Call a Specialist Today! 800-886-5787

Fortinet FortiGate-VM04
Unified Threat Management Solutions

Fortinet FortiGate Virtual Appliances

Fortinet FortiGate Series
FortiGate VM04
Fortinet FortiGate VM04
FortiGate-VM "virtual appliance" designed for VMware ESX and ESXi platforms.  4 x vCPU cores and (up to) 6 GB RAM.
#FG-VM04
Our Price: $14,000.00
Fortinet FortiGate VM04-Xen
FortiGate-VM "virtual appliance" designed for AWS, Citrix XenServer & Open Source Xen platforms.  4 x vCPU cores and (up to) 6 GB RAM.
#FG-VM04-Xen
Our Price: $14,000.00
Fortinet FortiGate VM04-HV
FortiGate-VM "virtual appliance" designed for Microsoft Hyper-V platform.  4 x vCPU cores and (up to) 6 GB RAM.
#FG-VM04-HV
Our Price: $14,000.00
Fortinet FortiGate VM04-KVM
FortiGate-VM "virtual appliance" designed for KVM platform.  4 x vCPU cores and (up to) 6 GB RAM.
#FG-VM04-KVM
Our Price: $14,000.00
Fortinet FortiGate VM04-AWS
FortiGate-VM "virtual appliance" designed for AWS platform (BYOL); 4 x vCPU cores.
#FG-VM04-AWS
Our Price: $14,000.00
Fortinet FortiGate VM04-AZ
FortiGate-VM "virtual appliance" designed for MSFT Azure platform (BYOL); 4 x vCPU cores.
#FG-VM04-AZ
Our Price: $14,000.00

Click here to jump to more pricing!

Live Demo! Click here to load

Overview:

FortiGate virtual appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. Moreover, FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-dbased FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.

FortiGate Virtual Appliance Features & Benefits:

FortiGate virtual appliances offer protection from a broad array of threats, with support for all of the security and networking services offered by the FortiOS operating system. In addition, the appliances offer these benefits:

  • Increased visibility and control over communications within the virtualized infrastructure
  • Rapid security deployment capability
  • Ability to manage virtual security appliances and physical security appliances from a single pane of glass management platform
  • Simple licensing with no per-user fees

Proven Success in Virtual Environments

Fortinet introduced Virtual Domain (VDOM) technology in 2004. Since that time, we have offered virtualized security to service providers and enterprises alike. With the addition of the virtual appliance form factor, Fortinet now provides greater choice and flexibility to customer by providing the ability to deploy our security solution within an existing virtualization infrastructure.

Choice of Form Factor

Very few organizations use 100% hardware IT infrastructure or 100% virtual IT infrastructure today, creating a need for both hardware appliances and virtual appliances in your security strategy. Fortinet allows you to build the security solution that's right for your environment, which often includes a mix of virtual and physical IT infrastructure. We also allow you to manage your Fortinet security from a single pane of glass management platform, allowing you to control and manage hardware appliances, virtual appliances, or a combination of both.

Multi-Threat Security

Using the advanced FortiOS operating system, FortiGate appliances effectively neutralize a wide range of security threats facing your virtualized environment. Whether deployed at the edge as a front-line defense, or deep within the virtual infrastructure for inter-zone security, FortiGate appliances protect your infrastructure with some of the most effective security available today.

FortiGate Virtual Appliances deployed inside the virtual infrastructure
FortiGate Virtual Appliances deployed inside the virtual infrastructure

Fortinet Multi-Threat SecurityFortiOS Software:

Integrated Multi-Threat Protection

The FortiGate product family provides cost-effective, comprehensive protection against network, content, and application-level threats. It defends your environment from complex, sophisticated attacks without degrading network availability and affecting application performance.

FortiGate platforms combine the purpose-built FortiOS™ security operating system with custom FortiASIC processors and other hardware to provide a comprehensive and highperformance array of security and networking functions.

The FortiGate product family delivers the highest level of network, content, and application security for enterprises of all sizes, while reducing total cost of ownership. With Fortinet, you deploy the network security you need to protect your intellectual property, preserve the privacy of critical customer information, and maintain regulatory compliance.

Fortinet’s ASIC-Based Advantage

FortiASIC is the foundation of Fortinet’s unique hardware technology. FortiASIC is a family of purpose built, high-performance network and content processors that uses an intelligent proprietary content scanning engine and multiple algorithms to accelerate computeintensive security services. FortiASIC provides the performance required to deliver enterprise and carrier-class UTM services. Coupled with the FortiOS security hardened Operating System, FortiASIC delivers extreme performance and security.

FortiOS 5.0 Software

FortiOS 5.0, the world's most powerful security operating system, is the foundation for all Fortinet FortiGate integrated security platforms. It provides more security, intelligence and control to help enterprises be better protected against today's advanced threats and enable more secure BYOD environments.

More Security More Security Fighting Advanced Threats
More Security to fight advanced threats. A client reputation feature gives enterprises a cumulative security ranking of each device based on a range of behaviors and provides specific, actionable information that enables organizations to identity compromised systems and potential zero-day attacks in real time. The new advanced anti-malware detection system adds an on-device behavior-based heuristic engine and cloud-based AV services that includes an operating system sandbox and botnet IP reputation database. Together with superior industry-validated AV signatures, FortiOS 5.0 delivers unbeatable multi-layered protection against today's sophisticated malware.
  • Client Reputation with Cumulative Rankings
  • OS Sandbox
  • Advanced Botnet Protection
More Control More Control Securing Mobile Devices
More Control to secure mobile devices and BYOD environments by identifying devices and applying specific access policies as well as ecurity profiles, according to the device type or device group, location and usage.
  • Device Identification & Visibility
  • New Identity Based Policies
  • Endpoint Control
More Intelligence More Intelligence Build Smart Policies
More Intelligence with automatic adjustment of role-based policies for users and guests based on location, data and application profile. Enhanced reporting and analysis also provides administrators with more intelligence on the behavior of their network, users, devices, applications and threats.
  • Provide Guest Access with Confidence
  • Enhanced Visibility & Reporting and Overal User Experience
  • Extended Single Sign On Capabilities

FortiOS Security Services
Firewall
  • ICSA Labs Certified (Enterprise Firewall)
  • NAT, PAT, Transparent (Bridge)
  • Routing Mode (RIP, OSPF, BGP, Multicast)
  • Policy-Based NAT
  • Virtual Domains (NAT/Transparent mode)
  • VLAN Tagging (802.1Q)
  • Group-Based Authentication & Scheduling
  • SIP/H.323 /SCCP NAT Traversal
  • WINS Support
  • Explicit Proxy Support (Citrix/TS etc.)
  • VoIP Security (SIP Firewall/RTP Pinholing)
  • Granular Per-Policy Protection Profiles
  • Identity/Application-Based Policy
  • Vulnerability Management
  • IPv6 Support (NAT/Transparent mode)

Virtual Private Network (VPN)

  • ICSA Labs Certvified (IPSec)
  • PPTP, IPSec, and SSL
  • Dedicated Tunnels
  • DES, 3DES, and AES Encryption Support
  • SHA-1/MD5 Authentication
  • PPTP, L2TP, VPN Client Pass Through
  • Hub and Spoke VPN Support
  • IKE Certificate Authentication (v1 & v2)
  • IPSec NAT Traversal
  • Automatic IPSec Configuration
  • Dead Peer Detection
  • RSA SecurID Support
  • SSL Single Sign-On Bookmarks
  • SSL Two-Factor Authentication
  • LDAP Group Authentication (SSL)

Networking/Routing

  • Multiple WAN Link Support
  • DHCP Client/Server
  • Policy-Based Routing
  • Dynamic Routing for IPv4 and IPv6 (RIP, OSPF, BGP, & Multicast for IPv4)
  • Multi-Zone Support
  • Route Between Zones
  • Route Between Virtual LANs (VDOMS)
  • Multi-Link Aggregation (802.3ad)
  • IPv6 Support (Firewall, DNS, Transparent Mode, SIP, Dynamic Routing, Administrative Access, Management)
  • VRRP and Link Failure Control
  • sFlow Client

User Authentication Options

  • Local Database
  • Windows Active Directory (AD) Integration
  • External RADIUS/LDAP Integration
  • Xauth over RADIUS for IPSEC VPN
  • RSA SecurID Support
  • LDAP Group Support

Data Center Optimization

  • Web Server Caching
  • TCP Multiplexing
  • HTTPS Offloading
  • WCCP Support
Antivirus/Antispyware
  • ICSA Labs Certified (Gateway Antivirus)
  • Includes Antispyware and Worm Prevention: HTTP/HTTPS, SMTP/SMTPS, POP3/POP3S, IMAP/IMAPS, FTP, IM Protocols
  • Automatic “Push” Content Updates
  • File Quarantine Support
  • Databases: Standard, Extended, Extreme, Flow IPv6 Support

Web Filtering

  • 76 Unique Categories
  • FortiGuard Web Filtering Service Categorizes over 2 Billion Web pages
  • HTTP/HTTPS Filtering
  • Web Filtering Time-Based Quota
  • URL/Keyword/Phrase Block
  • URL Exempt List
  • Content Profiles
  • Blocks Java Applet, Cookies, Active X
  • MIME Content Header Filtering
  • IPv6 Support

Application Control

  • Identifiy and Control Over 1400 Applications
  • Control Popular IM/P2P Apps Regardless of Port/Protocol:
    • AOL-IM, Yahoo, MSN, KaZaa, ICQ, Gnutella, BitTorrent, MySpace, WinNY, Skype, eDonkey, Facebook

High Availability (HA)

  • Active-Active, Active-Passive
  • Stateful Failover (FW and VPN)
  • Device Failure Detection and Notification
  • Link Status Monitor
  • Link failover
  • Server Load Balancing

WAN Optimization

  • Bi-Directional / Gateway to Client/Gateway
  • Integrated Caching and Protocol Optimization
  • Accelerates CIFS/FTP/MAPI
    /HTTP/HTTPS/Generic TCP

Virtual Domains (VDOMs)

  • Separate Firewall/Routing Domains
  • Separate Administrative Domains
  • Separate VLAN Interfaces
  • 10 VDOM License Standard, Upgradable to More

Wireless Controller

  • Unified WiFi and Access Point Management
  • Automatic Provisioning of APs
  • On-wire Detection and Blocking of Rogue APs
  • Virtual APs with Different SSIDs
  • Multiple Authentication Methods

Traffic Shaping

  • Policy-based Traffic Shaping
  • Application-based and Per-IP Traffic Shaping
  • Differentiated Services (DiffServ) Support
  • Guarantee/Max/Priority Bandwidth
  • Shaping via Accounting, Traffic Quotas, and Per-IP
Intrustion Prevention System (IPS)
  • ICSA Labs Certified (NIPS)
  • Protection From Over 3000 Threats
  • Protocol Anomaly Support
  • Custom Signature Support
  • Automatic Attack Database Update
  • IPv6 Support

Data Loss Prevention (DLP)

  • Identification and Control Over Sensitive Data in Motion
  • Built-in Pattern Database
  • RegEx-based Matching Engine for Customized Patterns
  • Configurable Actions (block/log)
  • Supports IM, HTTP/HTTPS, and More
  • Many Popular File Types Supported
  • International Character Sets Supported

Antispam

  • Support for SMTP/SMTPS, POP3/POP3S, IMAP/IMAPS
  • Real-Time Blacklist/Open Relay Database Server
  • MIME Header Check
  • Keyword/Phrase Filtering
  • IP Address Blacklist/Exempt List
  • Automatic Real-Time Updates From FortiGuard Network

Endpoint Compliance and Control

  • Monitor & Control Hosts Running FortiClient Endpoint Security

Management/Administration

  • Console Interface (RS-232)
  • WebUI (HTTP/HTTPS)
  • Telnet / Secure Command Shell (SSH)
  • Command Line Interface
  • Role-Based Administration
  • Multi-language Support: English, Japanese, Korean, Spanish, Chinese (Simplified & Traditional), French
  • Multiple Administrators and User Levels
  • Upgrades and Changes via TFTP and WebUI
  • System Software Rollback
  • Configurable Password Policy
  • Optional FortiManager Central Management

Logging/Monitoring

  • Local Event Logging
  • Log to Remote Syslog/WELF server
  • Graphical Real-Time and Historical Monitoring
  • SNMP Support
  • Email Notification of Viruses And Attacks
  • VPN Tunnel Monitor
  • Optional FortiAnalyzer Logging / Reporting
  • Optional FortiGuard Analysis and Management Service

Technology:


Firewall

Fortinet firewall technology delivers complete content and network protection by combining stateful inspection with a comprehensive suite of powerful security features. Application control, antivirus, IPS, Web filtering and VPN, along with advanced features such as an extreme threat database, vulnerability management and flowbased inspection work in concert to identify and mitigate the latest complex security threats. The security-hardened FortiOS operating system works together with purpose-built FortiASIC processors to accelerate inspection throughput and identification of malware.

Features:

  • NAT, PAT and Transparement (Bridge)
  • Policy-Based NAT
  • SIP/H.323/SCCP NAT Traversal
  • VLAN Tagging (802.1Q)
  • Vulnerability Management
  • IPv6 Support

Firewall Throughput:
FortiGate-VM00: 500 Mbps
FortiGate-VM01: 1.0 Gbps
FortiGate-VM02: 1.6 Gbps
FortiGate-VM04: 2.0 Gbps
FortiGate-VM08: 4.0 Gbps

Antivirus / Antispyware

Antivirus content inspection technology protects against viruses, spyware, worms, and other forms of malware which can infect network infrastructure and endpoint devices. By intercepting and inspecting application-based traffic and content, antivirus protection ensures that malicious threats hidden within legitimate application content are identified and removed from data streams before they can cause damage. FortiGuard subscription services ensure that FortiGate devices are updated with the latest malware signatures for high levels of detection and mitigation.

Features Supported:

  • Automatic Database Updates
  • Proxy Antirus
  • Flow-based Antirus
  • File Quarantine
  • IPv6 Support

Antivirus Performance:
FortiGate-VM00: 100 Mbps
FortiGate-VM01: 200 Mbps
FortiGate-VM02: 350 Mbps
FortiGate-VM04: 500 Mbps
FortiGate-VM08: 600 Mbps

VPN

Fortinet VPN technology provides secure communications between multiple networks and hosts, using SSL and IPsec VPN technologies. Both services leverage our custom FortiASIC processors to provide acceleration in the encryption and decryption steps. The FortiGate VPN service enforces complete content inspection and multithreat protections including antivirus, intrusion prevention and Web filtering. Traffic optimization provides prioritization for critical communications traversing VPN tunnels.

Features:

  • IPSec and SSL VPN
  • DES, 3DES, AES and SHA-1/MD5 Authentication
  • PPTP, L2TP, VPN Client Pass Through
  • SSL Single Sign-On Bookmarks
  • Two-Factor Authentication
IPSec VPN Throughput:
FortiGate-VM00: 100 Mbps
FortiGate-VM01: 125 Mbps
FortiGate-VM02: 150 Mbps
FortiGate-VM04: 175 Mbps
FortiGate-VM08: 200 Mbps
SSL VPN Throughput:
FortiGate-VM00: 150 Mbps
FortiGate-VM01: 170 Mbps
FortiGate-VM02: 300 Mbps
FortiGate-VM04: 450 Mbps
FortiGate-VM08: 550 Mbps
Concurrent SSL VPN Users Recomended (Max):
FortiGate-VM00: 500
FortiGate-VM01: 1,500
FortiGate-VM02: 3,000
FortiGate-VM04: 10,000
FortiGate-VM08: 25,000
 

Intrusion Prevention

IPS technology protects against current and emerging networklevel threats. In addition to signature-based threat detection, IPS performs anomaly-based detection which alerts users to any traffic that matches attack behavior profiles. The Fortinet threat research team analyzes suspicious behavior, identifies and classifies emerging threats, and generate new signatures to include with FortiGuard Service updates.

Features Supported:

  • Automatic Attack Database Update
  • Protocol Anomaly Support
  • IPS and DoS Prevention Sensor
  • Custom Signature Support
  • IPv6 Support

IPS Throughput:
FortiGate-VM00: 200 Mbps
FortiGate-VM01: 400 Mbps
FortiGate-VM02: 600 Mbps
FortiGate-VM04: 800 Mbps
FortiGate-VM08: 1.0 Gbps

WAN Optimization

Wide Area Network (WAN) optimization accelerates applications over geographically dispersed networks, while ensuring multithreat inspection of all network traffic. WAN optimization eliminates unnecessary and malicious traffic, optimizes legitimate traffic, and reduces the amount of bandwidth required to transmit data between applications and servers. Improved application performance and delivery of network services reduces bandwidth and infrastructure requirements, along with associated expenditures.

Features:

  • Gateway-to-Gateway Optimization
  • Bi-directional Gateway-to-client Optimization
  • Web Caching
  • Secure Tunnel
  • Transparent Mode

SSL-Encrypted Traffic Inspection

SSL-Encrypted Traffic Inspection protects clients and web and application servers from malicious SSL-encrypted traffic, to which many security devices are blind. SSL Inspection intercepts encrypted traffic and inspects it for threats, prior to routing it to its final destination. SSL Inspection applies to both client-oriented SSL traffic (such as users connecting to an SSL-encrypted hosted CRM site) and inbound traffic destined an organization’s own web and application servers. You now have the ability to enforce appropriate use policies on inappropriate encrypted web content, and protect servers from threats within encrypted traffic flows.

Features:

  • Protocol: HTTPS, SMTPS, POP3S, IMAPS
  • Inspection support: Antivirus, Web Filtering, Antispam, Data Loss Prevention, SSL Offload

End-Point NAC

Endpoint NAC can enforce the use of FortiClient Endpoint Security for users connecting to corporate networks. Endpoint NAC verifies FortiClient Endpoint Security installation, firewall operation and upto- date antivirus signatures before allowing network access. Noncompliant endpoints, such as endpoints running applications that violate security policies can be quarantined or sent to remediation.

Features:

  • Monitor & Control Hosts Running FortiClient
  • Vulnerability Scanning of Network Nodes
  • Quarantine Portal
  • Application Detection and Control
  • Built-in Application Database

Data Loss Prevention

DLP uses a sophisticated pattern-matching engine to identify and prevent the transfer of sensitive information outside of your network perimeter, even when applications encrypt their communications. In addition to protecting your organization's critical data, Fortinet DLP provides audit trails to aid in policy compliance. You can select from a wide range of configurable actions to log, block, and archive data, and quarantine or ban users.

Features:

  • Identification And Control Over Data in Motion
  • Built-in Pattern Database
  • RegEx Based Matching Engine
  • Common File Format Inspection
  • International Character Sets Supported
  • Flow-based DLP

Logging, Reporting & Monitoring

FortiGate consolidated security appliances provide extensive logging capabilities for traffic, system, and network protection functions. They also allow you to assemble drill-down and graphical reports from detailed log information. Reports can provide historical and current analysis of network activity to aid with identification of security issues and to prevent network misuse and abuse.

Features:

  • Internal Log storage and Report Generation
  • Graphical Real-Time and Historical Monitoring
  • Graphical Report Scheduling Support
  • Graphical Drill-down Charts
  • Optional FortiAnalyzer Logging (including per VDOM)
  • Optional FortiGuard Analysis and Management Service

Web Filtering

Web filtering protects endpoints, networks and sensitive information against Web-based threats by preventing users from accessing known phishing sites and sources of malware. In addition, administrators can enforce policies based on Website categories to easily prevent users from accessing inappropriate content and clogging networks with unwanted traffic.

Features:

  • HTTP/HTTPS Filtering
  • URL / Keyword / Phrase
  • Block Blocks Java Applet, Cookies or Active X
  • MIME Content Header Filtering
  • Flow-based Web Filtering
  • IPv6 Support

Virtual Domains

Virtual Domains (VDOMs) enable a single FortiGate system to function as multiple independent virtual FortiGate systems. Each VDOM contains its own virtual interfaces, security profiles, routing table, administration, and many other features. FortiGate VDOMs reduce the complexity of securing disparate networks by virtualizing security resources on the FortiGate platform, greatly reducing the power and footprint required as compared to multiple point products. Ideal for large enterprise and managed service providers.

Features:

  • Separate Firewall / Routing Domains
  • Separate Administrative Domains
  • Separate VLAN Interfaces
  • Maximum / Default VDOMs:
    FortiGate-VM00 1
    FortiGate-VM01 10 / 10
    FortiGate-VM02 25 / 10
    FortiGate-VM04 50 / 10
    FortiGate-VM08 250 / 10

Application Control

Application control enables you to define and enforce policies for thousands of applications running across networks regardless of port or the protocol used for communication. The explosion of new Internet-based and Web 2.0 applications bombarding networks today make application control essential, as most application traffic looks like normal Web traffic to traditional firewalls. Fortinet application control provides granular control of applications along with traffic shaping capabilities and flow-based inspection options.

Features:

  • Identify and Control Over 1000 Applications
  • Traffic Shaping (Per Application)
  • Control Popular IM/P2P Apps Regardless of Port / Protocol
  • Popular Applications include: AOL-IM, Yahoo, MSN, KaZaa, ICQ, Gnutella, BitTorrent, MySpace, WinNY, Skype, eDonkey, Facebook, and more

Setup / Configuration Options

Fortinet provides administrators with a variety of methods and wizards for configuring FortiGate appliances during deployment. From the easy-to-use Web-based interface to the advanced capabilities of the command-line interface, FortiGate systems offer the flexibility and simplicity you need.

Features:

  • Web-based User Interface
  • Command Line Interface (CLI) over serial connection
  • Pre-Configured settings from USB drive

High Availability

High Availability (HA) configurations enhance reliability and increase performance by clustering multiple FortiGate appliances into a single entity. FortiGate High Availability supports Active-Active and Active-Passive options to provide maximum flexibility for utilizing each member within the HA cluster. The HA feature is included as part of the FortiOS operation system and is available with most FortiGate appliances.

Features:

  • Active-Active and Active-Passive
  • Stateful Failover (FW and VPN)
  • Link State Monitor and Failover
  • Device Failure Detection and Notification
  • Server Load Balancing

Wireless Controller

All FortiGate and FortiWiFi consolidated security platforms have an integrated wireless controller, enabling centralized management of FortiAP™ secure access points and wireless LANs. Unauthorized wireless traffic is blocked, while allowed traffic is subject to identityaware firewall policies and multi-threat security inspection. From a single console you can control network access, update security policies, and enable automatic identification and suppression of rogue access points.

Features:

  • Unified WiFi and Access Point Management
  • Automatic Provisioning of APs
  • On-wire Detection and Blocking of Rogue APs
  • Supports Virtual APs with Different SSIDs
  • Supports Multiple Authentication Methods

 


Specifications:


FortiGate FG-VM00 FG-VM01 FG-VM02 FG-VM04 FG-VM08
Technical Specifications
Hypervisors Supported VMware ESX/ESXi 3.5/4.0/4.1 VMware ESX/ESXi 3.5/4.0/4.1 VMware ESX/ESXi 3.5/4.0/4.1 VMware ESX/ESXi 3.5/4.0/4.1 VMware ESX/ESXi 3.5/4.0/4.1
Max vCPUs Supported 1 1 2 4 8
Max Network Interfaces Supported 10 10 10 10 10
Max VM Memory Support 512 MB 1 GB 3 GB 4 GB 4 GB
VM Memory Required (Minimum) 512 MB 512 MB 512 MB 512 MB 512 MB
VM Storage Required (Minimum) 30 GB 30 GB 30 GB 30 GB 30 GB
System Performance
Firewall Throughput (UDP packets) 500 Mbps 1.0 Gbps 1.6 Gbps 2.0 Gbps 4.0 Gbps*
IPSec VPN Throughput (AES256+SHA1) 100 Mbps 125 Mbps 150 Mbps 175 Mbps 200 Mbps
IPS Throughput 200 Mbps 400 Mbps 600 Mbps 800 Mbps 1.0 Gbps
Antivirus Throughput 100 Mbps 200 Mbps 350 Mbps 500 Mbps 600 Mbps
Gateway-to-Gateway IPSec VPN Tunnels (System / VDOM) 1,500 / 1,500 6,000 / 3,000 10,000 / 5,000 10,000 / 5,000 10,000 / 5,000
Client-to-Gateway IPSec VPN Tunnels 1,500 3,000 20,000 30,000 64,000
Concurrent Sessions 400,000 600,000 800,000 1.1 Million 1.2 Million
New Sessions/Sec 10,000 20,000 25,000 75,000 100,000
Concurrent SSL-VPN Users (Recommended Max) 500 1,500 3,000 10,000 25,000
SSL VPN Throughput 150 Mbps 170 Mbps 300 Mbps 450 Mbps 550 Mbps
Firewall Policies (VDOM/System) 5,000 20,000 / 40,000 50,000 / 100,000 50,000 / 100,000 50,000 / 100,000
Virtual Domains (Max / Default) 1 10 / 10 25 / 10 50 / 10 250 / 10
Wireless Access Points Controlled 32 256 512 512 1,024
Unlimited User Licenses Yes Yes Yes Yes Yes
Available for Order Yes Yes Yes Yes Yes

Actual performance values may vary depending on the network traffic and system configuration. Performance metrics were observed using a Dell PowerEdge R715 server (AMD Opteron Processor 6128 CPU 2 GHz, 4 physical 1 GBe interfaces - 2 in / 2 out) running ESXi v4.1 update 1 with max vRAM assigned to each FortiGate virtual appliance.
Antivirus performance is measured based on HTTP traffic with 32 KB file attachments.
* Tested on Dell M910 (Intel Xeon Processor E7-4830 CPU 2.13 GHz, 2 physical 10 GBe interfaces) and optimized traffic flow.

Deployments:

 Fortinet Virtual Appliance Family Deployment

The Fortinet Virtual Appliance Family

FortiGate-VM multi-threat security
  • Enterprise-class protection against network, content and application-level threats
  • Consolidated security in a virtual form factor
  • 5 virtual appliance models available.

FortiManager-VM centralized management

  • Command and control for Fortinet infrastructure
  • Stackable license model to grow with your environment
  • Enables Cloud providers to segment tenant policies into separate administrative domains (ADOMs).

FortiAnalyzer-VM centralized reporting

  • Aggregate log data for forensic analysis
  • Perform vulnerability assessments of networked hosts
  • Generate graphical reports to aid in demonstrating compliance

FortiAuthenticator-VM user identity management

  • Low cost per user and a stackable licensing model for a flexible and cost effective solution
  • Standards-based secure authentication which works in conjunction with FortiTokens
  • Certificate Authority functionality simplifies your CA management
FortiMail-VM messaging security
  • Block spam and malware from users' inboxes
  • Archive mail for compliance and e-discovery purposes
  • Advanced inspection capabilities eliminates message-based threats before they can affect your users

FortiWeb-VM web application firewall

  • Protect, balance and accelerate web applications
  • Improves security of confidential information and aides PCI compliance
  • Security solution specifically designed to protect web applications; including cloud-based farm deployments

FortiScan-VM vulnerability management

  • Provides both active scanning and passive observation
  • Identify and analyze unmanaged devices and assets on your network
  • Offers remediation recommendations based on available patches and existing workflows

FortiGate Virtual Appliance Deployment

Services & Support:


FortiGuard Security Subscription Services

FortiGuard® Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare™ Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with return and replace hardware support or 24x7 Comprehensive Support with advanced hardware replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and a 90-day limited software warranty.

FortiGuard Subscription Services
Product Antivirus Intrusion Prevention Web Filtering Antispam Application Control Vulnerability & Compliance
FortiGate Virtual Appliance Supported Supported Supported Supported Supported Supported

Documentation:

Download the Fortinet FortiGate Virtual Appliance Series Datasheet (.PDF)

Pricing Notes:

Fortinet FortiGate Series
FortiGate VM04
Fortinet FortiGate VM04
FortiGate-VM "virtual appliance" designed for VMware ESX and ESXi platforms.  4 x vCPU cores and (up to) 6 GB RAM.
#FG-VM04
Our Price: $14,000.00
Fortinet FortiGate VM04-Xen
FortiGate-VM "virtual appliance" designed for AWS, Citrix XenServer & Open Source Xen platforms.  4 x vCPU cores and (up to) 6 GB RAM.
#FG-VM04-Xen
Our Price: $14,000.00
Fortinet FortiGate VM04-HV
FortiGate-VM "virtual appliance" designed for Microsoft Hyper-V platform.  4 x vCPU cores and (up to) 6 GB RAM.
#FG-VM04-HV
Our Price: $14,000.00
Fortinet FortiGate VM04-KVM
FortiGate-VM "virtual appliance" designed for KVM platform.  4 x vCPU cores and (up to) 6 GB RAM.
#FG-VM04-KVM
Our Price: $14,000.00
Fortinet FortiGate VM04-AWS
FortiGate-VM "virtual appliance" designed for AWS platform (BYOL); 4 x vCPU cores.
#FG-VM04-AWS
Our Price: $14,000.00
Fortinet FortiGate VM04-AZ
FortiGate-VM "virtual appliance" designed for MSFT Azure platform (BYOL); 4 x vCPU cores.
#FG-VM04-AZ
Our Price: $14,000.00
Fortinet FortiGate VM04 UTM Bundle (8x5 FortiCare plus NGFW, AV, Web Filtering and Antispam Services)
*8X5 Hardware Replacement (NBD), Firmware and General Upgrades, 8x5 Enhanced Support, UTM Services Bundle (NGFW, AV, Web Filtering, and Antispam Services)
8x5 for FortiGate VM04, 1-Year Bundle
#FC-10-FVM04-956-02-12
Our Price: $7,697.00
8x5 for FortiGate VM04, 2-Year Bundle
#FC-10-FVM04-956-02-24
Our Price: $14,432.00
8x5 for FortiGate VM04, 3-Year Bundle
#FC-10-FVM04-956-02-36
Our Price: $20,205.00
Fortinet FortiGate VM04 24x7 Bundle Subscription
*Advanced Hardware Replacement (Next Business Day), Firmware and General Upgrades, 24X7 Comprehensive Support, UTM Services Bundle (NGFW, AV, Web Filtering, and Antispam Services)
24x7 for FortiGate VM04, 1-Year Bundle
#FC-10-FVM04-963-02-12
Our Price: $9,096.00
24x7 for FortiGate VM04, 2-Year Bundle
#FC-10-FVM04-963-02-24
Our Price: $17,056.00
24x7 for FortiGate VM04, 3-Year Bundle
#FC-10-FVM04-963-02-36
Our Price: $23,878.00
Fortinet FortiGate-VM04 8x5 Enterprise Bundle Subscription
FortiGate-VM04 Enterprise Bundle (8x5 FortiCare plus NGFW, AV, Web Filtering, Antispam, Botnet IP/Domain, FortiSandbox Cloud and Mobile Security Services), 1 Year
#FC-10-FVM04-872-02-12
Our Price: $11,200.00
FortiGate-VM04 Enterprise Bundle (8x5 FortiCare plus NGFW, AV, Web Filtering, Antispam, Botnet IP/Domain, FortiSandbox Cloud and Mobile Security Services), 2 Year
#FC-10-FVM04-872-02-24
Our Price: $21,000.00
FortiGate-VM04 Enterprise Bundle (8x5 FortiCare plus NGFW, AV, Web Filtering, Antispam, Botnet IP/Domain, FortiSandbox Cloud and Mobile Security Services), 3 Year
#FC-10-FVM04-872-02-36
Our Price: $29,400.00
Fortinet FortiGate-VM04 24x7 Enterprise Bundle Subscription
FortiGate-VM04 Enterprise Bundle (24x7 FortiCare plus NGFW, AV, Web Filtering, Antispam, Botnet IP/Domain, FortiSandbox Cloud and Mobile Security Services), 1 Year
#FC-10-FVM04-975-02-12
Our Price: $12,600.00
FortiGate-VM04 Enterprise Bundle (24x7 FortiCare plus NGFW, AV, Web Filtering, Antispam, Botnet IP/Domain, FortiSandbox Cloud and Mobile Security Services), 2 Year
#FC-10-FVM04-975-02-24
Our Price: $23,625.00
FortiGate-VM04 Enterprise Bundle (24x7 FortiCare plus NGFW, AV, Web Filtering, Antispam, Botnet IP/Domain, FortiSandbox Cloud and Mobile Security Services), 3 Year
#FC-10-FVM04-975-02-36
Our Price: $33,075.00
Fortinet FortiGuard Subscriptions 1-Year
FortiGuard Mobile Security Service for FortiGate-VM04, 1-Year
#FC-10-FVM04-122-02-12
Our Price: $2,800.00
FortiGuard FortiSandbox Cloud Service
#FC-10-FVM04-123-02-12
Our Price: $2,800.00
Fortinet FortiGate-VM02 FortiCloud Analysis and 1 Year Log Retention
Fortinet FortiGate-VM04 FortiCloud Analysis and 1 Year Log Retention, 1 Year
#FC-10-FVM04-131-02-12
Our Price: $2,800.00
Fortinet FortiGate-VM04 FortiCloud Analysis and 1 Year Log Retention, 2 Year
#FC-10-FVM04-131-02-24
Our Price: $5,250.00
Fortinet FortiGate-VM04 FortiCloud Analysis and 1 Year Log Retention, 3 Year
#FC-10-FVM04-131-02-36
Our Price: $7,350.00
Antivirus (AV) Service for FortiGate-VM04, 1-Year
#FC-10-FVM04-100-02-12
Our Price: $2,800.00
FortiGuard NGFW Service for FortiGate-VM04, 1-Year
#FC-10-FVM04-108-02-12
Our Price: $2,800.00
Web Filtering Service for FortiGate-VM04, 1-Year
#FC-10-FVM04-112-02-12
Our Price: $2,800.00
FortiGate VM04 FortiCare 8x5
*8x5 Support, Hardware Replacement, Firmware and General Upgrades, VPN, Traffic Management
8x5 FortiCare for FortiGate VM04, 1-Year
#FC-10-FVM04-851-02-12
Our Price: $2,099.00
8x5 FortiCare for FortiGate VM04, 2-Year
#FC-10-FVM04-851-02-24
Our Price: $3,936.00
8x5 FortiCare for FortiGate VM04, 3-Year
#FC-10-FVM04-851-02-36
Our Price: $5,510.00
FortiGate VM04 FortiCare 24x7
*24x7 Support, Advanced Hardware Replacement (Next Business Day), Firmware and General Upgrades, VPN, and Traffic Management
24x7 FortiCare for FortiGate VM04, 1-Year
#FC-10-FVM04-248-02-12
Our Price: $3,498.00
24x7 FortiCare for FortiGate VM04, 2-Year
#FC-10-FVM04-248-02-24
Our Price: $6,560.00
24x7 FortiCare for FortiGate VM04, 3-Year
#FC-10-FVM04-248-02-36
Our Price: $9,184.00
Fortinet FortiGate-VM04 360 FortiCare Contract
1 Year FortiCare 360 Contract
#FC-10-FVM04-281-02-12
Our Price: $4,900.00
2 Year FortiCare 360 Contract
#FC-10-FVM04-281-02-24
Our Price: $9,188.00
3 Year FortiCare 360 Contract
#FC-10-FVM04-281-02-36
Our Price: $12,863.00