Fortinet FortiGate 1000D
High Performance Data Center and Next Generation Firewall for the Enterprise

Features:

Powerful application control with granular settings

Proven with Industry Validation

3rd party industry certifications, as well as real-world effectiveness and performance tests assure quality and providing you best-of-breed protection.

Ease of Use

FortiOS lowers operational costs and reduces IT staff workload. Single pane of glass management and centralized analysis ensure consistent policy creation and enforcement while minimizing deployment and configuration challenges.

In-depth Visibility & Reporting

Through FortiView, a collection of flexible widget-based views with drill-down capabilities, FortiOS allows administrators to quickly visualize and understand recent network activities and threat situations.

Detailed logs offer deep insights to sessions that passed through the FortiGate while comprehensive reports help organizations to trend network usage accurately.

Powerful Policy Management

Two types of policy management views — global and section view — are available to suit your preferences. Policy objects can easily be edited, duplicated or moved from the policy table. Robust management features include policy object search, tagging, sorting and filtering.

With FortiManager integration, you have the ability to set up sophisticated policy implementation and provisioning workflows to meet compliance or operational requirements. The FortiManager also offers logging and reporting module that simplified and reduced TCO.

Identity Centric Enforcement

FortiOS supports both local and remote authentication services such as LDAP, Radius and TACACS+ to identify users and apply appropriate access policies and security profiles accordingly. It can simplify identity-based implementations and provide a seamless user authorization experience with single sign-on capabilities. FortiOS has strong PKI and certificatebased authentication services while also integrating an internal two-factor authentication server for additional security.

To tackle security for today's prevalent use of personal devices, FortiOS offers state-of-the-art device identification capabilities that empower organizations to set up more intelligent security policies.

Granular Application Control

Advanced application control with ability to control discrete functions lets you define and enforce policies for thousands of applications running across networks regardless of port or the protocol used for communication.

Highly Effective IPS

Over 8,000 IPS signatures enable you to stop attacks that have evaded most conventional firewalls. Additionally, FortiOS also offers behavior-based heuristics settings that recognize zero-day threats for which no signature has been created.

Beyond Next Generation Firewall Capabilities

Our Secure Web Gateway capabilities allow you to prevent end users from unknowingly visiting malicious sites, shield them from inappropriate material out on the Internet, and maintain a safe and productive work environment. Real-time dashboards provide administrators visibility into end user activity while rich reporting keeps executives up to date. An advanced policy engine gives you the tools you need — such as time-based quotas, user overrides and more — to implement balanced policies.

Recognizing that despite all of the latest security controls, targeted threats may still slip through, organizations have the opportunity to add an additional layer of inspection, focused on advanced threat detection in complement to established threat prevention. Often referred to as "sandboxing" or breach detection, Fortinet offers on-premise and cloud-based options to extend your next generation firewall.

FortiView — real-time query widget with drill-down panels

Hardware:

Interfaces
1. USB Management Port
2. USB Ports
3. Console Port
4. 2x GE RJ45 Management Ports
5. 16x GE SFP Slots
6. 16x GE RJ45 Ports
7. 2x 10 GE SFP+ Slots

Network Processor

Fortinet's new, breakthrough FortiASIC NP6 network processor works inline with FortiOS functions delivering:

• Superior firewall performance for IPv4/IPv6, SCTP and multicast traffic with ultra-low latency down to 3 microseconds
• VPN, CAPWAP and IP tunnel acceleration
• Anomaly-based intrusion prevention, checksum offload and packet defragmentation
• Traffic shaping and priority queuing

Content Processor

The FortiASIC CP8 content processor works outside of the direct flow of traffic, providing high-speed cryptography and content inspection services including:

• Signature-based content inspection acceleration
• Encryption and decryption offloading

10GE Connectivity

High speed connectivity is essential for network security segmentation. The FortiGate 1000D provides 10 GE slots that simplify network designs without relying on additional devices to bridge desired connectivity.

Powered by FortiASICs

• Custom FortiASIC™ processors deliver the power you need to detect malicious content at multi-Gigabit speeds
• Other security technologies cannot protect against today's wide range of content and connection-based threats because they rely on generalpurpose CPUs, causing a dangerous performance gap
• FortiASIC processors provide the performance needed to block emerging threats, meet rigorous thirdparty certifications, and ensure that your network security solution does not become a network bottleneck

Deployment:

FortiGate deployed as data center core firewall

Data Center Core Firewall
Organizations deploying the NP (Network Processor) 6 powered FortiGate 1000 Series firewalls at their data center will enjoy superior protection and performance with industryleading, high capacity firewall technologies that deliver exceptional throughput and ultra-low latency, enabling the security, flexibility, scalability and manageability expected on a core platform. These firewalls come with numerous high-speed 40 GE and 10 GE interfaces which are ideal for segmenting network physically. Running on the latest FortiOS, these platform are virtualization and cloud-ready. They support next-generation data center architectures, multi-tenant requirements, provide APIs for rapid orchestration and easy integration with third-party ecosystems.

Mid-Enterprise Edge Firewall
Fortinet's FortiGate 1000 Series firewalls are perfect for growing large enterprises with their agile and high performance network security capabilities. These FortiGates not only deliver protection exceeding expectations, they are suitable for consolidating other security components. This allows organizations to significantly reduce TCOs and simplifies the network. Unlike other NGFWs (Next Generation Firewalls), the FortiGates are powered by FortiASICs which provide security without compromises performance. They run on the World's most advanced security operating systems that meet each organizations unique requirements. Advanced features such as integrated endpoint control and token server helps organizations to rapidly deploy enhanced security to their mobile workforce while device-based policies aid to implement BYOD securely. FortiGate deployed as data center core firewall FortiGate deployed

FortiGate deployed as mid-enterprise edge firewall

Specifications:

Services & Support:

Cutting-Edge Security Expertise

Our team of over 200 security researchers, vast data collection and state-of-the-art analysis systems across the globe examine the latest cyber-criminal activities and techniques to deliver realtime protection for your organization. With high marks attained by third-party evaluations, customers are assured of quality and credible security updates against the evolving sophisticated or targeted threats.

World-Class Support

It is critical to keep your network running properly and be able to resolve issues quickly. Our large team of knowledgable and responsive technical support engineers, together with comprehensive self-help resources, are always ready to assist you in time of critical need. In addition, Fortinet also offers a variety of support offerings that cater to your organizations and project requirement.

Documentation:

Download the Fortinet FortiGate 1000D Data Sheet (PDF).