Transcription
DATA SHEETFortiMail Comprehensive Email SecurityFortiMailComprehensiveEmail SecurityFortiMail 60D, 200D, 200E, 400C, 400E, 1000D, 3000D and VMComprehensive Email Security§§ Scalable solution from SME to thelargest ISP and carrier networksProven SecurityFortiMail appliances and virtual appliances are proven, powerful email security platformsfor any size organization — from small businesses to carriers, service providers, and largeenterprises. Purpose-built for the most demanding messaging systems, FortiMail appliancesemploy Fortinet’s years of experience in protecting networks against spam, malware, andother message-borne threats.Intelligent ProtectionFortiMail prevents your email systems from becoming threat delivery systems. Its inboundfiltering engine blocks spam and malware before it can clog your network and affect users.Its outbound inspection technology prevents other antispam gateways from blacklisting yourusers by blocking outbound spam and malware, including mobile traffic.§§ Advanced Threat OutbreakProtection methods to protectagainst new emerging andtargeted attacks§§ Apply Identity-Based Encryption inboth push and pull methods§§ Data Leak Prevention, and PolicyBased Encryption and Archivingenable compliance with SOX,GLBA, HIPAA, PCI DSS§§ Enforce email and security policiesat a granular level§§ Receive real-time security updatesfrom FortiGuard ServicesKey Features & Benefits§§ Industry leading price/performanceFlexible Deployment OptionsFortiMail can be deployed in gateway, transparent mode and as a fullyfeatured mail server. With hardware, VM and cloud form factors, FortiMail isflexible enough to cater to every customer requirement.Apply Data Loss Preventionand Identity-Based EncryptionDetect sensitive information using defined data patterns and ensuresecure delivery with no additional hardware or software to install, no userprovisioning, no recipient pre-enrollment.Prevent Phishing and OtherAdvanced ThreatsApply embedded URL inspection, top rated antimalware and optionalsandbox integration to detect highly targeted attacks.Identify and BlockSpamming EndpointsCarriers and Service Providers, prevent blacklisting of legitimatesubscribers by identifying and blocking endpoints sending spam.No Per-User orPer-Mailbox PricingComplete, multi-layered antivirus, antispam, antispyware and antiphishingprotection for an unlimited number of users. Greatly reduces TCO.FortiCare Worldwide 24x7 SupportFortiGuard Security Servicessupport.fortinet.comwww.fortiguard.com§§ Flexible deployment modes andarchitectures support the widestrange of organizations§§ Multi-layer threat detection delivershighest level of user protection§§ Scalable solution delivers longterm investment protection
DATA SHEET: FortiMail Enforce secure content delivery with FortiMail Identity-BasedEncryption (IBE), S/MIME, or TLS email encryption options. Preventaccidental and intentional loss of confidential data using predefinedHIPAA, GLBA, SOX or customized dictionaries.High Performance and Unmatched FlexibilityFortiMail appliances provide high-performance email routing andsecurity by utilizing multiple high-accuracy antispam filters. Whencoupled with industry leading real-time antivirus and antispywareprotection from FortiGuard Services, FortiMail provides you withextremely fast and accurate email security that won’t affect endusers or delay their communications. FortiMail can be deployed inthe cloud or on premises and gateway, inline and server modes ina range of appliance or virtual machine form factors. This flexibilityallows you to deploy FortiMail in the mode that best suits yourenvironment.Advanced Threat ProtectionIn addition to FortiGuard antivirus, FortiMail supports on-boardcode emulation to identify and block suspicious files based ontheir intended behavior. Optional cloud-based or on-premise“sandboxing” provide a full, contained, run-time environment tothwart the highly targeted and tailored attacks that increasinglybypass traditional defenses. Rich threat intelligence, actionableinsight and the option to share information with FortiGuardLabs in order to receive automated protection updates helporganizations reduce the risk of compromise and breach fromsuch sophisticated attacks.FEATURESSystem§§ Wide range of deployment options:– Transparent, Gateway andServer Mode– On-prem or public or privatecloud deployment§§ Inbound and Outbound Inspection§§ Multiple Email Domains with DomainLevel Customization§§ IPv6 and IPv4 Address Support§§ Virtual Hosting using Source and/orDestination IP Address Pools§§ SMTP Authentication Support via LDAP,RADIUS, POP3 and IMAP§§ LDAP-Based Email Routing§§ Per User Inspection usingLDAP Attributes on a Per Policy(Domain) Basis§§ Comprehensive Webmail Interfacefor Server Mode Deployments andQuarantine Management§§ Mail Queue Management§§ Multiple Language Support for Webmailand Admin Interface§§ Email RFC ComplianceManagement, Logging,and Reporting§§ Basic/advanced management modes§§ Per domain, role-based administrationaccounts§§ Comprehensive activity, configurationschange and incident logging andreporting§§ Built-in reporting module§§ Centralized quarantine for largescale deployments§§ Optional centralized logging andreporting with FortiAnalyzer§§ SNMP support using standard andprivate MIB with threshold-based traps§§ Local or external storage serversupport, including iSCSI devices§§ External Syslog supportAntispam§§ FortiGuard antispam service– Global sender reputation– Spam object checksums– Dynamic Heuristic Rules§§ Real-time spam outbreak protection§§ Spam and phishing URIs andemail addresses§§ Full category FortiGuard URL Filtering§§ Greylisting for IPv4, IPv6 addresses andemail accounts§§ Local sender reputation (IPv4, IPv6 andEnd Point ID-based)§§ Behavioral analysis§§ Deep email header inspection§§ Integration with third-party spam URIand real-time blacklists (SURBL/RBL)§§ Newsletter detection§§ PDF Scanning and image analysis§§ Block/safe lists at global, domain,and user levels§§ Support for enterprise senderidentity standards:– Sender Policy Framework (SPF)– Domain Keys Identified Mail (DKIM)– Domain-Based MessageAuthentication (DMARC)§§ Flexible action and notification profiles§§ System and user self-service quarantine2www.fortinet.com
DATA SHEET: FortiMail FEATURESHigh Availability (HA)AntimalwareAdvanced§§ High availability supported in alldeployment scenarios– Active-Passive mode– Active-Active configurationsynchronization mode§§ Quarantine and mail queuesynchronization§§ Device failure detection and notification§§ Link status, failover and redundantinterface support §§ Server mode deployment withadvanced groupware functions§§ Policy-based e-mail archiving withremote storage options– Support for Exchange journalarchiving§§ Comprehensive data-loss preventionwith file fingerprinting and sensitivedata detection§§ Identity-based encryptionFortiGuard Antivirus detectionHeuristic-based behavioral detectionReal-time malware outbreak detectionCloud and On-prem sandboxintegrationDEPLOYMENTChoose from three modes of deployment — Transparent, Gateway, or Server mode – to meet your specific email security requirements,while minimizing infrastructure changes and service disruptions:Gateway Mode: Provides inbound and outbound proxy mailtransfer agent (MTA) services for existing email gateways.A simple DNS MX record change redirects email to FortiMailfor antispam and antivirus scanning. The FortiMail devicereceives messages, scans for viruses and spam, then relaysemail to its destination email server for delivery.Transparent Mode: Each network interface includes a proxythat receives and relays email. Each proxy can interceptSMTP sessions even though the destination IP address isnot the FortiMail appliance. FortiMail scans for viruses andspam, then transmits email to the destination email serverfor delivery. This eliminates the need to change the DNSMX record, or to change the existing email server networkconfiguration.Server Mode: The FortiMail device acts as a stand-alonemessaging server with full SMTP email server functionality,including flexible support for secure POP3, IMAP andWebMail access. FortiMail scans email for viruses and spambefore delivery. As in Server mode, external MTAs connect toFortiMail, allowing it to function as a protected server.Deploy on-site or in the cloudOnsite deployment along side mail serverFull mail server and groupware functionalityin addition to AS3
DATA SHEET: FortiMail DEPLOYMENTIdentity-Based Encryption (IBE)IBE allows FortiMail to deliver confidential and regulated email securely — without requiring additional hardware, software user provisioning,or extra license fees. Use IBE to eliminate paper-based communications and reduce costs.1Policy-Based Encryption: Automatically encrypt messages forcompliance, based on content or recipient.Notification of encrypted emailRecipientSender23Push or Pull Mode: Use Push, Pull, or a combination of modes tomeet your requirements.User authenticatesEasy to Deploy, Use, and Manage: Deploy IBE in any mode,including Transparent mode, without user provisioning or additionalhardware or software.User views decrypted emailSPECIFICATIONSFORTIMAIL 60DFORTIMAIL 200DFORTIMAIL 200EDemo, testing, training and smallenterprise use with fewer than 100 users*Small businesses, branch offices, and organizations with fewer than 400 users*FORTIMAIL 400CRecommended Deployment ScenariosSmall-to-midsized organizations withup to 1000 users*Hardware Specifications10/100/1000 Interfaces (Copper, RJ-45)4444SFP Gigabit Ethernet Interface0000Storage1x 500 GB1x 1 TB1 x 1TB2x 1 TBRAID Storage ManagementNoNoNoSoftware: 0, 1Form FactorDesktop1U1U1UPower SupplyExternalSingleSingleSingleSystem SpecificationsConfigured Domains **22020100Recipient-based Policies (per Domain / per System)— Incoming or Outgoing15 / 3060 / 30060 / 300600 / 3000Server Mode Mailboxes50150150400Antispam, Antivirus, Authentication, andContent Profiles (per Domain / per System)10 / 1550 / 6050 / 6050 /200Performance (Messages/Hour) [Without queuing based on 100 KB message size]Email Routing3.6 K76 K80 K150 KFortiGuard Antispam3.1 K68 K71 K140 KFortiGuard Antispam Antivirus2.7 K58 K61 K120 KDimensionsHeight x Width x Length (inches)1.61 x 8.27 x 5.241.75 x 17.05 x 13.861.73 x 17.24 x 16.381.70 x 17.10 x 14.30Height x Width x Length (mm)41 x 210 x 13345 x 433 x 35245 x 433 x 35244 x 435 x 364Weight2.6 lbs (1.2 kg)13.4 lbs (6.1 kg)13.4 lbs (6.1 kg)16.1 lbs (7.3 kg)External Power Supply 19V DC 2.1A40 W100–240V AC, 50–60 Hz100–240V AC, 50–60 Hz100–240V AC, 50–60 HzEnvironmentPower SourceMaximum Current110V/1.2A, 220V/1.2A115V/6A, 230V/3A100V/4A, 240V/2A4.00A/110V, 2.00A/220VMaximum Power Required22 W72 W71 W120 WPower Consumption (Average)18 W60 W59 W100 WHeat Dissipation78 BTU/h205 BTU/h280 BTU/h411 BTU/hHumidity10–90% non-condensing5–95% non-condensing5-95% non-condensing10–90% non-condensingOperating Temperature32–104 F (0–40 C)32–104 F (0–40 C)32–104 F (0–40 C)32–104 F (0–40 C)Storage Temperature-13–158 F (-25–70 C)-13–158 F (-25–70 C)-13–158 F (-25–70 C)-4–158 F (-20–70 C)FCC Part 15 Class B, C-Tick, VCCI, CE,UL/cUL, CBFCC Part 15 Class A, C-Tick, VCCI,CE, UL/cUL, CBFCC Part 15 Class A, C-Tick, VCCI,CE, UL/cUL, CB, BSMIFCC Part 15 Class A, C-Tick, VCCI,CE, UL/cUL, CBVBSpam and VB100 ratedVBSpam and VB100 rated, CommonCriteria NDPP, FIPS 140-2 CertifiedVBSpam and VB100 rated, CommonCriteria NDPP, FIPS 140-2 CompliantVBSpam and VB100 ratedComplianceCertification** Recommended sizing for Gateway and Transparent deployments. For Server Mode, see Server Mode Mailbox metric. If unsure, please validate the model selection by checking the peak mail flow rates and average message size detail with a FortiMail specialist.** Configured domains is the total number of email domains that can be configured on the appliance. Domain Associations can be used to enable additional domains which share configuration with the primary domain to which they are assigned.4www.fortinet.com
DATA SHEET: FortiMail SPECIFICATIONSFORTIMAIL 400EFORTIMAIL 1000DFORTIMAIL 3000DSmall to midsized organizations withup to 1000 users*Mid to large enterprise, education andgovernment deparments with up to3000 users*Highest performing appliance for thelargest University, corporate, ISP andcarrier customersRecommended Deployment ScenariosHardware Specifications10/100/1000 Interfaces (Copper, RJ-45)464SFP Gigabit Ethernet Interface022Storage2x 1 TB2x 2 TB (2x 2 TB Optional)2x 2 TB (6x 2 TB Optional)RAID Storage ManagementSoftware: 0, 1Hardware: 1, 5, 10, 50, Hot Spare(Based on Drive Count)Hardware: 1, 5, 10, 50, Hot Spare(Based on Drive Count)Form Factor1U2U2UPower SupplySingle (Dual Optional)DualDualSystem SpecificationConfigured Domains **1008002,000Recipient-Based Policies (per Domain / per System) — Incoming or Outgoing600 / 3,0001,500 / 7,5001,500 / 7,500Server Mode Mailboxes4001,5003,000Antispam, Antivirus, Authentication, and Content Profiles (per Domain / per System)50 /20050 / 60050 / 600Performance (Messages/Hour) [Without queuing based on 100 KB message size]Email Routing157 K680 K1.5 MillionFortiGuard Antispam147 K620 K1.4 MillionFortiGuard Antispam Antivirus126 K500 K1.3 MillionDimensionsHeight x Width x Length (inches)1.75 x 17.05 x 13.863.50 x 17.24 x 14.493.44 x 18.99 x 29.72Height x Width x Length (mm)45 x 433 x 35288 x 438 x 36887.3 x 482.4 x 755Weight13.4 lbs (6.1 kg)27.6 lbs (12.52 kg)71.5 lbs (32.5 kg)EnvironmentPower Source100–240V AC, 50–60 Hz100–240V AC, 50–60 Hz100–240V AC, 50–60 HzMaximum Current100V/5A, 240V/3A3.50A /110V, 1.75A /220V10.0A / 110V, 5.0A / 220VMaximum Power Required131 W138 W487 WPower Consumption (Average)103 W115 W299 WHeat Dissipation482 BTU/h471 BTU/h1694 BTU/hHumidity5–95% non-condensing5–95% non-condensing20–90% non-condensingOperating Temperature32–104 F (0–40 C)32–104 F (0–40 C)50–95 F (10–35 C)Storage Temperature-13–167 F (-25–75 C)-13–158 F (-25–70 C)-40–149 F (-40–65 C)FCC Part 15 Class A, C-Tick, VCCI,CE, UL/cUL, CBFCC Part 15 Class A, C-Tick, VCCI,CE, UL/cUL, CBFCC Part 15 Class A, C-Tick, VCCI,CE, BSMI, KC, UL/cUL, CB, GOSTVBSpam and VB100 rated, CommonCriteria NDPP, FIPS 140-2 CompliantVBSpam and VB100 rated, CommonCriteria NDPP, FIPS 140-2 CompliantVBSpam and VB100 rated, CommonCriteria NDPP, FIPS 140-2 CertifiedComplianceCertification** Recommended sizing for Gateway and Transparent deployments. For Server Mode, see Server Mode Mailbox metric. If unsure, please validate the model selection by checking the peak mail flow rates and average message size detail with a FortiMail specialist.** Configured domains is the total number of email domains that can be configured on the appliance. Domain Associations can be used to enable additional domains which share configuration with the primary domain to which they are assigned.FortiMail 60DFortiMail 400CFortiMail 200DFortiMail 400EFortiMail 200EFortiMail 1000DFortiMail 3000D5
DATA SHEET: FortiMail SPECIFICATIONSTechnical Specifications forFortiMail Virtual AppliancesVM00VM01VM02VM04VM08VM16VM32Demo, testing, trainingand small enterpriseuse with fewer than100 users*Small businesses,branch offices, andorganizations withfewer than 400 users*Small to midsizedorganizations with upto 1000 users*Mid to largeenterprise with upto 3000 users*Large enterpriseLarge enterpriseLarge enterpriseRecommended Deployment ScenariosTechnical SpecificationsHypervisors SupportedVMware ESX/ESXi 4.0/4.1/5.0/5.1/5.5/6.0, Citrix XenServer 5.6 SP2/6.0 or later,Microsoft Hyper-V 2008 R2/2012/2012 R2, KVM (qemu 0.12.1), AWS (Amazon Web Services)Maximum Virtual CPUs Supported112481632Virtual NICs Required (Minimum/Maximum)1/41/41/41/41/41/61/6Virtual Machine Storage Required(Minimum/Maximum)50 GB / 1 TB50 GB / 1 TB50 GB / 2 TB50 GB / 4 TB50 GB / 8 TB50 GB / 12 TB50 GB / 24 TBVirtual Machine Memory Required(Minimum/Maximum)1 GB / 2 GB1 GB / 2 GB1 GB / 4 GB1 GB / 8 GB1 GB / 16 GB2 GB / 128 GB2 GB / 128 GBPerformance (Messages/Hour) [Without queuing based on 100 KB message size] **Email Routing3.6 K34 K67 K306 K675 K875 K1.2 MFortiGuard Antispam3.1 K30 K54 K279 K630 K817 K1.1 MFortiGuard Antispam Antivirus2.7 K26 K52 K225 K585 K758 K1.0 MSystem SpecificationsConfigured Domains ***2201008002,0002,0002,000Recipient-Based Policies (Domain / System)— Incoming or Outgoing15 /3060 /300600 / 3,0001,500 / 7,5001,500 / 7,5001,500 / 7,5001,500 / 7,500Server Mode Mailboxes501504001,5003,0003,0003,000Antispam, Antivirus, Authentication, andContent Profiles (per Domain / per System)10 / 1550 / 6050 / 20050 / 60050 / 60050 / 60050 / 600*** Recommended sizing for Gateway and Transparent deployments. For Server Mode, see Server Mode Mailbox metric. If unsure, please validate the model selection by checking the peak mail flow rates and average message size detail with a FortiMail specialist.*** Hardware dependent. Indicative figures based on multiple VMs running on a shared system.*** Configured domains is the total number of email domains that can be configured on the appliance. Domain Associations can be used to enable additional domains which share configuration with the primary domain to which they are assigned.ORDER INFORMATIONProductSKUDescriptionFortiMail 60DFML-60DEmail Security Appliance — 4x GE RJ45 ports, 500 GB storage.FortiMail 200DFML-200DEmail Security Appliance — 4x GE RJ45 ports, 1 TB storage.FortiMail 200EFML-200EEmail Security Appliance — 4x GE RJ45 ports, 1 TB storage.FortiMail 400CFML-400CEmail Security Appliance — 4x GE RJ45 ports, 2 TB storage.FortiMail 400EFML-400EEmail Security Appliance — 4x GE RJ45 ports, 2 TB storage.FortiMail 1000DFML-1000DEmail Security Appliance — 2x GE SFP slots, 6x GE RJ45 ports, dual AC power supplies, 4 TB default storage.FortiMail 3000DFML-3000DEmail Security Appliance — 2x GE SFP slots, 4x GE RJ45 ports, dual AC power supplies, 4 TB default storage.AC power supply for FML-400ESP-FAD700-PSAdditional AC power supply for FML-400E.HDD for FML-1000DSP-D20002 TB 3.5“ SATA hard drive with tray for FML-1000D.HDD for FML-3000DSP-D2TC2 TB 3.5“ SATA hard drive with tray for FML-3000D.Rack mount tray for FML-60DSP-RACKTRAY-01Rack mount tray for FML-60D.AccessoriesGLOBAL HEADQUARTERSFortinet Inc.899 Kifer RoadSunnyvale, CA 94086United StatesTel: 1.408.235.7700www.fortinet.com/salesEMEA SALES OFFICE905 rue Albert EinsteinValbonne 06560Alpes-Maritimes, FranceTel: 33.4.8987.0500APAC SALES OFFICE300 Beach Road 20-01The ConcourseSingapore 199555Tel: 65.6395.2788LATIN AMERICA SALES OFFICESawgrass Lakes Center13450 W. Sunrise Blvd., Suite 430Sunrise, FL 33323United StatesTel: 1.954.368.9990Copyright 2016 Fortinet, Inc. All rights reserved. Fortinet , FortiGate , FortiCare and FortiGuard , and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All otherproduct or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affectperformance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified productwill perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as inFortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuanthereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.FST-PROD-DS-MLFML-DAT-R33-201602
email to its destination email server for delivery. Transparent Mode: Each network interface includes a proxy that receives and relays email. Each proxy can intercept SMTP sessions even though the destination IP address is not the FortiMail appliance. FortiMail scans for viruses and spam, then transmits email to the destination email server
