Fortinet FortiGate 3600LX4

Overview:

Best-of-Breed Network Antivirus Protection

FortiGate™ Antivirus Firewalls are dedicated, hardware based units that deliver complete, real-time network protection services at the network edge. Based on Fortinet’s revolutionary FortiASIC™ Content Processor chip, the FortiGate platforms are the only systems that can detect and eliminate viruses, worms, and other content-based threats without reducing network performance — even for real-time applications like Web browsing. FortiGate systems also include integrated firewall, content filtering, VPN, intrusion detection and prevention, and traffic shaping functions, making them the most cost effective, convenient, and powerful network protection solutions available.

The FortiGate-3600 Antivirus Firewall is a high performance system that delivers gigabit throughput with exceptional reliability for the most demanding large enterprise and service provider environments. Providing 6 gigabit interfaces, the FortiGate-3600 establishes new levels of price/performance, and offers a complete array of antivirus, firewall, web and email content filtering, VPN, network-based intrusion detection and prevention, and traffic shaping capabilities. The FortiGate-3600 deploys easily in existing networks and can be used for antivirus and content filtering only or can be deployed as a complete network protection solution. The FortiGate-3600 supports independent security zones and policies mapped to VLAN tags enabling granular security configurations unique to each group or department. High Availability (HA) operation and redundant hot-swappable power supplies ensure non-stop operation in mission-critical applications. The FortiGate-3600 is kept up to date automatically by Fortinet’s FortiProtect™ Network, which provides continuous updates that ensure protection against the latest viruses, worms, Trojans, and other threats – around the clock, and around the world.

Product Highlights:

• Optimal solution for Large Enterprise and Managed Security Service Providers (MSSPs)
• Eliminates viruses and worms from email, file transfer, and real-time (Web) traffic without degrading network performance
• Provides complete network protection functionality: network-based antivirus, web and email content filtering, firewall, VPN, network-based intrusion detection and prevention, and traffic shaping
• “Transparent mode” operation supports highly available architectures and deployments for antivirus and content filtering only in conjunction with existing firewall, VPN, intrusion detection and prevention, or other existing systems
• Real-time system status monitoring lowers the total cost of ownership by providing an easy graphical view of CPU and memory utilization, network and session status, virus and intrusion detection
• Reduces exposure to threats by detecting and preventing 1300 different intrusions, including DoS and DDoS attacks
• Active-active and active-passive high availability operation supports transparent failover for mission-critical applications and clustering of up to 32 units
• VLAN and virtual domain support provides for granular network segmentation into zones with independent security and access control policies
• Delivers superior performance and reliability from hardware accelerated, ASIC-based architecture and redundant, hotswappable power supplies
• Automatically downloads the latest virus and attack database and can accept instant “push” updates from the FortiProtect Network
• Underlying FortiOS™ is ICSA-certified for Antivirus, Firewall, IPSec VPN and Intrusion Detection

Fortinet Security Leadership.

FortiGateTM Multi-Threat security systems are dedicated ASIC-based appliances that deliver comprehensive network protection scalable to multi-gigabit speeds. Utilizing the industry’s first hardware-accelerated content inspection engines, Fortinet Complete Content Inspection and Reassembly technology provides the most advanced ASIC-accelerated network-based security products available today.

Powerful, Enterprise-Class Security in a Single Device.

The FortiGate-3600TM Security System is a high performance solution that delivers gigabit throughput with exceptional reliability for the most demanding large enterprise and service provider environments. The FortiGate-3600 deploys easily in existing networks and can be used for antivirus and content filtering only or can be deployed as a complete network protection solution. High Availability (HA) operation and redundant hot-swappable power supplies ensure non-stop operation in mission-critical applications. The FortiGate-3600 is kept up to date automatically by Fortinet’s FortiGuardTM network, which provides continuous updates for FortiGuard Subscription Services that ensure protection against the latest viruses, worms, trojans and other threats - around the clock.

Sophisticated Security Solution

The FortiGate-3600 delivers critical security functions in a hardened security platform that is tuned for reliability, usability, rapid deployment, low operational costs and most importantly, a superior detection rate against know and unknown anomalous threats. Backed by Fortinet’s proactive real-time subscription services, the FortiGate security systems are unbeatable for value, performance and functionality.

Management for all FortiGate platforms is easily performed with a policy based Web UI or via Fortinet’s FortiManager for central management. FortiManager can manage hundreds of FortiGate devices for configuration and policy changes via a single console. Fortinet’s management ensures consistent policy enforcement across all FortiGate platforms. FortiLogTM provides a central logging facility that aggregates and analysis logs from all centrally managed FortiGate platforms. Together FortiManager and FortiLog provide a unified architecture for complete network management.

Automated Security Services

FortiGate security systems are proactive against the latest threats. With the FortiGuard Subscription Services options, each FortiGate system is automatically updated with the latest detection methods within minutes of their availability from Fortinet.

FortiGate Subscription Services are provided through Fortinet’s global FortiGuard Distribution Network (FDN). FDN provides guaranteed 24 x 7 customer access with ten redundant high-speed centers around the world. Critical updates for attack signatures and detection engines can be obtained in several ways to best suit the needs of every customer:

• Automatically updates “pushed” from the FDN network to Fortinet products
• Scheduled updates “pulled” from the FDN network based on the customer’s customized schedule
• Immediate updates through “update now” function

FortiGuard security filtering services for Web Filtering and Antispam provide fully managed solutions to secure networks and users from non-authorized web sites and spam mail. With Fortinet’s award-winning graphical user interface, setting up web filtering and antispam services couldn’t be easier. Within minutes, customers can create sophisticated security policies leveraging Fortinet’s rich knowledge base to quickly reduce and eliminate non-business and potentially harmful web browsing and email messages.

Features and Benefits:

 

 

 

Deployments:

High performance multi-threat security for the Enterprise and Managed Security Service Providers (MSSPs)

The security landscape has evolved. Traditional point-based Firewall, Antivirus and IPS security solutions are inadequately equipped to protect your network from today’s complex blended threats such as NetSky and SoBig which utilize multiple methods to attack and infect computer systems.

To effectively protect organizations from these new generation of attacks requires a comprehensive security strategy that contains multiple layers of network-based defenses at the edge and at the core of your network. The FortiGate-3600 delivers a high performance appliance that tightly integrates multiple security solutions to combat blended attacks. Integrated antivirus and antispyware engines inspects email, HTTP and FTP downloads for malicious content, dynamic IPS detects and blocks attacks aimed at exploiting application vulnerabilities, antispam filtering blocks the transport of malicious files, comprehensive web content filtering blocks access to offensive and malicious internet sites and a stateful firewall is used as a first line of defense.

Flexible security for emerging technologies and network architectures

The FortiGate-3600’s flexible architecture allows it to quickly adapt to emerging technologies and threats such as IM, P2P and VOIP applications and Identity theft methods such as Spyware, Phishing and Pharming attacks.

Flexible deployment options such as NAT, Route and Transparent modes allow the FortiGate-3600 to be easily deployed into most network designs. Core networking features such as High Availability (HA) and support for dynamic routing protocols RIP, OSPF and BGP allow the FortiGate-3600 to be deployed into complex full mesh network environments that require maximum network availability.

To reduce deployment costs, The FortiGate-3600 appliance supports security zones and virtual security domains to secure multiple internal networks or external customers on a single, easy to manage platform.

Technical Specifications:

 

Services & Support:

FortiGuard Subscription Services:

Included:

• Automatic updates from over 50 redundant high speed database servers around the globe.
• Complete Wildlist virus protection for over 4500 active viruses from FortiGuard’s active database of over 60,000 viruses.
• Real-time signature updates for protection against over 6000 threats.
• 56 rated web categories for more accurate web content filtering.
• Web filtering for more than 26 million rated domains and 2 billion rated Web pages.

* 1 year (12 month) subscription included. Annual renewal required to maintain service(s).

FortiCare Support Services:

Includes:

• 24 X 7 X 365 FortiCare Web Service.
• Email Technical Support.**
• 1 Year Return and Replace Hardware Warranty.
• FortiOS (operating system) updates.

* 1 year (12 month) subscription included. Annual renewal required to maintain service(s).
** 24 X 7 Telephone Technical Support available.

Documentation:

Download the Fortinet FortiGate 3600 Datasheet (.PDF)