Fortinet FortiGate 800F

Overview:

The FortiGate-800 network security system provides high performance, flexibility, and manageability for mid-size enterprises. Its appliance form factor and ease of configuration allow organizations to quickly deploy any or all of its multi-threat functionality. This makes it ideal as a complement to existing solutions or as an all-in-one security gateway with firewall, VPN, intrusion prevention, antivirus/antispyware/antimalware and antispam capabilities. The FortiGate-800 appliance features 4 copper Gigabit Ethernet ports (10/100/1000 or 4 Gigabit Ethernet SPF ports on the 800F) for networks running at gigabit speeds and 4 user-definable 10/100 ports for redundant WAN links, high availability, and multi-zone capabilities. Administrators can easily segment the network into zones (based on department, business unit, customer, or any other network division) with unique security policies for each; while a clustering option supports high-availability applications.

FortiGate-800F Benefits:

• Integrated, all-in-one security deploys with any mix of security functions enabled to support existing systems and add new functions easily.
• Ideal for internal security segmentation to provide defense-in-depth protection.
• SFP ports increase deployment flexibility.
• High availability options ensure network availability.
• Available FortiManager and FortiAnalyzer appliances simplify security management and reduce operating expenses.
• FortiGuard Subscription Services deliver automated, real-time, up-to-date protection against security threats and exploits.

Blended Security Threats:

Network security threats are devastating to enterprise networks. Intellectual property, revenue, customer and company records, and other mission-critical resources are at risk. Unfortunately enterprise networks often lack adequate security solutions much less the human resources to recognize the business risks – that is until the damage is already done. Point-products providing security solutions for specific purposes may provide adequate protection against specific single-threaded threats, however a new breed of blended-threats and attacks utilize a multitude of attack vectors. Furthermore assembling an array of point products is costly and requires significant expertise to engineer, maintain and manage. Most small to medium size businesses cannot afford such overhead, yet should tragedy strike the potential business costs are enormous. Fortunately cost-effective, evergreen multi-threat protection is now available to businesses of any size. The FortiGate-200 through -800 series of advanced security systems integrate all-in-one multi-threat protection into cost-effective plug-n-play security platforms that effectively block today’s blended attacks including intrusion attempts, viruses, worms, phishing, spyware, spam and many other types of malware. The Fortinet FortiGuard® global 24x7 threat detection and update service provides the networking industry’s fastest response time to ensure latest security threats are detected and automatic security updates are available before your business is impacted.

Security Platforms That Meet the Challenge:

FortiGate security platforms are based on Fortinet’s revolutionary FortiASIC Content Processor technology, which enables a comprehensive suite of real-time security solutions while delivering the highest levels of network performance. The FortiGate-200-800 series platforms provide a complete security solution including content inspection firewall, IPSEC and SSL VPN, intrusion prevention, Web filtering, antispam, antivirus, antispyware, and IM and P2P controls that prevent blended attacks, as well as providing integrated traffic shaping functions, making them the most cost effective, convenient and powerful network protection solutions available. In addition, Fortinet’s per-device security subscriptions and turnkey appliance design makes them an affordable and easy-to-manage security solution for small-to-medium enterprises.

Key Problems: Solutions: Firewalls alone do not provide adequate protection against the ever changing cyber threats that are hidden inside the application layer Complete Unified Threat Management (UTM) security services that are automatically updated is required to fully protect the network and users from blended threats Migration to web based or hosted applications requires a new level of application and content protection UTM system with hardware acceleration provides application level protection without impacting performance and the user experience Deploying multiple point-products to address specific security needs are complex to manage and maintain and do not provide integrated protection Multi-layer UTM security solutions provided tightly integrated protection services with unified management, logging and reporting Financial and government compliance requirements like SOX and FRCP requires comprehensive logging, reporting and data archiving Unified management, logging and reporting with a comprehensive and powerful toolset for analyzing, reporting and managing compliance

Fortinet’s Multi-Layered Security Solution:

Fortinet’s multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Deployments:

Fortinet’s family of mid-range security appliances are designed for mid-size enterprise networks.

Secure Web Access

The primary source of threats to the Enterprise network is undoubtedly from uncontrolled employee access to the Internet and Web-based services. Yet today every business not only relies on the Internet for productivity enhancements and competitive advantage, but literally depends on the Internet for business success. With all the benefits of the Internet, also come potential risks such as viruses and worms that disrupt services or destroy valuable data, and a myriad of security challenges including information theft/ leakage, inappropriate usage and the need to comply with regulatory mandates. The FortiGate-200-800 series of midrange security appliances provide a turn-key suite of ICSA Labs certified multi-layered security applications to stop blended attacks from affecting your business.

Secure Perimeter Access

Enterprises often have complex network topologies and, therefore, complex network security requirements. Typical deployments mean linking several sites together—ranging from home offices to larger remote offices—and ensuring that the security implementation is seamless. Security devices for these environments need to provide a wide variety of performance metrics and connectivity options. Fortinet’s line of mid-range security appliances offer integrated 4-port switches, 10/100/1000 Ethernet ports, up to 1 Gbps firewall throughput, and up to 200 Mbps 3DES VPN throughput. These options include the full security suite of ICSA Labs certified multi-layered security applications to stop blended attacks from affecting your enterprise’s productivity.

Secure Messaging Access

The FortiGate line of security appliances has a flexible architecture that allows each one to quickly adapt to emerging technologies and threats such as IM, P2P, and VOIP applications and identity theft methods such as spyware, phishing, and pharming attacks. Flexible deployment options such as NAT, Route, and Transparent modes allow FortiGate devices to be easily deployed into most network designs. Core networking features, such as High Availability (HA) and support for dynamic routing protocols like RIP, OSPF, and BGP, allow them to be deployed into complex full mesh network environments that require maximum network availability.

Technical Specifications:

FortiGate 200-800 Series Specifications
FortiGate Models
	FortiGate-200A	FortiGate-224B	FortiGate-300A	FortiGate-400A	FortiGate-500A	FortiGate-800/800F
Hardware Specifications:
Total 10/100 Interfaces	8	26	4	4	8	4
Switch Interfaces	4	24	n/a	n/a	4	n/a
Configurable Ports	n/a	n/a	4	4	4	4
Fixed WAN / DMZ Ports	2/2	2	n/a	n/a	n/a	n/a
Total 10/100/1000 Interfaces (Copper)	n/a	2 (switched)	2	2	2	4 (FG-800 only)
1Gb SFP Interfaces (Fiber)*	n/a	n/a	n/a	n/a	n/a	4 (FG-800F only)
* SX transceivers are standard; LX transceivers are available as an additional option
System Performance:
Firewall Throughput	150 Mbps	150 Mbps	400 Mbps	500 Mbps	600 Mbps	1 Gbps
VPN 3DES Throughput	70 Mbps	70 Mbps	120 Mbps	140 Mbps	150 Mbps	200 Mbps
Antivirus Throughput	30 Mbps	30 Mbps	70 Mbps	100 Mbps	120 Mbp	150 Mbps
IPS Throughput	100 Mbps	100 Mbps	200 Mbps	300 Mbps	400 Mbps	600 Mbps
Dedicated IPSec VPN Tunnels	200	200	1,500	2,000	3,000	3,000
Unlimited User Licenses	Yes	Yes	Yes	Yes	Yes	Yes
Concurrent Sessions	400,000	400,000	400,000	400,000	400,000	400,000
New Sessions/Second.	4K	4K	10K	10K	10K	10K
Policies	2,000	2,000	5,000	5,000	8,000	20,000
* Antivirus performance is measured based on HTTP traffic with 32Kbyte file attachments and IPS performance is measured base on UDP traffic with 512 byte packet size. Actual performance may vary depends on network traffic and environment
Physical:
Dimensions (H, W, L, weight)	1.75 inches, 16.8 inches, 10 inches,7.3 lbs	1.75 inches, 16.8 inches,10 inches,7.3 lbs	1.75 inches, 16.8 inches,10 inches,7.3 lbs	1.75 inches,17 inches,12.6 inches,11.9 lbs	1.75 inches, 17 inches,12.6 inches, 12.6 inches,11.9 lbs	1.75 inches,16.75 inches,12 inches,10 lbs
Rack Mountable	Yes	Yes	Yes	Yes	Yes	Yes
AC Power Required	100-240 VAC, 50-60 Hz, 8.0 Amp (Max)
Power Consumption (AVG)	100W	110W	120W	130W	140W	100W
Environmental	Operating temperature: 32 to 104 deg F (0 to 40 deg C) Storage temperature: -13 to 158 deg F (-25 to 70 deg C) Humidity: 5 to 95% non-condensing
Compliance	FCC Class A Part 15, UL/CUL, C Tick, CE, VCCI
Certifications	ICSA Labs Certified: Firewall, Antivirus, IPS

Benefits:

Fortinet’s ASIC-Based Advantage:

FortiASIC is the foundation of Fortinet’s unique hardware technology. FortiASIC is a family of purpose built, high-performance network and content processors that uses an intelligent proprietary content scanning engine and multiple algorithms to accelerate compute-intensive security services. FortiASIC provides the performance required to deliver enterprise and carriers-class UTM services. Coupled with the FortiOS security hardened Operating System, FortiASIC delivers extreme performance and security.

FortiOS: Developed for Security:

FortiOS is the software foundation of FortiGate multi-threat security platforms. Developed solely for security, performance and reliablity, it is a purpose-built operating system that leverages power of the the FortiAISC content and network processors. FortiOS enables a comprehensive suite of security services – content inspection firewall, IPS, antivirus, web filtering, antispam, IM/P2P, virtual network security and bandwidth shaping. FortiOS is a complete suite of UTM security services and is certified for Common Criteria EAL 4+.

Features:

FortiGate-200-800-series platforms provide the following security features:
 

Services & Support:

FortiGuard Security Subscription Services:

With FortiGuard™ Security Subscription services enabled, customers can rest assured that their Fortinet security platforms are performing optimally and protecting their corporate assets with the latest security intelligence. FortiGuard services deliver the latest security content directly to Fortinet products. Fortinet offers four standard subscription services: Antivirus, Intrusion Prevention, Web Filtering and Antispam services to protect against multiple types of new and emerging threats. FortiGuard services are updated by the Fortinet Global Threat Research Team, a team of experts working around the clock and around the world to keep Fortinet customers secure. The Fortinet Global Threat Research Team enables Fortinet to deliver comprehensive multi-threat protection, including zero-day protection from new and emerging threats. The FortiGuard Network is a network of global data centers that automatically deliver updates quickly and reliably to Fortinet products.

For customers requiring guaranteed response time to suspicious malware threats, Fortinet offers a premier version of the FortiGuard Antivirus Security Subscription service. Along with Service Level Agreements (SLAs), the premier service provides the customer with a direct conduit to the Fortinet Global Threat Research Team.

Fortinet also offers a premier version of the FortiGuard Web Filtering Security Subscription service. This higher-tier service offering includes guaranteed SLAs and a larger quota for rating URLs submitted to the Fortinet Global Threat Research Team.

FortiCare Support Services:

Includes:

• 24/7/365 FortiCare Web-based support
• 8x5 telephone-based technical support (24x7 - optional)
• 1-Year limited hardware warranty
• 90-day limited software warranty
• Technical account management service available
• Professional services available

Documentation:

Download the Fortinet FortiGate 200-800 Series Datasheet (.PDF)