Fortinet FortiGate 3016B
Unified Threat Management Solutions

Overview:

High Performance Enterprise Network Security:

FortiGate enterprise security solutions deliver next-generation firewall technology and multi-threat protection integrated into cost-effective security platforms that effectively block blended network threats. Point-product security solutions do not provide protection against a new breed of blended threats that utilize a multitude of attack vectors. Furthermore, assembling an array of point products is costly and requires significant expertise to engineer, maintain and manage. FortiGate solutions cost-effectively deliver complete multi-threat protection against: unauthorized access, intrusion attempts, viruses, worms, trojans, spyware, phishing attempts, spam and other types of content-based and network-based threats.

Industry-Leading Unified Threat Management (UTM):

Fortinet incorporates ICSA Labs-certified UTM functions into a single ASIC-based appliance that is simple to install and manage. Stateful firewall, IPSec and SSL-VPN, intrusion prevention, antivirus, antispam, and Web filtering features combine to form a complete enterprise-focused network security platform that offers compelling total cost of ownership.

Key Problems: Solutions: Holes left open in corporate firewalls for applications are commonly used to attack network resources and users FortiGate appliances prevent successful attacks through commonly allowed applications including: email, web-based applications, instant messaging and VoIP Remote access threatens the secured perimeter, allowing threats a direct conduit into the private network FortiGate appliances enforce the secure perimeter model by inspecting traffic for network-level and content-left threats after termination of the encrypted tunnel and before being allowed onto the private network Standalone intrusion prevention products do little to protect networks from the abundance of file-based threats commonly found in email attachments and instant messaging downloads FortiGate appliances intelligently integrate firewall, intrusion prevention, antivirus, Web filtering, antispam and application controls together for the best threat protection possible Managing multiple security products and extracting value from the purchases is increasingly difficult in the face of shrinking budgets and dwindling technical resources FortiGate appliances combine essential security technologies into one cost-effective unified solution, which eases strains on resources while also reducing complexity, space and power consumption requirements

Fortinet’s Multi-Layered Security Solution:

Fortinet’s multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Deployments:

FortiGate multi-threat security solutions are designed for enterprise networks.

Secure Network Perimeters / Internal Segmentation

Firewall and VPN services are deployed at the perimeter of the internal network to securely connect remote offices and mobile users to an organization’s private resources while at the same time preventing any other unauthorized access. Intrusion prevention, antivirus and Web filtering services ensure that network-based threats and contentbased threats are stopped inbound as well as outbound.

Inside the network, segmentation can be achieved using firewall, intrusion prevention and antivirus technologies. Internal segmentation effectively isolates outbreaks before they are allowed to spread throughout an organization’s network.

Virtual Security Domains / Distributed Enterprises

FortiGate platforms support multiple security zones and virtual security domains to customize a network’s security policy anywhere requirements demand. Virtual Domains (VDOMs) can also be used to provision services for external customers.

All FortiGate solutions start from the same flexible high performance architecture. Core networking features found in every model such as High Availability (HA) and support for dynamic routing protocols enable the FortiGate to be deployed into highly distributed and fully meshed network environments.

Datacenter and Critical Applications Security

Effectively protecting an organization’s mission critical applications from a new generation of application-based threats that are now targeting Web 2.0, VoIP and even IPTV applications requires a comprehensive security strategy that contains multiple layers of network-based defenses. Unfortunately, many of these new applications are time-critical, forcing administrators to choose between performance and security. The FortiGate family of multi-gigabit performance solutions deliver real-time protection against multi-layered security threats which target application servers. In addition to protecting against these new threat types, advanced antispam filtering relieves the ever evolving problem of unsolicited bulk mail while also filtering mail for spyware and security policy violating content.

Technical Specifications:

Benefits:
 

Fortinet’s ASIC-Based Advantage:

FortiASIC is the foundation of Fortinet’s unique hardware technology. FortiASIC is a family of purpose built, high-performance network and content processors that uses an intelligent proprietary content scanning engine and multiple algorithms to accelerate compute-intensive security services. FortiASIC provides the performance required to deliver enterprise and carriers-class UTM services. Coupled with the FortiOS security hardened Operating System, FortiASIC delivers extreme performance and security.

FortiOS: Developed for Security:

FortiOS is the software foundation of FortiGate multi-threat security platforms. Developed solely for security, performance and reliablity, it is a purpose-built operating system that leverages power of the the FortiAISC content and network processors. FortiOS enables a comprehensive suite of security services – content inspection firewall, IPS, antivirus, web filtering, antispam, IM/P2P, virtual network security and bandwidth shaping. FortiOS is a complete suite of UTM security services and is certified for Common Criteria EAL 4+.

Features:

FortiGate-1000-3800-series platforms provide the following security features:

Services & Support:

FortiGuard Security Subscription Services:

With FortiGuard™ Security Subscription services enabled, customers can rest assured that their Fortinet security platforms are performing optimally and protecting their corporate assets with the latest security intelligence. FortiGuard services deliver the latest security content directly to Fortinet products. Fortinet offers four standard subscription services: Antivirus, Intrusion Prevention, Web Filtering and Antispam services to protect against multiple types of new and emerging threats. FortiGuard services are updated by the Fortinet Global Threat Research Team, a team of experts working around the clock and around the world to keep Fortinet customers secure. The Fortinet Global Threat Research Team enables Fortinet to deliver comprehensive multi-threat protection, including zero-day protection from new and emerging threats. The FortiGuard Network is a network of global data centers that automatically deliver updates quickly and reliably to Fortinet products.

For customers requiring guaranteed response time to suspicious malware threats, Fortinet offers a premier version of the FortiGuard Antivirus Security Subscription service. Along with Service Level Agreements (SLAs), the premier service provides the customer with a direct conduit to the Fortinet Global Threat Research Team.

Fortinet also offers a premier version of the FortiGuard Web Filtering Security Subscription service. This higher-tier service offering includes guaranteed SLAs and a larger quota for rating URLs submitted to the Fortinet Global Threat Research Team.

FortiCare Support Services:

Includes:

• 24/7/365 FortiCare Web-based support
• 8x5 telephone-based technical support (24x7 - optional)
• 1-Year limited hardware warranty
• 90-day limited software warranty
• Technical account management service available
• Professional services available

Documentation:

Fortinet FortiGate 1000-3800 Series Datasheet (.PDF)