Fortinet FortiGate 3600

Best-of-Breed Network Antivirus Protection

FortiGate™ Antivirus Firewalls are dedicated, hardware based units that deliver complete, real-time network protection services at the network edge. Based on Fortinet’s revolutionary FortiASIC™ Content Processor chip, the FortiGate platforms are the only systems that can detect and eliminate viruses, worms, and other content-based threats without reducing network performance — even for real-time applications like Web browsing. FortiGate systems also include integrated firewall, content filtering, VPN, intrusion detection and prevention, and traffic shaping functions, making them the most cost effective, convenient, and powerful network protection solutions available.

The FortiGate-3600 Antivirus Firewall is a high performance system that delivers gigabit throughput with exceptional reliability for the most demanding large enterprise and service provider environments. Providing 6 gigabit interfaces, the FortiGate-3600 establishes new levels of price/performance, and offers a complete array of antivirus, firewall, web and email content filtering, VPN, network-based intrusion detection and prevention, and traffic shaping capabilities. The FortiGate-3600 deploys easily in existing networks and can be used for antivirus and content filtering only or can be deployed as a complete network protection solution. The FortiGate-3600 supports independent security zones and policies mapped to VLAN tags enabling granular security configurations unique to each group or department. High Availability (HA) operation and redundant hot-swappable power supplies ensure non-stop operation in mission-critical applications. The FortiGate-3600 is kept up to date automatically by Fortinet’s FortiProtect™ Network, which provides continuous updates that ensure protection against the latest viruses, worms, Trojans, and other threats – around the clock, and around the world.

Product Highlights:

• Optimal solution for Large Enterprise and Managed Security Service Providers (MSSPs)
• Eliminates viruses and worms from email, file transfer, and real-time (Web) traffic without degrading network performance
• Provides complete network protection functionality: network-based antivirus, web and email content filtering, firewall, VPN, network-based intrusion detection and prevention, and traffic shaping
• “Transparent mode” operation supports highly available architectures and deployments for antivirus and content filtering only in conjunction with existing firewall, VPN, intrusion detection and prevention, or other existing systems
• Real-time system status monitoring lowers the total cost of ownership by providing an easy graphical view of CPU and memory utilization, network and session status, virus and intrusion detection
• Reduces exposure to threats by detecting and preventing 1300 different intrusions, including DoS and DDoS attacks
• Active-active and active-passive high availability operation supports transparent failover for mission-critical applications and clustering of up to 32 units
• VLAN and virtual domain support provides for granular network segmentation into zones with independent security and access control policies
• Delivers superior performance and reliability from hardware accelerated, ASIC-based architecture and redundant, hotswappable power supplies
• Automatically downloads the latest virus and attack database and can accept instant “push” updates from the FortiProtect Network
• Underlying FortiOS™ is ICSA-certified for Antivirus, Firewall, IPSec VPN and Intrusion Detection

Key Features & Benefits:

Specifications:

Feature List	FG3600	FG3600LX2	FG3600LX4
Interfaces
10/100 Ethernet Ports	1	1	1
Gigabit Ethernet Ports (Copper / Fiber)	2C/4F	2C/4F(2-LX, 2-SX)	2C/4F(4-LX)
High Availability Port
WLAN
DMZ Port
USB Ports
System Performance
Concurrent sessions	1,000,000	1,000,000	1,000,000
New sessions/second	25,000	25,000	25,000
Firewall throughput (Mbps)	4Gbps	4Gbps	4Gbps
168-bit Triple-DES throughput (Mbps)	600	600	600
Unlimited concurrent users
Policies	50,000	50,000	50,000
Schedules	256	256	256
Antivirus, Worm Detection & Removal (ICSA Certified)
Scans HTTP,FTP,SMTP,POP3,IMAP, and encrypted VPN Tunnels
Automatic "push" Virus Database Update
Quarantine infected messages
Block by file size
Firewall Modes and Features
NAT, PAT,Transparent (bridge)
Routing mode (RIP v1, v2)
Virtual domains
802.1q VLAN Support
User Group-based authentication
H.323 NAT Traversal
Protection Profiles	32	32	32
VPN
Dedicated tunnels	5,000	5,000	5,000
Encryption (DES, 3DES, AES)
PPTP,L2TP,VPN client pass though
Hub and Spoke Architecture
IKE certificate authentication (X.959)
IPSec NAT Traversal
Content Filtering
URL block, Keyword Block, Exempt List
Block Java Applet, Cookies, Active X
Email filtering (keyword, exempt list, RBL/ORDB support)
Mime Header Check
Cerberian web filtering support
FortiGuard™ web filtering support
Dynamic Intrusion Detection and Prevention
Prevention for over 1300 attacks
Customizable dynamic detection signature list
Automatic attack database update
Anti-Spam
Real-time Blacklist/Open Relay Database Server
MIME header check
Keyword/phrase filtering
IP address blacklist/exempt list
Logging/Monitoring
Internal logging capacity	20G	20G	20G
Syslog, SNMP
Email notification of viruses and attacks
High Availability (HA)
Active-active, Active-passive
Stateful failover (FW and VPN)
Device failure detection & notification
Redundant Power Supplies
Link status monitor
Networking
Multiple WAN link support
PPPoE client
DHCP client/server
Policy-based routing
System Management
Console interface (RS-232)
WebUI (HTTPS)
Multi-language support
Command line interface
Secure Command Shell (SSH)
FortiManager System
Administration
Multiple administrators and user levels
Upgrades & changes via TFTP &WebUI
System software rollback
User Authentication
Internal database
LDAP support
External RADIUS
RSA SecurID
Xauth over RADIUS for IPSec VPN
IP/MAC address binding
Traffic Shaping
DiffServ setting
Policy-based traffic shaping
Guarantee/Max/Priority Bandwidth
Dimensions
Height (inches)	3.5	3.5	3.5
Width (inches)	16.95	16.95	16.95
Length (inches)	13.5	13.5	13.5
Weight	17.5 lb (8 kg)	17.5 lb (8 kg)	17.5 lb (8 kg)
Power
AC input voltage	100 to 240VAC	100 to 240VAC	100 to 240VAC
AC input current	6A	6A	6A
Environmental
Operating Temperature	32 to 104°F (0 to 40°C)	32 to 104°F (0 to 40°C)	32 to 104°F (0 to 40°C)
Storage Temperature	-13 to 158°F (-25 to 70°C)	-13 to 158°F (-25 to 70°C)	-13 to 158°F (-25 to 70°C)
Humidity (non-condensing)	5 to 95%	5 to 95%	5 to 95%
Compliance
FCC Class A Part 15
CSA/CUS
CE
UL
ICSA Antivirus
ICSA Firewall
ICSA IPSec
ICSA Intrusion Detection

 

Download the Fortinet FortiGate 3600 Data Sheet (PDF).