Fortinet FortiGate 30B

Overview:

The FortiGate-30B offers full-featured, enterprise-class UTM inspection for the smallest remote offices, branch offices, and retail outlets. The FortiGate-30B is ideal for large enterprises with hundreds or thousands of small, remote networks that need full UTM inspection against today's evolving threats. As the entry-level FortiGate appliance, the FortiGate-30B also serves the smallest of business or home networks that do not require the advanced configuration and management features offered in the FortiGate-50B or FortiGate-60B

FortiGate-30B Benefits

• Consistent security inspection capabilities as expected with other FortiGate models, including firewall, IPS, antivirus, antispyware, antispam, IPSec VPN, web filtering, application control, data leakage prevention, and VoIP support
• Low cost of entry for bulk deployments of multiple telecommuters or remote offices
• Unlimited user licensing minimizes operating costs and ensures that changes in number of users do not interfere with network availability
• One WAN interface and four internal switch ports offer two security zones for policy enforcement at remote sites
• Desktop form factor is compact and lightweight for unobtrusive placement or mounting
• Streamlined feature set for ease of installation and maintenance

Securing Remote Sites:

Large organizations endeavoring to provide secure access to remote teleworkers, retail outlets, and branch offices are facing an evolved dilemma: while granting access to these remote sites has become relatively easy, ensuring the remote sites are secure by remotely deploying numerous security devices and software is unfeasible. In order to secure both the data in transit and the remote networks from which data originates, a single device uniting firewall, VPN, intrusion prevention, Web filtering, antivirus, and antispyware specifically designed for remote branch offices, retail outlets, and telecommuters is required.

Retail Outlets and Branch Offices:

Dedicated IPSec VPN tunnels have become a standard method of providing access and conveying real time inventory and sales information to corporate headquarters. Once connected, these networks can introduce malware and trojans acquired by their endpoints if the remote network is not adequately protected. Multiple security enforcement technologies such as firewall, intrusion prevention, antivirus and antimalware must be deployed in order to maintain compliance with PCI, HIPPA, and GLBA regulations. With three internal security ports, the FortiGate-30B offers complete network security protection and dedicated VPN access in a single device that can be provisioned and managed from anywhere in the world.

Remote Teleworkers:

Security concerns similar to that of the retail or branch offices exist for remote teleworkers as well. Unprotected home networks introduce a barrage of threats to the central network. Remotely deploying multiple devices and software solutions at teleworker sites creates a deployment and maintenance nightmare for both IT administrators and teleworkers. Security risks are compounded with teleworker network usage by other family members, who must be kept separate from workrelated access. The FortiGate-30B and FortiWiFi-30B offer a complete solution that provides total network protection for the teleworker’s entire network, while simultaneously offering dedicated VPN access to corporate resources. Multiple internal security ports support multiple devices on the internal interface, and authentication techniques ensure that only the teleworker’s endpoint is allowed access to corporate resources.

Central Management:

Regardless of the type of network the FortiGate-30B is deployed in, centralized management is a critical component of the remote office and branch office architecture. Fortinet’s FortiManager and FortiAnalyzer products ensure complete centralized control over remote devices regardless of the deployment size.

Fortinet’s Multi-Layered Security Solution:

Fortinet’s multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage highperformance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, to Web content filtering to ensure that security environments remain current and corporate resources are protected against the latest blended threats. FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Technical Specifications:

* Antivirus performance is measured based on HTTP traffic with 32 Kbyte file attachments and IPS performance is measured based on UDP traffic with 512 byte packet size. Actual performance may vary depending on network traffic environments.

Features:

While the FortiGate-30B and FortiWiFi-30B provide full enterprise-class UTM inspection including firewall, intrusion prevention, web filtering, antivirus, antispyware / antimalware, and antispam; advanced configuration and routing options have been removed in the FortiGate-30B in order to simplify device configuration and management. A comparison table of the differences between feature sets of the FortiGate-30B and other FortiGate models is outlined below:

Services & Support:

FortiGuard Security Subscription Services

• Antivirus / Premier Antivirus
• Web Filtering / Premier Web Filtering
• Intrusion Prevention
• Antispam

• 24/7/365 FortiCare Web-based support
• 8x5 telephone-based technical support (24x7 - optional)
• Technical account management service available
• Professional services available

SWF = Annual licensing fee for both the per-user Spyware & Web Filteirng and the Netsweeper URL Filtering services.

Documentation:

Download the Fortinet FortiGate 30B Series Datasheet (.PDF)