The FortiGate Enterprise Firewall Solution

The FortiGate Enterprise Firewall Solution delivers end-to-end network security with one platform, one network security operating system and unified policy management with a single pane of glass — for the industry’s best protection against the most advanced security threats and targeted attacks.

One Enterprise Firewall Solution across the Extended Enterprise

The FortiGate family of network appliances represents the industry’s broadest range of enterprise firewall platforms. FortiGate is based on FortiASIC, a purpose-built integrated architecture that provides extremely high throughput and exceptionally low latency, while delivering industry-leading security effectiveness and consolidation which is routinely validated by independent real-world tests.

Fortinet Fortigate Firewall

Next-Generation Firewall

Fortinet’s award-winning network security appliances provide one platform for end-to-end security across your entire network. FortiGate next gen firewalls are optimized for internal segmentation, perimeter, cloud, data center, distributed, and small business deployments. Simplify your security posture with one security solution across your physical, virtual, and cloud deployments.

Fortinet next-generation firewalls are powered by, Security Processing Units (SPUs), AI-driven FortiGuard Labs and delivers industry-leading threat protection, unmatched performance that helps reduces, cost complexity, and risks.

Reduce Complexity

The Fortinet NGFW solution allows organizations to consolidate point products, achieving comprehensive threat protection and maximum return on investment (ROI).

Today’s data center is more than just the building where the servers reside. It’s a dynamic entity spanning both physical and virtual resources. The data-center model itself has evolved from one where hard-wired connections drew a direct line to a stand-alone system, to a utility model, where users log into resources via wireless connections and care little about the who, what, and where of the processing power they harness. While this has dramatically increased the productivity and flexibility of the users, who rely on computing access, it has turned security into the cyber version of “whack-a-mole”—with security professionals chasing new threats as they emerge from an expanding attack surface.

How practitioners view security has evolved as well. Security had long been thought of as an activity at the edge of the network. Protect the points of entry into the network, and you’ve done your job. But threats have changed in type and sophistication. Hackers penetrating the perimeter now roam the network for days or weeks, quietly searching for the right opportunity to breach critical data. This means the threat has expanded to the core of the data center, where data moves between trusted systems, behind the point products that may have failed to stop the intrusion at its point of entry.

At the core of the data center lies the network. In fact, some might argue that the network has become the data center. Virtualization and cloud have shifted compute resource into the realm of shared systems, connected to each other and the outside world dynamically. The data center itself now manifests as more of a fabric of connections than a physical space.

The FortiGate Enterprise Firewall Delivers Security To The Core Of The Network

FortiManager 200F

To meet today’s requirements, Fortinet has delivered the FortiGate series of Enterprise Firewalls for the Data Center. The FortiGate series provides options at multiple price points for scalable price/performance to address many use cases and is powered by the FortiOS Operating System, providing advanced threat intelligence. Designed for the most demanding levels of performance, purpose-built security processors deliver superior price/performance and match the demands of the new data center, without compromising latency for security. Available with multiple 100 GbE interfaces and throughput of more than 1 Tbps, the FortiGate also provides a fully redundant architecture to eliminate any single point of failure. Because a data-center firewall typically is deployed in the fastest portion of the network, dedicated processors are essential.

With analysts estimating that nearly 50% of the SSL traffic traversing the network contains hidden malware, the data center becomes vulnerable to threats moving secretly in encrypted data flows within the network. Mitigating this requires a solution which can handle inspecting the vast amounts of east/west traffic moving between systems, without impacting application performance. Also, security processors provide the power required to address SSL key exchange, IPS signature matching, and Suite B cryptography without a performance penalty.

The FortiGate series of data-center firewalls addresses the core functions any enterprise class firewall must deliver, including policy enforcement, application control services, and intrusion-prevention services. In addition, the FortiGate series provides granular policy control of users, devices, and applications, as well as SSL inspection and sandboxing, all at the network core.

Entry Level FortiGate Firewalls

FortiGate 20-50 Series

The FortiGate 20-50 series appliances deliver up to 2.5 Gbps of firewall throughput plus multiple, integrated 1 GE ports. This combination of performance, port density, and consolidated security offers an ideal platform for branch locations.

  • Fortinet FortiGate-30E Series
  • Fortinet FortiGate-30E-3G4G Series
  • Fortinet FortiGate-40F Series
  • Fortinet FortiGate-50E Series
  • Fortinet FortiGate-51E Series
  • Fortinet FortiGate-52E Series

FortiGate 60-80 Series

The new FortiGate 60E, powered by our latest SOC3 ASIC is now available!

FortiGate 60-80 series appliances deliver up to 4 Gbps of firewall throughput, plus multiple, integrated 1 GE ports. This combination of performance, port density, and consolidated security features offers an ideal platform for small and medium businesses as well as distributed enterprises.

  • Fortinet FortiGate Rugged-60D Series
  • Fortinet FortiGate-60D Series
  • Fortinet FortiGate-60E Series
  • Fortinet FortiGate-60E-DSL Series
  • Fortinet FortiGate-60E-DSL/J Series
  • Fortinet FortiGate-60E-POE Series
  • Fortinet FortiGate-60F Series – NEW!
  • Fortinet FortiGate-61E Series
  • Fortinet FortiGate-61F Series – NEW!
  • Fortinet FortiGate-70D-POE Series
  • Fortinet FortiGate-80E Series
  • Fortinet FortiGate-80E-POE Series
  • Fortinet FortiGate-81E Series
  • Fortinet FortiGate-81E-POE Series

FortiGate/FortiRugged 90 Series

Ideal for remote locations, customer premise equipment (CPE), retail or healthcare networks or industrial control systems

  • Fortinet FortiGate-90D-POE Series
  • Fortinet FortiGateRugged-90D Series
  • Fortinet FortiGate-94D-POE Series
  • Fortinet FortiGate-98D-POE Series

FortiGate Mid-Range Solutions

FortiGate 100-200 Series

FortiGate 100-200 series appliances are powered by our latest security processors and deliver high firewall throughput plus multiple, integrated 1 GE ports. This combination of performance, port density, and consolidated security is an ideal platform for mid-sized businesses and enterprise branch locations.

  • Fortinet FortiGate 100E Series
  • Fortinet FortiGate 100F Series NEW!
  • Fortinet FortiGate 100EF Series
  • Fortinet FortiGate 101E Series
  • Fortinet FortiGate 101F Series NEW!
  • Fortinet FortiGate 140E POE Series
  • Fortinet FortiGate 240D-POE Series
  • Fortinet FortiGate 280D-POE Series
  • Fortinet FortiGate 200E Series
  • Fortinet FortiGate 201E Series

FortiGate 300-500 Series

The FortiGate 300 – 500 series appliances deliver up to 16 Gbps of firewall throughput plus multiple integrated 1 GE ports. This combination of performance, port density, and consolidated security offers an ideal platform for enterprise branch locations.

  • Fortinet FortiGate 300E Series
  • Fortinet FortiGate 301E Series
  • Fortinet FortiGate 400E Series
  • Fortinet FortiGate 401E Series
  • Fortinet FortiGate 500E Series
  • Fortinet FortiGate 501E Series

FortiGate 600-900 Series

FortiGate 600 – 900 series appliances deliver up to 52 Gbps of firewall throughput plus multiple integrated 10 GE ports. This combination delivers an ideal solution as an internal segmentation firewall, as well as a perimeter NG firewall. It provides superior security and multi-gigabit speeds to protect specific parts of the internal network, plus the network edge.

  • Fortinet FortiGate 600D Series
  • Fortinet FortiGate 600E Series
  • Fortinet FortiGate 601E Series
  • Fortinet FortiGate-800D Series
  • Fortinet FortiGate 900D Series

FortiGate High-End Solutions

FortiGate 1000 Series

The FortiGate 1000 series delivers high throughput up to 80 Gbps and ultra-low latency. It has high-speed interfaces up to 10 GE with high port density, providing maximum flexibility and scalability.

  • Fortinet FortiGate 1000D Series
  • Fortinet FortiGate 1100E Series
  • Fortinet FortiGate 1101E Series
  • Fortinet FortiGate 1200D Series
  • Fortinet FortiGate 1500D Series
  • Fortinet FortiGate 1500DT Series

FortiGate 2000 Series

The FortiGate 2000 series of enterprise firewalls features our latest FortiASIC innovation and delivers uncompromised security and performance up to 152 Gbps. FortiGate 2000 series is designed for the enterprise looking to protect the edge and internal segments with superior SSL inspection and NGFW performance.

  • Fortinet FortiGate 2000E Series
  • Fortinet FortiGate 2500E Series

FortiGate 3000 Series

The latest FortiGate 3900E enterprise firewalls expand the 3000 series family. The FortiGate 3000 series gives you the highest performance on the market in a compact appliance form factor now with up to 1 Tbps throughput and ultra-low latency. FortiGate 3000 models are the only non-chassis security appliances on the market to support 40 GE and 100 GE connectivity—providing maximum scalability.

  • Fortinet FortiGate 3000D Series
  • Fortinet FortiGate 3100D Series
  • Fortinet FortiGate 3200D Series
  • Fortinet FortiGate 3400E Series
  • Fortinet FortiGate 3400E-DC Series
  • Fortinet FortiGate 3401E Series
  • Fortinet FortiGate 3600E Series
  • Fortinet FortiGate 3601E Series
  • Fortinet FortiGate 3700D Series
  • Fortinet FortiGate 3700D-DC Series
  • Fortinet FortiGate 3800D Series
  • Fortinet FortiGate 3800D-DC Series
  • Fortinet FortiGate 3960E Series
  • Fortinet FortiGate 3960E-DC Series
  • Fortinet FortiGate 3980E Series
  • Fortinet FortiGate 3980E-DC Series

FortiGate 5000 Series

Experience groundbreaking throughput and proven resilien

ce in even the most demanding carrier and enterprise data-center environments.

The FortiGate 5000 series integrates modular carrier-class hardware components with advanced FortiASIC acceleration and consolidated network security from the FortiOS Operating System to deliver up to 1 Tbps throughput.

  • Fortinet FortiGate 5001C Series
  • Fortinet FortiGate 5001D Series
  • Fortinet FortiGate 5001E Series
  • Fortinet FortiGate 5001E1 Series

FortiGate 6000 Series

The new FortiGate 6000 NGFW appliances feature the latest Fortinet innovation, to deliver leading edge security, performance, and connectivity for the most demanding network needs. The 6000 series combines unprecedented threat protection and SSL inspection performance in an easy to manage, compact appliance.

  • Fortinet FortiGate-6300F Series
  • Fortinet FortiGate-6301F Series
  • Fortinet FortiGate-6500F Series
  • Fortinet FortiGate-6501F Series

FortiGate 7000 Series

The FortiGate 7000E Series appliances are Fortinet’s high-end enterprise class chassis firewalls. Available in several different configurations to meet customer needs, the 7000E Series includes the latest 7030E, 7040E and the 7060E and offer simplicity and flexibility of deployment, with ultra-high NGFW and threat protection performance, capacity, and effortless scale to secure vast amounts of mobile and cloud traffic.

  • Fortinet FortiGate-7030E-QSFP28 Series
  • Fortinet FortiGate-7030E-SFP10G Series
  • Fortinet Fortigate-7040E-DC Series
  • Fortinet Fortigate-7040E-1 Series
  • Fortinet Fortigate-7040E-2 Series
  • Fortinet Fortigate-7040E-3 Series
  • Fortinet Fortigate-7040E-4 Series
  • Fortinet Fortigate-7040E-5 Series
  • Fortinet Fortigate-7040E-6 Series
  • Fortinet Fortigate-7040E-8 Series
  • Fortinet Fortigate-7040E-8-DC Series
  • Fortinet Fortigate-7060E-DC Series
  • Fortinet Fortigate-7060E-8 Series
  • Fortinet Fortigate-7060E-8-DC Series

FortiOS Operating System

FortiOS is a security-hardened, purpose-built operating system that is the software foundation of FortiGate multi-threat network security platforms. FortiOS software provides multiple layers of security for a variety of applications and content types, including Web, Email, FTP, IM/P2P, and NNTP. The main security features of FortiOS software include Firewall, Virtual Private Networking (IPSec and SSL VPN), Antivirus, Intrusion Prevention, Web filtering, and Antispam.

FortiOS 4.0 software redefines network security by extending the scope of integrated security and networking capabilities within the FortiGate multi-threat network security platforms. Regardless of the size of your organization, you can benefit from the most comprehensive suite of security and networking services within a single device on the market today.

In addition to the enterprise-class security features describe above, FortiOS 4.0 software also includes a wide range of features that increase your content and network security while reducing your operating and capital costs. FortiOS 4.0 software continues to deliver on its mission to enable secure business communications while offering the best security, performance, and total cost of ownership possible. The latest release now includes these features:

Antivirus/Antispyware

FortiOS gives you the choice of up to four options for protection from malware. In addition to three proxy-based antivirus databases, FortiOS also now includes a high-performance flow-based antivirus option. The new flow-based option scans files as they pass through the device, allowing you to scan files of any size and still maintain the highest levels of performance. By providing you the flexibility to choose your antivirus engine, you can balance your performance and security requirements for your environment.

Voice Security

Integrated VoIP security features give administrators the ability to enforce VoIP security in the mid-enterprise and distributed enterprise/ROBO/SOHO segments; providing additional security for organizations using an IP PBX, Unified Communication, and/or SIP trunking to lower costs and consolidate network infrastructure.

WAN Optimization

WAN optimization provides acceleration for applications traversing slower network connections – which are typically WANs. The combination of multi-threat security, traffic optimization, and VPN technologies provides cleaned, accelerated, and secured communications.

Application Control

Application control uses our dynamic application identification engine that recognizes applications based on their behavior. By coupling application control policies with sophisticated security features, administrators can achieve comprehensive protection with granular and more meaningful policies. With the latest release of FortiOS, options for traffic shaping can be applied to individual applications or categories of applications. Also, more statistics are available for analysis of application popularity and traffic/bandwidth utilization.

Data Loss Prevention (DLP)

DLP uses a sophisticated pattern-matching engine to identify then prevent the communication of sensitive information outside of the network perimeter. In addition, DLP technology also provides audit trails for data and files, which can aid in legislative compliance.

SSL Inspection

SSL inspection ensures protection from malware infection that secured protocols may camouflage. This allows the FortiGate to decrypt the data passing through the SSL-encrypted connection. Once decrypted, the data can be passed to FortiOS security engines for inspection.

Web Filtering

Fortinet’s web filtering dataset categorizes more than 57 million web sites into more than 75 categories and scores of subcategories to give network security managers simplified and optimized enforcement of acceptable use policies. FortiOS now supports the assignment of time-based quotas to users for each FortiGuard category and subcategory. For example, web browsing of entertainment sites could be permitted for a limited duration such as 30 minutes.