3
Fortinet Product Matrix - April 2012 FortiGate ® Multi-Threat Security Platform Antivirus performance is measured based on HTTP traffic. IPS performance is measured base on NSS like test methodology with 44K Byte HTTP packets, unless noted otherwise. Actual performance may vary depends on network traffic and environment. This document is provided as a convenient comparison of Fortinet products and services. The datasheet for any product or service can be found on www.fortinet.com should be consulted for the most updated specifications. MSSP AND LARGE ENTERPRISE SYSTEMS Product (Chassis) Firewall Throughput (512 Byte) IPSec VPN Throughput Concurrent Sessions New Ses- sions / Sec Antivirus Throughput (Flow) Intrusion Prevention Throughput Number of VDOMs Network Interfaces Chassis Slots / Max # of Blades Power Source Recommended # of Blades Max Fabric Blades FortiGate-5140/5140B Chassis Up to 480 Gbps Up to 204 Gbps Up to 132 M Up to 1152 K Up to 26.4 Gbps Up to 60 Gbps Up to 6000 See modules below 14 / 14 DC / AC 12 2 FortiGate-5060 Chassis Up to 240 Gbps Up to 102 Gbps Up to 66 M Up to 576 K Up to 13.2 Gbps Up to 30 Gbps Up to 3000 See modules below 6 / 6 DC / AC 6 2 FortiGate-5050 Chassis Up to 110 Gbps Up to 42.5 Gbps Up to 10 M Up to 250 K Up to 11 Gbps Up to 20 Gbps Up to 2500 See modules below 5 / 5 DC / AC 5 2 FortiGate-5020 Chassis Up to 44 Gbps Up to 17 Gbps Up to 4 M Up to 100 K Up to 4.4 Gbps Up to 8 Gbps Up to 1000 See modules below 2 / 2 AC 2 0 FortiGate-5001B 40 Gbps 17 Gbps 11 M 96 K 2.2 Gbps 5 Gbps Up to 500 8 10GbE SFP+ and 2 10/100/100 Port with 64GB local storage FortiGate-5001A-SW / DW (with AMC) 2 Gbps (13 / 22 Gbps) 800 Mbps (7 / 8.5 Gbps) 2 M 50 K 1.5 Gbps 3.5 Gbps Up to 250 2 GbE 10/100/1000 port and Double- or Single-Width AMC slot. Supports 10GbE modules. FortiGate-5001SX 4 Gbps 600 Mbps 1.2 M 20 K 250 Mbps (Proxy) 2 Gbps [UDP] Up to 250 5001SX: 4-GbE SFP, 4-GbE 10/100/1000 FortiSwitch-5203B FortiSwitch-5003B FortiSwitch-5003A Switch Fabric Blades FortiSwitch-5203B, FortiSwitch-5003B and FortiSwtich-5003A delivers high availability 10GbE switching for FortiGate-5140B, -5140 and -5060 chassis. FortiSwitch-5203B supports UTM function, which can be used as a standalone FortiGate module. Each FortiGate-5001A requires a 10GbE Rear Transition Module (RTM) for switching across the backplane fabric. FortiSwitch-5203B : 10-10GbE SFP+, 1-GbE 10/100/100 (Mgnt) FortiSwitch-5003B : 10-10GbE SFP+, 1-GbE 10/100/100 (Mgnt) FortiSwitch-5003A : 9-10GbE SFP+, 2-GbE 10/100/100 (Mgmt) RTM-XB2 or RTM-XD2: 10 GbE Rear Transition Module for FG-5000 Series ENTERPRISE APPLIANCES Product Firewall Throughput (512 Byte) IPSec VPN Throughput Concurrent Sessions New Ses- sions / Sec Antivirus Throughput (Flow) Intrusion Prevention Throughput GbE Interface SFP Interface SFP+ (10GbE) Interface Bypass Interface (Pairs) Modular Ex- pansion Slots Base Sys- tem Storage Hot-Swappable Power Supplies VDOMs (Max) FortiGate-3950B (with FMC) 20 Gbps (120 Gbps) 8 Gbps (50.5 Gbps) 20 M 250 K 15 Gbps 5 Gbps (20 Gbps) 2 (102) 4 (104) 2 (12) 0 5 FMC 256 GB Yes Up to 500 FortiGate-3810A (with AMC) 7 Gbps (55 Gbps) 1 Gbps (23 Gbps) 2 M 40 K 500 Mbps 4 Gbps 8 2 (26) 0 (8) 0 2 SW and 2 DW AMC 0 Yes Up to 250 FortiGate-3240C 40 Gbps 17 Gbps 10 M 200 K 4.6 Gbps 8 Gbps 2 18 12 0 No 64 GB Yes Up to 250 FortiGate-3140B 55 Gbps 22 Gbps 10 M 200 K 4.6 Gbps 8.4 Gbps 2 10 10 0 4 FSM 64 GB Yes Up to 250 FortiGate-3040B 40 Gbps 17 Gbps 10 M 200 K 4 Gbps 6 Gbps 2 10 8 0 4 FSM 64 GB Yes Up to 250 FortiGate-1240B (with AMC) 40 Gbps (44 Gbps) 16 Gbps (18.5 Gbps) 5 M 120 K 1.6 Gbps 5 Gbps (8 Gbps) 16 24 0 0 1 SW AMC and 6 FSM 64 GB Yes Up to 100 FortiGate-1000C 20 Gbps 8 Gbps 7 M 190 K 2.1 Gbps 6 Gbps 12+8 (Share) 8 (Share) 2 2 No 128 GB Yes Up to 100 FortiGate-620B / 620B-DC (with AMC) 16 Gbps (20 Gbps) 12 Gbps (15 Gbps) 1 M 25 K 750 Mbps 2.5 Gbps 20 (24) 0 0 0 1 SW AMC 0 Opt. Ext. PS 10 FortiGate-600C 16 Gbps 8 Gbps 3 M 70 K 1.3 Gbps 3 Gbps 16+4 (Share) 4 (Share) 0 2 No 64 GB Yes Opt 10 FortiGate-310B / 310B-DC FortiGate-311B (with AMC) 8 Gbps (12 Gbps) 6 Gbps (9 Gbps) 600 K 20 K 350 Mbps 800 Mbps 10 0 0 0 1 SW AMC 2 FSM (311B) 1 x 64 GB (311B) Yes Opt. (310B) Yes (311B) 10 FortiGate-300C 8 Gbps 4.5 Gbps 2 M 50 K 550 Mbps 1.4 Gbps 10 0 0 0 No 32 GB Opt. Ext. PS 10 FortiGate-200B / 200B-POE 5 Gbps 2.5 Gbps 500 K 15 K 200 Mbps 650 Mbps 8 FE & 8 GbE 0 0 0 1 FSM 0 No 10 SMB/ROBO/SOHO APPLIANCES Product Firewall Throughput (512 Byte) IPSec VPN Throughput Concurrent Sessions New Ses- sions / Sec Antivirus Throughput (Flow) Intrusion Prevention Throughput Switch/LAN Interfaces WAN Interfaces Wireless Interfaces Other Interfaces VDOMs (Max) FortiGate-110C / 111C 500 Mbps 100 Mbps 400 K 10 K 160 Mbps 450 Mbps 8 FE 2 GbE No USB, COM, 64 GB SSD (111C) 10 FortiGate-100D 1 Gbps 450 Mbps 2.5 M 22 K 700 Mbps 950 Mbps 20 GbE 2 GbE No USB, COM, 16 GB SSD 10 FortiGate Voice-80C 500 Mbps 100 Mbps 400 K 10 K 65 Mbps (Proxy) 350 Mbps 8 FE 2 GbE No 4 FXO, Concurrent Calls: 20 10 FortiWiFi Voice-80CS 500 Mbps 100 Mbps 400 K 10 K 65 Mbps (Proxy) 350 Mbps 6 FE 2 GbE 802.11 a/b/g/n 1 FE DMZ, Concurrent Calls: 20 10 FortiGate-80C / 80CM FortiWiFi-80CM 700 Mbps 140 Mbps 400 K 12 K 190 Mbps 350 Mbps 6 & 1 FE DMZ 2 GbE FW-80CM/ 81CM WiFi a/b/g/n ExpressCard Slot, Modem (80/81CM), Internal Storage - 8 GB 10 FortiGate-60C FortiWiFi-60C / 60CM 1 Gbps 70 Mbps 80 K 3 K 40 Mbps 135 Mbps 5 GbE & 1 FE DMZ 2 FE / 2 GbE (60CM) FW-60C & 60CM a/b/g/n ExpressCard Slot, 8 GB storage, 1 USB-A and 1 USB-B port. Modem & 1 GbE DMZ (FWF-60CM) 10 FortiGate-50B / 51B FortiWiFi-50B 50 Mbps 48 Mbps 25 K 2 K 19 Mbps (Proxy) 50 Mbps 3 FE 2 FE FW-50B WiFi b/g POE-Powered (FortiWiFi), USB, COM, 32GB SSD (51B) 10 FortiGate/WiFi-40C 200 Mbps 60 Mbps 40 K 2 K 40 Mbps 135 Mbps 5 GbE 2 GbE FW-40C WiFi a/b/g/n 1 USB-A Client, 1 USB-B Server and COM 10 FortiGate/WiFi-20C 20 Mbps 20 Mbps 10 K 1 K 20 Mbps 20 Mbps 4 GbE 1 GbE FW-20C WiFi a/b/g/n 1 USB-A Client and 1 USB-B Server 0 Expansion Modules Advanced Mezzanine Card (AMC) Modules [Double-Width (DW) Modules:] ADM-XD4: 4-port 10GbE FortiASIC Module ADM-XB2: 2-port 10GbE FortiASIC Module ADM-XE2: 2-port 10GbE Security Processing Module ADM-FB8: 8-port GbE FortiASIC Module ADM-FE8: 8-port GbE Security Processing Module [Single-Width (SW) Modules:] ASM-FB4: 4-port GbE FortiASIC Module ASM-CE4: 4-port GbE Security Processing Module ASM-S08: 500 GB Hard Disk Storage Module ASM-CX4: 4-port GbE TX By-Pass Module ASM-FX2: 2-port GbE SX By-Pass Module Fortinet Mezzanine Card (FMC) Modules FMC-XD2: 2-port 10GbE Firewall Module FMC-XG2: 2-port 10GbE IPS Module FMC-C20: 20-port 1GbE Firewall Module with RJ45 interface FMC-F20: 20-port 1GbE Firewall Module with SFP interface

FortiGate Product Matrix

Embed Size (px)

Citation preview

Fortinet Product Matrix - April 2012FortiGate® Multi-Threat Security Platform

Antivirus performance is measured based on HTTP traffic. IPS performance is measured base on NSS like test methodology with 44K Byte HTTP packets, unless noted otherwise. Actual performance may vary depends on network traffic and environment.

This document is provided as a convenient comparison of Fortinet products and services. The datasheet for any product or service can be found on www.fortinet.com should be consulted for the most updated specifications.

MSSP AND LARGE ENTERPRISE SYSTEMSProduct (Chassis) Firewall

Throughput(512 Byte)

IPSec VPN Throughput

Concurrent Sessions

New Ses-sions / Sec

Antivirus Throughput (Flow)

Intrusion Prevention Throughput

Number of VDOMs

Network Interfaces Chassis Slots / Max # of Blades

Power Source

Recommended # of Blades

Max Fabric Blades

FortiGate-5140/5140B Chassis

Up to 480 Gbps Up to 204 Gbps Up to 132 M Up to 1152 K Up to 26.4 Gbps Up to 60 Gbps Up to 6000 See modules below 14 / 14 DC / AC 12 2

FortiGate-5060 Chassis Up to 240 Gbps Up to 102 Gbps Up to 66 M Up to 576 K Up to 13.2 Gbps Up to 30 Gbps Up to 3000 See modules below 6 / 6 DC / AC 6 2

FortiGate-5050 Chassis Up to 110 Gbps Up to 42.5 Gbps Up to 10 M Up to 250 K Up to 11 Gbps Up to 20 Gbps Up to 2500 See modules below 5 / 5 DC / AC 5 2

FortiGate-5020 Chassis Up to 44 Gbps Up to 17 Gbps Up to 4 M Up to 100 K Up to 4.4 Gbps Up to 8 Gbps Up to 1000 See modules below 2 / 2 AC 2 0

FortiGate-5001B 40 Gbps 17 Gbps 11 M 96 K 2.2 Gbps 5 Gbps Up to 500 8 10GbE SFP+ and 2 10/100/100 Port with 64GB local storage

FortiGate-5001A-SW / DW (with AMC)

2 Gbps (13 / 22 Gbps)

800 Mbps(7 / 8.5 Gbps)

2 M 50 K 1.5 Gbps 3.5 Gbps Up to 250 2 GbE 10/100/1000 port and Double- or Single-Width AMC slot. Supports 10GbE modules.

FortiGate-5001SX 4 Gbps 600 Mbps 1.2 M 20 K 250 Mbps (Proxy) 2 Gbps [UDP] Up to 250 5001SX: 4-GbE SFP, 4-GbE 10/100/1000

FortiSwitch-5203BFortiSwitch-5003BFortiSwitch-5003A Switch Fabric Blades

FortiSwitch-5203B, FortiSwitch-5003B and FortiSwtich-5003A delivers high availability 10GbE switching for FortiGate-5140B, -5140 and -5060 chassis. FortiSwitch-5203B supports UTM function, which can be used as a standalone FortiGate module. Each FortiGate-5001A requires a 10GbE Rear Transition Module (RTM) for switching across the backplane fabric.

FortiSwitch-5203B : 10-10GbE SFP+, 1-GbE 10/100/100 (Mgnt)FortiSwitch-5003B : 10-10GbE SFP+, 1-GbE 10/100/100 (Mgnt)FortiSwitch-5003A : 9-10GbE SFP+, 2-GbE 10/100/100 (Mgmt)RTM-XB2 or RTM-XD2: 10 GbE Rear Transition Module for FG-5000 Series

ENTERPRISE APPLIANCESProduct Firewall

Throughput (512 Byte)

IPSec VPN Throughput

Concurrent Sessions

New Ses-sions / Sec

Antivirus Throughput (Flow)

Intrusion PreventionThroughput

GbE Interface

SFP Interface

SFP+ (10GbE)Interface

Bypass Interface(Pairs)

Modular Ex-pansion Slots

Base Sys-tem Storage

Hot-Swappable Power Supplies

VDOMs (Max)

FortiGate-3950B (with FMC) 20 Gbps(120 Gbps)

8 Gbps(50.5 Gbps)

20 M 250 K 15 Gbps 5 Gbps(20 Gbps)

2(102)

4 (104)

2 (12) 0 5 FMC 256 GB Yes Up to 500

FortiGate-3810A (with AMC)

7 Gbps (55 Gbps)

1 Gbps (23 Gbps)

2 M 40 K 500 Mbps 4 Gbps 8 2 (26) 0 (8) 0 2 SW and 2 DW AMC

0 Yes Up to 250

FortiGate-3240C 40 Gbps 17 Gbps 10 M 200 K 4.6 Gbps 8 Gbps 2 18 12 0 No 64 GB Yes Up to 250

FortiGate-3140B 55 Gbps 22 Gbps 10 M 200 K 4.6 Gbps 8.4 Gbps 2 10 10 0 4 FSM 64 GB Yes Up to 250

FortiGate-3040B 40 Gbps 17 Gbps 10 M 200 K 4 Gbps 6 Gbps 2 10 8 0 4 FSM 64 GB Yes Up to 250

FortiGate-1240B(with AMC)

40 Gbps(44 Gbps)

16 Gbps(18.5 Gbps)

5 M 120 K 1.6 Gbps 5 Gbps(8 Gbps)

16 24 0 0 1 SW AMC and 6 FSM

64 GB Yes Up to 100

FortiGate-1000C 20 Gbps 8 Gbps 7 M 190 K 2.1 Gbps 6 Gbps 12+8 (Share) 8 (Share) 2 2 No 128 GB Yes Up to 100

FortiGate-620B / 620B-DC (with AMC)

16 Gbps (20 Gbps)

12 Gbps (15 Gbps)

1 M 25 K 750 Mbps 2.5 Gbps 20 (24) 0 0 0 1 SW AMC 0 Opt. Ext. PS 10

FortiGate-600C 16 Gbps 8 Gbps 3 M 70 K 1.3 Gbps 3 Gbps 16+4 (Share) 4 (Share) 0 2 No 64 GB Yes Opt 10

FortiGate-310B / 310B-DCFortiGate-311B (with AMC)

8 Gbps (12 Gbps)

6 Gbps (9 Gbps)

600 K 20 K 350 Mbps 800 Mbps 10 0 0 0 1 SW AMC 2 FSM (311B)

1 x 64 GB (311B)

Yes Opt. (310B) Yes (311B)

10

FortiGate-300C 8 Gbps 4.5 Gbps 2 M 50 K 550 Mbps 1.4 Gbps 10 0 0 0 No 32 GB Opt. Ext. PS 10

FortiGate-200B / 200B-POE 5 Gbps 2.5 Gbps 500 K 15 K 200 Mbps 650 Mbps 8 FE & 8 GbE 0 0 0 1 FSM 0 No 10

SMB/ROBO/SOHO APPLIANCESProduct Firewall

Throughput (512 Byte)

IPSec VPN Throughput

Concurrent Sessions

New Ses-sions / Sec

Antivirus Throughput (Flow)

Intrusion PreventionThroughput

Switch/LAN Interfaces

WAN Interfaces

Wireless Interfaces

Other Interfaces VDOMs (Max)

FortiGate-110C / 111C 500 Mbps 100 Mbps 400 K 10 K 160 Mbps 450 Mbps 8 FE 2 GbE No USB, COM, 64 GB SSD (111C) 10

FortiGate-100D 1 Gbps 450 Mbps 2.5 M 22 K 700 Mbps 950 Mbps 20 GbE 2 GbE No USB, COM, 16 GB SSD 10

FortiGate Voice-80C 500 Mbps 100 Mbps 400 K 10 K 65 Mbps (Proxy) 350 Mbps 8 FE 2 GbE No 4 FXO, Concurrent Calls: 20 10

FortiWiFi Voice-80CS 500 Mbps 100 Mbps 400 K 10 K 65 Mbps (Proxy) 350 Mbps 6 FE 2 GbE 802.11 a/b/g/n 1 FE DMZ, Concurrent Calls: 20 10

FortiGate-80C / 80CMFortiWiFi-80CM

700 Mbps 140 Mbps 400 K 12 K 190 Mbps 350 Mbps 6 & 1 FE DMZ

2 GbE FW-80CM/ 81CM WiFi a/b/g/n

ExpressCard Slot, Modem (80/81CM), Internal Storage - 8 GB

10

FortiGate-60CFortiWiFi-60C / 60CM

1 Gbps 70 Mbps 80 K 3 K 40 Mbps 135 Mbps 5 GbE & 1 FE DMZ

2 FE / 2 GbE (60CM)

FW-60C & 60CM a/b/g/n

ExpressCard Slot, 8 GB storage, 1 USB-A and 1 USB-B port. Modem & 1 GbE DMZ (FWF-60CM)

10

FortiGate-50B / 51B FortiWiFi-50B

50 Mbps 48 Mbps 25 K 2 K 19 Mbps (Proxy) 50 Mbps 3 FE 2 FE FW-50B WiFi b/g POE-Powered (FortiWiFi), USB, COM, 32GB SSD (51B)

10

FortiGate/WiFi-40C 200 Mbps 60 Mbps 40 K 2 K 40 Mbps 135 Mbps 5 GbE 2 GbE FW-40C WiFi a/b/g/n 1 USB-A Client, 1 USB-B Server and COM 10

FortiGate/WiFi-20C 20 Mbps 20 Mbps 10 K 1 K 20 Mbps 20 Mbps 4 GbE 1 GbE FW-20C WiFi a/b/g/n 1 USB-A Client and 1 USB-B Server 0

Expansion Modules

Advanced Mezzanine Card (AMC) Modules [Double-Width (DW) Modules:] • ADM-XD4: 4-port 10GbE FortiASIC Module • ADM-XB2: 2-port 10GbE FortiASIC Module • ADM-XE2: 2-port 10GbE Security Processing Module • ADM-FB8: 8-port GbE FortiASIC Module • ADM-FE8: 8-port GbE Security Processing Module [Single-Width (SW) Modules:] • ASM-FB4: 4-port GbE FortiASIC Module • ASM-CE4: 4-port GbE Security Processing Module • ASM-S08: 500 GB Hard Disk Storage Module • ASM-CX4: 4-port GbE TX By-Pass Module • ASM-FX2: 2-port GbE SX By-Pass Module

Fortinet Mezzanine Card (FMC) Modules • FMC-XD2: 2-port 10GbE Firewall Module • FMC-XG2: 2-port 10GbE IPS Module • FMC-C20: 20-port 1GbE Firewall Module with RJ45 interface • FMC-F20: 20-port 1GbE Firewall Module with SFP interface

Managing & Analyzing • Secure Messaging • Database & Web Security • Endpoint Security Software • Security and Support Services

Copyright© 2012 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions, and performance may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.z

BRO103-R34-201204

MANAGEMENT, ANALYSIS, & REPORTING APPLIANCESPRODUCT 10/100/1000

Ethernet10/100 Ethernet

Base System Storage Capacity

Administration Domain / Max

Administrative Web Portals

Web Portal Users (Max)

Local Hosted Security Content

Hardware Form Factor Network Devices (Max)

FortiClient Devices

High Availabil-ity Support

Redundant Power

FortiManager-5001A 2 0 80 GB 100 / 200 100 4,000 AV, IPS, VM, WF, AS ATCA Blade 4,000 100,000 Yes N/A

FortiManager-3000C 4 0 4 TB 200 / 500 100 4,000 AV, IPS, VM, WF, AS Rack Mount (2-RU) 5,000 120,000 Yes Yes

FortiManager-1000C 4 0 1 TB 50 / 100 50 500 AV, IPS, VM, WF, AS Rack Mount (1-RU) 800 25,000 Yes No

FortiManager-400C 4 0 1 TB 10 / 50 - - AV, IPS, VM Rack Mount (1-RU) 300 10,000 Yes No

FortiManager-100C 2 1 1 TB 10 / 10 - - AV, IPS, VM Desktop 20 2,500 Yes No

PRODUCT 10/100/1000 Ethernet

10/100 Ethernet

Base System Storage Capacity

Network De-vices (Max)

FortiClient Agents (Max)

Centralized Quarantine

Number of Hard Drives

RAID Storage Management

Data Receive Rate

Log Perf.(Logs / Sec)

Recommended Device

Redundant Power

FortiAnalyzer-4000B 2 and 2 SFP 0 6 TB 2,000 No Restriction Yes 6 (Plus 18 Optional) 0, 1, 5, 6, 10, 50, 60 24 Mbps Up to 6,000 All Models Yes

FortiAnalyzer-2000B 6 0 2 TB 2,000 No Restriction Yes 2 (Plus 4 Optional) 0, 1, 5, 10, 50 12 Mbps Up to 3,000 All Models Yes

FortiAnalyzer-1000C 4 0 1 TB 2,000 No Restriction Yes 1 (Plus 3 Optional) Opt - 0, 1, 10 4 Mbps Up to 1,000 All Models No

FortiAnalyzer-400C 4 0 2 TB 200 2,000 Yes 1 N/A 2.5 Mbps Up to 625 All Models No

FortiAnalyzer-100C 2 1 1 TB 100 100 Yes 1 N/A 800 Kbps Up to 200 All Models No

SECURE MESSAGING APPLIANCESPRODUCT 10/100/1000

Ethernet10/100 Ethernet

Base System Storage Capacity

RAID Storage Management

Email Domains Policies (Do-main/Sys)

Server Mode Mailboxes

Hardware Form Factor Profiles (Do-main / Sys)

Email Routing (Mgs / Hr)

Antispam (Mgs / Hr)

Redundant Power

FortiMail-5002B 3 0 146 GB N/A 10,000 1,500 / 7,500 3,000 ATCA Blade 50 / 600 2.3 Million 2.2 Million N/A

FortiMail-3000C 4 and 2 SFP 0 2 x 1 TB 0, 1, 5, 10, 50 5,000 1,500 / 7,500 3,000 Rack Mount (2-RU) 50 / 600 2.0 Million 1.8 Million Yes

FortiMail-2000B 6 0 2 x 1 TB 0, 1, 5, 10, 50 5,000 1,500 / 7,500 3,000 Rack Mount (2-RU) 50 / 600 1.5 Million 1.3 Million Yes

FortiMail-400C 4 0 2 x 1 TB 0, 1 500 600 / 3,000 1,000 Rack Mount (1-RU) 50 / 200 400,000 350,000 No

FortiMail-100C 2 1 1 x 1 TB N/A 50 60 / 300 200 Desktop 50 / 60 90,000 85,000 No

DATABASE and WEB SECURITY APPLIANCESPRODUCT 10/100/1000

Ethernet# Database Instances

Base System Storage Capacity

Total Storage Capacity

Redundant Power

Database Support / Asset Agent Licenses Repository Database Support

FortiDB-2000B 4 60 1 TB 6 TB (Opt) Yes DB2 UDB V8, DB2 UDB V9; Microsoft SQL Server 2000, Microsoft SQL Server 2005; Or-acle 8.1.6, Oracle 8.1.7.4, Oracle 9.2.0.x, Oracle 10.2.0.x, Oracle 11.1.0.x; Sybase ASE 12.5.4, Sybase ASE 15.0.2

Apache Derby 10.x, DB2 UDB v9, Microsoft SQL Server 2005, Oracle 10gR2, PostgreSQL 8.3

FortiDB-1000C 4 30 1 TB 2 TB (Opt) No

FortiDB-400B 4 10 500 GB 1 TB (Opt) No

PRODUCT 10/100/1000 Ethernet

Throughput (HTTP)

Base System Storage Capacity

Total Storage Capacity

Redundant Power

Max HTTP Trans / sec

Unmatched Protection for Web Applications Features

FortiWeb-4000C 6 & 2 SX By-Pass 2 Gbps 2 TB 6 TB (Opt) Yes 70,000 • ICSA WAF certified• WAF and integrated scanner aid in PCI 6.6 Compliance• Network and Application layer DoS protection• User behaviour Analysis• Geo IP Analytics• Protection against OWASP Top 10

• Web Application Firewall - Secures web applications to help customers meet compliance requirements• Web Vulnerability Scanner - Scans, analyzes and detects web application vulnerabilities• Application Delivery - Assures availability and acceler-ates performance of critical web applications

FortiWeb-3000C (FSX) 6 (& 2 SX By-Pass) 1 Gbps 2 TB 6 TB (Opt) Yes 40,000

FortiWeb-1000C 4 500 Mbps 1 TB 1 TB No 27,000

FortiWeb-400C 4 100 Mbps 1 TB 1 TB No 10,000

SWITCHING PLATFORMSPRODUCT 10/100/1000

Ethernet10 GbE Ports

Throughput PoE Ports PoE Power Budget

MAC Address Storage

VLAN Supported Link Agg Group Size Total Link Agg Groups

Layer 2 / Layer 3 Swtich

Switch Type Redundant Power

FortiSwitch-548B 0 48 (SFP+) 960 Gbps 0 N/A 128,000 3965 Up to 8 ports 8 Layer 2 Managed Yes

FortiSwitch-248B-DPS 48 4 (SFP+) 176 Gbps 0 N/A 32,000 3965 Up to 8 ports 8 Layer 2 Managed Yes

FortiSwitch-80-PoE 8 0 2 Gbps 4 - 802.3af 62 W 2,000 N/A N/A N/A Layer 2 Unmanaged No

ENDPOINT SECURITY SOFTWAREPRODUCT Personal

FirewallIPSec VPN Antivirus &

AntiSpywareWAN Optimization

Intrusion Prevention

Email Antispam

FortiManager Management

Web Content Filtering Supported Platforms

FortiClient Premium Yes Yes Yes Yes Yes Yes Yes Yes Various Windows OSes. Mac OS X (VPN and Two factor authentication only.)

APPLICATION DELIVERY CONTROLLER PLATFORMS WEB CACHING & TWO FACTOR AUTH. PLATFORMPRODUCT 10/100/1000

EthernetThroughput SSL Throughput Layer 7 RPS SSL TPS Connections Redundant Power PRODUCT 10/100/1000

EthernetThroughput RAID Storage Base System

Storage

FortiBalancer-2000 12 & 4 SFP 10 Gbps 5 Gbps 1.15 Million 22,500 8 Millions Yes FortiCache-3000C 4 & 2 SFP 500 Mbps 0, 1, 5, 10, 50 6 x 1 TB

FortiBalancer-1000 8 & 2 SFP 4 Gbps 1.6 Gbps 230,000 13,500 4 Millions No FortiAuthentica-tor-1000C

4 2000 users - 1 TB

FortiBalancer-400 4 2 Gbps 1 Gbps 140,000 7,500 1 Millions No

FORTIGUARD SECURITY SUBSCRIPTION SERVICES INTEGRATED WIRELESS SECURITY AND ACCESS SOLUTIONS Product AV IPS AS WF VM AC DB AV = Antivirus

IPS = Intrusion Preven-tionAS = AntispamWF = Web Filtering VM = Vulnerability Management (including Compliance Benchmark-ing)AC = Application controlDB = Database Security

Product Freq - Radio 1 Freq - Radio 2 Ethernet Port # of SSIDs POE

FortiGate Yes Yes Yes Yes Yes Yes No FortiAP-222B 802.11 a/n 802.11 b/g/n 1 x 10/100/1000

14 - client, 2 - monitoring

Yes (802.3 at - 30W)

FortiAnalyzer No No No No Yes No No FortiAP-221B 802.11 b/g/n or a/n (Selectable)

802.11 b/g/n 1 x 10/100/1000

14 - client, 2 - monitoring

Yes (802.3 af)

FortiClient Yes No Yes Yes No Yes No FortiAP-220B 802.11 b/g/n or a/n (Selectable)

802.11 b/g/n 1 x 10/100/1000

14 - client, 2 - monitoring

Yes (802.3 af)

FortiDB No No No No No No Yes FortiAP-210B 802.11 b/g/n or a/n (Selectable)

- 1 x 10/100/100

7 - client, 1 - monitoring

Yes (802.3 af)

FortiMail Yes No Yes No No No No FortiToken Two-Factor Authentication FortiScan No No No No Yes No No FortiToken-200 OTP (One Time Password) hardware token. Long battery life, perpetual license and simple deployment.

Secu

rity

• P

erfo

rman

ce •

Cos

t • F

lexi

bilit

yFo

rtin

et®

is

th

e pi

onee

r an

d le

adin

g pr

ovid

er

of

cons

olid

ated

ne

twor

k se

curi

ty

solu

tion

s th

at

prot

ect

your

ne

twor

k ag

ains

t to

day’

s co

nsta

ntly

ch

angi

ng

thre

ats.

Fo

rtin

et

prov

ides

en

d-to

-end

se

curi

ty

solu

tion

s fr

om

the

netw

ork

core

to

the

endp

oint

for

the

wor

ld’s

lar

gest

org

aniz

atio

ns,

incl

udin

g gl

obal

ent

erpr

ises

, se

rvic

e pr

ovid

ers,

and

gov

ernm

ent

agen

cies

. W

e al

so p

rote

ct s

mal

l and

med

ium

bus

ines

ses,

bra

nch

offi

ces,

and

reg

iona

l lo

cati

ons.

For

tinet

off

ers

an i

nnov

ativ

e se

curi

ty p

latf

orm

tha

t in

corp

orat

es

the

esse

ntia

l sec

urit

y ap

plic

atio

ns a

nd n

etw

ork

serv

ices

req

uire

d to

pro

tect

yo

ur e

nvir

onm

ent,

reg

ardl

ess

of s

ize.

For

tinet

del

iver

s

• Im

prov

ed s

ecur

ity

wit

h a

com

preh

ensi

ve, c

onso

lidat

ed s

ecur

ity

solu

tion

• In

crea

sed

perf

orm

ance

wit

h cu

stom

AS

IC-a

ccel

erat

ed h

ardw

are

• R

educ

ed t

otal

cos

t of

ow

ners

hip

by i

nteg

ratin

g be

st-o

f-br

eed

secu

rity

ap

plic

atio

ns in

to a

sin

gle

devi

ce a

nd s

impl

ifyi

ng y

our

netw

ork

Fort

inet

net

wor

k se

curi

ty s

olut

ions

incl

ude

a ra

nge

of h

igh-

end

chas

sis

base

d sy

stem

s, a

pplia

nce-

base

d so

luti

ons,

vir

tual

app

lianc

es,

and

man

agem

ent

and

repo

rtin

g to

ols.

The

se c

apab

ilitie

s al

low

you

to

prot

ect

your

cri

tica

l as

sets

cos

t-ef

fect

ivel

y w

hile

del

iver

ing

unpa

ralle

led

flexi

bilit

y in

dep

loym

ent.

Fort

inet

is

th

e on

ly

unif

ied

thre

at

man

agem

ent

solu

tion

s pr

ovid

er

that

ow

ns a

ll of

its

tech

nolo

gy.

We

built

For

tinet

sol

utio

ns f

rom

the

gro

und

up t

o in

tegr

ate

mul

tiple

leve

ls o

f sec

urit

y pr

otec

tion

—in

clud

ing

firew

all,

anti

viru

s,

intr

usio

n pr

even

tion

, ap

plic

atio

n co

ntro

l, VP

N,

antim

alw

are,

Web

filt

erin

g,

antis

pam

and

tra

ffic

sha

ping

—pr

ovid

ing

cust

omer

s a

way

to

prot

ect a

gain

st

mul

tiple

thr

eats

tod

ay a

nd in

to t

he f

utur

e.

Con

tact

you

r A

utho

rize

d Fo

rtiP

artn

er o

r vi

sit

ww

w.f

ortin

et.c

om/p

artn

ers

to

find

a Fo

rtiP

artn

er n

ear

you.

Fort

inet

Inco

rpor

ated

| 10

90 K

ifer

Roa

d, S

unny

vale

, CA

9408

6 U

SATe

l +1-

408-

235-

7700

Fax

+1-

408-

235-

7737

| w

ww

.fort

inet

.com

/sal

es

Fort

iOS™

Ope

ratin

g Sy

stem

: Dev

elop

ed fo

r Se

curi

tyW

e cr

eate

d th

e Fo

rtiO

S op

erat

ing

syst

em

spec

ifica

lly

to

offe

r m

axim

um

perf

orm

ance

and

pro

tect

ion

whi

le r

educ

ing

com

plex

ity i

n yo

ur n

etw

orki

ng

envi

ronm

ent.

Fort

iOS

give

s yo

u th

e fle

xibi

lity

to d

eplo

y as

muc

h or

as

little

ne

twor

k an

d se

curi

ty te

chno

logy

as

you

need

: Fir

ewal

l, IP

S, A

ntiv

irus

, Ant

ispa

m,

IPSe

c an

d SS

L VP

N, A

pplic

atio

n C

ontr

ol, W

AN O

ptim

izat

ion,

DLP

, SSL

Insp

ectio

n,

full

feat

ure

rout

ing,

com

plet

e lo

ggin

g an

d au

ditin

g ca

pabi

litie

s fo

r fo

rens

ic

anal

ysis

, gr

anul

ar m

ulti-

tena

nt V

irtu

al S

ecur

ity D

omai

n (V

DO

M)

supp

ort,

and

a co

mpl

ete

com

man

d lin

e in

terf

ace

(CLI

). W

e de

velo

p al

l ou

r ow

n te

chno

logy

, m

eani

ng t

here

are

no

thir

d pa

rty

soft

war

e ap

plic

atio

ns in

clud

ed t

hat

coul

d le

ad

to a

vul

nera

bilit

y. It

is C

omm

on C

rite

ria

Cer

tified

EAL

4+

and

Fed

eral

Info

rmat

ion

Proc

essi

ng S

tand

ard

(FIP

S) 1

40-2

val

idat

ed.

Glob

al T

hrea

t Res

earc

h an

d Up

date

sO

ur F

ortiG

uard

® L

abs’

glo

bal t

eam

of t

hrea

t res

earc

hers

con

tinuo

usly

mon

itors

th

e ev

olvi

ng th

reat

land

scap

e. T

he te

am o

f ove

r 125

For

tiGua

rd L

abs

rese

arch

ers

prov

ides

aro

und

the

cloc

k co

vera

ge t

o en

sure

you

r ne

twor

k st

ays

prot

ecte

d.

It de

liver

s ra

pid

prod

uct

upda

tes

and

deta

iled

secu

rity

kno

wle

dge,

pro

vidi

ng

prot

ectio

n fr

om n

ew a

nd e

mer

ging

thre

ats.

Fort

iGua

rd S

ervi

ces

• An

alys

is a

nd M

anag

emen

t •

Antis

pam

Antiv

irus

App

licat

ion

Con

trol

Dat

abas

e Se

curi

ty

• In

trus

ion

Prev

entio

n •

Vuln

erab

ility

Man

agem

ent

• W

eb F

ilter

ing

• VO

IP

• W

eb S

ecur

ity

The

Fort

iGat

e® f

amily

of

cons

olid

ated

sec

urity

sys

tem

s ra

nge

in p

erfo

rman

ce

and

phys

ical

fea

ture

s to

mee

t th

e re

quire

men

ts o

f an

y si

zed

orga

niza

tion.

Addi

tiona

lly,

Fort

inet

del

iver

s a

com

plet

e lin

e of

pro

duct

s th

at e

nabl

e ne

twor

k

man

ager

s to

con

trol

, mon

itor,

and

oper

ate

netw

orks

sim

ply

and

pow

erfu

lly:

• Fo

rtiA

naly

zer™

Ap

plia

nces

—C

entr

aliz

ed

logg

ing

and

repo

rtin

g th

at

secu

rely

agg

rega

tes

and

anal

yzes

log

data

from

mul

tiple

For

tinet

pro

duct

s

• Fo

rtiM

anag

er™

Ap

plia

nces

—C

entr

aliz

ed

com

man

d an

d co

ntro

l,

confi

gura

tion

man

agem

ent a

nd m

onito

ring

solu

tion

• Fo

rtiM

ail™

App

lianc

es—

An e

nter

pris

e-cl

ass

fam

ily o

f sp

ecia

lized

em

ail

secu

rity

solu

tions

pro

vidi

ng a

ntis

pam

and

ant

iviru

s pr

otec

tion

• Fo

rtiW

eb™

Appl

ianc

es -

An

ente

rpris

e cl

ass

of W

eb a

pplic

atio

n fir

ewal

ls

prot

ectio

n w

eb-b

ased

app

licat

ions

and

dat

a

The

Fort

inet

Adv

anta

ge:

Fort

inet

’s

purp

ose

built

ha

rdw

are

and

soft

war

e pr

ovid

e in

dust

ry-l

eadi

ng

perf

orm

ance

for

the

mos

t de

man

ding

net

wor

king

env

ironm

ents

. O

ur s

olut

ions

prov

ide

the

visi

bilit

y yo

u ne

ed to

det

ect h

idde

n th

reat

s w

ithin

legi

timat

e co

nten

t,

even

from

trus

ted

sour

ces

and

auth

oriz

ed a

pplic

atio

ns.

Fort

iASI

C™ P

urpo

se-B

uilt

Secu

rity

Acc

eler

atio

nW

e de

velo

ped

our

inte

grat

ed a

rchi

tect

ure

spec

ifica

lly t

o pr

ovid

e ex

trem

ely

high

th

roug

hput

and

exc

eptio

nally

low

late

ncy.

Our

uni

que

appr

oach

min

imiz

es p

acke

t pr

oces

sing

whi

le a

ccur

atel

y sc

anni

ng t

he d

ata

for

thre

ats.

Cus

tom

For

tiASI

C™

pr

oces

sors

del

iver

the

pow

er y

ou n

eed

to d

etec

t m

alic

ious

con

tent

at

mul

ti-G

igab

it sp

eeds

. Oth

er s

ecur

ity te

chno

logi

es c

anno

t pro

tect

aga

inst

toda

y’s

wid

e ra

nge

of c

onte

nt-

and

conn

ectio

n-ba

sed

thre

ats

beca

use

they

rel

y on

gen

eral

-pu

rpos

e C

PUs,

cau

sing

a d

ange

rous

per

form

ance

gap

. Fo

rtiA

SIC

pro

cess

ors

prov

ide

the

perf

orm

ance

you

nee

d to

blo

ck e

mer

ging

thr

eats

, m

eet

rigo

rous

th

ird-p

arty

cer

tifica

tions

, an

d en

sure

tha

t yo

ur n

etw

ork

secu

rity

sol

utio

n do

es

not b

ecom

e a

netw

ork

bott

lene

ck.

Prod

uct M

atri

x