stop operation. The FortiGate-3000 provides granular security with independent security zones and policies mapped to VLAN tags. The FortiGate-3000 is kept up to date automatically by Fortinet’s FortiProtect™ Network, which provides continuous updates that ensure protection against the latest viruses, worms, Trojans, and other threats – around the clock, and around the world.

Product Highlights:

• Ideal solution for Managed Security Service Providers (MSSPs) looking to add new security services
• Eliminates viruses and worms from email , file transfer, and real-time (Web) traffic without degrading network performance
• Provides complete network protection functionality: network-based antivirus, web content filtering, firewall, VPN, dynamic intrusion detection and prevention, and traffic shaping
• Front-panel LCD and keypad ease deployment by setting basic system parameters without an external console
• High availability operation supports transparent failover for mission-critical applications
• Reduces exposure to threats by detecting and preventing over 30 different intrusions, including DoS and DDoS attacks
• Multi-zone support allows granular network segmentation into zones with independent security and access control policies
• Delivers superior performance and reliability from hardware accelerated, ASIC-based architecture and redundant, hotswappable power supplies
• Automatically downloads the latest virus and attack database and can accept instant “push” updates from the FortiProtect Network
• Underlying FortiOS™ operating system is ICSA-certified for Antivirus, Firewall, IPSec VPN and Intrusion Detection
• Virus quarantine enables easy submission of attack samples to the Fortinet Threat Response Team
• Easy to use and deploy – quick and easy configuration wizard walks administrators through initial setup with graphical user interface

Key Features & Benefits:

Specifications:

Interfaces
10/100 Ethernet Ports	3
Gigabit Ethernet Ports (Copper / Fiber)	1C/2F
High Availability Port
WLAN
DMZ Port
USB Ports
System Performance
Concurrent sessions	975,000
New sessions/second	20,000
Firewall throughput (Mbps)	2.95Gbps
168-bit Triple-DES throughput (Mbps)	530
Unlimited concurrent users
Policies	50,000
Schedules	256
Antivirus, Worm Detection & Removal (ICSA Certified)
Scans HTTP,FTP,SMTP,POP3,IMAP, and encrypted VPN Tunnels
Automatic "push" Virus Database Update
Quarantine infected messages
Block by file size
Firewall Modes and Features
NAT, PAT,Transparent (bridge)
Routing mode (RIP v1, v2)
Virtual domains
802.1q VLAN Support
User Group-based authentication
H.323 NAT Traversal
Protection Profiles	32
VPN
Dedicated tunnels	5,000
Encryption (DES, 3DES, AES)
PPTP,L2TP,VPN client pass though
Hub and Spoke Architecture
IKE certificate authentication (X.959)
IPSec NAT Traversal
Content Filtering
URL block, Keyword Block, Exempt List
Block Java Applet, Cookies, Active X
Email filtering (keyword, exempt list, RBL/ORDB support)
Mime Header Check
Cerberian web filtering support
FortiGuard™ web filtering support
Dynamic Intrusion Detection and Prevention
Prevention for over 1300 attacks
Customizable dynamic detection signature list
Automatic attack database update
Anti-Spam
Real-time Blacklist/Open Relay Database Server
MIME header check
Keyword/phrase filtering
IP address blacklist/exempt list
Logging/Monitoring
Internal logging capacity	20G
Syslog, SNMP
Email notification of viruses and attacks
High Availability (HA)
Active-active, Active-passive
Stateful failover (FW and VPN)
Device failure detection & notification
Redundant Power Supplies
Link status monitor
Networking
Multiple WAN link support
PPPoE client
DHCP client/server
Policy-based routing
System Management
Console interface (RS-232)
WebUI (HTTPS)
Multi-language support
Command line interface
Secure Command Shell (SSH)
FortiManager System
Administration
Multiple administrators and user levels
Upgrades & changes via TFTP &WebUI
System software rollback
User Authentication
Internal database
LDAP support
External RADIUS
RSA SecurID
Xauth over RADIUS for IPSec VPN
IP/MAC address binding
Traffic Shaping
DiffServ setting
Policy-based traffic shaping
Guarantee/Max/Priority Bandwidth
Dimensions
Height (inches)	3.5
Width (inches)	16.95
Length (inches)	13.5 in
Weight	11 lb (5 kg)
Power
AC input voltage	100 to 240VAC
AC input current	6A
Environmental
Operating Temperature	32 to 104°F (0 to 40°C)
Storage Temperature	-13 to 158°F (-25 to 70°C)
Humidity (non-condensing)	5 to 95%
Compliance
FCC Class A Part 15
CSA/CUS
CE
UL
ICSA Antivirus
ICSA Firewall
ICSA IPSec
ICSA Intrusion Detection

Download the Fortinet FortiGate 3000 Data Sheet (PDF).