fortinet

Distributed Perimeters Require Security at Switching Speeds
Traditional perimeter security technologies have become obsolete in defending against today’s blended security threats. Using multiple attack vectors, these threats are increasing in volume and sophistication, leveraging every available network connection point to proliferate. Organizations with mobile or remote users are causing centralized security perimeters to transform into a “distributed perimeter, enabling new entry points for security threats. With so many network access points, it has become impossible to deploy a single point of network protection within an enterprise infrastructure.
Internal Segmentation Restraints
As networks grow, administrators aspire to segregate user-groups and applications such as VoIP into smaller security zones for improved security. Dividing the network with security segmentation points isolates security events, increases policy granularity, and protects sensitive information. Unfortunately most mid-range security devices lack the interface count or the raw throughput to facilitate extensive internal network security segmentation.
ASIC-Accelerated Multi-Threat Security Solution
The FortiGate-310B answers the call of growing mid-sized networks by integrating a purpose-built security processing ASIC, known as the FortiASIC Network Processor, designed to deliver security throughput at switching speeds. Eight hardware accelerated interfaces (expandable to 12) allow networks to enforce firewall policy between network segmentation points for layered security with switch-like performance. An additional purpose-built ASIC, known as the FortiASIC Content Processor, provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning for dangerous traffic streams. The inclusion of an Advanced Mezzanine Card (AMC) expansion slot allows for even more flexibility, offering additional ASIC-accelerated ports for additional throughput or disk-based storage for local logging and content archiving. With numerous accelerated multi-threat security interfaces, organizations can create multiple security zones for various departments, users, access methods, and even devices to enforce network security at accelerated speeds.

Feature and Benefits:

• Hardware Acceleration: Up to 12Gbps FW & 9Gbps VPN combined with 800Mbps IPS and AV acceleration ensures security is never a bottleneck
• Ten 10/100/1000 interfaces (expandable to 14):Facilitates numerous internal segmentation points throughout the network
• Modular Expansion: Flexible expansion options for four additional NP-accelerated ports or HDD for local logging and archiving
• Unified Security Architecture: Multi-threat protection from a single device increases security and lowers costs