Fortinet FortiGate 400A

Real-time Network Protection for Enterprises

FortiGate™ Antivirus Firewalls are dedicated, hardware-based units that deliver complete, real-time network protection services at the network edge. Based on Fortinet’s revolutionary FortiASIC™ Content Processor chip, the FortiGate platforms are the only systems that can detect and eliminate viruses, worms, and other content-based threats without reducing network performance — even for real-time applications like Web browsing. FortiGate systems also include integrated firewall, content filtering, VPN, intrusion detection and prevention, and traffic shaping functions, making them the most cost effective, convenient, and powerful network protection solutions available.

The FortiGate-400A Antivirus Firewall provides performance, flexibility, and security necessary to protect today’s growing enterprise networks. The FortiGate-400A platform features two 10/100/1000 tri-speed ethernet ports for networks running at or upgrading to gigabit speeds and 4 user-definable 10/100 ports provide redundant WAN links, high availability, and multi-zone capabilities, allowing administrators a high degree of flexibility to segment their network into zones and create policies to control network traffic between zones. The FortiGate-400A Antivirus Firewalls can be deployed as a high performance antivirus and content filtering gateway, or as a complete network protection solution leveraging firewall, intrusion detection and prevention, and VPN capabilities. Ideally suited for enterprise networks, the FortiGate-400A is unmatched in capabilities, speed, and price/performance. The FortiGate-400A is kept up to date automatically by Fortinet’s FortiProtect™ Network, which provides continuous updates that ensure protection against the latest viruses, worms, Trojans, and other threats — around the clock, and around the world.

Product Highlights:

• Provides complete real-time network protection through a combination of network-based antivirus, web and email content filtering, firewall, VPN, dynamic intrusion detection and prevention, traffic shaping, and anti-spam
• Eliminates viruses, worms, and grayware/spyware from email, file transfer, and real-time (Web) traffic without degrading network performance
• Easy to use and deploy – quick and easy configuration wizard walks administrators through initial setup with graphical user interface
• Reduces exposure to threats by detecting and preventing over 1300 different intrusions, including DoS and DDoS attacks
• User-definable ports allows for flexibility in deployment
• High-availability option supports transparent failover for mission-critical applications
• Delivers superior performance and reliability from hardware accelerated, ASIC-based architecture
• Automatically downloads the latest virus and attack database and can accept instant “push” updates from the FortiProtect Network
• Manage thousands of FortiGate units through the FortiManager™ central management tool
• Underlying FortiOS™ operating system is ICSA-certified for Antivirus, Firewall, IPSec VPN, and Intrusion Detection
• Web-based graphical user interface and content filtering supports multiple languages

Key Features & Benefits:

Specifications:

Interfaces
10/100 Ethernet Ports	4
Gigabit Ethernet Ports	2
High Availability Port	Optional
WLAN
DMZ Port
USB Ports	2
System Performance
Concurrent sessions	400,000
New sessions/second	10,000
Firewall throughput (Mbps)	450
168-bit Triple-DES throughput (Mbps)	135
Unlimited concurrent users
Policies	5,000
Schedules	256
Antivirus, Worm Detection & Removal (ICSA Certified)
Scans HTTP,FTP,SMTP,POP3,IMAP, and encrypted VPN Tunnels
Automatic "push" Virus Database Update
Quarantine infected messages
Block by file size
Firewall Modes and Features
NAT, PAT,Transparent (bridge)
Routing mode (RIP v1, v2)
Virtual domains	2/10
802.1q VLAN Support
User Group-based authentication
H.323 NAT Traversal
Protection Profiles	32
VPN
Dedicated tunnels	2,000
Encryption (DES, 3DES, AES)
PPTP,L2TP,VPN client pass though
Hub and Spoke Architecture
IKE certificate authentication (X.509)
IPSec NAT Traversal
Content Filtering
URL block, Keyword Block, Exempt List
Block Java Applet, Cookies, Active X
Email filtering (keyword, exempt list, RBL/ORDB support)
Mime Header Check
Cerberian web filtering support
FortiGuard™ web filtering support
Dynamic Intrusion Detection and Prevention
Prevention for over 1300 attacks
Customizable dynamic detection signature list
Automatic attack database update
Anti-Spam
Real-time Blacklist/Open Relay Database Server
MIME header check
Keyword/phrase filtering
IP address blacklist/exempt list
Logging/Monitoring
Internal logging capacity	Optional (HD)
Syslog, SNMP
Email notification of viruses and attacks
High Availability (HA)
Active-active, Active-passive
Stateful failover (FW and VPN)
Device failure detection & notification
Redundant Power Supplies
Link status monitor
Networking
Multiple WAN link support
PPPoE client
DHCP client/server
Policy-based routing
System Management
Console interface (RS-232)
WebUI (HTTPS)
Multi-language support
Command line interface
Secure Command Shell (SSH)
FortiManager System
Administration
Multiple administrators and user levels
Upgrades & changes via TFTP &WebUI
System software rollback
User Authentication
Internal database
LDAP support
External RADIUS
RSA SecurID
Xauth over RADIUS for IPSec VPN
IP/MAC address binding
Traffic Shaping
DiffServ setting
Policy-based traffic shaping
Guarantee/Max/Priority Bandwidth
Dimensions
Height (inches)	1.75
Width (inches)	17
Length (inches)	12.6
Weight	11.9 lbs (5.4 kgs)
Power
AC input voltage	100 to 240VAC
AC input current	1.6A
Environmental
Operating Temperature	32 to 104°F (0 to 40°C)
Storage Temperature	-13 to 158°F (-25 to 70°C)
Humidity (non-condensing)	5 to 95%
Compliance
FCC Class A Part 15
CSA/CUS
CE
UL
ICSA Antivirus
ICSA Firewall
ICSA IPSec
ICSA Intrusion Detection

Download the Fortinet FortiGate 400A Data Sheet (PDF).