Get documents about "FGT3600DS
Document Sample
http://laptop1.blogbus.com/
FORTIGATE LARGE ENTERPRISE AND SERVICE PROVIDER SERIES
Best-of-Breed Network
Antivirus Protection
FortiGate™ Antivirus Firewalls are dedicated, hardware-
based units that deliver complete, real-time network
protection services at the network edge. Based on Fortinet’s
revolutionary FortiASIC™ Content Processor chip, the FortiGate platforms are the only systems that
can detect and eliminate viruses, worms, and other content-based threats without reducing
network performance — even for real-time applications like Web browsing. FortiGate systems also
include integrated firewall, content filtering, VPN, intrusion detection and prevention, and traffic shaping
functions, making them the most cost effective, convenient, and powerful network protection solutions available.
The FortiGate-3600 Antivirus Firewall is a high performance system that delivers gigabit throughput with exceptional
reliability for the most demanding large enterprise and service provider environments. Providing 6 gigabit interfaces,
the FortiGate-3600 establishes new levels of price/performance, and offers a complete array of antivirus, firewall, web
and email content filtering, VPN, network-based intrusion detection and prevention, and traffic shaping capabilities. The
FortiGate-3600 deploys easily in existing networks and can be used for antivirus and content filtering only or can be
deployed as a complete network protection solution. The FortiGate-3600 supports independent security zones and
policies mapped to VLAN tags enabling granular security configurations unique to each group or department. High
Availability (HA) operation and redundant hot-swappable power supplies ensure non-stop operation in mission-critical
applications. The FortiGate-3600 is kept up to date automatically by Fortinet’s FortiProtect™ Network, which provides
continuous updates that ensure protection against the latest viruses, worms, Trojans, and other threats – around the
clock, and around the world.
Product Highlights
• Optimal solution for Large Enterprise and Managed Security • Reduces exposure to threats by detecting and preventing 1300
Service Providers (MSSPs) different intrusions, including DoS and DDoS attacks
• Eliminates viruses and worms from email, file transfer, and • Active-active and active-passive high availability operation
real-time (Web) traffic without degrading network performance supports transparent failover for mission-critical applications
and clustering of up to 32 units
• Provides complete network protection functionality:
network-based antivirus, web and email content filtering, • VLAN and virtual domain support provides for granular network
firewall, VPN, network-based intrusion detection and preven- segmentation into zones with independent security and access
tion, and traffic shaping control policies
• “Transparent mode” operation supports highly available • Delivers superior performance and reliability from hardware
architectures and deployments for antivirus and content accelerated, ASIC-based architecture and redundant, hot-
filtering only in conjunction with existing firewall, VPN, swappable power supplies
intrusion detection and prevention, or other existing systems
• Automatically downloads the latest virus and attack database
• Real-time system status monitoring lowers the total cost of and can accept instant “push” updates from the FortiProtect
ownership by providing an easy graphical view of CPU and Network
memory utilization, network and session status, virus and
• Underlying FortiOS™ is ICSA-certified for Antivirus, Firewall, IPSec
intrusion detection
VPN and Intrusion Detection
This is trial version
www.adultpdf.com REAL TIME NETWORK PROTECTION
http://laptop1.blogbus.com/
FORTIGATE LARGE ENTERPRISE AND SERVICE PROVIDER SERIES
Key Features & Benefits
Feature Description Benefit
Network-based Antivirus Detects, quarantines, and eliminates viruses and Closes the vulnerability window by stopping
(ICSA Certified)
worms in real-time. Scans incoming and viruses and worms before they enter the
outgoing email attachments (SMTP, POP3, network
IMAP), HTTP and FTP traffic including web-based
email, and encrypted VPN tunnels – without
degrading Web performance
Dynamic Intrusion Detection and prevention of over 1300 intrusions Stops attacks that evade conventional antivirus
Detection and Prevention and attacks, including DoS and DDoS attacks, products, with real-time response to fast-
(ICSA Certified) based on user-configurable thresholds. Automatic spreading threats
updates of IPS signatures from FortiProtect
Network
Web Content Filtering Processes all Web content to block inappropriate Assures improved productivity for enterprise and
material and malicious scripts via URL blocking regulatory compliance for CIPA-compliant
and keyword/phrase blocking educational institutions
Firewall Industry standard stateful inspection firewall Certified protection, maximum performance
(ICSA Certified)
and scalability
VPN Industry standard PPTP, L2TP, and IPSec VPN Lower costs by using the public Internet for
(ICSA Certified) support private site-to-site and remote access
communications
Transparent Mode FortiGate units can be deployed in conjuction Easy integration/investment protection of legacy
with existing firewall and other devices to systems
provide antivirus, content filtering, and other
content-intensive applications
Remote Access Supports secure remote access from any PC Low cost, anytime, anywhere access for mobile
equipped with FortiClient Host Security software and remote workers and telecommuters
System Specifications
FortiGate-3600
User Definable Gigabit Ports
Keypad and Power & Console Serial 10/100 Ports 1-4 (Fiber) Internal, External
LCD Display Status Connection Management Port Ports (Copper)
Lights (Copper)
Redundant Redundant
Hot-Swappable Hot Swappable
Fan Assemblies Power Supplies
This is trial version
www.adultpdf.com REAL TIME NETWORK PROTECTION
http://laptop1.blogbus.com/
FORTIGATE LARGE ENTERPRISE AND SERVICE PROVIDER SERIES
Specifications FortiGate-3600 FortiGate-3600
Interfaces Email notification of viruses and attacks •
10/100Base-T Ports 1 VPN tunnel monitor •
1000Base-SX Ports (Fiber) 4*
1000Base-T Ports (Copper) 2 High Availability (HA)
Active-active and active-passive HA •
System Performance Stateful failover (FW and VPN) •
Concurrent sessions 1,000,000 Device failure detection & notification •
New sessions/second 25,000 Redundant power supplies (hot-swappable) •
Firewall throughput (Gbps) 4Gbps Link status monitor •
168-bit Triple-DES throughput (Mbps) 600
Unlimited concurrent users • Networking
Policies 50,000 Multiple WAN link support •
Schedules 256 DHCP client/server •
Route between zones •
Antivirus, Worm Detection & Removal Policy-based routing •
Scans HTTP, FTP, SMTP, POP3, IMAP,
and encrypted VPN Tunnels • System Management
Quarantine infected messages • Console interface (RS-232) •
Block by file size • WebUI (HTTPS), Command line interface •
Multi-language support •
Firewall Modes Secure Command Shell (SSH) •
NAT, PAT, Transparent (bridge) • FortiManager System •
Routing mode (RIP v1, v2) •
Policy-based NAT • Administration
Virtual domains Up to 250 Role-based administration •
VLAN tagging (802.1q) • Multiple administrators and user levels •
User/Group based authentication • Upgrades & changes via TFTP & WebUI •
H.323 NAT Traversal • System software rollback •
WINS Support •
User Authentication
VPN Internal database •
PPTP, L2TP, and IPSec • External LDAP/RADIUS database support •
Dedicated tunnels 8000 RSA SecurID •
Encryption (DES, 3DES, AES) • Xauth over RADIUS support for IPSec VPN •
SHA-1 / MD5 authentication • IP/MAC address binding •
PPTP, L2TP, VPN client pass though •
Hub and Spoke VPN architecture • Traffic Management
IKE certificate authentication (X.509) • DiffServ setting •
IPSec NAT Traversal • Policy-based traffic shaping •
Aggressive mode • Guaranteed/Maximum/Priority bandwidth •
Replay protection •
Dimensions
Dead peer detection •
Height / Width / Length 3.5 inches, 16.75 inches, 13.5 inches
Content Filtering Weight 17.5 lb (8 kg)
URL/keyword/phrase block • Rack Mountable •
URL Exempt List •
Power
Protection profiles 32
AC input voltage / current 100 to 240VAC / 6A
Blocks Java Applet, Cookies, Active X •
Frequency 50 to 60Hz
FortiGuard™ web filtering support •
Power Dissipation 460W max
Dynamic Intrusion Detection and Prevention
Environmental
Intrusion prevention for over 1300 attacks •
Operating Temperature 32 to 104 °F (0 to 40 °C)
Automatic real-time updates from
Storage Temperature -13 to 158 °F (-25 to 70 °C)
FortiProtect Network •
Humidity 5 to 95% non-condensing
Customizable detection signature list •
Anti-Spam Regulatory
Real-time Blacklist/Open Relay Database Server • FCC Class A Part 15 •
MIME header check • CSA/CUS •
Keyword/phrase filtering • CE •
IP address blacklist/exempt list • UL •
ICSA Antivirus, Firewall, IPSec, and IDS •
Logging/Monitoring
Internal logging hard drive 20G * Optional LX ports are available, please refer to model numbers
Log to remote Syslog/WELF server • FG-3600LX2 and FG-3600LX4 in the price list.
SNMP •
Graphical real-time and historical monitoring •
This is trial version
www.adultpdf.com REAL TIME NETWORK PROTECTION
http://laptop1.blogbus.com/
FORTIGATE LARGE ENTERPRISE AND SERVICE PROVIDER SERIES
Australia Hong Kong Taiwan
Level 17, 201 Miller Street Room 3206, 32/F 18F-1, 460 SEC.4
North Sydney 2060 Convention Plaza - Office Tower Xin-Yi Road
Australia 1 Harbour Road, WanChai Taipei, Taiwan, R.O.C.
Hong Kong
Tel: +61-2-8923-2555 Tel: +886-2-8786-0966
Fax: +61-2-8923-2525 Tel: +852-3171-3000 Fax: +886-2-8786-0968
Fax: +852-3171-3008
China United Kingdom
Cyber Tower, Suite B-903 Japan 1 Farnham Road
2 Zhongguancun Nan Ave. Kokusai Tameike Building 6F Guildford, Surrey GU2 4RG
Hai Dian, Beijing 100086 2-12-10 Akasaka, Minato-ku United Kingdom
China Tokyo 107-0052
Japan Tel: +44-(0)-1483-549061
Tel: +8610-8251-2622 Fax: +44-(0)-1483-549165
Fax: +8610-8251-2630 Tel: +81-3-5549-1640
Fax: +81-3-5549-1641 United States
France 920 Stewart Drive
69 rue d’Aguesseau Korea Sunnyvale, CA 94085
92100 Boulogne Billancourt 27th Floor USA
France Korea World Trade Center
159 Samsung-Dong Tel: +1-408-235-7700
Tel: +33-1-4610-5000 Kangnam-Ku Fax: +1-408-235-7737
Tech Support: +33-4-9300-8810 Seoul 135-729 Email: sales@fortinet.com
Fax: +33-1-4610-5025 Korea
Germany Tel: +82-2-6007-2007
Feringapark Fax: +82-2-6007-2703
Feringastrasse 6
85774 München-Unterföhring
Germany
Tel: +49-(0)-89-99216-300
Fax: +49-(0)-89-99216-200
Specifications subject to change without notice. Copyright 2004 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiASIC, FortiOS, and FortiProtect are trademarks of Fortinet, Inc.
DAT1200411
This is trial version
www.adultpdf.com REAL TIME NETWORK PROTECTION
