FORTIGATE® APPLIANCES
Ranging from the FortiGate-30 series for small offices to the FortiGate-5000 series for large enterprises, service providers and carriers, the FortiGate line combines the FortiOS™ security operating system with FortiASIC processors and other hardware to provide a comprehensive and high-performance array of security and networking functions including:
- Firewall, VPN, and Traffic Shaping
- Intrusion Prevention System (IPS)
- Antivirus/Antispyware/Antimalware
- Web Filtering
- Antispam
- Application Control (e.g., IM and P2P)
- VoIP Support (H.323. and SCCP)
- Layer 2/3 routing
- Multiple WAN interface options
FortiGate appliances provide cost-effective, comprehensive protection against network, content, and application-level threats - including complex attacks favored by cybercriminals - without degrading network availability and uptime. FortiGate platforms incorporate sophisticated networking features, such as high availability (active/active, active/passive) for maximum network uptime, and virtual domain (VDOM) capabilities to separate various networks requiring different security policies.

Fortinet Antivirus Benefits
- ASIC-based hardware design provides scalable antivirus performance for small and multi-gigabit networks alike.
- Automatic updates of antivirus signatures from the FortiGuard Antivirus Service keeps organizations ahead of the latest threats.
- FortiClient end-point security agents extend antivirus protection to remote desktop computers, mobile laptops, and smartphones that operate outside the network perimeter.
- Available centralized management and reporting, plus security zone and virtual domain features, reduce capital and operational expenditures for antivirus protection.
- Simple per-device/unlimited-user licensing delivers reduced total cost of ownership.
- Transparent, NAT, and Route modes of implementation complement existing solutions and allow Fortinet appliances to adapt to existing infrastructure.
- Content inspection within SMTP, POP3, IMAP, FTP, HTTP, IM and P2P protocols, with support for all major compressed file formats, provides comprehensive protection against content-level threats.
- Inspection of content over VPN connections delivers defense in depth, with support for all common tunneling protocols (PPTP, L2TP, IPSec, SSL) and on-demand host integrity checking.
Fortinet firewall technology combines ASIC-accelerated stateful inspection with an arsenal of integrated application security engines to quickly identify and block complex threats. FortiGate® firewall protection integrates with other key security features such as VPN, antivirus, intrusion prevention system (IPS), web filtering, antispam and traffic shaping to deliver multi-layered security that scales from SOHO/ROBO appliances to multi-gigabit core network or data center platforms. FortiManager™ and FortiAnalyzer™ turn-key appliances provide centralized management of thousands of FortiGate systems and detailed reporting capabilities for internal auditing and reporting.
FortiGate Firewall Technology Benefits
- FortiASIC™ network processors enable firewall and traffic shaping at wire speeds in selected FortiGate platforms.
- Full integration with other Fortinet security technologies (e.g., antivirus, Web filtering) enables extensive protection profiles for in-depth defense.
- Virtual security domains and security zones enable network segmentation by customer, business unit, or any other physical or logical division for increased policy granularity and multi-layered security.
- Three operational modes (transparent, static NAT, and dynamic NAT) adapt to existing infrastructure for deployment versatility.
- Easily customized application definitions deliver additional policy granularity for more accurate protection.
- FortiClient end-point security agents extend firewall protection to remote desktop computers, mobile laptops, and smartphones that operate outside the network perimeter.
- H.323, SIP, and SCCP protocol support to protect VoIP services.
- Support for dynamic routing protocols (RIP, OSPF, BGP and PIM) required in complex enterprise network environments.
- High-availability support for uninterrupted service.
- Available centralized management and reporting reduce capital and operational expenditures for firewall protection.
Fortinet intrusion prevention technology, available in all FortiGate® and FortiWifi™ platforms, can be installed at the network edge or at the network core to protect critical business applications from both external and internal attacks. Backed by the automatic, real-time updates delivered by the FortiGuard® Intrusion Prevention Service, FortiGate IPS technology combines a customizable database of thousands of known threats to stop attacks that evade conventional firewall defenses, plus anomaly-based detection that enables the system to recognize threats for which no signature has yet been developed. The combination of known and unknown threat prevention, plus tight integration with other Fortinet security technologies, enables FortiGate systems to stop the most damaging attacks at security check points regardless of whether the network is a wired, wireless, partner extranet, or branch office network connection.
Fortinet Intrusion Prevention Technology Benefits
- FortiASIC™ processors accelerates intrusion prevention performance, enabling it to scale from SOHO appliances to multi-gigabit core network or data center platforms.
- Combined signature and protocol anomaly detection protects against known and unknown threats, with support for more than 1000 protocols and applications.
- Automatic updates of attack signatures from FortiGuard Intrusion Prevention Service keeps organizations ahead of the latest threats.
- Simple per-device/unlimited-user licensing delivers reduced total cost of ownership.
- Available centralized management and reporting reduce capital and operational expenditures for intrusion prevention.
- Detailed logging and reporting aid in auditing and forensic analysis.
- High-availability support for uninterrupted service.
- Available bypass modules on select FortiGate appliances provide an additional layer of network availability for mission-critical network segments.
Virtual Private Network (VPN) - IPSec and SSL
Fortinet IPSec and SSL VPN technologies in FortiGate® platforms are tightly integrated with other security features such as firewall, antivirus, web filtering and intrusion prevention, providing more comprehensive protection than VPN-only security appliances. FortiGate VPN solutions scale to meet the performance requirements of organizations of any size, from SOHO/ROBO and small businesses to large enterprises and service providers. FortiManager™ centralized management appliances provides the ability to manage complex VPN deployments involving thousands of FortiGate systems from a single console.
Fortinet VPN Technology Benefits
- FortiASIC™ processors provide accelerated performance that scales from SOHO/ROBO applications to multi-gigabit networks, and deliver near wire-speed IPSec VPN throughput in selected FortiGate platforms.
- Support for both IPSec and SSL VPN with unlimited user licensing.
- Integration with other Fortinet security technologies provides complete network-level and content-level inspection for comprehensive protection.
- Extensive user authentication support (RADIUS, LDAP, Local Database, SecureID, X-Auth) for IPSec Clients for improved interoperability.
- Supports all major tunneling protocols (IPSec, SSL, L2TP, and PPTP) for implementation flexibility.
- Flexible configuration with both hub-and-spoke and fully-meshed support.
- Integrated traffic-shaping prioritizes VPN traffic to preserve bandwidth.
- FIPS 140-2 certification supports compliance with Federal Government standards.
Fortinet Web filtering technology, integrated into all FortiGate® and FortiWifi™ appliances and FortiClient PC™ end-point security agents, blocks access to harmful, inappropriate, and dangerous websites which may contain phishing/pharming attacks, malware such as spyware, or objectionable content that can expose organizations to civil or criminal liability. Backed by an industry-leading ratings database and updated continuously by the FortiGuard® Web Filtering Service, Fortinet Web filtering helps organizations comply with government regulations and enforce appropriate organizational Internet usage policies.
Fortinet Web Filtering Benefits
- Industry-leading ratings database with over two billion rated Web pages offers comprehensive protection against malicious sites and inappropriate content.
- 77 ratings categories enable highly granular per-user and per-group policies and override options to control Internet access without excessive user restrictions that can impact productivity.
- Simple per-device/unlimited-user licensing delivers reduced total cost of ownership.
- Automatic updates of URL database from FortiGuard Web Filtering Service keeps organizations ahead of the latest malicious or inappropriate sites.
- Fully integrated with Fortinet antivirus scanning for protection against unknown malicious websites.
- Simple implementation with true set-and-forget functionality is ideal for protecting remote sites and smaller organizations with limited personnel resources.
- CIPA certification and Internet Watch Foundation membership (UK) to aid compliance with laws protecting children, ideal for schools and libraries.
Fortinet® antispam technology offers a wealth of features to detect, tag, quarantine, and block spam messages and their malicious attachments. FortiGate® and FortiWifi™ platforms and FortiClient™ end-point security agents offer integrated antispam functionality as part of their multi-layered protection, backed by the FortiGuard™ Antispam Service. FortiMail™ appliances complement this functionality with additional features that offer an even more effective barrier against the ever-rising volume of spam, providing the maximum levels of protection against sophisticated email attacks, and with FortiMail appliance's content archiving functions, assistance with regulatory compliance.
Fortinet Antispam Technology Benefits
- Scalable solutions designed for small and multi-gigabit networks alike.
- FortiMail appliances extend antispam feature set for added protection, including inbound/outbound scanning, additional IP address black/white listing functionality, and additional antispam filters.
- Three deployment modes of FortiMail appliances offer maximum versatility, including full-featured email server functionality for SMB/SOHO applications.
- IP-based policies, deep header analysis, holistic image scanning, and the centralized FortiGuard reputation service combine with several other spam recognition methodologies to provide the highest levels of accuracy as certified by ICSA Labs.
- FortiClient end-point security agents extend antispam protection to remote desktop computers, mobile laptops, and smartphones that operate outside the network perimeter.
- Available centralized management and reporting, plus security zone and virtual domain features, reduce capital and operational expenditures for antispam protection.
- Hard drive storage capacity of FortiMail appliances, hard-drive enabled FortiGate appliances, and the FortiAnalyzer logging and reporting appliance facilitate regulatory compliance that requires email archiving.
- Simple, per-device/unlimited-user licensing simplifies administrative overhead and allows organizations to expand protection to new users without incurring additional fees, thus reducing TCO.
To find out more about this exciting all in one edge security product please contact us today .