Fortinet FortiGate 3810A-DC

Overview:

The FortiGate-3810A integrates multi-threat security into an expandable appliance ideal for high-performance enterprise gateway and Managed Security Service Provider (MSSP) implementations. It supports up to four (4) FortiASIC™-accelerated 10GigE interfaces and offers four (4) Advanced Mezzanine Card (AMC) expansion bays, making it the most modular and flexible appliance in the FortiGate line.

FortiGate-3810A Benefits:

• Large-scale deployment support with the highest levels of content-inspection performance available in an appliance.
• Two (2) ASIC-accelerated SFP interfaces offer wire-speed small packet performance.
• Four (4) AMC expansion bays offer maximum appliance-based expandability and configuration flexibility.
• Supports ultra-high throughput with optional hardware-accelerated 10-Gigabit Ethernet ports.
• Supports local logging and content archiving with optional storage module.
• Redundant, hot-swappable power supplies minimize single-point failures.
• Complement or upgrade existing security infrastructure by enabling only the services needed.
• Segment network by customer, business unit, or any other logical division for more control with support for up to 500 virtual domains (VDOMs).
• Available FortiManager and FortiAnalyzer integration simplifies security management, reporting, and analysis while reducing operating expenses.
• FortiGuard Subscription Services deliver automated, real-time, and up-to-date protection against security threats.

High Performance Enterprise Network Security:

FortiGate enterprise security solutions deliver next-generation firewall technology and multi-threat protection integrated into cost-effective security platforms that effectively block blended network threats. Point-product security solutions do not provide protection against a new breed of blended threats that utilize a multitude of attack vectors. Furthermore, assembling an array of point products is costly and requires significant expertise to engineer, maintain and manage. FortiGate solutions cost-effectively deliver complete multi-threat protection against: unauthorized access, intrusion attempts, viruses, worms, trojans, spyware, phishing attempts, spam and other types of content-based and network-based threats.

Industry-Leading Unified Threat Management (UTM):

Fortinet incorporates ICSA Labs-certified UTM functions into a single ASIC-based appliance that is simple to install and manage. Stateful firewall, IPSec and SSL-VPN, intrusion prevention, antivirus, antispam, and Web filtering features combine to form a complete enterprise-focused network security platform that offers compelling total cost of ownership.

Fortinet’s Multi-Layered Security Solution:

Fortinet’s multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Features and Benefits:

Fortinet’s ASIC-Based Advantage:

FortiASIC is the foundation of Fortinet’s unique hardware technology. FortiASIC is a family of purpose built, high-performance network and content processors that uses an intelligent proprietary content scanning engine and multiple algorithms to accelerate compute-intensive security services. FortiASIC provides the performance required to deliver enterprise and carriers-class UTM services. Coupled with the FortiOS security hardened Operating System, FortiASIC delivers extreme performance and security.

FortiOS: Developed for Security:

FortiOS is the software foundation of FortiGate multi-threat security platforms. Developed solely for security, performance and reliablity, it is a purpose-built operating system that leverages power of the the FortiAISC content and network processors. FortiOS enables a comprehensive suite of security services – content inspection firewall, IPS, antivirus, web filtering, antispam, IM/P2P, virtual network security and bandwidth shaping. FortiOS is a complete suite of UTM security services and is certified for Common Criteria EAL 4+.

Technical Specifications:

FortiGate Model	FortiGate-3016B	FortiGate-3600A	FortiGate-3810A
Hardware Specifications
10/100/1000 Interfaces (Copper)	2	8	8
1Gb SFP Interfaces	16 - 20*	2 - 6*	2 - 26*
SFP Transceivers Provided	4 (SX) / 4 (TX)	2 (SX)	2 (SX)
USB Ports	2	2	1
AMC Expansion Slots	1 single width	1 single width	2 single width 2 double width
System Performance
Concurrent Sessions	1,000,000	1,000,000	2,000,000
New Sessions/Second	25,000	40,000	40,000
Firewall Throughput (Gbps)	16 - 20* Gbps	6 - 10* Gbps	7 - 37* Gbps
VPN Throughput (IPSec)	12 - 15* Gbps	0.8 - 3.8* Gbps	1 - 19* Gbps
IPS Throughput	2 Gbps	3 Gbps	4 Gbps
Antivirus Throughput	300 Mbps	400 Mbps	500 Mbps
Unlimited Concurrent Users	Yes	Yes	Yes
Dedicated IPSec VPN Tunnels	64,000	64,000	64,000
Policies	100,000	100,000	100,000
Virtual Domains (VDOMS)	10 / 500	10 / 500	10 / 500.
(standard / with optional license)
Physical Specifications
Dimensions H x W x L	3.5 x 16.9 x 18.3 in (88.9 x 429.3 x 464.8 mm)	3.5 x 16.9 x 16.9 in (88.9 x 429.3 x 429. 3 mm)	3.5 x 16.9 x 18.5 in (88.9 x 429.3 x 469.9 mm)
Weight	25.6 lbs (11.6 kg)	26 lbs (11.8 kg)	36 lbs (16.4 kg)
Environmental
AC Power Option	Dual 100-240 VAC, 50-60 Hz, 8 Amp (Max)
DC Power Option	N/A	N/A	-48V DC (Normal)(-36 ~ -72V DC / 500W Max)
(AC power standard / DC power is a factory installed option)
Power Consumption (AVG)	168W	220W	275W
Operating Temperature	32 - 104 °F (0 - 40 °C)
Storage Temperature	-13 - 158 °F (-25 - 70 °C)
Humidity	5 to 95% non-condensing
Compliance and Certifications
Compliance	FCC Class A, Part 15, UL/CUL, C Tick, CE, VCCI
Certifications	ICSA Labs, NSS Labs, Common Criteria, FIPS 140-2.
* Higher Values Include Properties of Optional Expansion Modules

Fortinet Advanced Mezzanine Card (AMC) Expansion Modules
The AMC standard, also known as AdvancedMC, was developed by the PCI Industrial Computers Manufacturers Group (PICMG), which has over 100 companies building to the specification. AdvancedMC has been developed to meet the requirements for the next generation of carrier grade equipment.
	10-Gigabit Ethernet AMC Module 2-Port FortiASIC hardware accelerated 10-Gigabit Ethernet module (Includes 2x SR XFP transceivers) 11 Gbps Firewall performance 6 Gbps IPSec (3DES) VPN performance Requires double-width slot (FG-3810A)
	8-Port FortiASIC hardware accelerated Gigabit Ethernet module (Includes 4x SX SFP transceivers) 8 Gbps Firewall performance 6 Gbps IPSec (3DES) VPN Performance Requires double-width slot (FG-3810A)
	4-Port FortiASIC hardware accelerated Gigabit SFP module (Includes 4x SX SFP transceivers) 4 Gbps Firewall performance 3 Gbps IPsec (3DES) VPN performance Requires single-width slot (FG-3016B/FG-3600A/FG-3810A)
	80 Gigabyte hard disk drive storage module High duty cycle hard drive design Requires single-width slot (FG-3016B/FG-3600A/FG-3810A)

Security Features:

FortiGate-1000-3800-series platforms provide the following security features:
 

Deployments:

FortiGate multi-threat security solutions are designed for enterprise networks.

Secure Network Perimeters / Internal Segmentation

Firewall and VPN services are deployed at the perimeter of the internal network to securely connect remote offices and mobile users to an organization’s private resources while at the same time preventing any other unauthorized access. Intrusion prevention, antivirus and Web filtering services ensure that network-based threats and contentbased threats are stopped inbound as well as outbound.

Inside the network, segmentation can be achieved using firewall, intrusion prevention and antivirus technologies. Internal segmentation effectively isolates outbreaks before they are allowed to spread throughout an organization’s network.

Virtual Security Domains / Distributed Enterprises

FortiGate platforms support multiple security zones and virtual security domains to customize a network’s security policy anywhere requirements demand. Virtual Domains (VDOMs) can also be used to provision services for external customers.

All FortiGate solutions start from the same flexible high performance architecture. Core networking features found in every model such as High Availability (HA) and support for dynamic routing protocols enable the FortiGate to be deployed into highly distributed and fully meshed network environments.

Datacenter and Critical Applications Security

Effectively protecting an organization’s mission critical applications from a new generation of application-based threats that are now targeting Web 2.0, VoIP and even IPTV applications requires a comprehensive security strategy that contains multiple layers of network-based defenses. Unfortunately, many of these new applications are time-critical, forcing administrators to choose between performance and security. The FortiGate family of multi-gigabit performance solutions deliver real-time protection against multi-layered security threats which target application servers. In addition to protecting against these new threat types, advanced antispam filtering relieves the ever evolving problem of unsolicited bulk mail while also filtering mail for spyware and security policy violating content.

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiGate 1000-3800 Series Datasheet (.PDF)