fg50 100c datasheet

8/8/2019 FG50 100C DataSheet

http://slidepdf.com/reader/full/fg50-100c-datasheet 1/4

Multi-Layered Security Services

Hardware Accelerated Network / Content Processing

FirewallIDS / IPS

Antivirus / AntispywareWeb Filtering

Antispam Trafc Shaping

IPsec / SSL VPN C o m p

l e t e

C o n t e n t

P r o t e c t i o n

M u l t i - L a y e r e d S e c u r i t y

Integrated Management, Logging & Reporting

FortiGate-50B

FortiGate-60B

FortiGate-100A

FortiWiFi-50B

FortiWiFi-60B

FortiGate® -50-100 Series

Blended Security Threats Within Small Businesses and EnterprisesCyber crime and network attacks pose serious threats to small businesses . Intellectual property, revenue, customer and company records, and othermission critical resources are at risk. As larger companies work to increasingly lock down their networks, more and more security threats are beingtargeted at smaller companies. Small o ice/home o ices (SOHO) o ten lack the in rastructure to meet the technical sophistication o today’s complexblended-attack methods and remote o ices/branch o ices (ROBO) o ten lack the on-site expertise to tackle such complex security issues. Point-basedsecurity appliances are inadequately equipped to protect against these types o attacks because o the multitude o attack vectors used. The FortinetFortiGate series o SOHO and ROBO security appliances tightly integrate multi-threat protection onto a purpose-built plat orm to e ectively block application- and network-borne attacks.

Cost-Effective Security PlatformThe Fortinet FortiGate series o security appliances deliver high per ormance, multi-threat protection at a compelling cost that is ideal or securingsmaller locations. Complete Uni ied Threat Management (UTM) eatures including irewall, VPN, intrusion prevention, Web iltering, antispam, antivirus,antispyware, tra ic shaping and IM/P2P controls prevent blended attacks or unauthorized use rom interrupting business. All FortiGate devices supportHigh Availability (HA) con igurations to ensure maximum uptime. FortiGate appliances operate in either transparent or routing modes and are availablewith integrated multi-port switches and modems, integrated WiFi access points and PC Card slots or 3G/UMTS modems, all o which enable FortiGatedevices to adapt to any network environment. Moreover, with Fortinet FortiGuard Security Subscription Services, the FortiGate-50 thru -100 Seriesbecome an a ordable and easy-to-manage security solution or an enterprise’s remote/branch o ices, a service prov ider’s customer premise equipment(CPE) or as an all-in-one solution or small-to-medium businesses.

Remote/Branch OfficeSmall-Medium BusinessCustomer Premise Equipment

Unified Threat Management Solutions

• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •

• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •

Datasheet

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

•

Key Problems

All-in-one Uni ed Threat Management (UTM) system providesmulti-layer threat protection with automatic updates all in a

cost-e ective package

UTM security solutions provide tightly integrated protectionservices with a unifed management, logging and reportinginter ace

Built-in WiFi wireless ensures the same level o protectionacross both wired and wireless networks

Unifed tools with a common user inter ace simpli y analyzing,reporting and managing compliance

Small O fces and Home O fces (SOHO) are particularlyvulnerable to cyber attacks due to the lack o resources and

budgets to combat complex network and content based threats

Deploying multiple point-products rom di erent vendors doesnot provide integrated protection rom blended threats and iscostly to own and complex to maintain

Adoption o WiFi wireless technology opens another window orattack rom inside o the network

SOX and PCI compliance requirements adds a new dimension ocomplexity to logging and reporting

Solutions

Fortinet’s Multi-Layered Security SolutionFortinet’s multi-layered security solutions e iciently and economically provide anintegrated set o security services in a single, easy-to-manage high-per ormanceappliance that is capable o supporting a wide range o deployment scenarios. Inaddition, FortiGuard Subscription Services include everything rom technical support,antivirus updates, antispyware, antispam, and Web content iltering to ensure thatyour security environment remains current and your corporate resources are protectedagainst the latest blended threats. FortiGate systems come with a one-year limitedhardware warranty and 90-day limited so tware warranty.



MSSPNETWORK

CENTRALIZED MANAGEMENT

CENTRALIZED REPORTING

ROUTER

CUSTOMER 1

INTERNET

CUSTOMER 2

CUSTOMER 3

CUSTOMER 4

MULTI-THREAT SECURITY

SECURE WIRELESSNETWORKS

COMPREHENSIVEMANAGEMENT,

LOGGING & REPORTING


MULTI-THREAT SECURITYFIREWALLANTIVIRUSINTRUSTION PROTECTIONWEB FILTERING

FIXED USERS

FIREWALL / INTRUSTION PROTECTION / WEB FILTERINGMULTI-THREAT SECURITY

ANTIVIRUS / ANTISPAMWiFi USERS

3G / UMTS LINK

60-SERIES WITH WIRELESS BROADBAND

SECURE WIRELESS NETWORKS

3G / UMTS PC CARD

INTERNET

FIREWALL / ANTIVIRUS / ANTISPAM

R&D VOIP

CENTRALIZED MANAGEMENT

MULTI-THREAT SECURITYSECURE WIRELESS

NETWORKS

INTERNET

WEB SERVERS

VOIP CALL MANAGER

CORPORATELAN

DMZ 2

DMZ 1

CENTRALIZED REPORTING



FIREWALL / SECURE MESSAGING

HTTPEMAIL

IM & P2P VOIP, H.323, SIP

IPSEC / SSL VPN

Managed Security Service Providers (MSSPs) can dis-tribute FortiGate appliances throughout their CustomerPremise Equipment (CPE) deployments because o the

wide array o connectivity options and the modular secu-rity architecture. Di erent customers can be protectedin di erent ways, according to their needs. For example,one set o customers can be protected with a irewall andintrusion prevention system, while another can be pro-tected with a irewall and web content iltering. MSSPscan centrally monitor and manage all customers usingFortiManager and FortiAnalyzer or end-to-end reporting,logging, and even orensic analysis o security events.

Managed Security Service Provider DeploymentFirewall +Antivirus + Intrusion Prevention + Web Filtering

FortiGate 50-100 series appliances are designed to secure small size o fces and businesses.

• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •

• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •

• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •

Through the integration o essential security technologies,Fortinet protects both mobile workers and workstations atSOHO and ROBO locations. To keep resources sa e, Fortinet’sadvanced antivirus, antispyware, antispam, and intrusionprevention systems utilize the integrated FortiASIC processorand a combination o signature and heuristic detectionengines to provide multi-layered, real-time protectionagainst a multitude o attacks. The FortiWi series o ers theability to broadcast multiple SSIDs (Service Set Identi ers),maximizing in rastructure fexibility in multi-providerenvironments and conserving spectrum. Moreover, di erentsecurity policies can be set or each SSID, increasing securityfexibility. FortiGate 60-series models provide a PC card slotthat allows a 3G/UMTS PC card to be used or secure network connectivity.

Secure Wired and Wireless Gateways or Small BusinessFirewall + Antivirus + Antispam + Intrusion Prevention + Web Filtering

Workers at various remote o ces are tasked with vastlydi erent business processes: some use messagingapplications while others use database applications. Saleso ces that use email and IM applications are protected

rom blended threats that use multiple methods to attack a system: viruses that spawn dormant Trojans, rootkits,and bots, or example. Combining Fortinet’s antivirus andantispam technology with IM and P2P controls, employeesare assured that email and IM messaging remain secureand won’t result in lost revenue or lost data. Application

and database users, such as a remote manu acturing site,are guaranteed secure connectivity—via rewalls and

VPNs—to the application servers it uses at the central o ce.Finally, Fortinet o ers a complete management solution orcentralized monitoring, reporting, logging, and analysis toensure that remote o ces remain up and running.

Enterprise ROBO DeploymentFirewall + VPN + Se cure Messag ing (Email, IM and P2P)



LAN SwitchingInter aces ....................................................... 3 ......................................3................................ 6 ................................. 6 ................................. 4 .................................WAN Inter aces .............................................. 2 ......................................2................................ 2 ................................ 2 ................................. 2 .................................DMZ Inter aces ........................................................................................................................... 1 ................................. 1 ................................. 2 .................................

Analog Modem ........................................................................................................................... Yes.............................. Yes ..................................................................Wireless LAN802.11a/b/g .............................................................................................802.11 b/g ..................................................... 802.11 a/b/g ...................................................USB Ports ........................................................2 .......................................2................................ 2 ................................. 2 ................................. 2 .................................Power Over Ethernet (PoE) .........................................................................Yes ........................................................................................................................................PC Card Slot* .............................................................................................................................. Yes.............................. Yes ..................................................................Supported VDOMs ...........................................10 .....................................10 .............................. 10 ............................... 10 ............................... 10 ...............................

* PC card is sold separately

SYSTEM PERFORMANCE *Firewall Throughput ....................................... 50 Mbps ...........................50 Mbps ..................... 100 Mbps ................... 100 Mbps .................... 100 Mbps ....................

VPN IPSec Throughput .................................... 48 Mbps ...........................48 Mbps ..................... 64 Mbps ..................... 64 Mbps......................40 Mbps ...................... Antivirus Throughput ....................................... 19 Mbps ..........................19 Mbps ..................... 20 Mbps ..................... 20 Mbps......................20 Mbps ......................IPS Throughput ............................................... 30 Mbps ..........................30 Mbps ..................... 60 Mbps ..................... 60 Mbps...................... 70 Mbps ......................Dedicated IPSec VPN Tunnels .......................... 20 ....................................20 ............................... 50 ............................... 50 ............................... 80 ...............................Unlimited User Licenses ................................. Yes ...................................Yes ............................. Yes.............................. Yes .............................. Yes ..............................Concurrent sessions ....................................... 25,000 .............................25,000 ........................ 70,000 ........................ 70,000 ........................ 200,000 ......................New Sessions/Second ..................................... 2,000 ...............................2,000 .......................... 3,000 .......................... 3,000 .......................... 4,000 ..........................Policies ........................................................... 2,000 ...............................2,000 .......................... 2,000 .......................... 2,000 ..........................2,000 ..........................

* Antivirus per ormance is measured based on HTTP tra c with 32Kbyte le attachments and IPS per ormance is measured base on UDP tra c with 512 byte packet size. Actual per ormance may vary depends on network tra c and environment

DIMENSIONS................................................... 1.38 inches ......................1.38 inches ................. 1.75 inches ................. 1.75 inches .................1.75 inches ..................(H, W, L, weight) 8.63 inches ......................8.63 inches ................. 10.87 inches ............... 10.87 inches ............... 10.87 inches ................

5.8 inches ........................5.8 inches ................... 6.13 inches ................. 6.13 inches .................6.13 inches ..................1.5 lbs .............................1.5 lbs ........................ 5.5 lbs ........................ 5.5 lbs ........................ 3.35 lbs ........................

AC POWER REQUIRED...................................................................................... 100-240 VAC, 50-60 Hz, 0.8 Amp (Max) ............................................................................

POWER CONSUMPTION (AVG).......................... 6W ...................................6W .............................. 15W ............................ 15W .............................14W.............................

ENVIRONMENTAL................................................................................Operating temperature: 32 to 104 deg F (0 to 40 deg C) ................................................................Storage temperature: -13 to 158 deg F (-25 to 70 deg C)

Humidity: 5 to 95% non-condensing

COMPLIANCE............................................................................... FCC Class A Part 15 (FG-100A), FCC Class B Part 15 (FG-50-60), ......................................................... UL/CUL, C Tick, CE, VCCI

CERTIFICATIONS............................................................................ICSA Labs Certi ed: Firewall, Antivirus, IPS, IPSec VPN, SSL-VPN ..........................................................

NSS Labs Approved (UTM), Common Criteria (EAL 4+), FIPS 140-2 (Please contact your Fortinet Sales Representative or a complete list o product certi cations)

Technical Specifications

HARDWARESPECIFICATIONS

FortiWiFi-50B FortiGate-60B FortiWiFi-60B FortiGate-100A FortiGate-50B

• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •

Fortinet Unified Security Solutions

Fortinet o ers a lower total cost o ownership with themost complete set o unctions including: antivirus,intrusion prevention, antispyware, web content fltering,and antispam

Around-the-clock protection against the latest threats. Virus and intrusion encyclopedia covers more than60,000 di erent threats

The Fortinet FortiASIC delivers superior per ormance andreliability, ensuring that the security appliance does notbecome a network bottleneck

Eliminates the need or external switches and providesenhanced connectivity options

Quick and easy confguration wizard walksadministrators through initial setup and graphicaluser inter ace o ers at-a-glance security event andper ormance monitoring

Underlying FortiOSTM is ICSA Labs-certifed and o ers acomprehensive command-line inter ace

All-inclusive, cost-e ective security solution

Automated updates o antivirus/antispyware andIPS security content

High per ormance custom hardware

Integrated multi-port switch

Secure Web UI or easy deployment andmanagement

Security hardened custom Operating System (OS)

Fortinet’s ASIC-Based AdvantageFortiASIC is the oundation o Fortinet’s uniquehardware technology. FortiASIC is a amily opurpose built, high-per ormance network andcontent processors that uses an intelligentproprietary content scanning engine and multiplealgorithms to accelerate compute-intensive securityservices. FortiASIC provides the per ormancerequired to deliver enterprise and carriers-classUTM services. Coupled with the FortiOS securityhardened Operating System, FortiASIC deliversextreme per ormance and security.

FortiOS: Developed or SecurityFortiOS is the so tware oundation o FortiGatemulti-threat security plat orms. Developed solely

or security, per ormance and reliablity, it is apurpose-built operating system that leveragespower o the the FortiAISC content and network processors. FortiOS enables a comprehensive suiteo security services – content inspection rewall,IPS, antivirus, web ltering, antispam, IM/P2P,virtual network security and bandwidth shaping.FortiOS is a complete suite o UTM security servicesand is certi ed or Common Criteria EAL 4+.



GLOBAL HEADQUARTERSFortinet Incorporated1090 Ki er Road, Sunnyvale, CA 94086 USA Tel +1-408-235-7700Fax +1-408-235-7737www. ortinet.com/sales

EMEA SALES OFFICE-FRANCEFortinet Incorporated120 Rue Albert Caquot06560 Sophia Antipolis, FranceTel +33-4-8987-0510Fax +33-4-8987-0501

APAC SALES OFFICE-SINGAPOREFortinet Incorporated3 Temasek Avenue, Level 21 Centennial TowerSingapore 039190Tel: +65-6549-7050Fax: +65-6549-7259

FortiGate-50-100 Series

FIREWALLICSA Labs Certifed (Enterprise Firewall)NAT, PAT, Transparent (Bridge)Routing Mode (RIP v1 & v2, OSPF, BGP, & Multicast )Policy-Based NAT

Virtual Domains (NAT/Transparent mode) VLAN Tagging (802.1Q)User Group-Based AuthenticationSIP/H.323 NAT TraversalWINS SupportCustomized Protection Profles

VIRTUAL PRIVATE NETWORK (VPN)ICSA Labs Certifed (IPSec & SSL)PPTP, IPSec, and SSLDedicated TunnelsDES, 3DES, and AES Encryption SupportSHA-1/MD5 AuthenticationPPTP, L2TP, VPN Client Pass Through

Hub and Spoke VPN SupportIKE Certifcate AuthenticationIPSec NAT TraversalDead Peer DetectionRSA SecurID Support

INTRUSION PREVENTION SYSTEM (IPS)ICSA Labs Certifed (NIPS)Protection From Over 3000 ThreatsProtocol Anomaly SupportCustom Signature Support

Automatic Attack Database Update

ANTIVIRUSICSA Labs Certifed (Gateway Antivirus)Includes AntiSpyware and Worm PreventionHTTP/SMTP/POP3/IMAP/FTP/IM and Encrypted VPN Tunnels

Automatic “Push” Virus Database UpdateFile Quarantine Support

Block by File Size or Type

WEB FILTERINGURL/Keyword/Phrase Block URL Exempt ListContent ProflesBlocks Java Applet, Cookies, Active XFortiGuard Web Filtering Support

ANTISPAMReal-Time Blacklist/Open Relay Database ServerMIME Header Check Keyword/Phrase FilteringIP Address Blacklist/Exempt List

Automatic Real-Time Updates From FortiGuard Network

TRAFFIC SHAPINGPolicy-based Tra fc ShapingDi erentiated Services (Di Serv) SupportGuarantee/Max/Priority Bandwidth

NETWORKING/ROUTINGMultiple WAN Link SupportPPPoE SupportDHCP Client/ServerPolicy-Based RoutingDynamic Routing (RIP v1 & v2, OSPF, BGP, & Multicas t)Multi-Zone Support with Routing Between ZonesRoute Between Virtual LANs (VDOMS)

MANAGEMENT/ADMINISTRATION OPTIONSConsole Inter ace (RS-232)WebUI (HTTP/HTTPS) and Command Line Inter aceTelnet / Secure Command Shell (SSH)Role-Based AdministrationMulti-language SupportMultiple Administrators and User LevelsUpgrades and Changes Via FTP and WebUISystem So tware Rollback

Central Management via FortiManager (optional)

LOGGING/MONITORINGInternal LoggingLog to Remote Syslog/WELF serverGraphical Real-Time and Historical MonitoringSNMPEmail Notifcation o Viruses And Attacks

VPN Tunnel MonitorOptional FortiAnalyzer Logging

USER AUTHENTICATION OPTIONSLocal DatabaseWindows Active Directory (AD) IntegrationExternal RADIUS/LDAP IntegrationIP/MAC Address BindingXauth over RADIUS or IPSEC VPNRSA SecurID Support

VIRTUAL DOMAINS (VDOMs)Separate Firewall/Routing domains

Separate Administrative domainsSeparate VLAN inter aces10 VDOMs (standard)

HIGH AVAILABILITY (HA) Active-Active, Active-PassiveState ul Failover (FW and VPN)Device Failure Detection and NotifcationLink Status MonitorLink ailover

INSTANT MESSENGER / PEER-TO-PEER ACCESS CONTROL

AOL-IM Yahoo MSNICQ Gnutella BitTorrentWinNY Skype eDonkeyKaZaa

FortiGate-50-100-series platforms provide the following security features:

FortiWiFi-50B FortiGate-60B FortiWiFi-60B FortiGate-100A FortiGate-50B

FortiGuard® Security Subscription ServicesWith FortiGuard™ Security Subscription services enabled, customers can rest assured that their Fortinet security plat orms are per orming optimally and protectingtheir corporate assets with the latest security intelligence. FortiGuard services deliver the latest security content directly to Fortinet products. Fortinet o ers ourstandard subscription services: Antivirus, Intrusion Prevention, Web Filtering and Antispam services to protect against multiple types o new and emerging threats.FortiGuard services are updated by the Fortinet Global Threat Research Team, a team o experts working around the clock and around the world to keep Fortinetcustomers secure. The Fortinet Global Threat Research Team enables Fortinet to deliver comprehensive multi- threat protection, including zero-day protection rom newand emerging threats. The FortiGuard Network is a network o global data centers that automatically deliver updates quickly and reliably to Fortinet products.

For customers requiring guaranteed response time to suspicious malware threats, Fortinet o ers a premier version o the FortiGuard Antivirus Security Subscriptionservice. Along with Service Level Agreements (SLAs), the premier service provides the customer with a direct conduit to the Fortinet Global Threat Research Team.

Fortinet also o ers a premier version o the FortiGuard Web Filtering Security Subscription service. This higher-tier service o ering includes guaranteed SLAs and alarger quota or rating URLs submitted to the Fortinet Global Threat Research Team.

FortiCare Support ServicesIncludes:• 24 /7 /365 Fort iCare Web -based s up po rt • 8x5 t el ephone -based t echni ca l suppor t (24x7 - op ti onal ) • 1 -Year l im it ed hardware warr an ty• Technical account management service available • Professional services available • 90-day limited software warranty

Copyright© 2006-2008 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks o Fortinet, Inc., and other Fortinet names herein may also be trademarks o Fortinet. All other productor company names may be trademarks o their respective owners. Per ormance metrics contained herein were attained in internal lab tests under ideal conditions. Network variables, di erent network environments and otherconditions may a ect per ormance results, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding contract with a purchaser that expressly warrants that the identi edproduct will per orm according to the per ormance metrics herein. For absolute clarity, any such warranty will be limited to per ormance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in ull anyguarantees. Fortinet reserves the right to change, modi y, trans er, or otherwise revise this publication without notice, and the most current version o the publication shall be applicable. Certain Fortinet products are licensed under

U.S. Patent No. 5,623,600. DAT137-0908-R9

fg50 100c datasheet

Documents