FortiGate/FortiWiFi 60D Series Data Sheet - OpenSky Tech

Transcription

FortiGate/FortiWiFi 60D SeriesFortiGate 60D, 60D-POE, FortiWiFi 60D, 60D-POEThe Fortinet Enterprise Firewall Solution delivers end-to-end network security with one platform, onenetwork security operating system and unified policy management with a single pane of glass — for theindustry’s best protection against the most advanced security threats and targeted attacks.Security Fabric IntegrationDeployment ModesFortiGate appliances, interconnectedwith the Fortinet Security Fabric,form the backbone of the FortinetEnterprise Solution.Distributed Enterprise FirewallHardware Acceleration1.5 GbpsFirewallSPU SoC2500,000ConcurrentSessions20041 Mbps23 Mbps20 MbpsIPSNGFWThreat Protection202YesThird-Party CertificationsMultiple GE RJ45 WiFi Variants Variants with PoE InterfacesDATA SHEET

FortiGate/FortiWiFi 60D SeriesHARDWAREFortiGate 60DFortiWiFi 60D1FortiGate 60D-POE2 OC2DesktopInterfaces1.2.3.4.5.6.SOC2Console PortUSB Management Port for FortiExplorerUSB Port2x GE RJ45 WAN Ports1x GE RJ45 DMZ Ports 7x GE RJ45 Internal Ports /5x GE RJ45 Internal and 2x GE PoE Ports on POE modelsFortiWiFi 60D-POESOC2Install in Minutes with FortiExplorerPowered by SPU SoC2§§ Combines a RISC-based CPU withFortinet’s proprietary SPU content andnetwork processors for unmatchedperformance§§ Simplifies appliance design and enables breakthroughperformance for smaller networks§§ Supports firewall acceleration across all packet sizes formaximum throughput§§ Delivers accelerated UTM content processing forsuperior performance and protection§§ Accelerates VPN performance for high speed, secureremote accessThe FortiExplorer wizard enables you to easily and quickly set upand configure FortiGate and FortiWiFi platforms with easy-to-followinstructions. The application runs on Windows, Mac OS X desktopsand laptops as well as popular mobile devices. Simply connect tothe appropriate USB port on the appliance, and be fully protectedin minutes.3G/4G WAN ConnectivityThe FortiGate/FortiWiFi 60D Series includes a USB port thatallows you to plug in a compatible third-party 3G/4G USB modem,providing additional WAN connectivity or a redundant link formaximum reliability.Compact and Reliable Form FactorDesigned for small environments, you can place it on a desktop orwall-mount it. It is small, lightweight yet highly reliable with superiorMTBF (Mean Time Between Failure), minimizing the chance of anetwork disruption.Superior Wireless CoverageA built-in dual-band, dual-stream access point with internalantennas is integrated on the FortiWiFi 60D and provides speedy802.11n coverage on both 2.4 GHz and 5 GHz bands. The dualband chipset addresses the PCI-DSS compliance requirement forrogue AP wireless scanning, providing maximum protection forregulated environments.2www.fortinet.com

FortiGate/FortiWiFi 60D SeriesSOFTWAREFortiOSControl all the security and networking capabilities across the entireFortiGate platform with one intuitive operating system. Reduceoperating expenses and save time with a truly consolidated nextgeneration security platform.§§ A truly consolidated platform with one OS for all security andnetworking services for all FortiGate platforms.§§ Industry-leading protection: NSS Labs Recommended, VB100,AV Comparatives and ICSA validated security and performance.§§ Control thousands of applications, block the latest exploits, andfilter web traffic based on millions of real-time URL ratings.§§ Detect, contain and block advanced attacks automatically inminutes with integrated advanced threat protection framework.§§ Solve your networking needs with extensive routing, switching,WiFi, LAN and WAN capabilities.§§ Activate all the SPU-boosted capabilities you need on thefastest firewall platform available.For more information, please refer to the FortiOS datasheet available at www.fortinet.comSERVICESFortiGuard Security ServicesFortiCare Support ServicesFortiGuard Labs offers real-time intelligence on the threatOur FortiCare customer support team provides global technicallandscape, delivering comprehensive security updates acrosssupport for all Fortinet products. With support staff in the Americas,the full range of Fortinet’s solutions. Comprised of securityEurope, Middle East and Asia, FortiCare offers services to meet thethreat researchers, engineers, and forensic specialists, theneeds of enterprises of all sizes:team collaborates with the world’s leading threat monitoring§§ Enhanced Support — For customers who need supportorganizations, other network and security vendors, as well as lawenforcement agencies:during local business hours only.§§ Comprehensive Support — For customers who need around-§§ Real-time Updates — 24x7x365 Global Operations researchsecurity intelligence, distributed via Fortinet Distributed Networkto all Fortinet platforms.§§ Security Research — FortiGuard Labs have discovered overthe-clock mission critical support, including advanced exchangehardware replacement.§§ Advanced Services — For global or regional customers whoneed an assigned Technical Account Manager, enhanced170 unique zero-day vulnerabilities to date, totaling millions ofservice level agreements, extended software support, priorityautomated signature updates monthly.escalation, on-site visits and more.§§ Validated Security Intelligence — Based on FortiGuard§§ Professional Services — For customers with more complexintelligence, Fortinet’s network security platform is tested andsecurity implementations that require architecture and designvalidated by the world’s leading third-party testing labs andservices, implementation and deployment services, operationalcustomers globally.services and more.Enterprise BundleFortiGuard Labs delivers a number of security intelligence services to augment the FortiGate firewall platform.You can easily optimize the protection capabilities of your FortiGate with the FortiGuard Enterprise Bundle. Thisbundle contains the full set of FortiGuard security services plus FortiCare service and support offering the mostflexibility and broadest range of protection all in one package.3

FortiGate/FortiWiFi 60D SeriesSPECIFICATIONSFORTIGATE 60DFORTIWIFI 60DFORTIGATE 60D-POEFORTIWIFI 60D-POEGE RJ45 WAN Ports2222GE RJ45 Internal Ports7755GE RJ45 PoE Ports––22GE RJ45 DMZ Ports1111Wireless Interface–802.11 a/b/g/n–802.11 a/b/g/nUSB Ports (Client / Server)1/11/11/11/1Console (RJ45)1111Hardware SpecificationsSystem PerformanceFirewall Throughput (1518 / 512 / 64 byte UDP packets)1.5 / 1.5 / 1.5 GbpsFirewall Latency (64 byte UDP packets)4 μsFirewall Throughput (Packets Per Second)2.2 MppsConcurrent Sessions (TCP)500,000New Sessions/Second (TCP)4,000Firewall Policies5,000IPsec VPN Throughput (512 byte packets)1 GbpsGateway-to-Gateway IPsec VPN Tunnels200Client-to-Gateway IPsec VPN Tunnels500SSL-VPN Throughput30 MbpsConcurrent SSL-VPN Users (Recommended Maximum)100IPS Throughput (HTTP / Enterprise Mix) 1200 / 41 MbpsSSL Inspection Throughput 232 MbpsApplication Control Throughput 350 MbpsNGFW Throughput 423 MbpsThreat Protection Throughput 520 MbpsCAPWAP Throughput 6250 MbpsVirtual Domains (Default / Maximum)10 / 10Maximum Number of FortiAPs (Total / Tunnel Mode)10 / 5Maximum Number of FortiTokens100Maximum Number of Registered FortiClients200High Availability ConfigurationsActive / Active, Active / Passive, ClusteringDimensionsHeight x Width x Length (inches)1.50 x 8.50 x 5.831.50 x 8.50 x 6.181.50 x 8.50 x 5.831.50 x 8.50 x 6.18Height x Width x Length (mm)38 x 216 x 14838 x 216 x 15738 x 216 x 14838 x 216 x 157Weight1.9 lbs (0.9 kg)1.9 lbs (0.9 kg)1.9 lbs (0.9 kg)1.9 lbs (0.9 kg)Form FactorDesktopDesktopDesktopDesktopMaximum Current110 V / 1.5 A, 220 V / 0.75 A110 V / 1.5 A, 220 V / 0.75 A110 V / 1.5 A, 220 V / 0.75 A110 V / 1.5 A, 220 V / 0.75 ATotal Available PoE Power Budget*––30.8 W30.8 WPower Consumption (Average / Maximum)11.7 / 14 W11.7 / 14 W27.4 / 45.2 W29.9 / 48.2 WHeat Dissipation40 BTU/h40 BTU/h154 BTU/h165 BTU/hEnvironmentPower RequiredOperating Temperature100–240V AC, 50–60 Hz32–104 F (0–40 C)Storage Temperature-31–158 F (-35–70 C)Humidity20–90% non-condensingOperating AltitudeUp to 7,400 ft (2,250 m)ComplianceSafetyFCC Part 15 Class B, C-Tick, VCCI, CE, UL/cUL, CBCertificationsICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6Note: All performance values are “up to” and vary depending on system configuration. IPsec VPN performance is based on 512 byte UDP packets using AES-256 SHA1. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix.2. SSL Inspection is measured with IPS enabled and HTTP traffic, using TLS v1.2 with AES256-SHA. 3. Application Control performance is measured with 64 Kbytes HTTP traffic. 4. NGFW performance is measured with IPS and Application Control enabled,based on Enterprise Traffic Mix. 5. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix. 6. CAPWAP performance is based on 1444 byte UDP packets.* Maximum loading on each PoE port is 15.4 W (802.3af).4www.fortinet.com

FortiGate/FortiWiFi 60D SeriesORDER INFORMATIONProductSKUDescriptionFortiGate 60DFG-60D10x GE RJ45 ports (including 7x Internal ports, 2x WAN ports, 1x DMZ port). Maximum managed FortiAPs (Total / Tunnel) 10 / 5.FortiWiFi 60DFWF-60D10x GE RJ45 ports (including 7x Internal ports, 2x WAN ports, 1x DMZ port), Wireless (802.11a/b/g/n). Maximum managed FortiAPs (Total / Tunnel) 10 / 5.FortiGate 60D-POEFG-60D-POE10x GE RJ45 ports (including 5x Internal ports, 2x WAN ports, 1x DMZ port, 2x PoE ports). Maximum managed FortiAPs (Total / Tunnel) 10 / 5.FortiWiFi 60D-POEFWF-60D-POE10x GE RJ45 ports (including 5x Internal ports, 2x WAN ports, 1x DMZ port, 2x PoE ports), Wireless (802.11a/b/g/n). Maximum managed FortiAPs (Total / Tunnel) 10 / 5.SP-RACKTRAY-01Rack mount tray for FG-30D, FG-40C, FG-50/51E, FG-60C, FG-60D/-POE, FG-70D, FG-80D, FG-90D/-POE, FAD-100E, FRC-100D, FWB-100D, FML-60D, FVE-100E.Optional AccessoryRack Mount TrayGLOBAL HEADQUARTERSFortinet Inc.899 KIFER ROADSunnyvale, CA 94086United StatesTel: 1.408.235.7700www.fortinet.com/salesEMEA SALES OFFICE905 rue Albert Einstein06560 ValbonneFranceTel: 33.4.8987.0500APAC SALES OFFICE300 Beach Road 20-01The ConcourseSingapore 199555Tel: 65.6395.2788LATIN AMERICA SALES OFFICESawgrass Lakes Center13450 W. Sunrise Blvd., Suite 430Sunrise, FL 33323United StatesTel: 1.954.368.9990Copyright 2017 Fortinet, Inc. All rights reserved. Fortinet , FortiGate , FortiCare and FortiGuard , and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All otherproduct or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affectperformance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified productwill perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as inFortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuanthereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be 02

Threat Protection Hardware Acceleration SPU SoC2 FortiGate/FortiWiFi 60D Series FortiGate 60D, 60D-POE, FortiWiFi 60D, 60D-POE The Fortinet Enterprise Firewall Solution delivers end-to-end network security with one platform, one network security operating system and unified policy management with a single pane of glass — for the industry's best protection against the most advanced .