Fortinet FortiAnalyzer-BigData-4500G Appliance
Security-Driven Analytics & Log Management

Overview:

High performance big data network analytics

FortiAnalyzer Big Data delivers high-performance big data network analytics for large and complex networks. It is designed for large-scale data center and high-bandwidth deployments, offering the most advanced cyber threat protection by employing hyperscale data ingestion and accelerated parallel data processing. Together with its new distributed software and hardware architecture and Fortinet’s high performance next generation firewalls, this powerful 4RU chassis offers blazing fast performance, enterprise-grade data resiliency, built-in horizontal scalability, and consolidated appliance management.

Highlights:

• Big Data Analytics
• Scalable Performance
• Built-in High Availability

Features:

High Performance

• Totally redesigned and optimized architecture, employing the newest Big Data Kafka/Hadoop/Spark technologies
• Massive Parallel event streaming and data processing for high-speed ingestion, data storage, and search capabilities
• The highest performing FortiAnalyzer appliance: 300 000 logs/sec out-of-box, horizontally scalable to petabytes of storage

---

Unified Appliance Management

• Enterprise-grade Big Data Appliance with consolidated hardware and software monitoring through the Cluster Manager
• Simple installation, updating, expansion, and data management
• Built-in automation and customizable job templates

---

Reliable and Scalable Deployment

• Built-in enterprise high availability and data resiliency based on a newly optimized software and hardware architecture
• Designed for rapid scalability with multiple Big Data appliances using high speed 40 Gb/s built-in switch modules
• Specifically designed to accelerate the visibility and expansion of the Fortinet Security Fabric

---

Big Data Security Analytics

• Monitor and analyze your entire network from end-to-end at an accelerated rate, maximizing the visibility of your entire attack surface, network traffic, applications, users, and end-point hosts
• Interactive dashboards and informative reports using real-time tracking of key security metrics, link health status, and application steering performance
• Ready to use and customizable report templates for compliance, security posture assessments, and system performance checks
• Use log analytics to query IPFIX log messages collected, when Ingestion is configured in Flow mode

---

Rapid Incident Detection and Response

• Intuitive event and incident workflow for SOC teams to focus on critical alerts
• The built-in correlation engine automates and groups alerts to remove false positives
• Out-of-box connectors and extensive APIs for security teams to automate repetitive tasks

Highlights:

FortiAnalyzer Big Data supports all of the features and technologies of the FortiAnalyzer family. FortiAnalyzer Big Data also provides additional scalability and high-speed performance using new massive parallel data processing and Columnar Data Store processes. After the data ingest, the FortiAnalyzer Big Data provides an easy to use front-end UI that interacts with the distributed big data SQL engine to search, query, and aggregate the data.

Service Category	Activity	FortiAnalyzer Appliances	FortiAnalyzer Big Data 4500G
Security Analytics	Log View
	Interactive FortiView Dashboards
	Fabric View - Assets and Identity
	Out-of-Box Report Templates
	Global Search across all Big Data clusters	—
	IPFIX Support	—
Incident Response	Indicators of Compromise Service
	Event Correlation and Alerting
	Incident Escalation Workflow and Management
Automation and Integration	Security Fabric Connectors
	Security Fabric Integration
	REST API
Multi-Tenancy and RBAC	ADOM
	Role-Based Access Control
Performance and Scalability	Deployment	Small, Medium Enterprise	Large Enterprise and Service Providers
	High Availability and Redundancy	Yes, requires a second unit	Yes, built-in HA and redundancy
	Sustained Rate	Up to 100 000 logs/sec	Start at 300 000 logs/sec
	Horizontal Scalability	—
	Big Data Analytics Engine	—
	Massive Parallel Data Processing	—
	Distributed Architecture	—
	Columnar Data Store	—
Appliance Management	Chassis	—
	Cluster Manager	—

Specifications:

Particulars	FortiAnalyzer BigData 4500G
Capacity and Performance
GB/Day of Logs (raw logs)	20 TB
Log Ingestion Rate (logs/sec)	300,000
Devices/VDOMs (Maximum)	10,000+
Max Number of Days Analytics*	30
Options Supported
FortiGuard Indicator of Compromise (IOC)
FortiGuard Security Automation Service
FortiGuard Outbreak Alert Service
FortiGuard OT Service
FortiGuard Attack Surface Service
Hardware Specifications
Form Factor	4 RU
Total Interfaces	6x 100GbE QSFP28 or 6x 40GbE QSFP+
Storage Capacity	Blade#1 to Blade#14: 14 x 2 x 2.5” 7.68TB SSD = 215TB
Usable Storage	~7.68TB on Blade#1 in RAID1; 200TB total on Blade#2 to Blade#14
Removable Hard Drives	28 (Max) SSD, each blade 2 x 2.5” Storage Device
Redundant Hot Swap Power Supplies**
Dimensions
Height x Width x Length (inches)	7 x 17.6 x 32
Height x Width x Length (cm)	17.8 x 44.7 x 81.3
Weight	240 lbs (108.96 kg)
Environment
AC Power Supply**	200-240 VAC, 50-60 Hz
Power Consumption (Average / Maximum)	7000 W / 9100 W
Heat Dissipation	31050.48 BTU/h
Max Current	200-240 V / 10-9.8A
Operating Temperature	10°C ~ 35°C (50°F ~ 95°F)
Storage Temperature	-40°C to 60°C (-40°F to 140°F)
Humidity	8% to 90% (non-condensing)
Compliance
Safety Certifications	FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB

* The max number of days if receiving logs continuously at the sustained log ingestion rate. This number can increase if the average log rate is lower.
** All four power supplies must be installed and plugged into a reliable power source when the device is turned on / powered up. The max power consumption of each PSU supports 2200 W.

Documentation:

Download the Fortinet FortiAnalyzer BD Series Datasheet (PDF).