Fortinet FortiGate 80CM
Enterprise-Class Protection for Branch Offices

Firewall

Fortinet firewall technology delivers industry-leading performance for network and application firewalling including Web 2.0 application policies based on the application identity, up to and beyond 10 Gbps throughput. Our technology identifies traffic patterns and links them to the use of specific applications, such as instant messaging and peer-to-peer applications, permitting application access control. By coupling application intelligence with firewall technology, the FortiGate platform is able to deliver realtime security with integrated application content level inspection, thereby simplifying security deployments.

Feature Highlights:

• NAT, PAT and Transparement (Bridge)
• Policy-Based NAT
• SIP/H.323/SCCP NAT Traversal
• VLAN Tagging (802.1Q)
• IPv6 Support

Firewall (1518 Byte): 1.9 Mbps
Firewall (512 Byte): 700 Mbps
Firewall (64 Byte): 120 Mbps

Antivirus / Antispyware

Antivirus content inspection technology provides protection against virus, spyware, worms, phishing and other forms of malware being transmitted over the network infrastructure. By intercepting application content in transit, and reassembling the data into user expected content, the FortiGate Antivirus features ensures that malicious threats hidden within legitimate application content is identified and removed from the data stream destined for internal (or external) recipients. The addition of Fortinet's FortiGuard subscription services ensured each FortiGate has access to updated malware signatures, resulting in high level of accuracy and detection capabilities including emerging and newly discovered viruses. ICSA Labs has certified our antivirus functionality.

Features Supported:

• Proxy Antirus
• Flow-based Antirus
• File Quarantine
• IPv6 Support

Antivirus (Proxy-based): 50 Mbps
Antivirus (Flow-based): 190 Mbps

VPN

Fortinet VPN technology provides secure communications between multiple networks and hosts, through both secure socket layer, or SSL, and IPsec VPN technologies, leveraging our custom FortiASIC to provide hardware acceleration for high-performance communications and data privacy. Benefits include the ability to enforce complete content inspection and multi-threat security as part of VPN communications, including antivirus, Intrusion Prevention System, or IPS, and Web filtering. Additional features include traffic optimization providing prioritization for traffic across VPNs.

Feature Highlights:

• IPSec and SSL VPN
• DES, 3DES, AES and SHA-1/MD5 Authentication
• PPTP, L2TP, VPN Client Pass Through
• SSL Single Sign-On Bookmarks
• Two-Factor Authentication

IPSec VPN: 140 Mbps
SSL VPN: 70 Mbps
Recommend # of SSL Users: 60

Intrusion Prevention

IPS technology provides protection against current and emerging network level threats. In addition to signature-based detection, we perform anomaly-based detection whereby our system alerts users to traffic that fits a profile matching attack behavior. This behavior is then analyzed by our threat research team to identify threats as they emerge and generate new signatures that will be incorporated into our FortiGuard services.

Features Supported:

• Automatic Attack Database Update
• Protocol Anomaly Support
• IPS and DoS Prevention Sensor
• Custom Signature Support
• IPv6 Support

IPS Throughput: 350 Mbps

WAN Optimization

With WAN Optimization, you can accelerate applications over your wide area links while ensuring multi-threat security enforcement. FortiOS 4.0 software not only eliminates unnecessary and malicious traffic as one of its core capabilities, it also optimizes legitimate traffic by reducing the amount of communication and data transmitted between applications and servers across the WAN. This results in improved performance of applications and network services, as well as helping to avoid additional higher-bandwidth provisioning requirements.

Feature Highlights:

• Gateway-to-Gateway Optimization
• Bi-directional Gateway-to-client Optimization
• Web Caching
• Secure Tunnel
• Transparent Mode

SSL Inspection

SSL-Encrypted Traffic Inspection protects clients and web and application servers from malicious SSL-encrypted traffic, to which most security devices are often blind. SSL Inspection intercepts encrypted traffic and inspects it for threats, prior to routing it to its final destination. SSL Inspection applies to both client-oriented SSL traffic (such as users connecting to an SSL-encrypted hosted CRM site) and inbound traffic destined an organization's own web and application servers. You now have the ability to enforce appropriate use policies on inappropriate encrypted web content, and protect servers from.

Feature Highlights:

• Protocol: HTTPS, SMTPS, POP3S, IMAPS
• Inspection support: Antivirus, Web Filtering, Antispam, Data Loss Prevention
• SSL Offload

End-Point NAC

Endpoint NAC enforces the use of the FortiClient Endpoint Security application (either Standard or Premium editions) on your network. It verifies the installation of the most recent version of the FortiClient application, up-to-date antivirus signatures, and enabled firewall before allowing the traffic from that endpoint to pass through the FortiGate platform. You also have the option to quarantine endpoints running applications that violate policies and require remediation.

Feature Highlights:

• Monitor & Control Hosts Running FortiClient
• Vulnerability Scanning of Network Nodes
• Quarantine Portal
• Application Detection and Control
• Built-in Application Database

Data Loss Prevention

It is imperative for you to control the vast amount of confidential, regulated, and proprietary data traversing your network, and keep it within defined network boundaries. Working across multiple applications (including those encrypting their communications), DLP uses a sophisticated pattern-matching engine to identify and then prevent the communication of sensitive information outside the network perimeter. In addition to protecting your organization's critical information, DLP also provides audit trails for data and files to aid in policy compliance. You can use the wide range of configurable actions to log, block, and archive data, as well as ban or quarantine users.

Feature Highlights:

• Identification And Control Over Data in Motion
• Built-in Pattern Database
• RegEx Based Matching Engine
• Common File Format Inspection
• International Character Sets Supported

Web Filtering

Web filtering technology is a pro-active defense feature that identifies known locations of malware and blocks access to these malicious sources. In addition the technology enables administrators to enforce policies based on website content categories ensuring users are not accessing content that is inappropriate for their work environment. The technology restricts access to denied categories based on the policy by comparing each Web address request to a Fortinet hosted database.

Feature Highlights:

• HTTP/HTTPS Filtering
• URL / Keyword / Phrase
• Block Blocks Java Applet, Cookies or Active X
• MIME Content Header Filtering
• IPv6 Support

Logging & Monitoring

FortiGate consolidated security appliances provide extensive logging capabilities for traffic, system, and network protection functions. They also allow you to assemble drill-down and graphical reports from detailed log information. Reports can provide historical and current analysis of network activity to aid with identification of security issues and to prevent network misuse and abuse.

Feature Highlights:

• Internal Log storage and Report Generation
• Graphical Real-Time and Historical Monitoring
• Graphical Report Scheduling Support
• Optional FortiAnalyzer Logging (including per VDOM)
• Optional FortiGuard Analysis and Management Service

Virtual Domains

Virtual Domain (VDOM) enable a single FortiGate system to function as multiple independent virtual FortiGate systems. Each VDOM contains its own virtual interfaces, security profiles, routing table, administration and many other features. FortiGate VDOMs reduces the complexity in physical network by virtualizing different security resources over a common platform, greatly reduces the power and footprint required by multiple point solutions.

Feature Highlights:

• Separate Firewall / Routing Domains
• Separate Administrative Domains
• Separate VLAN Interfaces

VDOMs (Max / Default): 10 / 10

High Availability

High Availability (HA) configuration enhances reliability and increases performance by clustering multiple FortiGate appliances into a single entity. FortiGate High Availability supports Active-Active and Active-Passive options to provide the maximum flexibility for utilizing each member within the HA cluster. HA feature is included as part of the FortiOS operation system so end-users can benefit from the reliability enhancement without the extra cost.

Feature Highlights:

• Active-Active and Active-Passive
• Stateful Failover (FW and VPN)
• Link State Monitor and Failover
• Device Failure Detection and Notification
• Server Load Balancing

Application Control

Application control enables you to define and enforce policies for thousands of applications running on your endpoints, regardless of the port or the protocol used for communication. Application classification and control is essential to manage the explosion of new web-based applications bombarding networks today, as most application traffic looks like normal web traffic to traditional firewalls. Fortinet's application control technology identifies application traffic and then applies security policies easily defined by the administrator. The end result is more flexible and granular policy control, with deeper visibility into your network traffic.

Feature Highlights:

• Identify and Control Over 1000 Applications
• Traffic Shaping (Per Application)
• Control Popular IM/P2P Apps Regardless of Port / Protocol
• Popular Applications include: AOL-IM, Yahoo, MSN, KaZaa, ICQ, Gnutella, BitTorrent, MySpace, WinNY, Skype, eDonkey, Facebook, and more

Wireless Controller

Wireless controller integrated into every FortiGate platform centralizes the management and monitoring of all FortiAP units. All wireless traffic is directed to the FortiGate multi-threat security platform and undergoes identity-aware firewall policies and UTM engine inspection and only authorized wireless traffic is forwarded. From a single console you can control network access, update policies quickly and easily, and monitor compliance.

Feature Highlights:

• Managed and Monitor FortiAP product
• Rogue AP Detection, Control and Reporting
• Virtual AP with different SSID