FortiGate Multi-Threat Security

Firewall VPN Antivirus Intrusion Prevention Antispam Web Filtering Traffic Shaping
MSSP AND LARGE ENTERPRISE SYSTEMS
Product (Chassis) Firewall Throughput (512 Byte) Up to 480 Gbps Up to 240 Gbps Up to 110 Gbps Up to 44 Gbps 40 Gbps 2 Gbps (13 / 22 Gbps) 5 Gbps 4 Gbps IPSec VPN Throughput Up to 204 Gbps Up to 102 Gbps Up to 42.5 Gbps Up to 17 Gbps 17 Gbps 800 Mbps (7 / 8.5 Gbps) 800 Mbps 600 Mbps Concurrent Sessions Up to 132 M Up to 66 M Up to 10 M Up to 4 M 11 M 2M 1.2 M 1.2 M Sessions Per Sec Up to 1152 K Up to 576 K Up to 250 K Up to 100 K 96 K 50 K 30 K 20 K Antivirus Throughput Up to 18 Gbps Up to 9 Gbps Up to 2.5 Gbps Up to 1 Gbps 1.5 Gbps 500 Mbps 300 Mbps 250 Mbps Intrusion Prevention Throughput Up to 60 Gbps Up to 30 Gbps Up to 20 Gbps Up to 8 Gbps 5 Gbps 2 Gbps (4 Gbps) 3 Gbps 2 Gbps Number of VDOMs Up to 3000 Up to 1500 Up to 1250 Up to 500 Up to 250 Up to 250 Up to 250 Up to 250 Network Interfaces Chassis Slots / Max # of Blades 14 / 14 6/6 5/5 2/2 Power Source DC / AC DC / AC DC / AC AC Recommended # of Blades 12 6 5 2 Max Fabric Blades 2 2 2 0

FortiGate-5140 Chassis FortiGate-5060 Chassis FortiGate-5050 Chassis FortiGate-5020 Chassis FortiGate-5001B FortiGate-5001A-SW / DW (with AMC) FortiGate-5005FA2 FortiGate-5001SX and FortiGate-5001FA2 FortiSwitch-5003B FortiSwitch-5003A FortiSwitch-5003 Switch Fabric Blades FortiController-5208 Load Balancing Fabric Product

See modules below See modules below See modules below See modules below

8 10GbE SFP+ and 2 10/100/100 Port with 64GB local storage 2 GbE 10/100/1000 port and Double- or Single-Width AMC slot. Supports 10GbE modules. 6 GbE SFP ports and 2 FortiASIC-accelerated SFP ports 5001SX: 4-GbE SFP, 4-GbE 10/100/1000 5001FA2: 2 GbE SFP, 4 GbE 10/100/1000, and 2 FortiASIC-accelerated SFP ports FortiSwitch-5003B : 9-10GbE SFP+, 2-GbE 10/100/100 (Mgnt) FortiSwitch-5003A : 9-10GbE SFP+, 2-GbE 10/100/100 (Mgmt) FortiSwitch-5003 : 3-GbE 10/100/1000, 1-GbE 10/100/1000 (Mgmt) RTM-XB2 or RTM-XD2: 10 GbE Rear Transition Module for FG-5000 Series 2-10GbE XFP, 8-GbE SFP, 1-GbE 10/100/1000 (Mgmt)

FortiSwitch-5003B and FortiSwtich-5003A delivers high availability 10GbE switching for FortiGate-5140, -5060 and -5050 chassis. Each FortiGate-5001A requires a 10GbE Rear Transition Module (RTM) for switching across the backplane fabric. FortiSwitch-5003 delivers high availability switching across the high-speed chassis backplane fabric. Delivers high-bandwidth load balancing for antivirus and intrusion prevention applications.

ENTERPRISE APPLIANCES
Firewall Throughput (512 Byte) 20 Gbps (120/100 Gbps) 7 Gbps (55 Gbps) 6 Gbps (10 Gbps) 40 Gbps 16 Gbps (20 Gbps) 40 Gbps (44 Gbps) 1 Gbps 16 Gbps 16 Gbps (20 Gbps) 8 Gbps (12 Gbps) 5 Gbps 150 Mbps IPSec VPN Throughput 8 Gbps (48/40 Gbps) 1 Gbps (23 Gbps) 800 Mbps (3.8 Gbps) 16 Gbps 12 Gbps (15 Gbps) 16 Gbps (18.5 Gbps) 200 Mbps 12 Gbps 12 Gbps (15 Gbps) 6 Gbps (9 Gbps) 2.5 Gbps 70 Mbps Concurrent Sessions 10 M 2M 1.1 M 4M 1.1 M 2M 800 K 1M 1M 600 K 500 K 400 K Sessions Per Sec 175 K 40 K 40 K 100 K 25K 100 K 10 K 25 K 25 K 20 K 15 K 4K Antivirus Throughput 1.5 Gbps 500 Mbps 400 Mbps 1.2 Gbps 300 Mbps 900 Mbps 150 Mbps 350 Mbps 350 Mbps 160 Mbps 95 Mbps 30 Mbps Intrusion Prevention Throughput (12.5/10 Gbps) 4 Gbps 3 Gbps 5 Gbps 2 Gbps 1.5 Gbps 600 Mbps 1 Gbps 1 Gbps 800 Mbps 500 Mbps 100 Mbps 10/100 Interface 0 0 0 0 0 0 4 0 0 0 8 26 / 8 GbE Interface 2 (100/80) 8 8 2 2 16 4/0800F 20 20 (24) 10 8 0/2 SFP SFP+ Interface (10GbE) Interface 4 (100/80) 2 2 10 16 24 0/4800F 0 0 0 0 0 2 (12/10) 0 0 8 0 0 0 0 0 0 0 0 Modular Expansion Slots 5 / 4 FMC, 0 / 4 FSM 2 SW and 2 DW AMC 1 SW AMC 4 FSM 1 SW AMC 1 SW AMC and 6 FSM No No 1 SW AMC 1 SW AMC 2 FSM (311B) 1 FSM No Base SysHot-Swappable tem Storage Power Supplies 0 / 64 GB 0 0 64 GB 0 64 GB 0 64 GB 0 1 x 64 GB (311B) 0 0 Yes Yes Yes Yes Yes Yes No Opt. Ext. Red. AC Power Opt. Ext. Red. AC Power Yes Opt. (310B) Yes (311B) No No VDOMs (Max) Up to 250 Up to 250 Up to 250 Up to 250 Up to 250 Up to 25 10 10 10 10 10 10

FortiGate-3950B / 3951B (with FMC) FortiGate-3810A (with AMC) FortiGate-3600A (with AMC) FortiGate-3040B FortiGate-3016B (with AMC) FortiGate-1240B (with AMC) FortiGate-800 / 800F FortiGate-621B / 621B-DC FortiGate-620B / 620B-DC (with AMC) FortiGate-310B / 310B-DC FortiGate-311B (with AMC) FortiGate-200B / 200B-POE FortiGate-224B / 200A

SMB/ROBO/SOHO APPLIANCES
Product Firewall Throughput (512 Byte) 500 Mbps 500 Mbps 500 Mbps 350 Mbps 350 Mbps 1 Gbps 50 Mbps 30 Mbps IPSec VPN Throughput 100 Mbps 100 Mbps 100 Mbps 80 Mbps 80 Mbps 70 Mbps 48 Mbps 5 Mbps Concurrent Sessions 400 K 400 K 400 K 100 K 100 K 80 K 25 K 5K Sessions Per Sec 10 K 10 K 10 K 5K 5K 3K 2K 1K Antivirus Throughput 65 Mbps 65 Mbps 65 Mbps 50 Mbps 50 Mbps 20 Mbps 19 Mbps 5 Mbps Intrusion Prevention Throughput 200 Mbps 200 Mbps 200 Mbps 100 Mbps 100 Mbps 60 Mbps 30 Mbps 10 Mbps Switch/ LAN Interfaces 8 FE 8 FE 6 / 1 FE DMZ 0 6 / 1 FE DMZ 5 GbE / 1 FE DMZ 3 FE 3 / 4 FE WAN Interfaces 2 GbE 2 GbE 2 GbE 4 GbE 2 GbE 2 FE 2 FE 1 FE Wireless Interfaces No No 802.11 a/b/g/n No FW-80CM/ 81CM WiFi a/b/g/n FW-60C a/b/g/n FW-50B WiFi b/g FW-30B WiFi b/g Other Interfaces VDOMs (Max) 10 10 10 10 10 10 10 0

FortiGate-110C / 111C FortiGate Voice-80C FortiWiFi Voice-80CS FortiGate-82C FortiGate-80C / 80CM FortiWiFi-80CM / 81CM FortiGate-60C FortiWiFi-60C FortiGate-50B / 51B FortiWiFi-50B FortiGate/WiFi-30B Expansion Modules

USB, COM, 64 GB SSD (111C) 4 FXO, Concurrent Calls: 20 Concurrent Calls: 20 1TB Storage & 3 open slots ExpressCard Slot, Modem (80/81CM), 32 GB SSD (81CM) ExpressCard Slot, 4 GB storage, 1 USB-A and 1 USB-B port, POE-Powered (FW-60C) POE-Powered (FortiWiFi), USB, COM, 32GB SSD (51B) USB, COM

Advanced Mezzanine Card (AMC) Modules

[Double-Width (DW) Modules:] ADM-XD4: 4-port 10GbE FortiASIC Module ADM-XB2: 2-port 10GbE FortiASIC Module ADM-XE2: 2-port 10GbE Security Processing Module ADM-FB8: 8-port GbE FortiASIC Module ADM-FE8: 8-port GbE Security Processing Module [Single-Width (SW) Modules:] ASM-FB4: 4-port GbE FortiASIC Module ASM-CE4: 4-port GbE Security Processing Module ASM-S08: 80 GB Hard Disk Storage Module ASM-CX4: 4-port GbE TX By-Pass Module ASM-FX2: 2-port GbE SX By-Pass Module ASM-ET4: 4-port T1/E1 WAN Module FMC-XD2: 2-port 10GbE Firewall Module FMC-XG2: 2-port 10GbE IPS Module FMC-C20: 20-port 1GbE Firewall Module with RJ45 interface FMC-F20: 20-port 1GbE Firewall Module with SFP interface
Antivirus performance is measured based on HTTP traffic with 32Kbyte file attachments. FW &IPS performance is measured base on UDP traffic with 512 byte packet size. Actual performance may vary depends on network traffic and environment.

Fortinet Mezzanine Card (FMC) Modules

This document is provided as a convenient comparison of Fortinet products and services. The datasheet for any product or service can be found on www.fortinet.com should be consulted for the most updated specifications.

Managing & Analyzing Secure Messaging Database & Web Security Endpoint Security Software Security and Support Services
MANAGEMENT, ANALYSIS, & REPORTING APPLIANCES
PRODUCT FortiManager-5001A FortiManager-3000C FortiManager-1000C FortiManager-400B FortiManager-100C PRODUCT FortiAnalyzer-4000B FortiAnalyzer-2000B FortiAnalyzer-1000C FortiAnalyzer-400B FortiAnalyzer-100C PRODUCT FortiMail-5001A FortiMail-3000C FortiMail-2000B FortiMail-400B FortiMail-100C PRODUCT FortiDB-2000B FortiDB-1000C FortiDB-400B PRODUCT FortiWeb-3000C FortiWeb-1000C FortiWeb-400B 10/100/1000 Ethernet 2 4 and 2 SFP 4 4 2 10/100/1000 Ethernet 2 and 2 SFP 6 4 4 2 10/100/1000 Ethernet 2 4 and 2 SFP 6 4 2 10/100/1000 Ethernet 4 4 4 10/100/1000 Ethernet 6 4 4 10/100 Ethernet 0 0 0 0 1 10/100 Ethernet 0 0 0 0 1 10/100 Ethernet 0 0 0 0 1 # Database Instances 60 30 10 Throughput (HTTP) 1 Gbps 500 Mbps 100 Mbps Base System Storage Capacity 80 GB 2 TB 1 TB 500 GB 1 TB Base System Storage Capacity 6 TB 2 TB 1 TB 500 GB 1 TB Base System Storage Capacity 80 GB 2 x 1 TB 2 x 1 TB 500 GB 1 TB Base System Storage Capacity 1 TB 1 TB 500 GB Base System Storage Capacity 2 TB 1 TB 500 GB Administration Domain 100 200 50 10 10 Network Devices (Max) 2,000 2,000 2,000 200 100 RAID Storage Management N/A 0, 1, 5, 10, 50 0, 1, 5, 10, 50 Opt - 0,1 N/A Total Storage Capacity 6 TB (Opt) 2 TB (Opt) 1 TB (Opt) Total Storage Capacity 6 TB (Opt) 2 TB (Opt) 1 TB (Opt) Administrative Web Portals 100 100 50 10 10 FortiClient Agents (Max) No Restriction No Restriction No Restriction 2000 100 Email Domains 10,000 5,000 5,000 500 50 Redundant Power Yes No No Redundant Power Yes No No Web Portal Users (Max) 4,000 4,000 500 200 200 Centralized Quarantine Yes Yes Yes Yes Yes Policies (Domain/Sys) 1,500 / 7,500 1,500 / 7,500 1,500 / 7,500 600 / 3,000 60 / 300 Local Hosted Security Content AV, IPS, VM, WF, AS AV, IPS, VM, WF, AS AV, IPS, VM, WF, AS AV, IPS, VM AV, IPS, VM Number of Hard Drives 6 (Plus 18 Optional) 2 (Plus 4 Optional) 1 (Plus 3 Optional) 1 (Plus 1 Optional) 1 Server Mode Mailboxes 3,000 3,000 3,000 1,000 200 Hardware Form Factor ATCA Blade Rack Mount (2-RU) Rack Mount (1-RU) Rack Mount (1-RU) Desktop RAID Storage Management 0, 1, 5, 6, 10, 50, 60 0, 1, 5, 10, 50 Opt - 0, 1, 10 Opt - 0, 1 N/A Hardware Form Factor ATCA Blade Rack Mount (2-RU) Rack Mount (2-RU) Rack Mount (1-RU) Desktop Network Devices (Max) 4,000 5,000 800 200 20 Data Receive Rate 24 Mbps 12 Mbps 4 Mbps 2 Mbps 800 Kbps Profiles (Domain / Sys) 50 / 600 50 / 600 50 / 600 50 / 200 50 / 60 FortiClient Devices 100,000 120,000 25,000 10,000 2,500 Log Perf. (Logs / Sec) Up to 6,000 Up to 3,000 Up to 1,000 Up to 500 Up to 200 Email Routing (Mgs / Hr) 1.4 Million 1.3 Million 1.1 Million 264,600 90,000 Model Restrictions None None FG-5000 Series FG-5000 Series FG-5000 Series Recommended Device All Models All Models All Models All Models All Models Antispam (Mgs / Hr) 1.3 Million 1.3 Million 1.1 Million 234,000 85,000 Repository Database Support Apache Derby 10.x, DB2 UDB v9, Microsoft SQL Server 2005, Oracle 10gR2, PostgreSQL 8.3 Redundant Power Yes Yes No No No Redundant Power Yes Yes No No No Redundant Power Yes Yes Yes No No

SECURE MESSAGING APPLIANCES

DATABASE and WEB SECURITY APPLIANCES

Database Support / Asset Agent Licenses

DB2 UDB V8, DB2 UDB V9; Microsoft SQL Server 2000, Microsoft SQL Server 2005; Oracle 8.1.6, Oracle 8.1.7.4, Oracle 9.2.0.x, Oracle 10.2.0.x, Oracle 11.1.0.x; Sybase ASE 12.5.4, Sybase ASE 15.0.2 Max HTTP Trans / sec 40,000 27,000 10,000 XML schema validation and expression limiting, WSDL Vertifcation, Form Field Tampering Validation and others Comprehensive WAF and XML Security Features Other Features

SSL and XML ecnryption and co-processing, Content base Routing.

SWITCHING PLATFORMS
PRODUCT FortiSwitch-248B FortiSwitch-80-PoE 10/100/1000 Ethernet 48 8 10 GbE Ports 4 (SFP+) 0 Throughput (Max) 176 Gbps 2 Gbps PoE Ports 0 4 - 802.3af PoE Power Budget N/A 62 W MAC Address Storage 32,000 2,000 Email Antispam Yes No No VLAN Supported 512 N/A Link Agg Group Size Up to 8 ports N/A Web Content Filtering Yes No No Total Link Agg Groups 8 N/A Layer 2 / Layer 3 Swtich Layer 2 Layer 2 Switch Type Managed Unmanaged Redundant Power No No

ENDPOINT SECURITY SOFTWARE

PRODUCT FortiClient - Windows FortiMobile - Symbian FortiMobile - WinMobile Personal Firewall Yes Yes No IPSec VPN Yes No Yes Antivirus & AntiSpyware Yes Yes Yes WAN Optimization Yes No No Intrusion Prevention Yes No No FortiManager Management Yes Yes Yes Address Book Protection No No Yes SMS Filtering & Antispam No Yes Yes Supported Platforms Window 7, Vista, XP, 2000, Server 08, 03, 64 and 32 bit SymbianOS S60 7/8/9 Windows Mobile 2003/SE, 5, 6

FORTIGUARD SECURITY SUBSCRIPTION SERVICES

Product FortiGate FortiAnalyzer FortiClient FortiDB FortiMail FortiScan AV Yes No Yes No Yes No IPS Yes No No No No No AS Yes No Yes No Yes No WF Yes No Yes No No No VM Yes Yes No No No Yes AC Yes No Yes No No No DB No No No Yes No No AV = Antivirus IPS = Intrusion Prevention AS = Antispam WF = Web Filtering VM = Vulnerability Management (including Compliance Benchmarking) AC = Application control DB = Database Security

INTEGRATED WIRELESS SECURITY AND ACCESS SOLUTIONS

Product FortiAP-210B FortiAP-220B Freq - Radio 1 802.11 b/g/n or a/n (Selectable) 802.11 b/g/n or a/n (Selectable) Freq - Radio 2 802.11 b/g/n Ethernet Port 1x 10/100/100 1x 10/100/1000 # of SSIDs 7 - client, 1 monitoring 14 - client, 2 monitoring POE Yes (802.3 af) Yes (802.3 af)

FORTIGUARD ANALYSIS AND MANAGEMENT SERVICE

FortiGuard Analysis and Management Service is licensed per device. All FortiGate systems are supported. Yearly Plan available 10 GB Storage Quota per license. Multple licenses can be combined to increase storage.

Copyright 2010 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, and FortiGuard, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions. Network variables, different network environments and other conditions may affect performance results, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding contract with a purchaser that expressly warrants that the identified product will perform according to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinets internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Certain Fortinet products are licensed under U.S. Patent No. 5,623,600. BRO103-R27-201101

Product Matrix

Security Performance Cost Flexibility

The FortiGate family of multi-threat security appliances range in performance and physical features to meet network requirements of all sizes and topologies. Additionally, Fortinet delivers a complete line of product extensions that enable network managers to control, monitor, and operate networks simply and powerfully:

FortiOS Operating System: Developed for Security

Fortinets FortiOS was developed with security and performance as top priorities. FortiOS features full routing (BGP, OSPF, RIP), complete logging and auditing capabilities for forensic analysis, granular Virtual Security Domain (VDOM) support, and a complete command line interface (CLI). No third party software applications are included that could lead to a vulnerability. It is Common Criteria Certified EAL 4+ and Federal Information Processing Standard (FIPS) 140-2 validated.

Fortinet is the pioneer and leading provider of integrated network security solutions that protect your network against todays constantly changing threats. Fortinet provides solutions for the world's largest organizations, like large enterprises and service providers, to small offices with 25 usersand every size in between. Unlike providers of point products, Fortinet offers an innovative security platform that incorporates the essential security applications and services required to enable a safe and clean communications environment regardless of size. Fortinet delivers

FortiGuard Security Services

The FortiGuard Network is a combination of people and technology which enhance the value of Fortinet solutions. Over 100 members strong, the FortiGuard Global Threat Research Team ensure that FortiGuard Security Subscription Services are always up-to-date and providing protection from the latest threats. Delivering the latest security content is the FortiGuard Distribution Network, which is comprised of geographically dispersed systems which can optionally push updates to Fortinet devices anywhere in the world within minutes.

Better security by providing a comprehensive multi-threat security solution Higher performance through ASIC-acceleration Lower total cost of ownership (OpEx and CapEx) by integrating best-of-breed security applications into a single device

FortiAnalyzer AppliancesCentralized logging and reporting that securely aggregates and analyzes log data from multiple Fortinet products FortiManager AppliancesCentralized command and control, configuration management and monitoring solution FortiMail AppliancesAn enterprise-class family of specialized email security solutions providing antispam and antivirus protection

Fortinet protection solutions include a range of high-end chassis based systems, appliance-based solutions, and management and reporting tools. These capabilities allow our customers to cost-effectively protect their critical assets while delivering unparalleled flexibility in deployment.

Fortinet is the only unified security solutions provider that owns all of its technology. Fortinet solutions were built from the ground up by Fortinet to integrate multiple levels of security protectionincluding firewall, antivirus, intrusion prevention, VPN, spyware prevention, Web filtering, antispam and traffic shapingproviding customers a way to protect against multiple threats today and into the future.

The FortiASIC Advantage

Contact your Authorized FortiPartner or visit www.fortinet.com/partners to find a FortiPartner near you.

Fortinet Incorporated | 1090 Kifer Road, Sunnyvale, CA 94086 USA Tel +1-408-235-7700 Fax +1-408-235-7737 | www.fortinet.com/sales

The FortiASIC processor is the foundation of Fortinets unique technology. FortiASICs use an intelligent, proprietary content scanning engine that accelerates compute-intensive actions. They also contain acceleration algorithms for encryption so that FortiGate security devices can perform antivirus scanning on VPN tunnels, ensuring clean and controlled communications. Coupling our custom ASIC with proprietary network processor acceleration, Fortinets security systems deliver improved security, extreme performance, and a compelling total cost of ownership.