Fortinet FortiGate 620B

Overview:

The FortiGate-620B raises the bar for mid-size enterprise security devices. Incorporating multiple FortiASIC Network Processors (NP2) for wire-speed firewall/VPN operation and the FortiASIC content processor (CP) for content inspection acceleration, the FortiGate-620B yields unmatched multi-threat performance across the highest port density of any product in its class. AMC module options offer additional deployment and operational flexibility, expanding the FortiGate-620B base model's 20 10/100/1000 Gigabit Ethernet ports to 24, or adding an internal HDD module for local logging and archiving. The FortiGate-620B's accelerated security throughput, high port density, and ease of management allows medium and large sized enterprises to enjoy a degree of internal network security segmentation and policy control previously available only within larger-scale solutions.

The evolution of network security threats has driven the expansion of security products to include multiple threat recognition systems within a single appliance. Unified Threat Management systems from Fortinet include firewall, VPN, intrusion prevention, antivirus, antimalware, antispam and web content filtering to identify numerous types of threats from a single device. While the ease of use of UTM products has created a prolific adoption trend, administrators still struggle with limited physical deployment options due to the available throughput and port density of mid-range devices.

The FortiGate-620B and FortiGate-621B appliances answer the call of growing enterprise networks by integrating a purpose-built security processing ASIC, known as the FortiASIC Network Processor, into the FortiGate system to deliver security throughput at switching speeds. Sixteen hardware accelerated interfaces (expandable to 20 on FortiGate-620B) allow networks to enforce firewall policy between network segmentation points for layered security with switch-like performance. An additional purpose-built ASIC, known as the FortiASIC Content Processor, provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning. The addition of an Advanced Mezzanine Card (AMC) expansion slot on the FortiGate-620B allows for even more flexibility, offering additional ASICaccelerated ports for additional throughput or hard disk-based storage for local logging and content archiving. The FortiGate-621B includes 64 GB of local solid state storage. With numerous accelerated multi-threat security interfaces, organizations can create multiple security zones for various departments, users, access methods, and even devices to enforce network security at accelerated speeds.

FortiGate-620B/621B Benefits:

• Delivers up to 20 Gbps firewall throughput, with optional AMC module
• 20 GbE interfaces (24 total with optional AMC module on FortiGate-620B) enables flexibility and performance for your growing network
• IPv6-ready platform with strong authentication options for secure network access and security policy compliance
• Integrated consolidated security features offer the ability to augment existing systems and add new functionality or replace aging security infrastructures
• A “single pane of glass” management console makes it easy for you to deploy and manage
• High port density enables network security segmentation for security event isolation, policy granularity and improved network visibility

UTM Evolution:

The evolution of network security threats has driven the expansion of security products to include multiple threat recognition systems within a single appliance. Unified Threat Management systems from Fortinet include firewall, VPN, intrusion prevention, antivirus, antimalware, antispam and web content filtering to identify numerous types of threats from a single device. While the ease of use of UTM products has created a prolific adoption trend, administrators still struggle with limited physical deployment options due to the available throughput and port density of mid-range devices.

Perimeter Dissemination:

Over time, as network devices and user habits have evolved, networks experienced a dissemination of the classic perimeter that had previously surrounded and protected their networks. The mobility offered by laptops and more recently, WiFi-enabled smart phones, have introduced security threats from the access layer, where LAN-side users connect to the network. The ideal network security solution would offer line rate throughput on numerous ports to facilitate the segmentation of the LAN into individual security zones, offering granular security policies, the isolation of security events, and increased visibility into network traffic and events.

ASIC-Accelerated Multi-Threat Security Solution:

The FortiGate-620B answers the call of growing enterprise networks by integrating a purpose-built security processing ASIC, known as the FortiASIC Network Processor, designed to deliver security throughput at switching speeds. Sixteen hardware accelerated interfaces (expandable to 20) allow networks to enforce firewall policy between network segmentation points for layered security with switch-like performance. An additional purpose-built ASIC, known as the FortiASIC Content Processor, provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning for dangerous traffic streams. The inclusion of an Advanced Mezzanine Card (AMC) expansion slot allows for even more flexibility, offering additional ASIC-accelerated ports for additional throughput or disk-based storage for local logging and content archiving. With numerous accelerated multi-threat security interfaces, organizations can create multiple security zones for various departments, users, access methods, and even devices to enforce network security at accelerated speeds.

FortiGate Multi-Threat Security Solutions

Fortinet's multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. Finally, FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Features & Benefits:

FortiOS 4.0 Software Redefines Networks Security

FortiOS 4.0 is a purpose-built operating system that leverages the power of specialized FortiASIC hardware to offer increased levels of security and performance. Fortinet developed FortiOS 4.0 software solely for the FortiGate multi-threat security platform. FortiOS software enables a comprehensive suite of security services – firewall, VPN, intrusion prevention, antimalware, antispam, web filtering, application control, data loss prevention, vulnerability management, and end point network access control.

The FortiASIC Advantage

FortiASIC is the foundation of Fortinet’s unique hardware technology. FortiASIC is a family of purpose built, high-performance network and content processors that uses an intelligent proprietary content scanning engine and multiple algorithms to accelerate compute-intensive security services. FortiASIC provides the performance required to deliver enterprise and carrier-class UTM services. Coupled with the FortiOS security hardened Operating System, FortiASIC delivers extreme performance and security.

Technical Specifications:

FortiGate Model	FortiGate-620B	FortiGate-621B
Hardware Specifications
Standard 10/100/1000 Interfaces (RJ-45)	20	20
Network Interfaces with Optional Module	24	N/A
AMC Expansion Slot	1 Single Width	N/A
Local Storage Included	N/A	64 GB SSD
System Performance
Firewall Throughput (1518 byte UDP)	16 Gbps (20 Gbps with ASM-FB4)	16 Gbps
Firewall Throughput (64 byte UDP)	16 Gbps (20 Gbps with ASM-FB4)	16 Gbps
IPSec VPN Throughput	12 Gbps (15 Gbps with ASM-FB4)	12 Gbps
IPS Throughput	2.5 Gbps
Antivirus Throughput (Proxy-based)	350 Mbps
Antivirus Throughput (Flow-based)	750 Mbps
Gateway-to-Gateway IPSec VPN Tunnels (System / VDOM)	10,000 / 5,000
Client-to-Gateway IPSec VPN Tunnels	20,000
SSL-VPN Users (Recommended Max)	500
SSL-VPN Throughput	300 Mbps
Concurrent Sessions (TCP)	1,000,000
New Sessions/Sec (TCP)	25,000
Policies (Max)	100,000
Unlimited User Licenses	Yes
Virtual Domains (VDOMs)	10
Mean Time Between Failures	More than 5 years
High Availability Configurations	Active/Active, Active/Passive, Clustering
Dimensions
Height	1.77 in (4.5 cm)
Width	17 in (43.2 cm)
Length	15.5 in (39.4 cm)
Weight	20 lb (9.1 kg)
Rack Mountable	Yes
Environmental
AC Power Required	100-240 VAC, 60-50 Hz, 5-3 Amp (Max)
Heat Dissipation	604 BTU
DC Power	-48V DC (Normal)
Power Consumption (AVG)	225 W
Redundant Power Supply	Requires External Option (FG-620B-RPS)
Operating Temperature	32 - 104 °F (0 - 40 °C)
Storage Temperature	-13 - 158 °F (-25 - 70 °C)
Humidity	20 to 90% non-condensing
Compliance
Compliance	FCC Class A Part 15, UL/CUL, CE, C Tick, VCCI
Certifications	ICSA Labs: Firewall, SSL VPN, IPS, Antivirus

All performance values are "up to" and vary depending on system configuration Antivirus performance is benchmarked using HTTP traffic (32 Kbyte Objects) IPS performance is measured base on NSS like test methodology with 44K HTTP files.

AMC Expansion Modules:

Fortinet AMC Expansion Modules
The AMC standard, also known as AdvancedMC™, was developed by the PCI Industrial Computers Manufacturers Group (PICMG), which has over 100 companies building to the specification. AdvancedMC has been developed to meet the requirements for the next generation of carrier grade communications equipment. Accelerated Interface Modules The Fortinet ASM-FB4 accelerated interface module adds incremental hardware accelerated network interfaces to FortiGate platforms for wire-speed firewall performance and near wire-speed IPSec VPN performance. Up to 12 Gbps aggregate firewall throughput and up to 9 Gbps aggregate VPN throughput is possible with the FG-300 series when using the optional ASM-FB4 Fortinet Accelerated Interface Module. Bypass Modules Fortinet ASM-CX4 and ASM-FX2 modules provide bypass functionality to FortiGate platforms, automatically bridging network traffic in the event of a system or power failure. Storage Modules Fortinet storage modules provide localized storage facilities to FortiGate platforms, with support for builtin and external storage systems.
	4-Port FortiASIC hardware accelerated Gigabit SFP module (Includes 4x SX SFP transceivers) 4 Gbps Firewall performance 3 Gbps IPsec (3DES) VPN performance
	80 Gigabyte hard disk drive storage module High duty cycle hard drive design

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiGate 620B/621B Datasheet (PDF).