Education

Fortinet's FortiGuard Web Filtering Subscription Service has been extensively developed to help our customers attain compliance with HR4577 by offering a hosted service that provides Web URL filtering for schools, libraries, government agencies, and enterprise businesses of all sizes.

The Internet has increased students' exposure to many valuable and useful sources of information; unfortunately, however, it has also made it easy to access inappropriate or illegal content and to utilize campus networks for non-educational pursuits.

• Access to inappropriate content and exposure to potential liability
• Intrusions into academic record and exam data-stores
• Utilization of campus networks for illegal content sharing
• Propagation of viruses, worms and other content-based threats
• Reduction in performance of key academic applications due to use of campus networks for bandwidth-hungry applications

These issues have placed an enormous strain on all resources that are associated with the maintenance or support of campus computing systems and networks. For example, maintaining host-based Antivirus software on every desktop and laptop is extremely difficult in dynamic academic environments. This is especially challenging with student-owned computers that connect to the campus network but are not under the control of the institution's IT administrators.

In addition, many of today's threats propagate via Web applications, and therefore can easily bypass email-centric defenses against content-based threats. While numerous products are available today that can be used to filter inappropriate content, eliminate viruses and worms, detect network intrusions and prevent access to critical computing assets, the cost of procuring and managing multiple, independent systems stretches the budget limitations of most educational institutions.

Fortinet Offers:

• Protection from viruses, worms and intrusions
• Secure connectivity between remote locations and the network
• Protection from inappropriate content and compliance with regulatory norms
• Maximization of bandwidth and other network resources
• Protection of administrative resources and students from hackers
• TCO related issues such as ease of maintenance and updating, maximization of performance, and leveraging capital and expense budgets

Fortinet's FortiGate™ Antivirus Firewalls address the key network protection needs of educational institutions. Fortinet's ASIC-powered systems scan email, Web and file transfer content at the network edge and in real time - protecting the educational network from viruses, worms and other inappropriate and malicious content before it can enter the network. In addition, every FortiGate system includes built-in intrusion detection, intrusion prevention, firewall, VPN and traffic shaping functionality in one easy to install, maintain and update unit.

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

Financial Services / Real Estate

Any organization handling consumer financial data have the additional challenge of being compliant with security and privacy regulations imposed by the Gramm-Leach-Bliley Act (GLBA). Companies that handle such data — for example, accountants, auto dealers and travel agents — may not be aware that these regulations, previously applicable to traditional financial institutions, apply to them as well. As a result, a wide range of companies that have relationships with other companies where consumer financial data is exchanged are essentially responsible as "financial institutions" for compliance with GLBA regulations.

Starting in May 2005, auto dealers, accountants, travel agents and other businesses not previously subject to GLBA regulation were identified as "financial institutions" and therefore required to come into compliance or face fines up to $11,000 per day from the Federal Trade Commission.

Next generation network security products, including the FortiGate Antivirus Firewalls, are available that help protect the corporate network at its continually changing perimeter, by identifying and preventing malicious blended security threats coming from both external and internal sources. Security platforms using ASIC engines can go well beyond traditional network protection provided by traditional firewalls and stand-alone Intrusion Detection Systems (IDS), and protect the network from both viral and worm-based attacks propagated via email and web traffic. Protecting the business network and infrastructure is critical for ensuring the security and privacy of consumer financial data and bringing an organization into compliance with GLBA regulations.

Fortinet's FortiGate™ Antivirus Firewalls address the key network protection needs of financial institutions. Fortinet's ASIC-powered systems scan email, Web and file transfer content at the network edge and in real time - protecting the educational network from viruses, worms and other inappropriate and malicious content before it can enter the network. In addition, every FortiGate system includes built-in intrusion detection, intrusion prevention, firewall, VPN and traffic shaping functionality in one easy to install, maintain and update unit.

Fortinet systems are deployed throughout the world in financial services environments, in addition to e-commerce and business to business partnerships, including the following:

• Overstock.com
• Citizens Bank
• Clarington Funds
• Asia Commercial Bank (Hong Kong)
• Daewoo Capital (Korea)
• AIG Hawaii
• Ionis Pension
• KGI Securities (Thailand)
• Technology One (Australia)

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

Government

National and regional governments worldwide have found their networks under increased threat from today's more sophisticated cyber-attacks. Traditional "layer-3" or deep-packet inspection firewall and VPN technologies, as deployed over the last several years in almost every government network, clearly lack the intelligence and capability to detect and prevent application level, blended and content-based attacks in the rapidly changing Network Centric world.

Fortinet's FortiGate appliances provide essential "next-generation" security protection that fully integrates true "best-of-breed" technologies to deliver comprehensive network and application-level protection capable of stopping today's more sophisticated attacks.

With uniquely designed government features, Fortinet delivers network security with the necessary speed, mobility, situational awareness, and integrated command and control needed by all levels of government.

Fortinet has proven tactical and traditional deployments in the U.S. Department of Defense, civilian and intelligence community networks along with the certifications and contracts necessary to support you're network security needs.

If you're in the business of protecting government networks, then Fortinet should be at the top of your consideration list.

• Community of Interest Protection (COIP)
  Provides distinct manageable physical and virtual separation of various trusted and untrusted enclaves or communities of interest, whether network or host based across broad multi-agency network architectures.
• Insider Threat Prevention Systems -- (ITPS)
  Applies layered defense-in-depth security policy to all data - simultaneously protecting both "trusted from untrusted" and "trusted from trusted" enclaves from each other with Fortinet's multi-threat defense architecture. Supports Network and Host deployments.
• Theater Operational Management
  Deploys enterprise wide security policy, providing automated personnel security privilege - moves, adds & changes. Dynamically mapped security associations, content security logging, reporting and management with change analysis for the Network Centric Warfare models.
• Emergency Policy Management
  Delivers real-world capability to dynamically map INFOCON defense posture to THREATCON physical posture in a pre-defined emergency response form across a theater of operation.
• FortiGuard Subscription Service
  Real Time FortiGuard IDP, IPS, Content Filtering, Antivirus and Anti-SPAM updates direct from Fortinet without the multi-vendor lag-time associated with piecemeal offerings
• SAVE (Secure & Accelerated VoIP Environment)
  Provides stateful encrypted protection for VoIP traffic and call centers throughout an enterprise.
• Dual Stack IPv4 & IPv6 Support
  Meets and exceeds U.S. Federal Government Policy.
• Federal NIAP Certification Support
  Common Criteria EAL4 Plus Certified.
• Federal NIST Certification Support
  FIPS 140-2, Level 2 Certified.
• Industry Certification
  ICSA Certified for IPSec, SSL, AV, IDP and Firewall guaranteeing integration with legacy network products

Top Products for Government

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

HealthCare

Healthcare organizations and their business partners are required to invest in the security systems and processes that will ensure the integrity of their patients' private data. The challenge for healthcare organizations is to provide adequate protection, at reasonable cost, without compromising the convenience or performance of their professional services. Several requirements need to be addressed, including:

• Ensuring that patient records are stored and transmitted in an encrypted form.
• Ensuring that the healthcare organization's internal IT systems cannot be easily compromised by network intruders.
• Ensuring that any potential compromises of the IT infrastructure can be completely documented and reported.

Click to View Larger

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

Manufacturing

As global companies increasingly rely on e-business to gain competitive advantage, they are more and more relying on networked supply-chain management and Internet trading communities that offer manufacturers efficient means to build an extended enterprise. Because sensitive, business-critical information flows through VPNs in and out of the corporate network, gateway security at the central data center level, as well as network perimeters, is required to prevent harmful virus, worm and intrusion attacks.

"We needed a lot of functionality that the Linux-based firewall could not easily provide. We had to implement more De-Militarized Zones (DMZ) behind the firewall, bring in antivirus capabilities at the edge of the network and setup an effective intrusion detection system."

Debanjan Dutta
Head of IT for Crompton Greaves

Retail

Retail business operations increasingly rely on the network as the backbone of key operations and applications including inventory control and POS (point of sale) applications. The problem in securing retail networks and networked applications is usually a lack of IT staff, geographic support, and costly downtime on a per minute basis.

Retail networks are no longer an option as today's independent stores face increased competition from both their brick-and-mortar competitors and from online services. To remain competitive, retail networks serve multiple store sites and offer support for new networked applications including self-help kiosks and online financial transaction information.

Consumer purchase information gathered from wired cash registers, wireless point of purchase displays and other devices needs robust security and protection 24 hours a day, 7 days a week, 365 days a year.

Click to View Larger

With a best in class suite of security applications that can easily be integrated, FortiGate Antivirus Firewall systems offer retail operations a cost-effective way to provide additional functionality to their existing software or host-based security systems or a new comprehensive security solution for their unique and distributed business needs.

All FortiGate systems are ASIC-accelerated hardware platforms located at the network gateway to scan email, Web and file transfer content at the network edge and in real time - protecting the retail network from viruses, worms and other inappropriate and malicious content before it can enter the retailer's network.

In addition, every FortiGate system includes built-in seven security functions including antivirus, intrusion detection and prevention, firewall, VPN and traffic shaping functionality in one easy-to-install, maintain and update unit. Ease of deployment, accompanied by the full set of features offered by the FortiGate systems make managing and protecting multiple retail locations a hands-off experience.

A Few of the Retail Industry Companies that rely on Fortinet for Network Protection:

• Jenny Craig
• Overstock.com
• Brookstone Company
• Shiseido Cosmetics
• Foster Farms
• JCPenny Purchasing
• Pierre Lang
• Honda Korea
• PizzaExpress

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

AntiSpam

Fortinet's FortiMail systems are optimized for enterprise customers, delivering a wealth of reliable and high performance features to detect, tag, quarantine and block spam messages and their malicious attachments. Quick installation with low maintenance overhead combined with Fortinet's award winning administration interface guarantees ease-of-use with a low cost of ownership making FortiMail appliances the most powerful and affordable enterprise-class email security systems available today.

• High Performance, hardened appliance with configurable RAID storage
• FortiGuard Antispam utilizes multiples spam detection methods
• Cost-effective per device Antivirus and Antispam subscription
• FortiGuard Antispam offers simple setup
• Full-featured email server capabilities
• Tri-mode functionality, Gateway, Transparent, Server
• Integrated industry-leading antivirus scanning
• Detailed logging and customized reporting

Medium Enterprise

Utilizing the FortiMail integrated Antispam and Antivirus security features, small-sized organizations can cost effectively fight spam without the need to deploy additional servers. All that is needed for organizations to take advantages of FortiGuard's™ in-the-cloud service along with six additional Antispam features is to enable the corresponding options on the FortiMail appliance. Fortinet's per device Antispam and Antivirus subscription services are much lower than competitive offerings which license their services on per user basis.

Large Enterprises with Multiple Mail Relays

FortiMail appliances deliver advanced antispam protection for large enterprises with multiple mail servers. Deploying multiple FortiMail appliances as mail transfer agents scales email performance for busy enterprises. Utilizing DNS MX weighted queuing provides redundancy allowing for fail over and load balancing of spam and antivirus scanning when running in gateway mode.

MSSP Managed Security Services

Service providers can take advantage of FortiMail integrated Antispam and Antivirus protection to create a two-tiered, layered security design. Authentication servers (LDAP, RADIUS, IDAP, POP3, SMTP, IMAP) are deployed for user and domain authentication. Each email domain managed by the MSSP flows through the FortiMail which has unique policies per domain. Performance scales by adding additional FortiMail units in gateway mode/transparent mode.

Small / Home Office Antispam Solution

Fortinet's SOHO models provide a cost effective Antispam security solution offering the same key security features found on the high end enterprise class systems. The FortiMail's ease of installation and management delivers set-and-go installations.

AntiVirus

Fortinet's Advanced Antivirus technology uses a combination of both signature and heuristic detection engines to provide multi-layered, real-time protection against a multitude of attacks at the desktop and the network gateway. Ultra-high system performance is achieved using the integrated FortiASIC processor together with Fortinet's patent-pending technology known as CPRL or Content Pattern Recognition Language to accelerate both virus scanning and anomaly recognition.

• Scalable performance and models from SOHO to multi-gigabit antivirus protection
• ASIC-based hardware design
• Automatic updates of antivirus signatures
• Inspects SMTP, POP3, IMAP, FTP and HTTP
• Inspection of VPN (IPSec and SSL) content
• Bi-direction content filtering
• Compressed file format support: tar, gzip, rar, lzh, iha, cab, arj, zip
• Centralized management and reporting of thousands of FortiGate systems
• Transparent, NAT and Route modes

MSSP Core Network Security

Deployed at the core of large enterprise or service provider to block viruses attached to email, web and FTP traffic from entering or leaving the network. Utilizing policy-based routing or content-switching can deliver scalable, multi-gigabit performance by redirecting specific traffic to a FortiGate security appliance for advanced scanning. This deployment configuration also eliminates many of the inline deployment concerns.

Outbreak Containment

Deployed as part of a layered security design, FortiGate best-of-breed security systems provide application-layer protection against content-based threats that may bypass the gateway firewall.

DMZ Protection

Deployed to protect public facing web, FTP and Email servers deployed on DMZ segments of your existing firewall. Fortinet Advanced Antivirus technology detects and blocks virus infections at a fraction of the cost of traditional server software without impacting server performance by offloading virus scanning overhead.

Edge Protection

Deployed as the network security gateway, a single FortiGate security system can secure multiple DMZ's along with the corporate network from viruses and other content-based attacks. Fortinet's security zone and virtual domain features offer a lower total cost of ownership to enterprises needing to secure multiple networks.

Content Filtering

Surfing the Internet has become a critical part of conducting business, however inappropriate Internet usage has led to lower productivity, inappropriate use of company resources, harassment, legal liability, and human resource issues. Fortinet's FortiGuard Web Filtering Service regulates and provides valuable insight into all Web activities allowing customers to meet new Government Regulations, HR Policies & Corporate Internet Usage Policies. Fortinet's Web Filtering Solutions are also CIPA certified. The Children's Internet Protection Act (CIPA) is a federal law enacted by Congress in December 2000 to address concerns about access in schools and libraries to the Internet and other information.

• Industry-leading ratings database
• Extensive and granular ratings database
• Cost effective per-device subscription
• URL database is updated constantly
• CIPA certified
• Simple setup, fully-integrated with all FortiGate security systems
• Integrated industry-leading antivirus scanning
• Scalable and stable high-speed database infrastructure

Enterprise Web Filtering

Fortinet's industry-leading FortiGuard™ Web Filtering Service offers enterprises of all sizes an easy to deploy and cost effective solution to control access to inappropriate web sites that may expose businesses to potentially liable material, jeopardize network security and consume valuable bandwidth. FortiGuard-hosted web filtering maintains the largest URL database in tech industry with over 25 million rated web sites, 76 categorized, and 6 classes ratings.

As part of the database, FortiGuard can block access to security risk sites such as P2P, phishing and spyware web sites. In addition, Fortinet's per device subscription model offers significantly lower costs than competing vendors who offer per-user licensing for web filtering.

K-12 CIPA Certified Web Filtering

School districts deploy FortiGuard Web Filtering to meet federally mandated CIPA requirements to filter Internet usage. FortiGuard's industry leading Web Filtering database and very granular categorized ratings are ideal in allowing administrators to apply very specific web access policies to groups of users.

Managed Security Service Providers

Today, many Small Medium Enterprises (SME's) are looking forward MSSP's to provide a one-stop solution for their networking security needs. MSSP's can deploy Fortinets Web Filtering technologies to provide web filtering capabilities for SME's wishing to control access to inappropriate web sites that may expose businesses to potentially liable material, jeopardize network security and consume valuable bandwidth.

CIPA Certified Web Filtering for Libraries

To meet the Internet filtering requirements of CIPA, libraries can leverage Fortinet's industry leading CIPA compliant FortiGuard Web Filtering service. Unlike competing web filtering products which require a standalone server to be installed, enabling FortiGuard Web Filtering is as simple as enabling the feature on the FortiGate system.

Firewall

Fortinet's industry-leading FortiGate security systems delivers unmatched integrated security capabilities, ease of use and price/performance. Along with the stateful firewall, FortiGate system's use an arsenal of integrated application security engines to quickly identify and block today's blended attacks such as SoBig and Netsky from infecting the networks it protects.

In addition, Fortinet's scalable product line offers FortiGate models to fit any network size with key security features such Stateful Firewall, VPN, Antivirus, IPS, Web Content Filtering, Antispam and Traffic Shaping available on all models. Fortinet's FortiManager™ and FortiAnalyzer™ turn-key appliances provide centralized management of thousands of FortiGate systems and detailed reporting capabilities for internal auditing and event correlation.

• ASIC-accelerated hardware and purpose-built secure OS
• Application-level security
• Virtual security domains and security zones
• Enterprise-tested high availability
• Security zones and policy-based configuration
• VoIP aware gateways
• Dynamic routing protocols, RIP, OSPF, BGP
• Detailed logging and reporting

Enterprise and Branch Office Firewall

Fortinet's industry-tested FortiGate Firewalls meet enterprise requirements for scalability, performance and reliability. Advanced security capabilities such as integrated Antivirus, IPS Antispam and URL filtering along with high-availability, wire-speed performance, and security zones are available on all FortiGate Models. In addition, Fortinet's wide breadth of FortiGate models offers a device to fit into any sized network while Fortinet's FortiManager™ system provides a single interface to centrally manage and easily deploy thousands of FortiGate systems.

Multi-Store Retail Deployments

FortiGate security systems offer retail customers a cost-effective solution to meet their unique business needs by securing applications such as POS (Point of Sale), inventory applications and online financial transactions, while Fortinet's ASIC-based, purpose built design delivers the reliability and application security needed by retailers to avoid costly network downtime. In addition, the FortiGate system's ease of deployment, accompanied by the full set of security features offered by every FortiGate system make managing and protecting multiple retail locations a turn key solution.

MSSP Managed Firewall Service

MSSP's are increasingly turning to Fortinet's industry leading FortiGate security systems to deliver integrated security services to customers in an efficient and cost effective manner. Fortinet's Security zones and Virtual Domains provide a perfect platform on which to build a managed security service. Also with Fortinet's FortiManager centralized management and FortiAnalyzer™ centralized reporting server, MSSPs can now lower their maintenance and provisioning overhead by using a single console to manage and ease deployment of thousands of FortiGate systems.

SoHo DSL/Cable Deployment

Fortinet's easy-to-deploy and easy-to-manage security systems deliver exceptional value and performance for securing a home office and small business network. FortiGate installation wizards enable installations to be up and running within minutes.

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

IPS

Fortinet offer a scalable and easy to deploy line of FortiGate IPS security systems that can be installed seamlessly at the network edge or as an IPS solution deployed at the network core to protect critical business applications from external as well as internal originating attacks. In addition, with Fortinet's SOHO and SME FortiGate models, security administrators are now able to cost-effectively deploy the same level of IPS protection at branch offices that in the past was only available for the corporate headquarters.

By tightly integrating industry leading security technologies IPS, Antivirus, Antispam and Stateful Firewall, Fortinet delivers the best-in-class security available for enterprises and service providers to combat the complex blended threats that use multiple methods to infect hosts and self-propagate.

• ASIC-based hardware design
• Automatic updates of IPS signatures
• User-defined custom IPS signatures
• Inspection of VPN (IPSec and SSL) content
• Bi-directional IPS content filtering
• Signature and protocol anomaly engines
• Detailed logging and reporting
• Support for 50+ protocols and applications

IPS Deployment

Deployed in conjunction with an existing firewall, the FortiGate™ IPS system is deployed in the traffic path inspecting incoming and outgoing packets for malicious and malformed content. The FortiGate system's highly accurate IPS engine and high availability (HA) configuration ensures maximum availability of network resources.

Network Core and Branch Office IPS

Fortinet's flexible architecture and scalable product line allows for network core deployments to protect against external and internal attacks while the FortiGate system's extensive product line allows security administrators to cost effectively deploy IPS protection to smaller branch offices. FortiManager™ centralized management delivers a single console interface to manage thousands of FortiGate systems.

Enterprise with IPS Bypass

Fortinet's FortiBridge™ option offers enterprises fail-open protection for FortiGate systems deployed inline in transparent mode. The FortiBridge device's zero-power fail open technology means that the FortiBridge unit will also fail open in the event of a complete power failure.

IDS Deployment

For traditional IDS deployments, the FortiGate system's flexible architecture supports monitoring of traffic from a network tap or mirrored interfaces from the core switch. The FortiGate system can generate detailed traffic logs and alerts for analysis and auditing.

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

VoIP

The market for Voice Over IP (VoIP) equipment sold to corporations and other enterprises, including phones, hardware and software, grew 78 percent to $3.07 billion in 2004, according to Synergy Research Group, and is seen rising to $4.42 billion this year. By 2009, it should represent nearly $11 billion in sales.

With the growing deployment of VoIP, both enterprise and service providers face a network security challenge in dynamically allowing VoIP traffic through a range of firewall ports permanently left open for real-time connectivity. Leaving a range of firewall ports wide open for VoIP traffic is also an invitation to malicious network traffic and an unguarded door against hackers.

The best way to solve this issue is with Fortinet's solution featuring the FortiOS™ Operating System. Its advanced method of content inspection and pattern recognition dynamically opens up a single port, and then closes it after the call is completed. It inspects both H.323 and Session Initiation Protocol (SIP) call-signaling protocols used by VoIP traffic.

Traditional VoIP Security Solution with Firewall Configurations

Problem: Traditional firewalls require a permanent range of vulnerable ports be opened to support latency-sensitive Voice over IP traffic - they are always open and provide a door for unsecured and unauthorized access. This leaves the VoIP switch and entire IP infrastructure vulnerable to damaging attacks and costly downtime.

Fortinet's Secure VoIP Solution

Solution: Fortinet's VoIP-savvy firewalls work with the industry widest range of VoIP offerings and understand both H.323 and Session Initiation Protocol (SIP) signaling and communications protocols to dynamically open only the ports needed for the duration of the call. Only the traffic for that session is allowed since the Fortinet firewall is session-aware at all times. Once the call completes the ports automatically close for maximum security.

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

VPN

Fortinet's advanced VPN solutions meet the price/performance requirements of any-sized enterprise. Fortinet's VPN offers secure and cost-effective alternatives to expensive, low-bandwidth Frame Relay circuits to connect multiple offices across the public Internet. FortiManager™ centralized VPN management appliance provides the ability to mange thousands of FortiGate systems from a single console. Tightly integrated with Fortinet's application security protection, Firewall, Antivirus, and IPS, Fortinet provides the most secure VPN solution available in the market today.

• ASIC accelerated VPN
• IKE: Pre-shared Key, Certs, Manual Keys
• Extensive user authentication, RADIUS, LDAP, Local Database, SecureID, X-Auth support for IPSec Clients
• IPSec, SSL, L2TP, and PPTP
• VPN content inspection - Antivirus, IPS, URL Filtering
• Hub-and-spoke configuration
• FIPS 140-2 certified
• Traffic shaping prioritizes traffic across VPNs

Enterprise Remote Office and partner Extranet VPN

Deployed in parallel with an existing firewall, a FortiGate VPN gateway terminates VPNs from branch offices and extranet partners that require limited access to DMZ servers. With the FortiGate systems integrated security features, the administrator can configure granular security policies to control access to resources on the corporate LAN and DMZ.

Enterprise Hub-and-Spoke VPN

Hub-and-Spoke VPN configurations allow multiple remote sites to connect together without having dedicated tunnels to each site. An ideal application for this design is to transport VoIP traffic across the VPN's to reduce long-distance toll charges. Fortinet's traffic shaping features ensures VoIP traffic receives priority even through a VPN tunnel.

MSSP: Virus-Free managed VPN Service

Taking advantage of Fortinet's integrated antivirus protection, managed service providers can deliver the industry's most secure VPN service by enabling Fortinet's advanced antivirus engine to block incoming and outgoing VPN traffic that contains viruses, worms, trojans, spyware and other malicious content to prevent virus outbreaks from spreading from office to office. As an added benefit, Fortinet's flexible VPN architecture allows for interoperability with most IPSec VPN gateways. Regardless of the VPN CPE the customer has in place, the FortiGate system deployed at the core will ensure virus-free VPN traffic.

Enterprise Remote Access (IPSec and SSL)

Ideal for roaming users such as a remote salespeople needing secure access to resources on the corporate LAN such as email and intranet resources. Fortinet offers both a secure IPSec client (FortiClient™) and clientless SSL VPN for hotspot access in areas where IPSec may be blocked by a firewall. Strong authentication is enforced users can establish VPN session.

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

Wireless

FortiGate security systems offer a comprehensive set of capabilities that address the key challenges to deploying secure wireless LANs. FortiGate systems can be deployed in conjunction with wireless access points from any vendor, and used to detect and eliminate content-based threats from email and Web traffic such as viruses, worms, intrusions, inappropriate Web content and more in real time - without degrading network performance. In addition to providing application-level protection, the FortiGate systems deliver a full range of network-level services — firewall, VPN, intrusion detection and traffic shaping — delivering a complete network protection services in dedicated, easily managed platforms.

In particular, the VPN encryption, user authentication and directory integration capabilities of FortiGate systems make it possible to mitigate the security weaknesses of current generation WLAN products and to retrofit complete, high-performance security into any WLAN deployment.

The FortiGate platform uniquely solves key issues and concerns currently holding back rapid adoption of wireless LANs in the enterprise, including:

Wireless LANs provide a tremendous amount of freedom and flexibility and support the increasing desire for always-on, always-available connectivity. However, wireless LANs also break down the notion of a definable "network edge," and bring significant new challenges for maintaining network security. With proper augmentation, the security deficiencies of wireless LANs can be mitigated, enabling the benefits of untethered connectivity without compromising security.

Fortinet's FortiGate family add a critical layer of protection to wireless LANs, extending the life and improving the security of existing systems and providing a foundation for expanded implementations even as wireless standards evolve and mature.

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

Fortinet SoHo & SMB Solutions

Network threats don't discriminate by business size, putting branch corporate offices and smaller sized businesses at much at risk to attack as an enterprise. However, smaller businesses require security that is affordable and turnkey, yet still offers comprehensive protection. Fortinet offers market-leading unified threat management appliances that integrate all the essential security needed to protect a business - including antivirus, firewall, VPN, intrusion prevention, Web filtering, Antispam, Anti-spy ware, and traffic shaping.

These easy-to-deploy and manage systems are ideally suited to provide smaller businesses and branch offices with the greatest flexibility, protection, and affordability available in a modern security platform.

Click to View Larger

• Market-leading Unified Threat Management (UTM) functionality
• ICSA certified enterprise class security at a small business price point
• Affordable and easy to deploy and manage

Numerous branch offices, SMBs and SOHOs around the world are deploying Fortinet FortiGate systems, including the following:

• Jenny Craig
• Gold's Gym
• Pizza Express
• Roy's Restaurants
• Aero Nimbus

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

Fortinet Enterprise Solutions

Many enterprises realize a single line of defense is no longer sufficient for protecting valuable ecommerce transaction, intellectual property and partner data exchange. Defense in-depth is what's needed to prevent network compromise through a combination of new technologies and approaches. The enterprise can leverage Fortinet's FortiGate systems to detect, log and effectively eliminate a variety of threats, including inappropriate Web content, email spam, and spyware.

All size enterprise networks benefit from Fortinet's FortiGate systems against increasingly network-borne security threats from a constantly changing perimeter. Today's enterprise networks extend wirelessly internally and with business travel, outwards using partner extranets, internally with employee intranets and all points in between. Pairing with existing host-based Antivirus systems, single function firewalls or stand-alone IPS devices, Fortinet's systems dramatically increase a company's dynamic threat prevention capabilities for defense in depth.

Click to View Larger

• Best in class ICSA-certified capabilities for all size enterprise networks, wired or wireless, and up to multi-gigabit speed throughput for antivirus gateways, IPS, VPN and firewalls
• Transparent mode functionality for pairing Fortinet security functionality seamlessly with existing security products in the enterprise
• A choice of leading edge network security feature sets in FortiGate Systems accelerated by FortiASIC and Patent Pending CPRL technology
• Scalable security system offerings using consistent management interface for any size enterprise, regardless of the number of central or branch office clients connected to the network
• Attractive per-box licensing eliminates costly per user licensing charged by numerous competitors that can add 4-5x the capital purchase price to the annual operation budget
• FortiMail Secure Messaging Platform provides optimum configuration flexibility with enterprise-class Antispam and Antivirus features to secure mission critical email applications
• FortiGuard subscription services for Antivirus, IDP, web filtering and Antispam provides real time updates and the best network protection in the industry

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

Fortinet In MSSP

The MSSP market is growing rapidly because computer and network security threats are growing. Those threats increase the risk of using computers and networks - including, of course, the Internet - for all companies from very large to very small. Security threats are indiscriminate to company size. This makes the problem especially acute for small to medium enterprises (SME) where manpower and IT budgets are both in short supply. This is the main reason that SMEs are quickly becoming the largest user of MSSP services.

SMEs are often unable to keep up with their network security needs, especially as their business grows and expands to multiple locations. To resolve this problem, Fortinet is helping MSSPs provision security application offerings including firewalls, virtual private networks (VPNs), gateway anti-virus, content filtering, and intrusion detection and prevention (IDS/IDP) to meet the needs of SME customers.

MSSPs are increasingly turning to Fortinet's comprehensive set of products and services, which include the FortiGate™ systems, to provide combined security services to customers in an efficient and cost effective manner. An increasing number of MSSPs are providing in-depth reporting, logging and monitoring capabilities that are critical for their business success.

The multiple security applications of each FortiGate model, along with the management solutions that include highly differentiated reporting and logging with FortiAnalyzer appliances, provide a perfect platform on which to build a managed security service. Using Fortinet's FortiManager™ centralized management tool, MSSPs can lower their maintenance and provisioning overhead - lowering MSSP service implementation cost and increasing profits.

• Guarded Networks (US)
• JBBC (Japan)
• RISC Technology (France)
• e-Lock (Malaysia)
• SeedNet (Taiwan)
• KT Bizmeka (Korea)
• BAI Security (US)

If you have questions or concerns about deploying Fortinet products in your environment, please feel welcome to contact us toll free: 877-386-3763.

Fortinet Carrier-Grade Solutions

The 5000 Series Chassis Platforms from Fortinet are highly-flexible AdvancedTCA^™ (ATCA)-Compliant Chassis Solution that protects large, complex networks, including multi-tenant cloud-based security-as-a-service, infrastructure-as-a-service environments and scalable high capacity security gateway . They offer maximum performance, reliability, and scalability for your high-speed service provider, data center, large enterprise or telecommunications carrier networks and are ideal for virtual infrastructures as they can control up to 3,000 virtual domains.

FortiGate-5000 Series Chassis Next Generation Firewall Appliances support two, six, or fourteen Security Blades that allow you to scale security and customize your unique environment.

Wireless and wireline carriers are experiencing explosive revenue growth from IP (Internet Protocol)-based services such as broadband access, multimedia messaging, voice over IP (VoIP), video services and new blended multimedia services. Competitive pressures to retain customers, struggles for control of the value chain and the urgency to reduce capital and operating expenses are significant. To address these opportunities and challenges carriers are deploying IP-based networks and application service networks. Managing the risks associated with this network evolution is critical to business success.

FortiGate 5000 Series Networking Blades distribute your high-speed network traffic to multiple FortiGate-5000 Security Blades, enabling wire-speed firewall performance at 10-Gigabit Ethernet (10-GbE), GbE, and 10/100 link speeds. Traffic routing and load-balancing services accelerate and optimize security functions, while allowing network protection to scale effortlessly with your growth plans.

Applications such as VoIP in wireline networks or Multimedia Messaging Services (MMS) in wireless networks are constantly under attack from an ever-evolving set of viruses, worms, spam and other threats intended to disrupt service which increases cost and reduces revenues.

Network infrastructure equipment including routers, switches and soft switches under constant danger from DOS (denial-of-service) floods, worm intrusions, and spoofing attempts. IP infrastructure is expected to be as reliable as the traditional telephone network. Yet Crucial VoIP services that utilize infrastructure equipment such as SIP gateways are inherently vulnerable and subject to persistant attacks.

Fortinet Security Solution Suite

Securing IP infrastructure is an extremely complex task. Security threats are not static. Successful protection requires a complete suite of tools to disable known threats, immediately combat new cyber threats, provide real-time actionable information and flexibly scale and evolve in the future.

Fortinet provides a complete security solution suite for carriers utilizing network and application oriented real-time ASIC security engines and security software modules for specific protection requirements:

• Ultra-high performance ATCA platforms for reliability, scalability and manageability
• Modular software architecture that allows security functions to be flexibly deployed and updated based on security requirements
• Comprehensive Security Subscription Services
• Strong management and analysis appliances for central command with rich analytics and reporting
• Flexible and transparent deployment for 10 Mbps to 10 Gbps networks

If you would like to learn more, please feel welcome to contact one of our customer service representative toll free: 877-386-3763.

Fortinet Solutions for Cloud Providers

Fortinet enables cloud hosting providers, cloud service providers, and large enterprises to create secure cloud infrastructures and deliver cloud security services. Fortinet appliances and chassis-based multi-threat security platforms currently secure a wide range of public, private, and hybrid cloud infrastructures around the world. Many of the largest global service providers, including all 10 of the Fortune 10 global telecommunications companies, have deployed Fortinet's robust, scalable technology.

Cloud service providers rely on Fortinet technology to protect the confidentiality and integrity of their subscribers' data, and to create and deliver highly available, innovative cloud security services. Fortinet enables cloud hosting providers to differentiate their on-demand platforms with a full range of value-add cloud-based network security services. Large enterprises rely as well on Fortinet technology to protect the data within their private and hybrid clouds.

Fortinet Benefits for Cloud Providers

• High performance, high availability platforms provide flexibility and scalability in the most demanding datacenter environments
• Comprehensive, fully integrated security technologies ensure complete content protection to detect and block inbound and outbound threats
• Virtualization of all security services, and the ability to customize service offerings down to the individual customer or employee level, delivers unmatched protection, flexibility and granularity for multi-tenant environments
• 'Single pane of glass' management gives cloud providers and large enterprises the ability to provide an unmatched range of security services quickly and easily
• Per-device pricing and no third party license agreements simplifies service provisioning and provides a consistent, predictable cost model

FortiGate, FortiManager, and FortiAnalyzer Platforms

Carrier-grade FortiGate 3000 and 5000 series platforms are at the core of Fortinet's cloud strategy, delivering extremely high performance with very low latency. Every FortiGate platform, with the exception of the FortiGate 30B series, also supports virtualization of security services. FortiGate multi-threat security platforms include Virtual Domain (VDOM) technology, providing secure virtualization of security services.

FortiManager management platforms and FortiAnalyzer analysis and reporting platforms include Administrative Domain (ADOM) technology for secure management of multi-tenant environments. Our virtualization technologies enable a single appliance or blade to support up to 250 virtual domains, providing potentially unlimited scalability of securely partitioned cloud-based network security services.

FortiMail Platforms

FortiMail messaging security products are also deployed by cloud hosting and cloud service providers around the world to eliminating message-borne threats. FortiMail messaging security provides virtualization support today for multi-tenant environments with the ability to support up to 10,000 email domains on a single blade, and scan over 1.1 million email messages per hour.

FortiGuard Services

FortiGuard Labs support the ability of cloud hosting and cloud service providers to deliver secure infrastructure and services by continuously updating Fortinet security platforms against emerging threats. FortiGate, FortiAnalyzer and FortiMail platforms receive dynamic updates to their threat detection engines from the FortiGuard Labs global research team. The FortiGuard global response team is a dedicated group of security experts, monitoring the threat landscape 24 x 7 to detect emerging threats.