Professional Documents
Culture Documents
Brochure
Trojans
IDS
categories, and a full array of services to support and
Content-Based Viruses
VPN extend the value of these core offerings. Unlike
Firewall
Lock & Key Connection-Based Intrusions competitors who only provide point products, Fortinet has
Physical Hardware created an innovative platform that incorporates all the
Theft
1970 1980 1990 2006 essential security applications and services required to
enable a safe and clean communications environment.
Fortinet delivers:
60000
· A proven approach to security
· Superior performance
40000
· Low total cost of ownership
0
2002 2003 2004 2005 2006
5000
4000
3000
2000
1000
0
2003 2004 2005 2006 2007 2008 2009
Year Founded
2000 provide cost-effective network-level systems the ability to stop malicious threats that are
Fortinet Products Feature non-signature based and previously unknown. This
and content-level protection at the
Headquarters More ICSA Certifications Than technology allows Fortinet to increase its detection
Sunnyvale, California
network core and edge with
real-time performance. Each Any Other Company capabilities against modern, zero-day attacks that are
Number of Employees member of the scalable, flexible designed to bypass traditional security defenses such as
750+ (300+ R&D)
FortiGate family is a dedicated, stateful firewalls and intrusion detection systems.
First Product Release easily managed system that delivers a full suite of best in Complete Security Solution
May 2002 class capabilities. Each system’s capabilities are supported
Fortinet understands the importance of a complete solution
by an industry leading eight (8) ICSA-certifications including
Market Leadership and offers customers robust logging and reporting through
8 Patents, 75+ Pending virus protection and content filtering, along with
its FortiAnalyzer™ and FortiReporter™ products,
15,000+ Customers network-level services including firewall, intrusion
Worldwide automated updates with four FortiGuard™ subscription
prevention, VPN and traffic shaping functions. Fortinet’s
update service offerings - FortiGuard Antivirus, FortiGuard
FortiClient software has ICSA-certifications for desktop
Milestones IPS, FortiGuard Web Filtering, and FortiGuard Antispam.
antivirus detection, antivirus cleaning, antispyware
For an even higher service level agreement, Fortinet offers a
January 2007 detection.
200,000+Units premium 3 hour Virus response time through the
Shipped Worldwide How We Do It FortiGuard Premier Service.
October 2006
With 20 patents pending, FortiGate appliances leverage
The company fills out its product portfolio by coordinated
Fortinet Ranked breakthroughs in chip design, networking, security and
Second Fastest
central management with FortiManager™ system and
content pattern recognition analysis. The unique,
Growing Company FortiClient™ software. FortiClient offers an additional layer
in Silicon Valley
ASIC-based architecture analyzes network content and
of protection for hosts at the edge of the network (either in
behavior in real-time, enabling all key network services —
the office or away from the office) through VB-100 certified
October 2005 including real-time Web applications — to be screened for
Fortinet Among software delivering client-based antivirus, spyware detection
both network and content-level threats without impacting
Top Five Fastest and removal, personal firewall, and VPN capabilities.
Growing Companies network performance.
Passing additional IPS testing with the world renowned NSS
in Silicon Valley
Fortinet Advantages Labs further attests to Fortinet’s leading edge technology
September 2005 and its ability to fully detect and stop modern network
Fortinet Establishes Better Value and Lowest Total Cost of Ownership
threats. With ICSA certification and NSS IPS testing as well
New Global Fortinet’s security systems, management and reporting
Headquarters as numerous industry accolades, customers are assured
products offer best in class choices for seven key security
that high industry standards are met and can feel confident
March 2004 components. In September 2004, IDC first named Fortinet’s
about the security solution they have chosen to implement
Fortinet Secures technology as the worldwide leader in the Unified Threat
$50 Million in
in their corporate and service provider networks.
Management (UTM) security category with more than 29%
Mezzanine Funding
market share. In August 2005, IDC again named Fortinet as
the UTM leader for the prior year.
Awards, Certifications, Wins - Fortinet Advantages Page
Fortinet.com/company/advantages.html
Damaging attacks to small and medium enterprise • Ability to provision more than one security service per platform,
businesses by worldwide attacks have grown from $3.3 helps significantly reduce both capital and operational expenses for
billion in 1997 to more than $12 billion today. Fortinet the Managed Security Service Provider
works with all sizes of MSSPs to limit the frequency, • Superior management capabilities with proactive reporting and
severity and sophistication of cyber-attacks for its logging options for thousands of individual customer premise
customer’s networks. In the U.S., there is growing equipment devices without forcing the MSSP to become a system
recognition that the Gramm-Leach-Bliley Act (GLBA) and integrator of multiple product or management platforms
the Health Insurance Portability and Accountability Act • No company-sponsored, competing security service providers –
(HIPAA) apply to a wide range of companies, large and unlike other competitors who have invested in this market bringing
small, who handle consumer financial or health care an inherent conflict of interest
data. • Multiple gigabit throughput to integrated customer premise
equipment including the FortiGate-100A at the customer site
UK-based banks need to meet the Basel II accord that
requires them to have three years of auditable data. • Multi-Threat Security Systems enable the MSSP to differentiate
FortiGate Multi-Threat Security Systems help MSSPs itself with best-in-class services while increasing service revenue
and reducing operating costs
rapidly deliver one or many high-value security services
provisioned from a single platform to SME/SMB customers
as well as large enterprise customers.
Branch corporate offices or smaller businesses require • Full advantage of best in class enterprise security feature sets
turnkey security solutions. Often these facilities leverage in a comprehensive branch office/small office platform that is
Managed Security Service Provider connectivity and intuitive, easy to deploy and use
benefit from an integrated customer premise equipment • Uncomplicated manageability helps small businesses who
solution found in FortiGate Multi-Threat Security often don’t have the big IT staffs
Systems. • ICSA-certified security feature set ensures the smaller office
These integrated platforms give small businesses the network leverages similar technology usually found only in larger
greatest flexibility and protection available in a modern point product enterprise security product
security platform. Fortinet’s award-winning technology is • Multi-Threat Security Systems offer smaller businesses a
consistent across its entire family of products and complete security feature set to defend their networks against all
provides the same leading edge protection regardless of vulnerabilities
company size (SOHO to SME to large enterprise to • No hidden costs – Fortinet’s attractive per box licensing offering
service provider). eliminates costly per user licensing capital and operational
management costs
2
Fortinet
Provides 24x7 Monitoring
and Controls Clients
Managed Devices
FW/AV/IPS/Web Filtering/Antispam/VPN
(CPE)
CUSTOMER A
INTERNET
Provides On-demand
Reporting for Clients
FG1000–FG5000
AV Firewall
FG50A–FG5000
(CPE)
Alert/Reporting Services
GUEST
WiFi USER Guest Access DMZ DNS
E-MAIL WEB
Guest Access FW, VPN, AV, IPS,
(VPN, FW, AV) ANTISPAM
802.1x
WPA
EMPLOYEE
Printer WKS WKS Servers WKS
WiFi USER
FortiClient Hosts FortiClient Hosts FortiClient Hosts
Employee Access (VPN, FW, AV)
(VPN, FW, AV)
Fortified By Fortinet > Stateful Firewall • Antivirus • Spyware Protection • Intrusion Prevention • IPSec Virtual Private Network • Web Content Filtering • Antispam • Bandwidth Shaping
Antivirus Gateway Detects and eliminates viruses, worms and spyware, in real-time. sun” and offers its customer base continuous virus signature
Scans incoming and outgoing email attachments (SMTP, POP3, updates using the global FortiGuard Distribution Network. As
IMAP) and all FTP and HTTP traffic including web-based email — indepently verified by AVTest.org, Fortinet has repeatedly been the
without degrading Web performance. Antivirus gateways close the first and fastest to develop antivirus signatures for new threats.
vulnerability window by stopping viruses and worms before they Fortinet systems are updated immediately through the FortiGuard
enter the network. Fortinet’s worldwide antivirus staff “follows the Distribution Network.
Intrusion Prevention Provides alerts based on a customizable database of more than signatures. Using the global FortiGuard Distribution Network,
1,400+ known attack signatures. FortiGate Multi-Threat Security FortiOS stops the most damaging attacks at the network perimeter
Systems stop attacks that evade conventional host-based regardless of whether the network is a wired, wireless, partner
antivirus systems, with real-time response to fast spreading extranet or branch office network connection. FortiASIC technology
threats. Fortinet’s worldwide IPS engineering teams “follow the also supports behavior-based heuristics adding valuable recognition
sun” and Fortinet offer its customer base real-time attack capabilities beyond simply matching content against known signatures.
Antispam Blacklisting of websites & domains, keyword scanning of emails Scanning looks deep into each email message to scan for
(each configurable on a per-user basis) and the ability to well-known spam content such as spam URL links. FortiGuard
leverage a dynamic scoring system using a number of criteria. Antispam Service utilizes Fortinet's own spam probes (located
Blacklist and whitelist support in the FortiGuard Antispam around the world) to attract spam email. This information is
subscription updates classify domains support, IP addresses, continuously updated to ensure accurate spammer lists and
and email addresses that can be blocked or added to the improves spam detection rates. Fortinet's FortiMail Secure
whitelist - maintained and updated on a per user basis or on a Messaging Platform leverages the FortiGuard Antispam service
corporate basis along with additional pending Fortinet updates to provide optimum configuration flexibility with enterprise-class
services. FortiGuard Antispam Service extends the capabilities antispam and antivirus features to secure mission critical email
of today's Real-Time Blackhole List (RBL) services by providing applications. Built on Fortinet's unique and award winning
a two-pass spam detection method. In addition to spammer FortiOS and FortiASIC technology, FortiMail's antivirus technology
IP Address comparisons, FortiGuard Antispam Service also extends full content inspection capabilities to detect the most
features Universal Resource Identifier (URI) Scanning. URI advanced email threats.
Web Filtering Processes all web content against known malicious URLs to block categorized content in 56 categories. FortiGuard services are
inappropriate material and malicious scripts including Java also user-customizable to allow corporate network URL
Applets, Cookies, and ActiveX scripts entering the network. Fortinet additions to prevent access to additional undesirable sites
categorizes more than 25 million domains and billions of web including phishing-target websites. Web content filtering
pages to ensure its customers steer clear of malware on the assures improved productivity for enterprise and regulatory
Internet. Fortinet’s FortiGuard Web filtering works dynamically with compliance for educational institutions including helping them
FortiGate systems providing automated updates with any newly become Children Internet Protection Act (CIPA)-compliant.
VPN Industry standard IPSec, SSL-TLS, PPTP, and L2TP-based VPN latency to easily extend the intranet or extranet across multiple
support provides secure communication tunnels between networks. FortiGate system VPNs lower network connectivity
networks and clients. Fortinet’s ASIC-accelerated VPN costs compared to alternatives like traditional leased lines or
capabilities allow enterprises to use the Internet as the public remote access servers. Unlike host-based VPN servers, FortiGate
infrastructure and a variety of specialized protocols to support VPNs offer gigabit server-to-server connection with no latency to
private communications through the Internet. FortiClient VPN easily extend the intranet or extranet across multiple networks.
authenticates users, encrypts data, and otherwise manage FortiGate system VPNs lower network connectivity costs compared
sessions. Unlike host-based VPN servers, FortiGate Multi-Threat to alternatives like traditional leased lines or remote access
Security VPNs offer gigabit server-to-server connection with no servers.
Traffic Shaping Fortinet’s traffic shaping helps users control network traffic in a limited resource, traffic shaping helps businesses prioritize
order to optimize or guarantee performance, low-latency, and/or and manage costly network services. When managed intelligently,
bandwidth. The FortiOS firmware offers packet classification, traffic shaping improves your latency, service availability and
queue disciplines, policy enforcement, congestion management, bandwidth utilization without any drawback due to lower priority
quality of service (QoS), and fairness. Since network bandwidth is bandwidth intensive multimedia or peer to peer network traffic.
4
Fortinet
Flexibility and Scalability for an Array of Real-World Deployments
Enterprise
FortiGate-1000A –
FortiGate-5000-Series
FortiGate-200A – FortiGate-800F
FortiGate-50B – FortiGate-100A
FortiGuard Subscription Services and New attacks are using more web-based content and malicious
web sites, the need to automate security defenses is becoming
Distribution Network
very clear. Solutions that rely on manual updates will not
Fortinet’s family of FortiGuard subscription services (Antivirus,
provide the latest defenses against this new breed of fast
Intrusion Prevention (IPS), Antispam, and Web Filtering) provide
spreading attacks. Fortinet’s family of FortiGuard subscription
customers with the latest security updates in real-time, at all
services coupled with FortiGate security systems and our global
hours, no matter where customers are located around the world.
FortiGuard Distribution Network offer the latest security defense
The FortiGuard Distribution Network has data centers around
signatures and updates around the clock to protect customers.
the world that are located in secure, high availability locations.
Like all other FortiGuard services, the rating databases for Web
filtering are constantly updated with new site ratings. With
millions of rated domains and several billion rated URLs,
FortiGuard Web Filtering offers superior accuracy and
application range to outperform traditional web filtering
technologies.
FortiGuard Subscription Services
FortiCare Support
6
Fortinet
Completing Our End-to-End Offering
Powerful Integration with Intelligent Product FortiMail
Extensions With the volume of spam approaching 30 billion messages
The FortiGate family of security appliances range in worldwide per day, corporate mail servers and user mailboxes
deployment sizes to meet network requirements of all sizes are becoming overwhelmed and are wasting corporate
and topologies. Additionally, Fortinet delivers a complete resources which decreases employee productivity. The need to
range of product extensions that enable network managers combat spam and ensure message integrity and hygiene is
to control, monitor, and operate networks simply and more important than ever. Fortinet's FortiMail Secure
powerfully. The powerful integration increases security Messaging Platform provides optimum configuration flexibility
protection, simplifies network management, and provides with enterprise-class antispam and antivirus features to secure
outstanding features and functions. mission critical email applications. Built on Fortinet's award
winning FortiOS and FortiASIC technology, FortiMail's antivirus
technology extends full content inspection capabilities to detect
FortiManager the most advanced email threats.
The FortiManager System is an integrated management Key Features
and monitoring tool that enables enterprises and service
• High performance hardened
providers to easily manage up to 5,000 FortiGate Antivirus
operating system with RAID
Firewalls. It establishes a central point for monitoring storage system
and maintaining security policies across multiple, dispersed
FortiGate installations. Multiple system administrators and • High accuracy and detection
hundreds of FortiGate units are supported. rates and Secure automatic updates
of AV signatures and detection
Key Features engine ensure the latest protection
• Real-time status and event monitoring speeds identification and against spam, viruses, worms, and
response to system outages or attacks other malicious attachments
• Powerful Role-based administration enables different • Offers Transparent Mode, Gateway
administrators to be restricted to specific management domains Mode and Server Mode functionality
and specific functions
• Email archiving, reporting and logging
• Policy Manager enables administrators to create and apply Complete
policies/rules to multiple FortiGate devices or groups automatically • Distributed secure antispam solution Content Protection
• Scheduled or manual peer back-up capabilities provides by layering with existing FortiGate
FortiManager database redundancy Antivirus Firewall devices, FortiGuard
Antispam Service, or other antispam
technology
FortiReporter
FortiReporter is a cost-effective, HTML browser-based
FortiClient
analysis, reporting and monitoring solution that generates To combat today’s latest security threats, defenses must be
easy-to- understand proactive reports from syslog messages applied at all different layers of the network. FortiClient
across all FortiGate platforms. offers mobile users, telecommuters, and home offices a
solid solution with three security functions — IPSec VPN
Client, Personal Firewall, and Antivirus with Spyware
detection and blocking. FortiClient provides the latest
FortiAnalyzer
security technology without requiring complex user
The FortiAnalyzer family of logging and reporting appliances involvement. VPN policies can be centrally managed and
securely aggregate and analyze log data from multiple pushed out to each client to simplify user setup and
FortiGate Antivirus Firewalls. The systems provide network connectivity.
administrators with a comprehensive view of network usage
Key Features
and security information, disparately located throughout the
enterprise. They minimize the effort required to monitor and • Personal firewall and antivirus components provide application
monitoring, zoning, and registry monitoring to detect known
maintain acceptable use policies, to identify attack patterns
and unknown threats
and prosecute attackers, and to comply with governmental
regulations regarding privacy and disclosure of security • Protects mobile users when they can’t be protected by corporate
security resources
breaches.
• High value solution with IPSec VPN
Key Features
• Scalable capacity with logging for up to 100 FortiGate Antivirus
Firewalls in a single FortiAnalyzer unit Complete Content Protection (CCP) Solution
• Network capacity and utilization data enables network
administrators to plan and manage networks more effectively
Bundles
• Supports compliance with HIPAA and other data/customer
In addition to the product extensions described above,
privacy regulations Fortinet simplifies ordering and support. For selected
FortiGate appliances, a complete content protection
package can be ordered that includes FortiGuard
subsciptions for antivirus, IPS, Web filtering, and antispam,
plus FortiCare technical support.
8 Fortinet
COMMON CRITERIA
EAL 4+ CERTIFIED
5 out of 5
WWW.FORTINET.COM
©2005-2007 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiOS, FortiAnalyzer, FortiASIC, FortiLog, FortiCare, FortiManager, FortiWiFi,
FortiGuard, FortiClient, and FortiReporter are trademarks or registered trademarks of the Fortinet Corporation in the United States and/or other
countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Licensed under U.S.
Patent No. 5,623,600. Although Fortinet has attempted to provide accurate information in these materials, Fortinet assumes no legal responsibility
for the accuracy or completeness of the information. Please note that no Fortinet statements herein constitute or contain any guarantee, warranty
or legally binding representation. All materials contained in this publication are subject to change without notice, and Fortinet reserves the right to
change, modify, transfer, or otherwise revise this publication without notice. BRO101 0307 R5