Fortinet FortiProxy 400E
Secure Web Proxy that Protects Against Internet-Borne Attacks by Incorporating Multiple Detection Techniques
Sorry, this product is no longer available, please contact us for a replacement.
FortiProxy is a secure web proxy that protects employees against internet-borne attacks by incorporating multiple detection techniques such as web filtering, DNS filtering, data loss prevention, antivirus, intrusion prevention and advanced threat protection. It helps enterprises enforce internet compliance using granular application control. High-performance physical and virtual appliances deploy on-site to serve small, medium and large enterprises.
Powerful hardware that can perform SSL inspection to effectively remove blind spots in encrypted traffic, without compromising on performance.
Protection against sophisticated web attacks
Integration with proven FortiGuard Threat Intelligence Service and FortiSandbox Cloud to protect enterprises from the latest sophisticated threats.
Authenticated web application control
Granular application control policies to restrict access to social websites using user or group identity.
- Advanced Protection against threats
- Integration with FortiGuard Threat Intelligence Service
- Web, DNS filtering and application control
- Integration with FortiSandbox cloud and on-premise appliance
- AV, IPS, DLP and Content Analysis
- High performance and scalability
- Custom –built security processing units for high performance
- Scalability from small to large organizations
- HA availability for redundancy
- Content Caching and WAN Optimization
- Static and dynamic content caching
- Multiple Content Delivery Network
- Decrease Network Latency
- Lower bandwidth overhead
FortiProxy provides multiple detection methods such as reputation lookup, signature-based detection and sandboxing to protect against known malware, emerging threats and zero-day malware.
Integration with FortiGuard Threat Intelligence
The threat landscape is rapidly evolving, requiring security teams to be continuously vigilant of new threats. FortiGuard Threat Intelligence service is a collection of services delivered by FortiGuard Labs to defend against the changing threat landscape. FortiGuard Labs comprises of more than 200 researchers across 31 countries. It offers 15 different security services and constantly discovers new threats. The following protection services offered by FortiProxy are continuously updated with the latest information from FortiGuard Threat Intelligence.
- DNS and Web Filtering
With the help of FortiGuard Threat Intelligence service, malicious, suspicious and newly generated domain names are blocked immediately. More than 150,000 websites are blocked per minute by the FortiGuard WebFiltering Service. Dynamic category-based web filtering ensure employees abide by the company’s acceptable use policy. Static whitelisting and blacklisting capabilities are also available to allow or block specific websites.
- Dynamic Analysis using Sandboxing
Top-rated FortiSandbox is integrated with FortiProxy to defend against targeted advanced attacks. Suspicious and at-risk files can automatically be sent to FortiSandbox for further analysis. The sample is analyzed in a contained environment to uncover the full attack lifecycle using system activity and call back detection. Reports provide rich threat intelligence and actionable insight for security teams to take action.
- Antivirus and DLP
Fortinet consistently receives superior effectiveness results in industry testing with AV Comparatives and Virus Bulletin. Data Loss Prevention protects against exfiltration of sensitive data. Sensitive files can be fingerprinted or watermarked and the outgoing traffic is examined to identify any data leakage.
- Content Analysis Service
FortiProxy includes content scanning technologies from Image Analyzer, the industry leader in offensive image and video detection to prevent access to inappropriate content.
- Intrusion Prevention
FortiProxy uses a combination of signature as well as signatureless engines to prevent intrusions. IPS signatures can be based on exploits, known vulnerabilities or anomaly patterns. Signature-less techniques are used to detect SQL injection, domain generation algorithm attacks, java and flash exploits. FortiGuard Labs generates more than 100 IPS rules every week, blocking more than 4 million network intrusion attempts.
Inspection of Encrypted Traffic
More than 60% of the internet traffic is encrypted and visibility is a big challenge. FortiProxy offers SSL and SSH deep inspection without requiring any additional license or appliance. It can be used to inspect encrypted traffic by acting as a man in the middle. It also has the flexibility to add exclusion categories so that banking, healthcare and other such sites won’t be monitored. When SSL Deep inspection is not possible it also supports Certificate based inspection.
Granular Application Control
With the constant increase in the usage of social apps, it’s vital for organizations to provide very granular controls. For instance, they may want to allow access but prevent specific actions like posts. FortiProxy supports all major social websites (including Facebook, LinkedIn, Twitter, Instagram), and supports more than 3000 apps. In addition, SaaS Apps can be classified using the cloud database that’s maintained by FortiGuard.
Authenticated Web Access
FortiProxy supports advanced authentication methods including SAML, Kerberos and Single Sign-on. These features are built-in without requiring a separate appliance. It also gives administrators the flexibility to configure policies based on users and roles.
WAN Optimization and Advanced Caching
Today at many locations, bandwidth is a bottleneck, and to keep operation costs low, it may be prohibitive to provide additional bandwidth. In these environments, FortiProxy is also able to greatly optimize and accelerate the network by enabling caching of content and by enabling WAN Optimization features.
The Fortinet Security Fabric delivers broad protection and visibility to every network segment, device, and appliance, whether virtual, in the cloud, or on-premises. It can automatically synchronize security resources to enforce policies, coordinate automated responses to threats detected anywhere in your network, and easily manage different security solutions and products through a single console. FortiProxy integrates with key security fabric components such as FortiSandbox and FortiAnalyzer. It can also integrate with third-party security devices using ICAP and WCCP protocols.
High Performance, scalability and low TCO
FortiProxy uses specialized ASICs in order to accelerate performance of the network and security modules. FortiProxy supports proxy speeds up to 15 Gbps, and can scale from small enterprises with 500 users all the way to larger enterprises of 50,000 users. FortiProxy provides great value to customers while maintaining a low total cost of ownership.
FortiProxy allows you to choose from 3 modes of deployment to meet your specific requirements, while reducing infrastructure changes and service disruptions:
- Suitable for smaller enterprises (less than 500 users)
- Deployed behind the NGFW
- Interesting traffic that needs to be inspected configured on Proxy, and the remaining traffic is automatically bypassed to the NGFW.
- Suitable for larger enterprises
- Proxy can be deployed in any location within the enterprise
- Support for multiple pac files allows flexibility
- Suitable for larger deployments
- If distribution of pac files is not convenient, WCCP or PBR mode is supported
- Policies are configured on the NGFW/router to direct the interesting traffic to the proxy
|FortiProxy 400E||FortiProxy 2000E||FortiProxy 4000E|
|License Capacity||500–2,500 users||2,500–25,000 users||15,000–50,000 users|
|Deployment Modes||Inline Proxy, Transparent/WCCP Proxy, Explicit Proxy, Routed Proxy|
|Memory||8 GB||64 GB||128 GB|
|Management||HTTP/S, SSH, CLI, SNMP, Console RJ45||HTTP/S, SSH, CLI, SNMP, Console DB9||HTTP/S, SSH, CLI, SNMP, Console DB9|
|Network Interfaces||4x GE RJ45||2x 10 GE SFP+, 2x GE SFP ports, 2x GE RJ45 ports||4x 10 GE SFP+, 2x GE SFP ports, 4x GE RJ45 ports|
|Bypass Interfaces||—||2x GE RJ45 ports||2x GE RJ45 ports|
|Storage||4 TB (2 TB x2) Hard Disk||8 TB (2 TB x4) Hard Disk||8 TB (2 TB x4) Hard Disk|
|Power Supply||Single (Optional Dual)||Dual||Dual|
|Form Factor||1U Appliance||2U Appliance||2U Appliance|
|Input Voltage||100–240V, AC 60–50 Hz||100–240V, AC 60–50 Hz||100–240V, AC 60–50 Hz|
|Power Consumption (Average / Maximum)||120 W / 151 W||244 W / 265 W||462 W / 493 W|
|Maximum Current||100V/5A, 240V/3A||100V/10A, 240V/3.5A||100V/9.8A, 240V/5A|
|Heat Dissipation||550 BTU/h||940 BTU/h||1,717 BTU/h|
|Operating Temperature||32–104°F (0–40°C)||50–95°F (10–35°C)||50–95°F (10–35°C)|
|Storage Temperature||-13–158°F (-25–70°C)||-40–158°F (-40–70°C)||-40–158°F (-40–70°C)|
|Humidity||5–95% non-condensing||8–90% non-condensing||8–90% non-condensing|
|Height x Width x Length (inches)||1.73 x 17.24 x 16.38||3.5 x 17.2 x 25.5||3.5 x 17.2 x 25.5|
|Height x Width x Length (cm)||44 x 438 x 416||89 x 437 x 647||89 x 437 x 647|
|Weight||25 lbs (11 kg)||32 lbs (14.5 kg)||43 lbs (19.5 kg)|
|Safety Certifications||FCC, ICES, CE, RCM, VCCI, BSMI (Class A), UL/cUL, CB|
- Wide range of deployment options:
- Inline, Forward Proxy, Explicit proxy, WCCP/PBR
- Hardware or virtual appliance
- IPv4 and IPv6 address support
- Application Support including HTTP/S
- HA available as active-active and active-backup with session synchronization
- Integration with FortiGuard threat intelligence services for realtime threat updates
- Integration with cloud sandbox to detect advanced threats
- In-built security services requiring no additional appliance
- DNS and Web-Filtering
- Dynamic categorization of websites
- Blocking of malicious and suspicious domains and URLs
- Static blacklists and whitelists
- Application Control
- Granular web application control for social websites
- Support for 3000+ applications
- Antivirus, bonet and DLP
- Content Analysis
- Multiple ICAP servers support
- IPS signature & filters
- Web Rating Override
- SSL/SSH Inspection
- Custom Application Signature
- Support for various authentication modes including Radius, SAML, LDAP, NTLM, Kerberos, FortiToken One-Time Password
- In-built authentication requiring no additional device
- Web and video caching
- Reverse web cache
- Traffic Shaping and QoS policies to prioritize Apps
- Dynamic adaptive streaming over HTTP
- Dynamic adaptive streaming over RTP and RTMPT
- Protocol Optimization – support HTTP, MAPI, CIFS, FTP and TCP
- Secure tunneling over across WAN
- Wan Optimization peers
Management and Reporting
- FortiView Integration
- FortiAnalyzer Integration
- Support Syslog server
- Granular role based access
- Reporting and Logging
- Policy tests for ease of deployment
Download the Fortinet FortiProxy Series Datasheet (PDF).
- Pricing and product availability subject to change without notice.
Our Price: $1,834.28
Our Price: $216.45
Our Price: $2,164.50
Our Price: $2,164.50
Our Price: $432.90