Fortinet ConfidentialMay 07, 2011

Fortinet – Introduction & OverviewOnline DistributionAuthorized Fortinet Distributor - Pakistan

Haris Khan

2

Company Overview

• Founded in 2000

• Global presence with 30+ offices worldwide & 1,300+ employees

– 5,000+ channel partners– 100,000+ customers

– Majority of the Fortune Global 100

• IPO Nov 2009 • NASDAQ: FTNT

• 2010 revenue of $325 Million• World class management team

63.9%

CAG

R

3

Customers Worldwide

7 of the top 10 Fortune companies in Americas

8 of the top 10 Fortune companies in EMEA

9 of the top 10 Fortune companies in APAC

10 of the top 10 Fortune Telecommunications companies

9 of the top 10 Fortune Retail & Commercial Banks

7 of top 10 Fortune Aerospace & Defense

Fortinet Confidential4

Market Leadership Across the Board

Worldwide UTM Market ShareQ3 2010 (1)

UTM Market Competitive Landscape, 2009(3)

Low Market Penetration High

Niche ParticipantSpecialist

Contender

Challenger

Market Leader

Low

High

Abilityto

Deliver

4

(1) IDC Worldwide Security Appliances Tracker, December 2010 (market share based on factory revenue)(2) Gartner, Inc., “Magic Quadrant for Unified Threat Management”, October 2010(3) Frost & Sullivan, “World Unified Threat Management, Products Market 2009”, 2010

Notes

Magic Quadrant for Unified Threat Management (2)

Rank Company Market Share (%)

1 15.8

2 Check Point 10.6

3 Cisco 9.5

4 Juniper 8.6

5 SonicWALL 7.2

6 McAfee 6.1

7 WatchGuard 4.7

8 Crossbeam 2.6

9 Other 34.9

Total 100.0

Fortinet Confidential5

Fortinet Product Portfolio

5

Unified Threat Management

FortiGateNetwork SecurityPlatform

FortiAPNetwork SecurityPlatform

Centralized Management

FortiManagerCentralized DeviceManagement

FortiAnalyzerCentralized Loggingand Reporting

Application Security

FortiMailMessaging Security

FortiWebWeb & XML Application Firewall

DataSecurity

FortiDBDatabase Security

HostSecurity

FortiClientEndpoint Security

FortiScanAsset Vulnerability Management

SecurityServices

FortiGuardReal time Security Services

Fortinet Confidential6

Fortinet Product Family

Fortinet Confidential7

New Products for Q2-2011

Fortinet Virtual Appliance family – Hypervisor Security for Virtualized Cloud Ready Data Center

FortiBalancer Application Delivery Controller

FortiCache Content Caching Appliance

FortiClient Enterprise End Point Security

FortiWifi Wireless Security

FortiAuthenticator Identity Based Access Solution

FortiToken Two Factor Authentication

Fortinet New Product Introduction

Fortinet Confidential8

FortiGate consolidated security platforms deliver unmatched performance and protection while simplifying your network. Fortinet offers models to satisfy any deployment requirement from the FortiGate-30 series for small offices to the FortiGate-5000 series for very large enterprises, service providers and carriers. FortiGate platforms combine the FortiOS™ security operating system with FortiASIC processors and latest-generation CPUs to other hardware to provide a comprehensive, high-performance security. Each FortiGate includes the widest range of security and networking functions on the market, including:

Firewall, VPN, and Traffic ShapingIntrusion Prevention (IPS)Antivirus/Antispyware/AntimalwareIntegrated Wireless ControllerApplication ControlIPv6 SupportWeb FilteringAntispamVoIP SupportLayer 2/3 routing WAN Optimization & Web Caching

FortiGate appliances provide enterprise-class protection against network, content, and application-level threats. Dynamic updates from the FortiGuard Labs global threat research team ensure your systems are protected against the latest threats. FortiGate platforms incorporate sophisticated networking features, such as high availability (active/active, active/passive) for maximum network uptime, and virtual domain (VDOM) capabilities to separate various networks requiring different security policies.

FORTIGATE® APPLIANCES

Fortinet Confidential9

• ASIC-based multi-threat security platform• Third party certifications• Common OS across all platforms• Single management interface• FortiGuard Services

– Antivirus, IPS, Antispam, Web content filtering,Application control

Enterprise Service Provider & Large EnterpriseSMB & Remote Office

FortiGate Platform

Fortinet ConfidentialFortinet Confidential

1010

Purpose-Built Hardware

Specialized OS

Firewall

Fully Integrated Security & Networking Technologies

Hardened Platform

High Performance

Real-Time Protection

Traffic ShapingVPN

SSL Insp

DLP WAN Opt

FortiGate Consolidated Security Platform

FortiGuard™ Updates

WLAN Load BalancingVoIP HA

Support and Services FortiCare™ FortiGuard Labs

AV IPS AntispamWeb Filter App Ctrl VM

• Purpose-built to deliver overlapping, complementary security

• Provides both flexibility & defense-in-depth capabilities

Fortinet ConfidentialFortinet Confidential

11

The FortiWiFi™ line of wireless security gateways add a built-in 802.11a/b/g/n wireless access point to the enterprise-level, multi-threat protection of FortiGate appliances. They provide network, content, and application protection for wired and wireless networks without penalties in performance, cost, or manageability. FortWifi appliances combine Fortinet's FortiOS™ security operating system with FortiASIC processors and other hardware to provide a comprehensive and high-performance array of fully integrated security and networking functions including:

Firewall, VPN, and Traffic ShapingIntrusion Prevention System (IPS)Antivirus/Antispyware/AntimalwareWeb FilteringAntispamApplication Control (e.g., IM and P2P)VoIP Support (H.323. and SCCP)Layer 2/3 routing

FortiWiFi appliances are easy to deploy and manage, with a web-based user interface that allows users to be up and running in minutes. They can also be managed remotely via the FortiManager line of management appliances. This combination of local ease of use and remote management makes FortiWiFi appliances an exceptional value for remote offices, wireless service providers, retail stores, and broadband-connected telecommuter sites. In addition, FortiWiFi devices can be powered by Power over Ethernet (POE) to further ease installation and deployment and reduce your equipment investment.

The FortiWiFi-80CM wireless security gateway adds a built-in 802.11 b/g/n wireless access point to the enterprise-level, multi-threat protection of FortiGate appliances. In addition, 3G wireless broadband connectivity via an ExpressCard slot and a built-in analog modem for dial-up failover capability enhance deployment and failover options. The FortiWiFi-80CM boasts market-leading performance for remote office, SMB, and retail applications.The FortiWiFi-60B offers standard 802.11 a/b/g support plus 3G wireless broadband connectivity via a PC Card slot and a built-in analog modem for dial-up failover capability, making it the perfect choice for rapid Point of Sale (POS) deployments or flexible security offerings by wireless service providers. It has dual Wide Area Network (WAN) ports for load balancing or redundant internet connections, a DMZ port, and six integrated switch ports for multi-user environments. The FortiWiFi-50B is ideal for small remote offices and telecommuting applications. It offers standard 802.11 b/g support, dual Wide Area Network (WAN) ports for load balancing or redundant internet connections, and three integrated switch ports for multi-user environments.The FortiWiFi-30B offers full-featured, enterprise-class UTM inspection for the smallest remote offices, branch offices, and retail outlets. The FortiWiFi-30B adds 802.11 b/g support to Fortinet's easy-to-use, easy-to-deploy entry-level platform.

FortiWiFi™ - WIRELESS LAN

Fortinet ConfidentialFortinet Confidential

12

Comprehensive Messaging Security - FortiMail™

• Delivers specialized messaging security system for organizations of all sizes

• Advanced, bi-directional filtering prevents spread of spam, viruses, phishing, worms, and spyware

• Granular policy monitoring, reporting, and enforcement

• Three deployment options deliver maximum flexibility and minimum service disruption

» Transparent, Gateway, and Server

Fortinet ConfidentialFortinet Confidential

13

FortiMail Family

FortiMail-100C Small DeploymentsRecommended for up to 500 users 1 x 1 TB HDD Up to 77,000 emails/hour (Full inspection)

FortiMail-2000B and 3000CLarge Enterprise DeploymentsRecommended from 5,000 up to 50,000

usersUp to 1.0 million (2000B) 1.2 million

(3000C) emails/hour (Full inspection) RAID Support2 x 1 TB HDD (expandable to 6 x 1 TB)Redundant/Hot-Swappable Power SuppliesLarge Enterprise/ Service Provider

DeploymentsRecommended for up to 100,000 usersUp to 1.1 million emails/hour (Full-

Inspection)FG-5000 series chassis compatibleATCA chassis compatible

FortiMail-400BMid-Enterprise DeploymentsRecommended for 500-5,000 users1 x 500 GB HDD (expandable to 2 x 500

GB Up to 185,400 emails/hour (Full

inspection) RAID Support

FortiMail-5001A

Fortinet ConfidentialFortinet Confidential

14

Database Security and Compliance – FortiDB

• Multiple Data Collection methods

• Sniffer• Native Audit• Agents

• Auditing and Monitoring• Out of the box policies for

privilege users and object/schema design changes

• User, session and data policies allowing audit of every request

• Real time alerts• Pre defined Compliance

Reports• Roles and Privileges reports

• Vulnerability Assessment• Identifies vulnerabilities and

provides remediation advice • Verifies configuration• Built in best practices

XL

Configuration and Vulnerability ManagementBest-in-breed extensive policy driven static controls

Policy driven Controls Automated process of establishing IT internal controlsDAM – Database Activity MonitoringReal-time monitoring of key users and critical transactions

Database Audit and Compliance For Compliance and Forensic Analysis purposes

Fortinet ConfidentialFortinet Confidential

15

FortiDB Family

FortiDB-1000CMid-Large Enterprise Deployments• Up to 30 DBs support• HDD – 1TB, 2 TB optional• RAID1• 4 x 10/100/1000 copper RJ45

Large Enterprise/ Service Provider Deployments• Up to 60 DBs support• HDD - 1TB, 2TB optional• RAID1• Hot-swap redundant AC-Power• 4 x 10/100/1000 copper RJ45

FortiDB-400BSmall, Mid-Enterprise Deployments• Up to 10 DBs support• HDD - 1x500GB, 1TB optional• 4 x 10/100/1000 copper RJ45

FortiDB-2000B

FortiDB Software Large Enterprise/ Service Provider Deployments• Per server CPU licensing model• Windows, Linux and Solaris server OS support

Targets SMB market with up to 10 Database servers

Enterprise deployment with redundant AC-power and support for up to 60 database servers

Scalable solution for up to 60 database servers

For enterprise deployments with hundreds of database servers

Fortinet ConfidentialFortinet Confidential

FortiDB Customers WorldwideFinancial Services Telco/Auditors Other Industries

Fortinet ConfidentialFortinet Confidential17

Web Application Firewall - FortiWeb™

• Network firewalls detect network attacks• Inspect IP and port

• IPS products detect known signatures only • No real HTTP

understanding (headers, parameters, etc)

• Signature evasion is possible, No protection of SSL traffic, No application awareness

• No user awareness, High rate of false positives

Only Web Application Firewalls can detect and block application attacks!

Network Firewall

IPS/Deep Packet Inspection Firewalls

FortiWeb Web Application Firewall

Network layer (OSI 1-3)

Application layer (OSI 4-7)

Application Security Needs New Approach

FortiWeb’s Major Areas of Functionality

Fortinet ConfidentialFortinet Confidential

18

FortiWeb Overview

• Secures web applications against application layer attacks such as SQL Injection and Cross Site Scripting

• Protects XML based web services• Optimizes application delivery with

application acceleration, load balancing and advanced rewriting capabilities

• Four deployment options deliver maximum flexibility and minimum service disruption»Transparent, Transparent Proxy, Reverse

Proxy and Sniffing

Fortinet ConfidentialFortinet Confidential

19

FortiWeb Family

FortiWeb-1000CLarge Enterprise DeploymentsASIC based Acceleration - FortiModule-CP7500 Mbps HTTP throughput27,000 transactions per second1 TB storage (Optional additional HDD)RAID support4 x 10/100/1000 copper

Large Enterprise/ Service Provider DeploymentsASIC based Acceleration - FortiModule-CP71 Gbps HTTP throughput40,000 transactions per second2*1 TB storage RAID supportHot-swap redundant AC-Power6 x 10/100/1000 copper

FortiWeb-400BMid-Enterprise Deployments100 Mbps HTTP throughput10,000 transactions per second500 GB storage4 x 10/100/1000 copper

FortiWeb-3000C

20Fortinet Confidential

Management: FortiManager

•Policy / Device Management•Update Manager (Firmware / Security Content)•VPN Manager•Script Manager

• Tightly integrated to provide centralized management of core security services

21Fortinet Confidential

Logging & Reporting: FortiAnalyzer

• Log Analysis• Reporting• Content Archiving / Data Mining• Network Analyzer• Log Browser / Real-Time Log Viewer• Central File Quarantine• Vulnerability Assessment Scanner• Forensic Analysis

22

The FortiAP Security Solution

FortiGate Platform Number of ThinAP’s supported

FG- 60B/C 4FG-80C 16FG -110C - FG-310 32FG -800 64FG -620B - FG-1240 128FG- 3600A 256FG-3810 512FG-5140 6144*

RemoteWireless

POE

POE

POE

Wireless Access Controller

FortiAP

FortiAP

FortiAP

RemoteWireless Ekahau Wifi Planer – Free Trial Version

http://www.ekahau.com/

FG-200B

Centralized Management

All UTM features available

Captive Portal for Guest Access

23

Two Factor Authentication: FortiToken

FortiGate Platform

Maximum # of FortiTokens

FG-50B 20FG- 60B/C – FG-80C 500FG -110C – FG-800 1000FG-1240 – FG-3600A 5000FG-3810 – FG-5001A 5000FG-5140 5000 per blade

• Tokens Never Expire (Usable as long battery last)

• No MGMT Server needed

• List Price < 60 US$

• Provides one-time password every 60 seconds for two-factor authentication

• FortiGate validates Token• FortiToken comes in 2, 10, & 20 bundles• No annual license fee required• Prevents password sharing for remote access users

FortiToken

Username

Password

TokenCode

Fortinet Confidential24

Cloud Computing Security – FortiGate Virtual Appliance

Fortinet Confidential

FortiBalancer Series – App Delivery Controllers

• Ideal applications− Small Enterprise through to Cloud-

Scale environments. Depending on model

− Data Centers, Virtualized Data Centers, Cloud Infrastructures

Internet

• Positioning» Load Balancing: Fast, Secure and Intelligent

acceleration of demanding applications• When/Where To Sell

» When ‘non-security’ decision makers are involved in the deal.

» When load balancing performance requirements are higher than offered in FortiGate/FortiWeb

» When customers want discrete device for load balancing

• Competition: » F5 – Complex deployment and transaction-

based pricing (hidden $$)» Cisco – Lacks key features, high price

Fortinet Confidential

FortiBalancer Family

• Local/global load balancing and clustering for 99.999% application uptime•Built-in caching, compression,

SSL processing and TCP connection multiplexing for >50%improvement in user experience•SSL encryption for securing and

protecting applications without impacting performance

FortiBalancer-400

FortiBalancer-1000

FortiBalancer-2000

Fortinet Confidential

FortiCache-3000– Content Caching

• Ideal applications− Large Enterprise, ISPs, Mobile

Providers, Telcos, Education− Data Centers, Network Edge− Content Delivery Networks (CDN)

• Messaging/Positioning» Reduce bandwidth demand by reusing

popular content» Improve network performance» Reduce need for bandwidth upgrades

• When/Where To Sell» Network Admins, Security Managers» When ‘non-security’ decision makers are

involved in the deal.» When caching performance requirements

are higher then offered in FortiGate. Can use FortiCache adjacent to FortiGate.

» When customers want discrete device for caching

Fortinet Confidential

FortiClient – Simplifying Endpoint Security

• Ideal applications− Small Enterprise through to Largest

Enterprises− Whenever need for secure remote

connectivity: Mobile workers, Teleworkers, Contractors

• Positioning» Simple & Flexible Endpoint Security

• When/Where To Sell» Need for Mobile/Remote Access» When customers want both IPSec and SSL VPN» Complete end-to-end solution» Compliance: Endpoint Control» Web Content Filtering

• Competition: » Cisco, Juniper, Checkpoint, Palo Alto, Symantec,

McAfee…..» Most Complete Endpoint Solution» Simplified licensing

Fortinet Confidential29

FortiClient Endpoint Security

Single Agent

ALL Services Included

No Separate Licenses Required

Purpose Built Seamless Integration

Re-packager =Pick and Choose Architecture

Rebranding Capability

Extend OfflineSecurity Policy

Aggregate Data Flow -Record and Review On and Offline ActivityLogs And Reportswith FortiAnalzyer

Single Agent

ALL Services Included

No Separate Licenses Required

Purpose Built Seamless Integration

Re-packager =Pick and Choose Architecture

Rebranding Capability

Extend OfflineSecurity Policy

Aggregate Data Flow -Record and Review On and Offline ActivityLogs And Reportswith FortiAnalzyer

Key AdvantagesKey Advantages

Fortinet Confidential

FortiClient End-To-End Solution

FortiGate

− Full endpoint access control to any network

− Asset monitoring/reporting

− Endpoint compliance awareness and enforcement

− Access based on installed/running applications

FortiManager

• Immediate license audit/usage of all managed endpoints

• Full activation control of endpoint services

• Centralized endpoint management from one console

FortiAnalyzer

•Automated customized reports on endpoint activity

•Customized log data fields for viewing and reporting

•Centralized endpoint reporting from one console

Aggregate data flow and reporting for compliance

Centralize management

and deployment

Next Generation Firewall

Endpoint Security

Endpoint Security

Fortinet Confidential

FortiClient – Rolling Out New Clients

New- FortiClient Anti-Malware (free download)- FortiClient Connect Windows (April 30)- FortiClient Connect Mac (May 15)- FortiClient Enterprise (May 30)

FortiClient Enterprise:Same functions as existing FortiClient Premium

- FortiClient Connect – requires FortiGate - FortiClient Enterprise – requires FortiManager and FortiAnalyzer

Fortinet Confidential32

Thank you

For further Details & Queries Please contact

Haris Khanhk@odl.com.pk