FortiGate 80E Series Data Sheet

Transcription

DATA SHEETFortiGate 80E SeriesSecure SD-WANNext Generation FirewallFG-80E, FG-80E-POE, FG-81E, and FG-81E-POEThe FortiGate 80E series provides an application-centric, scalable and secure SD-WANsolution in a compact fanless desktop form factor for enterprise branch offices and mid-sizedbusinesses. Protects against cyber threats with system-on-a-chip acceleration and industryleading secure SD-WAN in a simple, affordable, and easy to deploy solution. Fortinet’s SecurityDriven Networking approach provides tight integration of the network to the new generation ofsecurity.Securityn Identifies thousands of applications inside network trafficfor deep inspection and granular policy enforcementnnProtects against malware, exploits, and maliciouswebsites in both encrypted and non-encrypted trafficPrevent and detect against known and unknown attacksusing continuous threat intelligence from AI-poweredFortiGuard Labs security servicesPerformancen Delivers industry’s best threat protection performance andultra-low latency using purpose-built security processor(SPU) technologynProvides industry-leading performance and protection forSSL encrypted trafficCertificationn Independently tested and validated for best-in-classsecurity effectiveness and performancenReceived unparalleled third-party certifications from NSSLabsNetworkingn Delivers advanced networking capabilities that seamlesslyintegrate with advanced layer 7 security and virtualdomains (VDOMs) to offer extensive deploymentflexibility, multi-tenancy and effective utilization ofresourcesnDelivers high-density, flexible combination of varioushigh-speed interfaces to enable best TCO for customersfor data center and WAN deploymentsManagementn Includes a management console that is effective, simpleto use, and provides comprehensive network automationand visibilitynnProvides Zero Touch Integration with Fortinet’s SecurityFabric’s Single Pane of Glass ManagementPredefined compliance checklist analyzes the deploymentand highlights best practices to improve overall securitypostureSecurity Fabricn Enables Fortinet and Fabric-ready partners’ productsto provide broader visibility, integrated end-to-enddetection, threat intelligence sharing, and automatedremediationFirewallIPSNGFWThreat Protection4 Gbps450 Mbps360 Mbps250 MbpsInterfacesMultiple GE RJ45 Variants with internal storage Variants with PoE/ interfaces1

DATA SHEET FortiGate 80E SeriesDEPLOYMENTNext Generation Firewall (NGFW)§ Reduce the complexity and maximize your ROI byintegrating threat protection security capabilities intoa single high-performance network security appliance,powered by Fortinet’s Security Processing Unit (SPU)§ Full visibility into users, devices, applications acrossthe entire attack surface and consistent security policyenforcement irrespective of asset location§ Protect against network exploitable vulnerabilitieswith industry-validated IPS that offers low latency andoptimized network performance§ Automatically block threats on decrypted traffic using theIndustry’s highest SSL inspection performance, includingthe latest TLS 1.3 standard with mandated ciphers§ Proactively block newly discovered sophisticatedattacks in real-time with AI-powered FortiGuard Labsand advanced threat protection services included in theFortinet Security FabricSecure SD-WAN§ Consistent business application performance withaccurate detection, dynamic WAN path steering on anybest-performing WAN transport§ Accelerated Multi-cloud access for faster SaaS adoptionwith cloud-on-ramp§ Self-healing networks with WAN edge high availability,sub-second traffic switchover-based and real-timebandwidth compute-based traffic steering§ Automated Overlay tunnels provides encryption andabstracts physical hybrid WAN making it simple to manage.§ Simplified and intuitive workflow with SD-WANOrchestrator for management and zero touch deployment§ Enhanced analytics both real-time and historical providesvisibility into network performance and identify anomalies.§ Strong security posture with next generation firewall andreal- time threat protectionSD-WAN OrchestratorCentralized Provisioning &Automated Overlay ManagementFortiGate Cloud Cloud Device Management Cloud Analytics-poweredSecurity and Log Management Cloud SandboxingFortiSwitchSecure AccessSwitchFortiAnalyzerAnalytics-poweredSecurity & LogManagementFortiAPSecure AccessPointlsneuncT ENTERPRISEBRANCH eIPS LSMP FortiGateSecure SD-WANSMALLOFFICEFortiGateNGFWFortiClientEndpoint ProtectionSmall Office DeploymentEnterprise Branch Deployment(NGFW)(Secure SD-WAN)2

DATA SHEET FortiGate 80E SeriesHARDWAREFortiGate 80E/81EFortiGate 80E/81E-POEFortiGate 80EFortiGate /ACTWAN1WAN2DMZ3456789101112HA1USB1197531DMZWAN1 Shared12108642HAWAN2 Shared234/DC 54V5Hardware FeaturesDesktopMAX PoECONSOLE1SOC3STATUSLINK/ACTCONSOLEDC 12V2PoE12128GBUSB97531DMZWAN1 Shared12108642HAWAN2 Shared2345Hardware FeaturesSOC3DesktopPOE/ InterfacesInterfaces1.2.3.4.5.1.2.3.4.5.Console PortUSB Port12x GE RJ45 Ports2x GE RJ45 DMZ/HA Ports2x GE RJ45/SFP Shared Media Pairs11/128GBConsole PortUSB Port12x GE RJ45 POE/ Ports2x GE RJ45 DMZ/HA Ports2x GE RJ45/SFP Shared Media Pairs3G/4G WAN ConnectivityPowered by SPU SoC3§ Combines a RISC-based CPU withFortinet’s proprietary SPU content andnetwork processors for unmatchedperformance§ Simplifies appliance design and enablesbreakthrough performance for smaller networks§ Supports firewall acceleration across all packetsizes for maximum throughput§ Delivers accelerated UTM content processing forsuperior performance and protection§ Accelerates VPN performance for high speed andsecure remote access3The FortiGate 80E Series includes a USB port that allowsyou to plug in a compatible third-party 3G/4G USB modem,providing additional WAN connectivity or a redundant link formaximum reliability.Compact and Reliable Form FactorFortinet’s ninth generation custom SPU CP9 contentprocessor works outside of the direct flow of traffic andaccelerates the inspection.

DATA SHEET FortiGate 80E SeriesFORTINET SECURITY FABRICSecurity FabricThe industry’s highest-performing cybersecurity platform,powered by FortiOS, with a rich ecosystem designed tospan the extended digital attack surface, delivering fullyautomated, self-healing network security.Fabric ManagementCenterFabric SecurityOperationsNOCSOC§ Broad: Coordinated detection and enforcement across theentire digital attack surface and lifecycle with convergednetworking and security across edges, clouds, endpointsand usersAdaptive CloudSecurity§ Integrated: Integrated and unified security, operation,and performance across different technologies, location,deployment options, and the richest EcosystemZero TrustAccessFORTI OS§ Automated: Context aware, self-healing network &security posture leveraging cloud-scale and advanced AIto automatically deliver near-real-time, user-to-applicationcoordinated protection across the FabricThe Fabric empowers organizations of any size to secure andsimplify their hybrid infrastructure on the journey to systemFortiGuardThreat IntelligenceFortiOS Operating SystemFortiOS, Fortinet’s leading operating system enable theconvergence of high performing networking and securityacross the Fortinet Security Fabric delivering consistent andcontext-aware security posture across network endpoint, andclouds. The organically built best of breed capabilities andunified approach allows organizations to run their businesseswithout compromising performance or protection, supportsseamless scalability, and simplifies innovation consumption.The release of FortiOS 7 dramatically expands the FortinetSecurity Fabric’s ability to deliver consistent security acrosshybrid deployment models consisting on appliances, softwareand As-a-Service with SASE, ZTNA and other emergingcybersecurity solutions.SERVICESFortiGuard Security ServicesFortiGuard Labs offers real-time intelligence on the threatlandscape, delivering comprehensive security updates acrossthe full range of Fortinet’s solutions. Comprised of securitythreat researchers, engineers, and forensic specialists, theteam collaborates with the world’s leading threat monitoringorganizations and other network and security vendors, as wellas law enforcement agencies.FortiCare ServicesFortinet is dedicated to helping our customers succeed, andevery year FortiCare services help thousands of organizationsget the most from their Fortinet Security Fabric solution. Wehave more than 1,000 experts to help accelerate technologyimplementation, provide reliable assistance through advancedsupport, and offer proactive care to maximize security andperformance of Fortinet deployments.4

DATA SHEET FortiGate 80E SeriesSPECIFICATIONSFORTIGATE 80EFORTIGATE 80E-POEFORTIGATE 81EFORTIGATE 81E-POEHardware SpecificationsGE RJ45/SFP Shared Media Pairs2222GE RJ45 Ports12—12—GE RJ45 PoE/ Ports—12—12GE RJ45 DMZ/HA Ports2222USB Ports1111Console (RJ45)1111Internal Storage——1x 128 GB SSD1x 128 GB SSDSystem Performance — Enterprise Traffic MixIPS Throughput 2450 MbpsNGFW Throughput 2, 4360 MbpsThreat Protection Throughput 2, 5250 MbpsSystem PerformanceFirewall Throughput (1518 / 512 / 64 byte UDP packets)4 / 4 / 4 GbpsFirewall Latency (64 byte UDP packets)3 μsFirewall Throughput (Packets Per Second)6 MppsConcurrent Sessions (TCP)1.3 MillionNew Sessions/Second (TCP)30,000Firewall Policies5,000IPsec VPN Throughput (512 byte) 12.5 GbpsGateway-to-Gateway IPsec VPN Tunnels200Client-to-Gateway IPsec VPN Tunnels2,500SSL-VPN Throughput200 MbpsConcurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode)200SSL Inspection Throughput (IPS, avg. HTTPS) 3135 MbpsSSL Inspection CPS (IPS, avg. HTTPS) 3135SSL Inspection Concurrent Session (IPS, avg. HTTPS) 395,000Application Control Throughput (HTTP 64K) 2900 MbpsCAPWAP Throughput (HTTP 64K)920 MbpsVirtual Domains (Default / Maximum)10 / 10Maximum Number of FortiSwitches Supported16Maximum Number of FortiAPs (Total / Tunnel Mode)32 / 16Maximum Number of FortiTokens500High Availability ConfigurationsActive / Active, Active / Passive, ClusteringDimensions and PowerHeight x Width x Length (inches)1.65 x 8.5 x 7Height x Width x Length (mm)42 x 216 x 178Weight2.65 lbs (1.2 kg)Form FactorInput RatingDesktop12Vdc, 3APower Required54Vdc, 2.78A100V AC / 0.25A,240V AC / 0.11A115V AC / 1.2A,230V AC / 0.6APower Consumption (Average/Maximum)18 W / 25 WHeat Dissipation85.3 BTU/hMaximum Current12Vdc, 3A54Vdc, 2.78APowered by External DC Power Adapter, 100-240V AC, 50/60 HzTotal Available PoE Power Budget*100V AC / 0.27A,240V AC / 0.12A115V AC / 1.2A,230V AC / 0.6A20 W / 137 W20 W / 72 W20 W / 137 W467.5 BTU/h92.1 BTU/h467.5 BTU/h110 W110 W* Maximum loading on each PoE/ port is 30 W (802.3at).Note: All performance values are “up to” and vary depending on system configuration.1. IPsec VPN performance test uses AES256-SHA256.2. IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured withLogging enabled.3. SSL Inspection performance values use an average of HTTPS sessions of different ciphersuites.54. NGFW performance is measured with Firewall, IPS and Application Control enabled.5. Threat Protection performance is measured with Firewall, IPS, Application Control andMalware Protection enabled.

DATA SHEET FortiGate 80E SeriesSPECIFICATIONSFORTIGATE 80EFORTIGATE 80E-POEFORTIGATE 81EFORTIGATE 81E-POEOperating Environment and CertificationsOperating Temperature32–104 F (0–40 C)Storage Temperature-31–158 F (-35–70 C)Humidity10–90% non-condensingNoise LevelFanless 0 dBA35 dBAOperating AltitudeFanless 0 dBA35 dBAUp to 16,404 ft (5,000 m)ComplianceFCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CBCertificationsICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPNORDERING INFORMATIONProductSKUDescriptionFortiGate 80EFG-80E14x GE RJ45 ports (including 1x DMZ port, 1x Mgmt port, 1x HA port, 12x switch ports), 2x Shared Media pairs (including 2x GERJ45 ports, 2x SFP slots)FortiGate 80E-PoEFG-80E-POE16x GE RJ45 ports (including 2x WAN ports, 1x DMZ port, 1x HA port, 12x PoE ports)FortiGate 81EFG-81E14x GE RJ45 ports (including 1x DMZ port, 1x Mgmt port, 1x HA port, 12 x switch ports), 2x Shared Media pairs (including 2x GERJ45 ports, 2x SFP slots),128 GB onboard storageFortiGate 81E-PoEFG-81E-POE16x GE RJ45 ports (including 2x WAN ports, 1x DMZ port, 1x HA port, 12x PoE ports). 128 GB onboard storage1 GE SFP RJ45 Transceiver ModuleFN-TRAN-GC1 GE SFP RJ45 transceiver module for all systems with SFP and SFP/SFP slots.1 GE SFP SX Transceiver ModuleFN-TRAN-SX1 GE SFP SX transceiver module for all systems with SFP and SFP/SFP slots.1 GE SFP LX Transceiver ModuleFN-TRAN-LX1 GE SFP LX transceiver module for all systems with SFP and SFP/SFP slots.Optional nUnified ThreatProtectionAdvanced ThreatProtectionASE 124x724x724x7FortiGuard App Control Service FortiGuard IPS Service FortiGuard Advanced Malware Protection (AMP) — Antivirus,Mobile Malware, Botnet, CDR, Virus Outbreak Protection andFortiSandbox Cloud Service FortiGuard Web and Video2 Filtering Service FortiGuard Antispam Service FortiGuard Security Rating Service FortiGuard IoT Detection Service FortiGuard Industrial Service FortiConverter Service SD-WAN Orchestrator Entitlement SD-WAN Cloud Assisted Monitoring SD-WAN Overlay Controller VPN Service Fortinet SOCaaS FortiAnalyzer Cloud BundlesFortiGuardBundleFortiGuard Labs deliversa number of securityintelligence services toaugment the FortiGatefirewall platform. Youcan easily optimize theprotection capabilities ofyour FortiGate with one ofthese FortiGuard Bundles.FortiCareFortiManager Cloud 1. 24x7 plus Advanced Services Ticket Handling2. Available when running FortiOS 7.0www.fortinet.comCopyright 2021 Fortinet, Inc. All rights reserved. Fortinet , FortiGate , FortiCare and FortiGuard , and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other productor company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and otherconditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaserthat expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, anysuch warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwiserevise this publication without notice, and the most current version of the publication shall be applicable.FG-80E-DAT-R28-20210312

1 FortiGate 80E Series FG-80E, FG-80E-POE, FG-81E, and FG-81E-POE The FortiGate 80E series provides an application-centric, scalable and secure SD-WAN solution in a compact fanless deskto