Fortinet FortiGate 60D
Integrated Threat Management for Front Line Locations

Firewall

Fortinet firewall technology delivers industry-leading performance for network and application firewalling including Web 2.0 application policies based on the application identity, up to and beyond 10 Gbps throughput. Our technology identifies traffic patterns and links them to the use of specific applications, such as instant messaging and peer-to-peer applications, permitting application access control. By coupling application intelligence with firewall technology, the FortiGate platform is able to deliver realtime security with integrated application content level inspection, thereby simplifying security deployments.

Features:

• NAT, PAT and Transparement (Bridge)
• Policy-Based NAT
• SIP/H.323/SCCP NAT Traversal
• VLAN Tagging (802.1Q)
• IPv6 Support

Model: FortiGate-60C / FortiWiFi-60C
Firewall (1518 Byte): 1 Gbps
Firewall (512 Byte): 1 Gbps

Antivirus / Antispyware

Antivirus content inspection technology protects against viruses, spyware, worms, and other forms of malware which can infect network infrastructure and endpoint devices. By intercepting and inspecting application-based traffic and content, antivirus protection ensures that malicious threats hidden within legitimate application content are identified and removed from data streams before they can cause damage. FortiGuard subscription services ensure that FortiGate devices are updated with the latest malware signatures for high levels of detection and mitigation.

Features Supported:

• Automatic Database Updates
• Proxy Antirus
• Flow-based Antirus
• File Quarantine
• IPv6 Support

Model: FortiGate-60C / FortiWiFi-60C
Antivirus: 20 Mbps

VPN

Fortinet VPN technology provides secure communications between multiple networks and hosts, using SSL and IPsec VPN technologies. Both services leverage our custom FortiASIC processors to provide acceleration in the encryption and decryption steps. The FortiGate VPN service enforces complete content inspection and multithreat protections including antivirus, intrusion prevention and Web filtering. Traffic optimization provides prioritization for critical communications traversing VPN tunnels.

Features:

• IPSec and SSL VPN
• DES, 3DES, AES and SHA-1/MD5 Authentication
• PPTP, L2TP, VPN Client Pass Through
• SSL Single Sign-On Bookmarks
• Two-Factor Authentication

Model: FortiGate-60C / FortiWiFi-60C
IPSec VPN Throughput: 70 Mbps
SSL VPN Throughput: 70 Mbps
Concurrent SSL VPN Users Recommended (Max): 50
Client-to-Gateway IPSec VPN Tunnels: 100

Intrusion Prevention

IPS technology protects against current and emerging networklevel threats. In addition to signature-based threat detection, IPS performs anomaly-based detection which alerts users to any traffic that matches attack behavior profiles. The Fortinet threat research team analyzes suspicious behavior, identifies and classifies emerging threats, and generate new signatures to include with FortiGuard Service updates.

Features Supported:

• Automatic Attack Database Update
• Protocol Anomaly Support
• IPS and DoS Prevention Sensor
• Custom Signature Support
• IPv6 Support

Model: FortiGate-60C / FortiWiFi-60C
IPS Throughput: 100 Mbps

WAN Optimization

Wide Area Network (WAN) optimization accelerates applications over geographically dispersed networks, while ensuring multithreat inspection of all network traffic. WAN optimization eliminates unnecessary and malicious traffic, optimizes legitimate traffic, and reduces the amount of bandwidth required to transmit data between applications and servers. Improved application performance and delivery of network services reduces bandwidth and infrastructure requirements, along with associated expenditures.

Features:

• Gateway-to-Gateway Optimization
• Bi-directional Gateway-to-client Optimization
• Web Caching
• Secure Tunnel
• Transparent Mode

Model: FortiGate 60C / FortiWiFi-60C with optional 16GB SD Card

SSL Inspection

SSL-Encrypted Traffic Inspection protects clients and web and application servers from malicious SSL-encrypted traffic, to which many security devices are blind. SSL Inspection intercepts encrypted traffic and inspects it for threats, prior to routing it to its final destination. SSL Inspection applies to both client-oriented SSL traffic (such as users connecting to an SSL-encrypted hosted CRM site) and inbound traffic destined an organization’s own web and application servers. You now have the ability to enforce appropriate use policies on inappropriate encrypted web content, and protect servers from threats within encrypted traffic flows.

Features:

• Protocol: HTTPS, SMTPS, POP3S, IMAPS
• Inspection support: Antivirus, Web Filtering, Antispam, Data Loss Prevention
• SSL Offload

End-Point NAC

Endpoint NAC can enforce the use of FortiClient Endpoint Security for users connecting to corporate networks. Endpoint NAC verifies FortiClient Endpoint Security installation, firewall operation and upto- date antivirus signatures before allowing network access. Noncompliant endpoints, such as endpoints running applications that violate security policies can be quarantined or sent to remediation.

Features:

• Monitor & Control Hosts Running FortiClient
• Vulnerability Scanning of Network Nodes
• Quarantine Portal
• Application Detection and Control
• Built-in Application Database

Data Loss Prevention

DLP uses a sophisticated pattern-matching engine to identify and prevent the transfer of sensitive information outside of your network perimeter, even when applications encrypt their communications. In addition to protecting your organization's critical data, Fortinet DLP provides audit trails to aid in policy compliance. You can select from a wide range of configurable actions to log, block, and archive data, and quarantine or ban users.

Features:

• Identification And Control Over Data in Motion
• Built-in Pattern Database
• RegEx Based Matching Engine
• Common File Format Inspection
• International Character Sets Supported

SSL-Encrypted Traffic Inspection

SSL-encrypted traffic inspection protects endpoint clients and Web and application servers from hidden threats. SSL Inspection intercepts encrypted traffic and inspects it for threats prior to routing it to its final destination. It can be applied to client-oriented SSL traffic, such as users connecting to cloud-based CRM site, and to inbound Web and application server traffic. SSL inspection enables you to enforce appropriate use policies on encrypted Web content and to protect servers from threats which may be hidden inside encrypted traffic flows.

Features:

• Protocol support:
• HTTPS, SMTPS, POP3S, IMAPS
• Inspection support: Antivirus, Web Filtering, Antispam, Data Loss Prevention, SSL Offload

Logging, Reporting & Monitoring

FortiGate consolidated security appliances provide extensive logging capabilities for traffic, system, and network protection functions. They also allow you to assemble drill-down and graphical reports from detailed log information. Reports can provide historical and current analysis of network activity to aid with identification of security issues and to prevent network misuse and abuse.

Features:

• Internal Log storage and Report Generation
• Graphical Real-Time and Historical Monitoring
• Graphical Report Scheduling Support
• Optional FortiAnalyzer Logging (including per VDOM)
• Optional FortiGuard Analysis and Management Service

Web Filtering

Web filtering protects endpoints, networks and sensitive information against Web-based threats by preventing users from accessing known phishing sites and sources of malware. In addition, administrators can enforce policies based on Website categories to easily prevent users from accessing inappropriate content and clogging networks with unwanted traffic.

Features:

• HTTP/HTTPS Filtering
• URL / Keyword / Phrase
• Block Blocks Java Applet, Cookies or Active X
• MIME Content Header Filtering
• IPv6 Support

Virtual Domains

Virtual Domains (VDOMs) enable a single FortiGate system to function as multiple independent virtual FortiGate systems. Each VDOM contains its own virtual interfaces, security profiles, routing table, administration, and many other features. FortiGate VDOMs reduce the complexity of securing disparate networks by virtualizing security resources on the FortiGate platform, greatly reducing the power and footprint required as compared to multiple point products. Ideal for large enterprise and managed service providers.

Features:

• Separate Firewall / Routing Domains
• Separate Administrative Domains
• Separate VLAN Interfaces

VDOMs (Max / Default): 10 / 10

Application Control

Application control enables you to define and enforce policies for thousands of applications running across networks regardless of port or the protocol used for communication. The explosion of new Internet-based and Web 2.0 applications bombarding networks today make application control essential, as most application traffic looks like normal Web traffic to traditional firewalls. Fortinet application control provides granular control of applications along with traffic shaping capabilities and flow-based inspection options.

Features:

• Identify and Control Over 1000 Applications
• Traffic Shaping (Per Application)
• Control Popular IM/P2P Apps Regardless of Port / Protocol
• Popular Applications include: AOL-IM, Yahoo, MSN, KaZaa, ICQ, Gnutella, BitTorrent, MySpace, WinNY, Skype, eDonkey, Facebook, and more

Setup / Configuration Options

Fortinet provides administrators with a variety of methods and wizards for configuring FortiGate appliances during deployment. From the easy-to-use Web-based interface to the advanced capabilities of the command-line interface, FortiGate systems offer the flexibility and simplicity you need.

Features:

• FortiExplorer Setup Wizard over USB (FG-60C/FWF-60C Only)
• Web-based User Interface
• Command Line Interface (CLI) over serial connection
• Pre-Configured settings from USB drive

High Availability

High Availability (HA) configurations enhance reliability and increase performance by clustering multiple FortiGate appliances into a single entity. FortiGate High Availability supports Active-Active and Active-Passive options to provide maximum flexibility for utilizing each member within the HA cluster. The HA feature is included as part of the FortiOS operation system and is available with most FortiGate appliances.

Features:

• Active-Active and Active-Passive
• Stateful Failover (FW and VPN)
• Link State Monitor and Failover
• Device Failure Detection and Notification
• Server Load Balancing

Wireless Controller

All FortiGate and FortiWiFi consolidated security platforms have an integrated wireless controller, enabling centralized management of FortiAP™ secure access points and wireless LANs. Unauthorized wireless traffic is blocked, while allowed traffic is subject to identityaware firewall policies and multi-threat security inspection. From a single console you can control network access, update security policies, and enable automatic identification and suppression of rogue access points.

Features:

• Managed and Monitor FortiAP product
• Rogue AP Detection, Control and Reporting
• Virtual AP with different SSID