Fortinet FortiGate 3950B

Overview:

The FortiGate-3950B consolidated security appliance offers unmatched levels of performance, scalability, and security for large enterprise networks and managed service providers. Purpose-built by Fortinet, the FortiGate-3950B features custom FortiASIC™ processors, layered multi-threat protections from the FortiOS™ operating system, and a flexible, modular architecture for future growth.

FortiGate-3950 Features & Benefits:

• 120 Gbps of firewall performance provides the fastest firewall throughput of any appliance on the market
• Scales easily up to twelve (12) 10-GbE ports or one hundred four (104) GbE ports to protect your large-scale and low-latency next generation networks
• Hardware-accelerated modules provide maximum flexibility so you can deploy the performance you need today, and in the future
• Rich feature set to protect next generation networks including integrated IPS, application control, user-based policies, and endpoint policy enforcement
• IPv6-ready platform with strong authentication options for secure network access and security policy compliance
• Integration with FortiManager and FortiAnalyzer simplify management, reporting and analysis for several up to thousands of Fortinet devices

High Performance Hardware

The FortiGate-3950B provides up to 120 Gbps of firewall throughput, delivering the highest overall consolidated security performance in the FortiGate appliance line. Wire-speed firewall performance at 10-GbE and GbE link speeds ensure that security won't impact your network.

Modular Scalability

The FortiGate-3950B features a modular, space-saving 3-RU form factor, with five Fortinet Mezzanine Card (FMC) expansion bays. The FMC expansion bays allow you to customize your appliance for your unique network environment. 64 GB of solid-state disk (SSD) enables FortiOS software features such as local event storage, WAN optimization, and web caching.

Consolidated Security

Using the advanced FortiOS operating system, FortiGate-3950B consolidated security appliances effectively neutralizes a wide range of threats facing networks today. Whether deployed as high-performance firewalls, or as comprehensive consolidated security solutions, FortiGate appliances protect critical assets with some of the most effective security available today.

Features and Benefits:

Integrated Multi-Threat Protection

The FortiGate product family provides cost-effective, comprehensive protection against network, content, and application-level threats. It defends your environment from complex, sophisticated attacks without degrading network availability and affecting application performance.

FortiGate platforms combine the purpose-built FortiOS™ security operating system with custom FortiASIC processors and other hardware to provide a comprehensive and highperformance array of security and networking functions.

The FortiGate product family delivers the highest level of network, content, and application security for enterprises of all sizes, while reducing total cost of ownership. With Fortinet, you deploy the network security you need to protect your intellectual property, preserve the privacy of critical customer information, and maintain regulatory compliance.

FortiOS 5.0 Software

FortiOS 5.0, the world's most powerful security operating system, is the foundation for all Fortinet FortiGate integrated security platforms. It provides more security, intelligence and control to help enterprises be better protected against today's advanced threats and enable more secure BYOD environments.

	More Security Fighting Advanced Threats More Security to fight advanced threats. A client reputation feature gives enterprises a cumulative security ranking of each device based on a range of behaviors and provides specific, actionable information that enables organizations to identity compromised systems and potential zero-day attacks in real time. The new advanced anti-malware detection system adds an on-device behavior-based heuristic engine and cloud-based AV services that includes an operating system sandbox and botnet IP reputation database. Together with superior industry-validated AV signatures, FortiOS 5.0 delivers unbeatable multi-layered protection against today's sophisticated malware. Client Reputation with Cumulative Rankings OS Sandbox Advanced Botnet Protection
	More Control Securing Mobile Devices More Control to secure mobile devices and BYOD environments by identifying devices and applying specific access policies as well as ecurity profiles, according to the device type or device group, location and usage. Device Identification & Visibility New Identity Based Policies Endpoint Control
	More Intelligence Build Smart Policies More Intelligence with automatic adjustment of role-based policies for users and guests based on location, data and application profile. Enhanced reporting and analysis also provides administrators with more intelligence on the behavior of their network, users, devices, applications and threats. Provide Guest Access with Confidence Enhanced Visibility & Reporting and Overal User Experience Extended Single Sign On Capabilities

Fortinet’s ASIC-Based Advantage:

FortiASIC is the foundation of Fortinet’s unique hardware technology. FortiASIC is a family of purpose built, high-performance network and content processors that uses an intelligent proprietary content scanning engine and multiple algorithms to accelerate compute-intensive security services. FortiASIC provides the performance required to deliver enterprise and carriers-class UTM services. Coupled with the FortiOS security hardened Operating System, FortiASIC delivers extreme performance and security.

Technical Specifications:

FortiGate Model	FortiGate-3950B
Interfaces and Modules
Total Network Interfaces (Base / Max)	8 / 1081
Hardware Accelerated 10-GbE SFP+ Interfaces	2 / 121
Hardware Accelerated GbE SFP Interfaces	4 / 1041
Accelerated 10/100/1000 Interfaces	1001
Management 10/100/1000 Interfaces	2
Transceivers Included	2x SR SFP+
Fortinet Mezzanine Card (FMC) Expansion Slots	5
Fortinet Storage Module (FSM) Expansion Slots	-
Local Solid State Disk Storage Included	-
System Performance
Firewall Throughput (1518 byte UDP packets)	20 - 120 Gbps1,2
Firewall Throughput (512 byte UDP packets)	20 - 120 Gbps1,2
Firewall Throughput (64 byte UDP packets)	20 - 120 Gbps1,2
Firewall Throughput (Packets Per Second)	180 Mpps
IPSec VPN Throughput (AES-256 + SHA-1)	8 - 50.5 Gbps1,2
IPS Throughput	16 Gbps
Antivirus Throughput (Proxy-based)	1.5 Gbps
Antivirus Throughput (Flow-based)	2.2 Gbps
Gateway-to-Gateway IPSec VPN Tunnels (System/VDOM)	10,000 / 5,000
Client-to-Gateway IPSec VPN Tunnels	64,000
Concurrent Sessions	10 Million
New Sessions / Second	175,000
Concurrent SSL-VPN Users (Recommended Max)	25,000
SSL VPN Throughput	590 Mbps
Firewall Policies (System/VDOM)	100,000 / 50,000
Virtual Domains (Max/Default)	10 / 500
Wireless Access Points Controlled	1,024
Unlimited User Licenses	Yes
Redundant Power Supplies (Hot-swappable)	Yes
Dimensions
Dimensions H x W x L	5.25 x 17.5 x 27.65 in (13.3 x 44.4 x 70.2 cm)
Weight	60.0 lb (27 Kg)
Rack Mountable	Yes
Environmental
AC Power	100-240 VAC, 50-60 Hz, 7.0 - 12.0 Amp (Max)
Power Consumption (Avg)	3.50A /110V, 1.75A /220V
Heat Dissipation	1,728 BTU
Operating Temperature	32 – 104°F (0 – 40°C)
Storage Temperature	-13 to 158°F (-35 to 70°C)
Humidity	20 to 90% non-condensing
Compliance
Regulatory Compliance	FCC Class A Part 15, UL/CUL, C Tick, VCCI

Architecture:

Fortinet High-Level Integrated Switch Fabric Architecture

FortiOS 4.0 Security-Hardened Operating System
FortiOS 4.0 is the system software that powers FortiGate consolidated security platforms. Developed solely for security, performance, and reliability, this purpose-built operating system leverages the power of FortiASIC processors to deliver a wide range of services. FortiOS 4.0 combines an enterprise-class firewall, IPsec and SSL VPN, IPS, application control, antivirus, web filtering, antispam, DLP, layer 2/3 routing services, WAN optimization, SSL traffic inspection, endpoint NAC, and an integrated wireless controller.

Integrated Switch Fabric
The FortiGate-3950B high-performance consolidated security appliance brings together an Integrated Switch Fabric (ISF) and modular expansion capabilities. This combination provides a uniquely scalable forwarding and security processing architecture, all leveraging Fortinetdesigned ASIC technologies. At the heart of the FortiGate- 3950B is a 240 Gbps ISF, enabling full mesh connectivity between all Fortinet Mezzanine Card (FMC) slots. Each FMC slot provides 40 Gbps of connectivity bandwidth to the ISF. Bandwidth is divided between the physical port and the FortiASIC layer such that any port will be able to utilize any FortiASIC processing resource found in any FMC slot, without suffering a performance penalty.

Fortinet Mezzanine Card Expansion Slots
The FMC form factor is the basis for the Fortinet Mezzanine Card modules. Each Fortinet FMC module integrates FortiASIC processors with additional network interfaces to deliver improved performance and port density. Performance and scalability can be expanded at any time by adding FMC modules.

FortiASIC Processors
FortiASIC processors form the foundation for Fortinet's unique hardware platforms. FortiASICs are a family of purpose-built, high-performance Network, Content and Security processors that leverage intelligent and proprietary content scanning engines to accelerate resource-intensive security services. When coupled with the FortiOS securityhardened operating system, FortiASIC technology delivers superior performance and security for your network.

Security Features:

FortiGate-3950-series platforms provide the following security features:
 

Deployments:

FortiGate multi-threat security solutions are designed for enterprise networks.

Secure Network Perimeters / Internal Segmentation

Firewall and VPN services are deployed at the perimeter of the internal network to securely connect remote offices and mobile users to an organization’s private resources while at the same time preventing any other unauthorized access. Intrusion prevention, antivirus and Web filtering services ensure that network-based threats and contentbased threats are stopped inbound as well as outbound.

Inside the network, segmentation can be achieved using firewall, intrusion prevention and antivirus technologies. Internal segmentation effectively isolates outbreaks before they are allowed to spread throughout an organization’s network.

Virtual Security Domains / Distributed Enterprises

FortiGate platforms support multiple security zones and virtual security domains to customize a network’s security policy anywhere requirements demand. Virtual Domains (VDOMs) can also be used to provision services for external customers.

All FortiGate solutions start from the same flexible high performance architecture. Core networking features found in every model such as High Availability (HA) and support for dynamic routing protocols enable the FortiGate to be deployed into highly distributed and fully meshed network environments.

Datacenter and Critical Applications Security

Effectively protecting an organization’s mission critical applications from a new generation of application-based threats that are now targeting Web 2.0, VoIP and even IPTV applications requires a comprehensive security strategy that contains multiple layers of network-based defenses. Unfortunately, many of these new applications are time-critical, forcing administrators to choose between performance and security. The FortiGate family of multi-gigabit performance solutions deliver real-time protection against multi-layered security threats which target application servers. In addition to protecting against these new threat types, advanced antispam filtering relieves the ever evolving problem of unsolicited bulk mail while also filtering mail for spyware and security policy violating content.

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiGate 3950 Series Datasheet (.PDF)