Fortinet FortiGate 3600 Security System

Description

The Following Information obtained from the Internet:

SOPHISTICATED

• Fortinet’s Dynamic Threat Prevention System provides advanced detection techniques combining stateful inspection, signature matching, deep packet inspection, full content reassembly and activity inspection using the industry’s only integrated threat correlation engine.POWERFUL
• Combine’s Steteful Firewall, Antivirus, Intrusion Prevention Systems, IPSec, SSL-VPN, Antispam, Web Content Filtering and FortiGuard Subscription Services in a single security solution.INTELLIGENT
• Proactive real-time detection for network-based threats; viruses, worms, trojans, spyware and other malicious content to ensure that the latest attacks are detected and blocked.Automated Security Services:FortiGate security systems are proactive against the latest threats. With the FortiGuard Subscription Services options, each Fo rtiGate system is automati- cally updated with the latest detection methods within minutes of their availability from Fortinet.

  FortiGate Subscription Services are provided through Fortinet’s global FortiGuard Distribution Network (FDN). FDN provides guar anteed 24 x 7 customer access with ten redundant high-speed centers around the world. Critical updates for attack signatures and detection en gines can be obtained in several ways to best suit the needs of every customer: .

• Automatically updates “pushed” from the FDN network to Fortinet products .
• Scheduled updates “pulled” from the FDN network based on the customer’s customized schedule .
• Immediate updates through “update now” functionFortiGuard security filtering services for Web Filtering and Antispam provide fully managed solutions to secure networks and users from non-authorized web sites and spam mail. With Fortinet’s award-winning graphical user interface, setting up web filtering and antispam services couldn’t be easier. Within minutes, customers can create sophisticated security policies leveraging Fortinet’s rich knowledge base to quickly reduce and eliminate non-business and potentially harmful web browsing and email messages.Key Features
• Industry proven multi-threat security architecture:Tightly integrated application security is ideal for protecting against complex blended threats, worms, viruses, trojans, spyware and identity theft attacks plaguing today’s organizations
• Automated updates of Antivirus and IPS signatures :Around the clock protection against the latest threats
• Easy to deploy and manage, network-based, ASIC appliance :Delivers gigabit performance to ensure the firewall does not become a network bottleneck
• Inspection of VPN (IPSec and SSL) content :Prevents virus outbreaks and vulnerability attacks from propagating through VPNs
• Lower deployment and management costs :Security zones and Virtual domains allows management of multiple customer and internal networks from a single easy-to-manage platform
• Support for emerging technologies, H323, SIP, IM, P2P :Flexible OS offers granular control of IM and VOIP applications
• Detailed logging and reporting tools :FortiAnalyzer and FortiManager are turn-key appliances that deliver extensive data reporting, event correlation and single console device management
• Flexible and scalable deployment modes, HA, NAT, Route, Transparent (bridge) mode :Allows for integration of network security into any network environment
• Robust dynamic routing protocol support, RIP, OSPF, BGP4 :he FortiGate-3600 easily integrates into fully-meshed network designs
• FortiGate-3600 Security SystemADVANCED REAL-TIME DATA SECURITY SOLUTIONS:
• Tightly integrated application security is ideal for protecting against complex blended threats, worms, viruses, trojans, spyware and identity theft attacks plaguing today’s organizations
• Around the clock protection against the latest threats Delivers gigabit performance to ensure the firewall does not become a network bottleneck
• Prevents virus outbreaks and vulnerability attacks from propagating through VPNs
• Security zones and Virtual domains allows management of multiple customer and internal networks from a single easy-to-manage platform
• Flexible OS offers granular control of IM and VOIP applications
• FortiAnalyzer and FortiManager are turn-key appliances that deliver extensive data reporting, event correlation and single console device management
• Allows for integration of network security into any network environment
• The FortiGate-3600 easily integrates into fully-meshed network designs
• Industry proven multi-threat security architecture
• Automated updates of Antivirus and IPS signatures
• Easy to deploy and manage, network-based, ASIC appliance
• Inspection of VPN (IPSec and SSL) content
• Lower deployment and management costs
• Support for emerging technologies, H323, SIP, IM, P2P
• Detailed logging and reporting tools
• Flexible and scalable deployment modes, HA, NAT, Route,
• Transparent (bridge) mode
• Robust dynamic routing protocol support, RIP, OSPFFORTIGATE-3600 SYSTEM SPECIFICATIONSDIMENSIONS
• Height :3.5 in
• Width :16.75 in
• Length 13.5 in
• Weight : 17.5 lb (8kg)POWER
• AC Input voltage / current 100 to 240VAC / 6A
• Frequency 50 to 60Hz
• Power Dissipation 460W max ENVIRONMENTAL REGULATORY FCC Class A Part 15 CSA/CUS CE, UL CERTIFICATIONS ICSA Antivirus, Firewall, IPSec and IDS NSS IPS Tested & Approved FIPS 140-2 Common Criteria EAL4+ FirewalREGULATORY FCC Class A Part 15 CSA/CUS CE, UL CERTIFICATIONS ICSA Antivirus, Firewall, IPSec and IDS NSS IPS Tested & Approved FIPS 140-2Common Criteria EAL4+ Firewall INTERFACES FGT-3600
• 10/100Base-T Ports ………………………………………………1
• 1000Base-SX Ports (Fiber)…………………………………… 4*
• 1000Base-T Ports (Copper)…………………………………….2SYSTEM PERFORMANCE
• Concurrent sessions………………………………………..1,000,000
• New sessions/second ……………………………………….. 25,000
• Firewall throughput (Gbps)……………………………………..4
• 168-bit Triple-DES throughout (Mbps) …………………….600
• Unlimited concurrent users ………………………………….. Yes
• Policies ………………………………………………………….. 50,000
• Schedules………………………………………………………….256ANTIVIRUS, SPYWARE, WORM & TROJAN PROTECTION
• Scans HTTP, SMTP, POP3, IMAP, FTP and encrypted VPN tunnels………………………………… Yes
• Quarantine infected messages………………………………. Yes
• Block by file size ………………………………………………… Yes
• IM File transfer scanning……………………………………… Yes
• DYNAMIC INTRUSION PREVENTION
• Protocol anomaly detection ………………………………….. Yes
• Comprehensive attack signatures ………………………….. Yes
• Customizable detection signatures…………………………. YesFIREWALL MODES:
• NAT, PAT, Transparent, Route modes……………………… Yes
• Policy based NAT……………………………………………….. Yes
• Virtual domains ……………………………………………… Up to 250
• Security Zones …………………………………………………… Yes
• User/Group-based authentication ………………………….. Yes
• Customizable protection profiles …………………………….200
• H.323/SIP NAT Traversal……………………………………… YesCONTENT FILTERING
• URL/keyword/phrase block…………………………………… Yes
• URL exempt list …………………………………………………. Yes
• Blocks Java Applet, Cookies, and Active X ………………. YesFortiGuard TM
• Web Content Filtering support…………….. Yes
• Automatic real-time updates…………………………………. YesVPN FGT-3600
• PPTP, L2TP, & IPSec…………………………………………… Yes
• Dedicated tunnels ………………………………………………5000
• Encryption (DES, 3DES, AES) ……………………………….. Yes
• SSL………………………………………………………………….. Yes
• SHA-1 / MD5 authentication…………………………………. Yes
• PPTP, L2TP, VPN client pass through …………………….. Yes
• Hub & Spoke VPN architecture …………………………….. Yes
• IKE certificate authentication (X.509)……………………… Yes
• IPSec NAT Traversal……………………………………………. Yes
• Aggressive mode………………………………………………… Yes
• Replay protection ……………………………………………….. Yes
• Dead peer detection……………………………………………. Yes
• VPN tunnel monitor…………………………………………….. YesANTISPAM
• RBL/ORDBS support…………………………………………… Yes
• FortiGuard Antispam support ……………………………….. Yes
• MIME header check……………………………………………. Yes
• Keyword/phrase filtering ………………………………………. Yes
• IP address blacklist/expempt list……………………………. YesLOGGING / MONITORING</b.
• Internal logging hard drive…………………………………….20G
• Log to remote Syslog/WELF server ………………………… Yes
• SNMP………………………………………………………………. Yes
• Graphical real-time & historical monitoring ……………….. Yes
• Email notification of viruses & attacks …………………….. YesNETWORKING FGT-3600
• DHCP client/server/relay………………………………………. Yes
• Route between zones ………………………………………….. Yes
• Policy-based routing……………………………………………. Yes
• VLAN tagging (802.1q)………………………………………… YesSYSTEM MANAGEMENT
• Console interface (RS-232) ………………………………….. Yes
• WebUI (HTTPS), Command line interface……………….. Yes
• Multi-language support ……………………………………….. Yes
• Secure command shell (SSH)……………………………….. YesFortiManager TM
• System ……………………………………….. YesADMINISTRATION
• Role-based administration……………………………………. Yes
• Multiple administrators and user levels …………………… Yes
• Upgrades and changes via TFTP & WebUI ……………… Yes
• System software rollback ……………………………………… YesUSER AUTHENTICATION
• Internal database ……………………………………………….. Yes
• External LDAP/RADIUS database support……………….. Yes
• RSA SecureID ……………………………………………………. YesXauth over RADIUS support for
• IPSec VPN ………………. Yes
• IP/MAC address binding………………………………………. Yes
• Windows Active Directory …………………………………….. YesTRAFFIC MANAGEMENT
• DiffServ support …………………………………………………. Yes
• Policy-based traffic shaping………………………………….. Yes
• Guaranteed/Maximum/Priority bandwidth ……………….. YesDYNAMIC ROUTING
• RIP v1, v2…………………………………………………………. Yes
• BGP4……………………………………………………………….. Yes
• OSPF……………………………………………………………….. Yes
• Static ……………………………………………………………….. YesNSTANT MESSENGER – ACCESS CONTROL
• AOL-IM …………………………………………………………….. Yes
• Yahoo ………………………………………………………………. Yes
• MSN ………………………………………………………………… Yes
• ICQ ………………………………………………………………….. Yes