FortiGate®-ONE SoftwareIntegrated Threat Protection for HP ProCurve

November 2009

Agenda

2

• Implementation of Fortinet’s FortiOS on HP’s Procurve zl switch for 5400- and 8200-series ProCurve chassis• Part of HP ProCurve ONE Ecosystem

FortiGate-ONE Overview

3

• Description− FortiOS operating system for the HP

ProCurve environment

• Ideal Deployments− Remote offices with ProCurve switches

needing comprehensive multi-threat protection

− Central offices needing specific technology not provided by other HP ProCurve services or security partners

− Dynamic routing− Application control− Antivirus/antimalware

FortiGate-ONE for the ProCurve zl Blade

Value Proposition− Protects ProCurve environments with

same comprehensive security features as FortiGate appliances

− Enhances core networking technology with dynamic routing

− Can send alerts to HP’s Network Immunity Manager (NIM) for viewing and remediation

− Centralized management for both FortiGate-ONE and FortiGate appliances in mixed deployments

4

Agenda

5

Features and Benefits for ProCurve Environments

• Proven, Integrated Protection Against Sophisticated Multi-threat Attacks for HP ProCurve Environments − Reduced TCO due to integration of

stand-alone security technologies

− Increased security without increased complexity due to consolidated management console

− Market-leading security with the convenience of a blade provides east of deployment, configuration, and management

• Performance− 4.7 Gbps Firewall (1518 bytes UDP)− 160 Mbps IPSec VPN− 1.6 Gbps IPS− 300 Mbps AV

• Comprehensive Protection− Firewall, VPN (IPSec & SSL), IPS,

AV/AS, antispam, Web filtering − Application control, data loss

prevention, dynamic routing (IPv4 & IPv6), end point NAC, SSL-encrypted traffic inspection

▪ No WAN optimization

6

• HP and Fortinet will “Meet in the Channel”− Partners will offer customers both products

▪ HP will not resell Fortinet, nor Fortinet resell HP▪ No integration by HP to pre-install FortiGate-One on ProCurve zl▪ Partners have option to build integration service

Overview - Route to Market

7

Partners

ProCurve ONE & Integrated Applications

ProCurve Products

SwitchingWirelessSecurity

Management

Marketing Alliances

8

• Alliance program allowing vendors to run their applications on HP hardware• HP provides the underlying hardware and service OS and the vendors provide the

application• Vendor implementation certified by HP

Functionality

Price/Performance9

• Alternative to competitors stackables

• 10/100 and Gigabit optimized

• Traditional Edge services

• Advanced high availability and redundancy

• High density 10G

•ProCurve ONE integrated

• Core Switch with Lifetime Warranty

54005400

42004200

•Enterprise-class performance and security

• Intelligent ASIC, QoS/convergence features

• Gigabit PoE and high density 10G

•ProCurve ONE integrated

• Wireless Edge services

82008200

ProCurve Chassis Portfolio

9

Agenda

10

Mixed FortiGate-ONE and FortiGate Appliances Deployment

11

•Organizations can deploy a combination of FortiGate-ONE and FortiGate appliances to protect their central office as well as remote locations

•They can deploy the right security technologies to meet their unique requirements

Agenda

12

Competitive Analysis

13

Feature

FortiGate-One +

ProCurve zl

HP TMS + ProCurve zl

Vantronix + ProCurve zl

Cisco Cat 6500

Juniper SRX 3400

McAfee Web Content Blade

Firewall

VPN - IPSec

VPN - SSL

IPS

AV/AS

Antispam

Web filtering

Blade form factor

= offered = not offered

Competitive Price/Performance Analysis

Performance

FortiGate-One + HP ProCurve

zl

HP TMS on ProCurve zl

Vantronix on HP ProCurve zl

Cisco Cat 6500

Juniper SRX 3400*

McAfee Web Content Blade

Firewall (512 bytes) 2.1 Gbps 3 Gbps 3-4 Gbps 5.5 Gbps 10 Gbps N/A

IPSec VPN 160 Mbps300 Mbps (AES)

70 Mbps (3DES)

Not published2.5 Gbps (AES)

2.5 Gbps (3DES)

2.5 Gbps N/A

Antivirus 300 Mbps N/A N/A N/A N/A Not published

IPS Throughput 1.6 Gbps 1.5 Gbps N/A 500 Mbps 1 Gbps N/A

Static IPSec VPN Tunnels 2,000 4,800 Not published Not published 16,000 N/A

Concurrent Sessions 1,000,000 600,000 Not published 500,000 500,000 Not published

New Sessions/Sec 30,000 15,000 Not published Not published Not published Not published

Policies 100,000 20,000 Not published Not published Not published Not published

US List Price (USD) $17K $17K $23K $30K+ per

module $18K $15K

14

Fortinet Products: Price/Performance Analysis

Performance

FortiGate-One - HP

ProCurve zl

FortinetFG-310B

Fortinet FG-500A

FortinetFG-620B

FortinetFG-1000A

FortinetFG-3810A

Firewall (512 bytes) 2.1 Gbps 8 Gbps 600 Mbps 16 Gbps 2 Gbps 7 Gbps

IPSec VPN 160 Mbps 6 Gbps 150 Mbps 12 Gbps 600 Mbps 1 Gbps

Antivirus 300 Mbps 160 Mbps 120 Mbps 250 Mbps 200 Mbps 500 Mbps

IPS Throughput 1.6 Gbps 800 Mbps 400 Mbps 1 Gbps 1 Gbps 4 Gbps

Static IPSec VPN Tunnels 2,000 3,000 10,000 20,000 10,000 64,000

Concurrent Sessions 1,000,000 600,000 400,000 600,000 600,000 2,000,000

New Sessions/Sec 30,000 20,000 10,000 25,000 15,000 40,000

Policies 100,000 8,000 8,000 100,000 100,000 100,000

15

Agenda

16

Product Description SKU List Price

FortiGate-ONEFortiGate-ONE System Firmware for HP ProCurve

FG-ONEInsert Regional

Pricing

Series Components & Pricing

17

THANK YOU.For more information, visit Fortinet.com or contact

your preferred Fortinet reseller

18