FortiGate 800D Next Generation Firewall Internal Segmentation Firewall

1y ago
12 Views
2 Downloads
1.24 MB
6 Pages
Last View : 2d ago
Last Download : 3m ago
Upload by : Duke Fulford
Transcription

FortiGate 800DNext Generation FirewallInternal Segmentation FirewallThe FortiGate 800D delivers next generation firewall capabilities for mid-sized to large enterprises, withthe flexibility to be deployed at the campus or data center edge. Protects against cyber threats withsecurity processor powered high performance, security efficacy and deep visibility.Security§§ Protects against known exploits, malware and maliciouswebsites using continuous threat intelligence provided byFortiGuard Labs security services§§ Identify thousands of applications including cloud applicationsfor deep inspection into network traffic§§ Protects against unknown attacks using dynamic analysis andprovides automated mitigation to stop targeted attacksPerformance§§ Delivers industry’s best threat protection performance andultra-low latency using purpose-built security processor(SPU) technology§§ Provides industry-leading performance and protection for SSLencrypted trafficCertification§§ Independently tested and validated best security effectivenessand performance§§ Received unparalleled third-party certifications from NSS Labs,ICSA, Virus Bulletin and AV ComparativesNetworking§§ Delivers extensive routing, switching, wireless controller andhigh performance IPsec VPN capabilities to consolidatenetworking and security functionality§§ Enables flexible deployment such as Next Generation Firewalland Internal Segmentation FirewallManagement§§ Single Pane of Glass with Network Operations Center (NOC)view provides 360 visibility to identify issues quicklyand intuitively§§ Predefined compliance checklist analyzes the deployment andhighlights best practices to improve overall security postureSecurity Fabric§§ Enables Fortinet and Fabric-ready partners’products to collaboratively integrate andprovide end-to-end security across the entireattack surface§§ Automatically builds Network Topology visualizations whichdiscover IoT devices and provide complete visibility intoFortinet and Fabric-ready partner productsFirewallIPSNGFWThreat ProtectionInterfaces36 Gbps4.2 Gbps4 Gbps3 GbpsMultiple GE RJ45, GE SFP, 10 GE SFP slotsand bypass GE RJ45 pairsRefer to specification table for detailsDATA SHEET

FortiGate 800D DEPLOYMENTN ext GenerationFirewall (NGFW)I nternal SegmentationFirewall (ISFW)§§ Combines threat prevention security capabilities into single highperformance network security appliance§§ Segmentation solution for end-to-end protection against threatswhile meeting compliance requirements§§ Reduces complexity by creating campus topology viewand providing granular visibility of devices, users and§§ High port density and accelerated traffic processing capacity, toprotect multiple segments without compromising performancethreat information§§ Deploy transparently and rapidly into existing environments with§§ Identify and stop threats with powerful intrusion preventionminimal disruptionbeyond port and protocol that examines the actual content ofyour network traffic§§ Delivers industry’s highest SSL inspection performance usingindustry-mandated ciphers§§ Proactively detect malicious unknown threats using integratedcloud-based sandbox serviceFortiSandboxAdvanced ortiAnalyzerLogging, Analysis,ReportingFortiGateNGFWFortiAPSecure FortiClientEndpoint ProtectionFortiGate 800D deployment in campus(NGFW, ISFW)2www.fortinet.com

FortiGate 800D HARDWAREFortiGate 800D1234765100-240VAC7.0-3.5A es1.2.3.4.USB PortsConsole Port2x GE RJ45 Management Ports2x Bypass GE RJ45 Pairs5. 20x GE RJ45 Ports6. 8x GE SFP Slots7. 2x 10 GE SFP SlotsNetwork ProcessorPowered by SPU§§ Custom SPU processors deliver thepower you need to detect maliciouscontent at multi-Gigabit speeds§§ Other security technologies cannot protect againsttoday’s wide range of content- and connection-basedthreats because they rely on general-purpose CPUs,Fortinet’s new, breakthrough SPU NP6 network processor worksinline with FortiOS functions delivering:§§ Superior firewall performance for IPv4/IPv6, SCTP and multicasttraffic with ultra-low latency down to 2 microseconds§§ VPN, CAPWAP and IP tunnel acceleration§§ Anomaly-based intrusion prevention, checksum offload andpacket defragmentation§§ Traffic shaping and priority queuingcausing a dangerous performance gap§§ SPU processors provide the performance neededto block emerging threats, meet rigorous third-partycertifications, and ensure that your network securitysolution does not become a network bottleneckContent ProcessorThe SPU CP8 content processor works outside of the direct flow oftraffic, providing high-speed cryptography and content inspectionservices including:§§ Signature-based content inspection acceleration§§ Encryption and decryption offloading10 GE ConnectivityHigh speed connectivity is essential for network securitysegmentation. The FortiGate 800D provides 10 GE slots thatsimplify network designs without relying on additional devices tobridge desired connectivity.3

FortiGate 800D FORTINET SECURITY FABRICSecurity FabricAdvanced ThreatIntelligenceNOC/SOCThe Security Fabric allows security to dynamically expand andadapt as more and more workloads and data are added. Securityseamlessly follows and protects data, users, and applicationsCloudClientas they move between IoT, devices, and cloud environmentsthroughout the network.FortiGates are the foundation of Security Fabric, expanding securityNetworkAccessApplicationvia visibility and control by tightly integrating with other Fortinetsecurity products and Fabric-Ready Partner solutions.Partner APIFortiOSControl all the security and networking capabilities across the entireFortiGate platform with one intuitive operating system. Reduceoperating expenses and save time with a truly consolidated nextgeneration security platform.§§ A truly consolidated platform with one OS for all security andnetworking services for all FortiGate platforms.§§ Industry-leading protection: NSS Labs Recommended, VB100,AV Comparatives, and ICSA validated security and performance.§§ Control thousands of applications, block the latest exploits, andfilter web traffic based on millions of real-time URL ratings.§§ Prevent, detect, and mitigate advanced attacks automatically inminutes with integrated advanced threat protection.§§ Fulfill your networking needs with extensive routing, switching,and SD-WAN capabilities.§§ Ultilize SPU hardware acceleration to boost security capabilityperformance.For more information, please refer to the FortiOS datasheet available at www.fortinet.comSERVICESFortiGuard Security ServicesFortiCare Support ServicesFortiGuard Labs offers real-time intelligence on the threatOur FortiCare customer support team provides global technicallandscape, delivering comprehensive security updates acrosssupport for all Fortinet products. With support staff in the Americas,the full range of Fortinet’s solutions. Comprised of securityEurope, Middle East, and Asia, FortiCare offers services to meetthreat researchers, engineers, and forensic specialists, thethe needs of enterprises of all sizes.team collaborates with the world’s leading threat monitoringorganizations and other network and security vendors, as well aslaw enforcement agencies.4For more information, please refer to forti.net/fortiguardand forti.net/forticarewww.fortinet.com

FortiGate 800D SPECIFICATIONSFORTIGATE 800DFORTIGATE 800DDimensions and PowerInterfaces and ModulesHardware Accelerated 10 GE SFP Slots2Height x Width x Length (inches)1.77 x 17.0 x 16.4Hardware Accelerated GE SFP Slots8Height x Width x Length (mm)45 x 432 x 416Hardware Accelerated GE RJ45 Ports20Weight19.0 lbs (8.6 kg)Accelerated GE RJ45 Bypass Interfaces4Form Factor1 RUGE RJ45 Management / HA Ports2Wall MountableNoUSB Ports (Client / Server)1/2AC Power Supply100–240V AC, 60–50 HzConsole Port1Power Consumption (Average / Maximum)128 W / 187 WOnboard Storage240 GBCurrent (Maximum)110V/7A, 220V/3.5AIncluded Transceivers2x SFP (SX 1 GE)Heat Dissipation636 BTU/hRedundant Power Supplies(Hot Swappable) optionalSystem Performance and CapacityIPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP)36 / 36 / 22 GbpsIPv6 Firewall Throughput(1518 / 512 / 86 byte, UDP)36 / 36 / 22 GbpsFirewall Latency (64 byte, UDP)3 μsFirewall Throughput (Packet per Second)33 MppsConcurrent Sessions (TCP)5 MillionNew Sessions/Second (TCP)280,000Firewall Policies10,000IPsec VPN Throughput (512 byte)20 GbpsGateway-to-Gateway IPsec VPN Tunnels2,000Client-to-Gateway IPsec VPN Tunnels50,000SSL-VPN Throughput2.2 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode)5,000SSL Inspection Throughput 24 GbpsApplication Control Throughput 39 GbpsCAPWAP Throughput 65.5 GbpsVirtual Domains (Default / Maximum)10 / 10Maximum Number of Switches Supported64Maximum Number of FortiAPs(Total / Tunnel)1024 / 512Maximum Number of FortiTokens1,000Maximum Number of Registered Endpoints2,000High Availability ConfigurationsActive-Active, Active-Passive, ClusteringOperating Environment and CertificationsOperating Temperature32–104 F (0–40 C)Storage Temperature-31–158 F (-35–70 C)Humidity10–90% non-condensingNoise Level55 dBAOperating AltitudeUp to 7,400 ft (2,250 m)ComplianceFCC Part 15 Class A, C-Tick, VCCI, CE, UL/cUL, CBCertificationsICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN;USGv6/IPv6System Performance — Optimal Traffic MixIPS Throughput 28 GbpsSystem Performance — Enterprise Traffic MixIPS Throughput 24.2 GbpsNGFW Throughput 2, 44 GbpsThreat Protection Throughput 2, 53 GbpsNote: All performance values are “up to” and vary depending on system configuration.1. IPsec VPN performance test uses AES256-SHA256.2. IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured with Logging enabled.3. SSL Inspection performance test uses TLS v1.2 with AES128-SHA256.4. NGFW performance is measured with Firewall, IPS and Application Control enabled.5. Threat Protection performance is measured with Firewall, IPS, Application Control and MalwareProtection enabled.5

FortiGate 800D ORDER INFORMATIONProductSKUDescriptionFortiGate 800DFG-800D22x GE RJ45 ports, 4x GE RJ45 with Bypass Protection, 8x GE SFP slots, 2x 10 GE SFP slots,SPU NP6 and CP8 hardware accelerated, 240 GB Internal onboard SSD storage.Optional Accessories/SparesSKUDescription1 GE SFP LX Transceiver ModuleFG-TRAN-LX1 GE SFP LX transceiver module for all systems with SFP and SFP/SFP slots.1 GE SFP RJ45 Transceiver ModuleFG-TRAN-GC1 GE SFP RJ45 transceiver module for all systems with SFP and SFP/SFP slots.1 GE SFP SX Transceiver ModuleFG-TRAN-SX1 GE SFP SX transceiver module for all systems with SFP and SFP/SFP slots.10 GE SFP Transceiver Module, Short RangeFG-TRAN-SFP SR10 GE SFP transceiver module, long range for all systems with SFP and SFP/SFP slots.10 GE SFP Transceiver Module, Long RangeFG-TRAN-SFP LR10 GE SFP transceiver module, long range for all systems with SFP and SFP/SFP slots.10 GE SFP Active Direct Attach Cable, 10m / 32.8 ftSP-CABLE-ADASFP 10 GE SFP active direct attach cable, 10m / 32.8 ft for all systems with SFP and SFP/SFP slots.AC Power SupplySP-FG600C-PSAC power supply for FG-600C, FG-800C, FG-800D and FG-1000C.Enterprise BundleFortiGuard Labs delivers a number of security intelligence services to augment the FortiGate firewall platform. Youcan easily optimize the protection capabilities of your FortiGate with the FortiGuard Enterprise Bundle. This bundlecontains the full set of FortiGuard security services plus FortiCare service and support offering the most flexibilityand broadest range of protection all in one package.GLOBAL HEADQUARTERSFortinet Inc.899 KIFER ROADSunnyvale, CA 94086United StatesTel: 1.408.235.7700www.fortinet.com/salesEMEA SALES OFFICE905 rue Albert Einstein06560 ValbonneFranceTel: 33.4.8987.0500APAC SALES OFFICE300 Beach Road 20-01The ConcourseSingapore 199555Tel: 65.6395.2788LATIN AMERICA SALES OFFICESawgrass Lakes Center13450 W. Sunrise Blvd., Suite 430Sunrise, FL 33323United StatesTel: 1.954.368.9990Copyright 2017 Fortinet, Inc. All rights reserved. Fortinet , FortiGate , FortiCare and FortiGuard , and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All otherproduct or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affectperformance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified productwill perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as inFortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuanthereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.FST-PROD-DS-GT8HFG-800D-DAT-R9-201708

The FortiGate 800D delivers next generation firewall capabilities for mid-sized to large enterprises, with the flexibility to be deployed at the campus or data center edge. Protects against cyber threats with security processor powered high performance, security efficacy and deep visibility. Next Generation Firewall Internal Segmentation Firewall

Related Documents:

Expected Life Span 3-5 years License cost Perpetual License for life. Fortinet Confidential Initial Setup. Fortinet Confidential . FortiGate-50B FortiGate-50B 20 FortiGate- 60B/C FortiGate-80C 500 FortiGate -110C/111C FortiGate-200B FortiGate-310 FortiGate-620 FortiGate-800 1000 FortiGate-1240 FortiGate-3016B

Mar 14, 2021 · Datasheet Fortigate-60D CP0 FortiSOC2 1 1839 3879 n/a Fortigate 60D datasheet FortiWiFi-60E SOC3 ARMv7 4 1863 3662 (EMMC) n/a Fortigate 60E datasheet Fortigate-60E SOC3 ARMv7 4 1866 3662 (EMMC) n/a Fortigate 60E datasheet FortiGate-61E SOC3 ARMv7 4 1866 3662 (EMMC) 122104 Fortigate

FortiGate-100D FortiGate-3700D/DX FortiGate-100E/EF FortiGate-3810D FortiGate-101E FortiGate-3815D FortiGate-140D FortiGate-3950D . Manual Bootdevice AESencrypted UsedtogenerateIKE protocolkeys ByerasingtheBoot deviceandpower cyclingthemodule

Internal Segmentation Firewall VPN Gateway The FortiGate-VM on OCI delivers next generation firewall capabilities for organizations of all sizes, with the flexibility to be deployed as next generation firewall, internal segmentation firewall and/or VPN gateway. It protects against cyber threats with high performance, security efficacy and deep .

FortiGate Rugged 30D FortiGate Rugged 35D FortiGate Rugged 60D FortiGate Rugged 90D Product SKU Description FortiGate Rugged 30D FGR-30D Ruggedized, 4x GE RJ45 ports, 2x GE SFP slots, 2x DB9 Serial. Maximum managed FortiAPs (Total / Tunnel) 2 / 2. FortiGate Rugged 35D FGR-35D Ruggedized,

The information in this guide applies to all FortiGate un its. All FortiGate models except the FortiGate-30B model support VDOMs, and all FortiGate models support VLANs. By default, your FortiGate unit supports a maximum of 10 VDOMs in any combination of NAT/Route and Transparent operating modes. For FortiGate models numbered

FortiGate Rugged 30D FortiGate Rugged 35D FortiGate Rugged 60D FortiGate Rugged 90D Product SKU Description FortiGate Rugged 30D FGR-30D Ruggedized, 4x GE RJ45 ports, 2x GE SFP slots, 2x DB9 Serial. Maximum managed FortiAPs (Total / Tunnel) 2 / 2. FortiGate Rugged 35D FGR-35D Ruggedized, IP67 rating for outdoor environment, 3x GE RJ45 Switch ports.

Accounting for Nature: A Natural Capital Account of the RSPB’s estate in England 77. Puffin by Chris Gomersall (rspb-images.com) 8. Humans depend on nature, not only for the provision of drinking water and food production, but also through the inspiring landscapes and amazing wildlife spectacles that enrich our lives. It is increasingly understood that protecting and enhancing the natural .