fortinet

Overview:

UTM Evolution:

The evolution of network security threats has driven the expansion of security products to include multiple threat recognition systems within a single appliance. Unified Threat Management systems from Fortinet include firewall, VPN, intrusion prevention, antivirus, antimalware, antispam and web content filtering to identify numerous types of threats from a single device. While the ease of use of UTM products has created a prolific adoption trend, administrators still struggle with limited physical deployment options due to the available throughput and port density of mid-range devices.

Perimeter Dissemination:

Over time, as network devices and user habits have evolved, networks experienced a dissemination of the classic perimeter that had previously surrounded and protected their networks. The mobility offered by laptops and more recently, WiFi-enabled smart phones, have introduced security threats from the access layer, where LAN-side users connect to the network. The ideal network security solution would offer line rate throughput on numerous ports to facilitate the segmentation of the LAN into individual security zones, offering granular security policies, the isolation of security events, and increased visibility into network traffic and events.

ASIC-Accelerated Multi-Threat Security Solution:

The FortiGate-620B answers the call of growing enterprise networks by integrating a purpose-built security processing ASIC, known as the FortiASIC Network Processor, designed to deliver security throughput at switching speeds. Sixteen hardware accelerated interfaces (expandable to 20) allow networks to enforce firewall policy between network segmentation points for layered security with switch-like performance. An additional purpose-built ASIC, known as the FortiASIC Content Processor, provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning for dangerous traffic streams. The inclusion of an Advanced Mezzanine Card (AMC) expansion slot allows for even more flexibility, offering additional ASIC-accelerated ports for additional throughput or disk-based storage for local logging and content archiving. With numerous accelerated multi-threat security interfaces, organizations can create multiple security zones for various departments, users, access methods, and even devices to enforce network security at accelerated speeds.

Features & Benefits:

Hardware Acceleration: Up to 20 Gbps FW & 15 Gbps VPN combined with 1Gbps IPS and 250 Mbps AV acceleration ensures security is never a bottleneck

Twenty 10/100/1000 interfaces (expandable to 24): Facilitates numerous internal segmentation points throughout the network

Modular Expansion: Flexible expansion options for fouradditional NP-accelerated ports or HDD for local logging and archiving

Unified Security Architecture: Multi-threat protection from a single device increases security and lowers costs

Technical Specifications: