Fortinet FortiGate 310B

Overview:

The FortiGate-310B raises the bar for mid-size enterprise security devices. Incorporating multiple FortiASIC Network Processors (NP2) for wire-speed firewall/VPN operation, and the FortiASIC content processor (CP) for content inspection acceleration, the FortiGate-310B yields unmatched multi-threat performance across the highest port density of any product in its class. AMC module options offer additional deployment and operational flexibility, expanding the FortiGate-310B's Gigabit Ethernet 10/100/1000 ports to 14 Gigabit Ethernet ports, or adding an internal HDD for local logging and archiving. The FortiGate-310B's accelerated security throughput, high port density, and ease of management allows medium-sized enterprises to enjoy a degree of internal network security segmentation and policy control previously available only within larger-scale solutions.

FortiGate-310B Benefits:

• ASIC acceleration delivers wire-speed firewall and near wire-speed IPSec VPN performance and superior IPS and antivirus/antispyware/antimalware operation.
• AMC expansion bay offers expandability and configuration flexibility with choice of accelerated Gigabit Ethernet ports or hard drive for local logging and content archiving.
• Integrated multi-threat security features offer the ability to augment existing systems and add new functionality or replace aging security infrastructures.
• Internal network security segmentation provides layered security, security event isolation, policy granularity and network visibility.
• Available FortiManager and FortiAnalyzer integration simplifies security management, reporting, and analysis while reducing operating expenses.
• FortiGuard Subscription Services deliver automated, real-time, up-to-date protection against security threats and exploits.

Distributed Perimeters Require Security at Switching Speeds:

Traditional perimeter security technologies have become obsolete in defending against today’s blended security threats. Using multiple attack vectors, these threats are increasing in volume and sophistication, leveraging every available network connection point to proliferate. Organizations with mobile or remote users are causing centralized security perimeters to transform into a “distributed perimeter,” enabling new entry points for security threats. With so many network access points, it has become impossible to deploy a single point of network protection within an enterprise infrastructure.

Internal Segmentation Restraints:

As networks grow, administrators aspire to segregate user-groups and applications such as VoIP into smaller security zones for improved security. Dividing the network with security segmentation points isolates security events, increases policy granularity, and protects sensitive information. Unfortunately most mid-range security devices lack the interface count or the raw throughput to facilitate extensive internal network security segmentation.

ASIC-Accelerated Multi-Threat Security Solution:

The FortiGate-310B answers the call of growing mid-sized networks by integrating a purpose-built security processing ASIC, known as the FortiASIC Network Processor, designed to deliver security throughput at switching speeds. Eight hardware accelerated interfaces (expandable to 12) allow networks to enforce firewall policy between network segmentation points for layered security with switch-like performance. An additional purpose-built ASIC, known as the FortiASIC Content Processor, provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning for dangerous traffic streams. The inclusion of an Advanced Mezzanine Card (AMC) expansion slot allows for even more flexibility, offering additional ASIC-accelerated ports for additional throughput or disk-based storage for local logging and content archiving. With numerous accelerated multi-threat security interfaces, organizations can create multiple security zones for various departments, users, access methods, and even devices to enforce network security at accelerated speeds.

Key Problems: Solutions: Voice, video, and other time-sensitive applications require extremely low latency during transit. FortiGate-300 series appliances ensure that security is never a bottleneck, thanks to the FortiASIC network processor which provides microsecond latency, up to 12 Gbps firewall performance, and up to 9 Gbps IPSec VPN performance. Many security devices have a limited number of ports, preventing desired internal network segmentation. The FortiGate-300 series appliances come standard with ten (10) 10/100/1000 interfaces (expandable to 14 interfaces), to permit a wide-array of deployments. Most security devices have limited expansion capabilities. The FortiGate-300 series feature modular expansion bays extend the base system with additional security processing, accelerated interface, bypass, or wide area network modules. To obtain effective protection from threats, it’s necessary to cobble multiple products together to form a solution. Fortinet combines firewall, VPN, intrusion prevention, antivirus, antispam, web filtering, data leakage prevention, application control, and more into a single platform, providing an effective all-in-one solution.

FortiGate-310B (FG-310B) FortiGate-311B (FG-311B)

 

Fortinet’s Multi-Layered Security Solution

Fortinet’s multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

 

Fortigate-310B Base Unit

Fortigate-310B with Optional 4-Port AMC Module (ASM-FB4)

 

Features & Benefits:

 

Technical Specifications:

Technical Specifications:
FortiGate Model	310B Base Unit	310B with Optional ASM-FB4
Hardware Specifications
Total 10/100/1000 Interfaces (Copper)	10	14
Configurable Ports	10	14
AMC Expansion Slot	1 Single Width	N/A
System Performance
Firewall Throughput - Avg Size Packets (512 byte)	8 Gbps	12 Gbps
Firewall Throughput - Small Size Packets (64 byte)	8 Gbps	12 Gbps
VPN Throughput - 3DES	6 Gbps	9 Gbps
VPN Throughput - AES256	4 Gbps	6 Gbps
Antivirus Throughput*	160 Mbps
IPS Throughput*	800 Mbps
Dedicated IPSec VPN Tunnels	3,000
Concurrent Sessions	500,000
New Sessions/Sec	20,000
Policies	8,000
Unlimited Users Licenses
Dimensions
Height	1.75 in
Width	17 in
Length	12.6 in
Weight	14 lbs
Rack Mountable
AC Power Required	100 - 240 VAC, 50 - 60 Hz, 8.0 Amp (Max)
Power Consumption (AVG)	120W
Environmental
Operating Temperature	32 to 104°F (0 to 40°C)
Storage Temperature	-13 to 158°F (-25 to 70°C)
Humidity	5 to 95% non-condensing
Compliance	FCC Class A Part 15, UL/CUL, C Tick, VCCI
Certifications	ICSA Labs: Firewall, IPSec, Antivirus, IPS, Antispyware

* Antivirus performance is measured based on HTTP traffic with 32Kbyte file attachments and IPS performance is measured based on UDP traffic with 512byte packet size. Actual performance may vary depends on network traffic and environment.

Services & Support:

FortiGuard Security Subscription Services:

With FortiGuard™ Security Subscription services enabled, customers can rest assured that their Fortinet security platforms are performing optimally and protecting their corporate assets with the latest security intelligence. FortiGuard services deliver the latest security content directly to Fortinet products. Fortinet offers four standard subscription services: Antivirus, Intrusion Prevention, Web Filtering and Antispam services to protect against multiple types of new and emerging threats. FortiGuard services are updated by the Fortinet Global Threat Research Team, a team of experts working around the clock and around the world to keep Fortinet customers secure. The Fortinet Global Threat Research Team enables Fortinet to deliver comprehensive multi-threat protection, including zero-day protection from new and emerging threats. The FortiGuard Network is a network of global data centers that automatically deliver updates quickly and reliably to Fortinet products.

For customers requiring guaranteed response time to suspicious malware threats, Fortinet offers a premier version of the FortiGuard Antivirus Security Subscription service. Along with Service Level Agreements (SLAs), the premier service provides the customer with a direct conduit to the Fortinet Global Threat Research Team.

Fortinet also offers a premier version of the FortiGuard Web Filtering Security Subscription service. This higher-tier service offering includes guaranteed SLAs and a larger quota for rating URLs submitted to the Fortinet Global Threat Research Team.

FortiCare Support Services:

Includes:

• 24/7/365 FortiCare Web-based support
• 8x5 telephone-based technical support (24x7 - optional)
• 1-Year limited hardware warranty
• 90-day limited software warranty
• Technical account management service available
• Professional services available

Documentation:

Download the Fortinet FortiGate 310B Data Sheet (PDF).

Download the Fortinet FortiGate 300 Series Data Sheet (PDF).