Fortinet FortiGate 311B

Overview:

The FortiGate-311B multi-threat security appliance delivers proven, consolidated security at switching speeds. Its enterprise-grade performance and no per-user pricing make it ideal for your growing enterprise. The FortiGate-311B appliance integrates two purpose-built security processing ASICs to provide the high-performance protection you need in your network. The FortiASIC™ Network Processor provides acceleration for firewall, encryption/decryption, signature, and heuristic packet scanning. The FortiASIC Content Processor provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning.

The FortiGate-311B appliance's eight hardware-accelerated interfaces (expandable to 12) enable you to enforce firewall policies between network segmentation points for increased security, while preserving switch-like performance. The modular expansion slots give you even more flexibility, offering incremental ASIC-accelerated ports for additional throughput or increased disk-based storage. The appliance's included storage provides localized event logging, content archiving, or WAN optimization. The FortiGate-311B appliance enables you to create multiple security zones for various departments, users, access methods and devices, to enforce your critical network security at accelerated speeds.

The FortiGate-310 series of consolidated security appliances deliver integrated security at switching speeds for mid-sized organizations and branch offices. Eight hardware-accelerated interfaces (expandable to 12) enable you to enforce policies between network segmentation points for increased security while preserving switch-like performance. The modular expansion slots on the FortiGate-311B provide for additional throughput or increased disk-based storage.

The evolution of network security threats has driven the expansion of security products to include multiple threat recognition systems within a single appliance. Unified Threat Management systems from Fortinet include firewall, VPN, intrusion prevention, antivirus, antimalware, antispam and web content filtering to identify numerous types of threats from a single device. While the ease of use of UTM products has created a prolific adoption trend, administrators still struggle with limited physical deployment options due to the available throughput and port density of mid-range devices.

FortiGate-310/311B Features & Benefits:

• Delivers up to 12 Gbps firewall throughput and 14 GbE interfaces (with optional AMC module)
• Integration with FortiManager and FortiAnalyzer simplifies security management, reporting, and analysis while reducing operating expenses
• A “single pane of glass” management console makes it easy for you to deploy and manage
• IPv6-ready platform with strong authentication options for secure network access and security policy compliance
• Onboard storage (FortiGate-311B) provides localized event logging, content archiving, local reporting, or WAN optimization
• High port density supports multiple security zones for various departments, users, access methods and devices, to enforce network security policies

The Power of Network Segmentation

The FortiGate-310B/-311B series appliances answer the call of growing enterprise networks by integrating a purpose-built security processing ASIC, known as the FortiASIC Network Processor, into the FortiGate system to deliver security throughput at switching speeds. Eight hardware accelerated interfaces (expandable to 12) allow networks to enforce firewall policy between network segmentation points for layered security with switch-like performance. An additional purpose-built ASIC, known as the FortiASIC Content Processor, provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning. The inclusion of modular expansion slots allow for even more flexibility, offering additional ASIC-accelerated ports for additional throughput or disk-based storage for local logging and content archiving. With numerous accelerated multithreat security interfaces, organizations can create multiple security zones for various departments, users, access methods, and even devices to enforce network security at accelerated speeds.

FortiGate Multi-Threat Security Solutions

Fortinet's multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. Finally, FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Fortinet’s Multi-Layered Security Solution

Fortinet’s multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Fortigate-311B Base Unit

Fortigate-311B with Optional 4-Port AMC Module (ASM-FB4)

Features & Benefits:

Integrated Multi-Threat Protection

The FortiGate product family provides cost-effective, comprehensive protection against network, content, and application-level threats. It defends your environment from complex, sophisticated attacks without degrading network availability and affecting application performance.

FortiGate platforms combine the purpose-built FortiOS™ security operating system with custom FortiASIC processors and other hardware to provide a comprehensive and highperformance array of security and networking functions.

The FortiGate product family delivers the highest level of network, content, and application security for enterprises of all sizes, while reducing total cost of ownership. With Fortinet, you deploy the network security you need to protect your intellectual property, preserve the privacy of critical customer information, and maintain regulatory compliance.

FortiOS 5.0 Software

FortiOS 5.0, the world's most powerful security operating system, is the foundation for all Fortinet FortiGate integrated security platforms. It provides more security, intelligence and control to help enterprises be better protected against today's advanced threats and enable more secure BYOD environments.

	More Security Fighting Advanced Threats More Security to fight advanced threats. A client reputation feature gives enterprises a cumulative security ranking of each device based on a range of behaviors and provides specific, actionable information that enables organizations to identity compromised systems and potential zero-day attacks in real time. The new advanced anti-malware detection system adds an on-device behavior-based heuristic engine and cloud-based AV services that includes an operating system sandbox and botnet IP reputation database. Together with superior industry-validated AV signatures, FortiOS 5.0 delivers unbeatable multi-layered protection against today's sophisticated malware. Client Reputation with Cumulative Rankings OS Sandbox Advanced Botnet Protection
	More Control Securing Mobile Devices More Control to secure mobile devices and BYOD environments by identifying devices and applying specific access policies as well as ecurity profiles, according to the device type or device group, location and usage. Device Identification & Visibility New Identity Based Policies Endpoint Control
	More Intelligence Build Smart Policies More Intelligence with automatic adjustment of role-based policies for users and guests based on location, data and application profile. Enhanced reporting and analysis also provides administrators with more intelligence on the behavior of their network, users, devices, applications and threats. Provide Guest Access with Confidence Enhanced Visibility & Reporting and Overal User Experience Extended Single Sign On Capabilities

The FortiASIC Advantage

FortiASIC is the foundation of Fortinet’s unique hardware technology. FortiASIC is a family of purpose built, high-performance network and content processors that uses an intelligent proprietary content scanning engine and multiple algorithms to accelerate compute-intensive security services. FortiASIC provides the performance required to deliver enterprise and carrier-class UTM services. Coupled with the FortiOS security hardened Operating System, FortiASIC delivers extreme performance and security.

Technical Specifications:

FortiGate Model	FortiGate-310B	FortiGate-311B
Hardware Specifications
Total 10/100/1000 Interfaces (RJ-45)	10	10
Maximum Network Interfaces (With Optional Module)	14	14
AMC Expansion Slot	1 Single Width	1 Single Width
Fortinet Storage Module (FSM) Slots	N/A	2
Local Storage Included (via ASM-S08 for FG-310B, FSM-064 included with FG-311B)	N/A	64 GB SSD
System Performance
Firewall Throughput (1518 byte UDP packets)	8 Gbps
Firewall Throughput (64 byte UDP packets)	8 Gbps
IPSec VPN Throughput	6 Gbps
IPS Throughput	800 Mbps
Proxy-based Antivirus Throughput	160 Mbps
Flow-based Antivirus Throughput	350 Mbps
Gateway-to-Gateway IPSec VPN Tunnels (System / VDOM)	6,000 / 3,000
Client-to-Gateway IPSec VPN Tunnels	3,000
SSL-VPN Users (Recommended Max)	300
SSL-VPN Throughput	200 Mbsp
Concurrent Sessions (TCP)	600,000
New Sessions/Sec (TCP)	20,000
Policies (Max)	8,000
Unlimited Users Licenses	Yes
Mean Time Between Failures	More than 7 years	More than 5 years
Virtual Domains (VDOMs)	10
High Availability Configurations	Active/Active, Active/Passive, Clustering
Dimensions
Height	1.75 in (4.55 cm)	1.75 in (4.55 cm)
Width	17 in (43.18 cm)	17 in (43.18 cm)
Length	12.6 in (32 cm)	16 in (40.65cm)
Weight	14 lb (6.35 kg)	14.5 lb (6.58 kg)
Rack Mountable	Yes	Yes
Environmental
AC Power Required	100 - 240 VAC, 60 - 50 Hz, 5 - 3 Amp (Max)
DC Power Required	-48V DC (Normal)
Power Consumption (AVG)	136 W	124 W
Heat Dissipation	465 BTU	443 BTU
Redundant Power Supplies	Requires External Option	Included
Operating Temperature	32 to 104°F (0 to 40°C)
Storage Temperature	-13 to 158°F (-25 to 70°C)
Humidity	5 to 95% non-condensing
Compliance and Certifications
Compliance	FCC Class A Part 15, UL/CUL, CE, C Tick, VCCI
Certifications	ICSA Labs: Firewall, SSL VPN, IPS, Antivirus

All performance values are "up to" and vary depending on system configuration Antivirus performance is benchmarked using HTTP traffic (32 Kbyte Objects) IPS performance is measured base on NSS like test methodology with 44K HTTP files.

AMC Expansion Modules:

Fortinet AMC Expansion Modules
The AMC standard, also known as AdvancedMC™, was developed by the PCI Industrial Computers Manufacturers Group (PICMG), which has over 100 companies building to the specification. AdvancedMC has been developed to meet the requirements for the next generation of carrier grade communications equipment. Accelerated Interface Modules The Fortinet ASM-FB4 accelerated interface module adds incremental hardware accelerated network interfaces to FortiGate platforms for wire-speed firewall performance and near wire-speed IPSec VPN performance. Up to 12 Gbps aggregate firewall throughput and up to 9 Gbps aggregate VPN throughput is possible with the FG-300 series when using the optional ASM-FB4 Fortinet Accelerated Interface Module. Bypass Modules Fortinet ASM-CX4 and ASM-FX2 modules provide bypass functionality to FortiGate platforms, automatically bridging network traffic in the event of a system or power failure. T1/E1 WAN Module The Fortinet ASM-ET4 module provides Wide Area Network (WAN) connectivity to FortiGate platforms, with support for T1 and E1 network circuits. Storage Modules Fortinet storage modules provide localized storage facilities to FortiGate platforms, with support for builtin and external storage systems.
	4-Port FortiASIC hardware accelerated Gigabit SFP module (Includes 4x SX SFP transceivers) 4 Gbps Firewall performance 3 Gbps IPsec (3DES) VPN performance
	80 Gigabyte hard disk drive storage module High duty cycle hard drive design

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiGate 310B/311B Datasheet (PDF).