Fortinet FortiGate 620B

Overview:

The FortiGate-620B raises the bar for mid-size enterprise security devices. Incorporating multiple FortiASIC Network Processors (NP2) for wire-speed firewall/VPN operation and the FortiASIC content processor (CP) for content inspection acceleration, the FortiGate-620B yields unmatched multi-threat performance across the highest port density of any product in its class. AMC module options offer additional deployment and operational flexibility, expanding the FortiGate-620B base model's 20 10/100/1000 Gigabit Ethernet ports to 24, or adding an internal HDD module for local logging and archiving. The FortiGate-620B's accelerated security throughput, high port density, and ease of management allows medium and large sized enterprises to enjoy a degree of internal network security segmentation and policy control previously available only within larger-scale solutions.

The evolution of network security threats has driven the expansion of security products to include multiple threat recognition systems within a single appliance. Unified Threat Management systems from Fortinet include firewall, VPN, intrusion prevention, antivirus, antimalware, antispam and web content filtering to identify numerous types of threats from a single device. While the ease of use of UTM products has created a prolific adoption trend, administrators still struggle with limited physical deployment options due to the available throughput and port density of mid-range devices.

The FortiGate-620B and FortiGate-621B appliances answer the call of growing enterprise networks by integrating a purpose-built security processing ASIC, known as the FortiASIC Network Processor, into the FortiGate system to deliver security throughput at switching speeds. Sixteen hardware accelerated interfaces (expandable to 20 on FortiGate-620B) allow networks to enforce firewall policy between network segmentation points for layered security with switch-like performance. An additional purpose-built ASIC, known as the FortiASIC Content Processor, provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning. The addition of an Advanced Mezzanine Card (AMC) expansion slot on the FortiGate-620B allows for even more flexibility, offering additional ASICaccelerated ports for additional throughput or hard disk-based storage for local logging and content archiving. The FortiGate-621B includes 64 GB of local solid state storage. With numerous accelerated multi-threat security interfaces, organizations can create multiple security zones for various departments, users, access methods, and even devices to enforce network security at accelerated speeds.

FortiGate-620B/621B Benefits:

• Delivers up to 20 Gbps firewall throughput, with optional AMC module
• 20 GbE interfaces (24 total with optional AMC module on FortiGate-620B) enables flexibility and performance for your growing network
• IPv6-ready platform with strong authentication options for secure network access and security policy compliance
• Integrated consolidated security features offer the ability to augment existing systems and add new functionality or replace aging security infrastructures
• A “single pane of glass” management console makes it easy for you to deploy and manage
• High port density enables network security segmentation for security event isolation, policy granularity and improved network visibility

UTM Evolution:

The evolution of network security threats has driven the expansion of security products to include multiple threat recognition systems within a single appliance. Unified Threat Management systems from Fortinet include firewall, VPN, intrusion prevention, antivirus, antimalware, antispam and web content filtering to identify numerous types of threats from a single device. While the ease of use of UTM products has created a prolific adoption trend, administrators still struggle with limited physical deployment options due to the available throughput and port density of mid-range devices.

Perimeter Dissemination:

Over time, as network devices and user habits have evolved, networks experienced a dissemination of the classic perimeter that had previously surrounded and protected their networks. The mobility offered by laptops and more recently, WiFi-enabled smart phones, have introduced security threats from the access layer, where LAN-side users connect to the network. The ideal network security solution would offer line rate throughput on numerous ports to facilitate the segmentation of the LAN into individual security zones, offering granular security policies, the isolation of security events, and increased visibility into network traffic and events.

ASIC-Accelerated Multi-Threat Security Solution:

The FortiGate-620B answers the call of growing enterprise networks by integrating a purpose-built security processing ASIC, known as the FortiASIC Network Processor, designed to deliver security throughput at switching speeds. Sixteen hardware accelerated interfaces (expandable to 20) allow networks to enforce firewall policy between network segmentation points for layered security with switch-like performance. An additional purpose-built ASIC, known as the FortiASIC Content Processor, provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning for dangerous traffic streams. The inclusion of an Advanced Mezzanine Card (AMC) expansion slot allows for even more flexibility, offering additional ASIC-accelerated ports for additional throughput or disk-based storage for local logging and content archiving. With numerous accelerated multi-threat security interfaces, organizations can create multiple security zones for various departments, users, access methods, and even devices to enforce network security at accelerated speeds.

FortiGate Multi-Threat Security Solutions

Fortinet's multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. Finally, FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Features & Benefits:

Integrated Multi-Threat Protection

The FortiGate product family provides cost-effective, comprehensive protection against network, content, and application-level threats. It defends your environment from complex, sophisticated attacks without degrading network availability and affecting application performance.

FortiGate platforms combine the purpose-built FortiOS™ security operating system with custom FortiASIC processors and other hardware to provide a comprehensive and highperformance array of security and networking functions.

The FortiGate product family delivers the highest level of network, content, and application security for enterprises of all sizes, while reducing total cost of ownership. With Fortinet, you deploy the network security you need to protect your intellectual property, preserve the privacy of critical customer information, and maintain regulatory compliance.

FortiOS 5.0 Software

FortiOS 5.0, the world's most powerful security operating system, is the foundation for all Fortinet FortiGate integrated security platforms. It provides more security, intelligence and control to help enterprises be better protected against today's advanced threats and enable more secure BYOD environments.

	More Security Fighting Advanced Threats More Security to fight advanced threats. A client reputation feature gives enterprises a cumulative security ranking of each device based on a range of behaviors and provides specific, actionable information that enables organizations to identity compromised systems and potential zero-day attacks in real time. The new advanced anti-malware detection system adds an on-device behavior-based heuristic engine and cloud-based AV services that includes an operating system sandbox and botnet IP reputation database. Together with superior industry-validated AV signatures, FortiOS 5.0 delivers unbeatable multi-layered protection against today's sophisticated malware. Client Reputation with Cumulative Rankings OS Sandbox Advanced Botnet Protection
	More Control Securing Mobile Devices More Control to secure mobile devices and BYOD environments by identifying devices and applying specific access policies as well as ecurity profiles, according to the device type or device group, location and usage. Device Identification & Visibility New Identity Based Policies Endpoint Control
	More Intelligence Build Smart Policies More Intelligence with automatic adjustment of role-based policies for users and guests based on location, data and application profile. Enhanced reporting and analysis also provides administrators with more intelligence on the behavior of their network, users, devices, applications and threats. Provide Guest Access with Confidence Enhanced Visibility & Reporting and Overal User Experience Extended Single Sign On Capabilities

The FortiASIC Advantage

FortiASIC is the foundation of Fortinet’s unique hardware technology. FortiASIC is a family of purpose built, high-performance network and content processors that uses an intelligent proprietary content scanning engine and multiple algorithms to accelerate compute-intensive security services. FortiASIC provides the performance required to deliver enterprise and carrier-class UTM services. Coupled with the FortiOS security hardened Operating System, FortiASIC delivers extreme performance and security.

Technical Specifications:

FortiGate Model	FortiGate-620B	FortiGate-621B
Hardware Specifications
Standard 10/100/1000 Interfaces (RJ-45)	20	20
Network Interfaces with Optional Module	24	N/A
AMC Expansion Slot	1 Single Width	N/A
Local Storage Included	N/A	64 GB SSD
System Performance
Firewall Throughput (1518 byte UDP)	16 Gbps (20 Gbps with ASM-FB4)	16 Gbps
Firewall Throughput (64 byte UDP)	16 Gbps (20 Gbps with ASM-FB4)	16 Gbps
IPSec VPN Throughput	12 Gbps (15 Gbps with ASM-FB4)	12 Gbps
IPS Throughput	2.5 Gbps
Antivirus Throughput (Proxy-based)	350 Mbps
Antivirus Throughput (Flow-based)	750 Mbps
Gateway-to-Gateway IPSec VPN Tunnels (System / VDOM)	10,000 / 5,000
Client-to-Gateway IPSec VPN Tunnels	20,000
SSL-VPN Users (Recommended Max)	500
SSL-VPN Throughput	300 Mbps
Concurrent Sessions (TCP)	1,000,000
New Sessions/Sec (TCP)	25,000
Policies (Max)	100,000
Unlimited User Licenses	Yes
Virtual Domains (VDOMs)	10
Mean Time Between Failures	More than 5 years
High Availability Configurations	Active/Active, Active/Passive, Clustering
Dimensions
Height	1.77 in (4.5 cm)
Width	17 in (43.2 cm)
Length	15.5 in (39.4 cm)
Weight	20 lb (9.1 kg)
Rack Mountable	Yes
Environmental
AC Power Required	100-240 VAC, 60-50 Hz, 5-3 Amp (Max)
Heat Dissipation	604 BTU
DC Power	-48V DC (Normal)
Power Consumption (AVG)	225 W
Redundant Power Supply	Requires External Option (FG-620B-RPS)
Operating Temperature	32 - 104 °F (0 - 40 °C)
Storage Temperature	-13 - 158 °F (-25 - 70 °C)
Humidity	20 to 90% non-condensing
Compliance
Compliance	FCC Class A Part 15, UL/CUL, CE, C Tick, VCCI
Certifications	ICSA Labs: Firewall, SSL VPN, IPS, Antivirus

All performance values are "up to" and vary depending on system configuration Antivirus performance is benchmarked using HTTP traffic (32 Kbyte Objects) IPS performance is measured base on NSS like test methodology with 44K HTTP files.

AMC Expansion Modules:

Fortinet AMC Expansion Modules
The AMC standard, also known as AdvancedMC™, was developed by the PCI Industrial Computers Manufacturers Group (PICMG), which has over 100 companies building to the specification. AdvancedMC has been developed to meet the requirements for the next generation of carrier grade communications equipment. Accelerated Interface Modules The Fortinet ASM-FB4 accelerated interface module adds incremental hardware accelerated network interfaces to FortiGate platforms for wire-speed firewall performance and near wire-speed IPSec VPN performance. Up to 12 Gbps aggregate firewall throughput and up to 9 Gbps aggregate VPN throughput is possible with the FG-300 series when using the optional ASM-FB4 Fortinet Accelerated Interface Module. Bypass Modules Fortinet ASM-CX4 and ASM-FX2 modules provide bypass functionality to FortiGate platforms, automatically bridging network traffic in the event of a system or power failure. Storage Modules Fortinet storage modules provide localized storage facilities to FortiGate platforms, with support for builtin and external storage systems.
	4-Port FortiASIC hardware accelerated Gigabit SFP module (Includes 4x SX SFP transceivers) 4 Gbps Firewall performance 3 Gbps IPsec (3DES) VPN performance
	80 Gigabyte hard disk drive storage module High duty cycle hard drive design

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiGate 620B/621B Datasheet (PDF).