FortiGate-50 to -100 Series Solutions for SMB, SOHO, and Enterprise Branch Offices Sales and Technical Training

Agenda The Series Deployment Examples Detailed Product Information Competitive Positioning Ordering Guide

Blended Security Threats Exploiting Small Businesses and Remote / Home Offices The exposure in Small businesses, Remote / Home Offices:  Lack infrastructure with the technical sophistication to protect against new blended-attack methods  Lack the technical expertise to tackle ever-evolving and highly complex security issues  Budget / Expense constraints often make security and complete protection a second priority The risks can be devastating:  Theft or destruction of Intellectual property, customer and company records,  Disruption of mission critical resources impact customer service/satisfaction resulting in lost revenue and decreased profitability Inadequate protection using legacy point-based security solutions:  Point-based security appliances are not designed or equipped to protect against the multitude of attack vectors used today  Deployment of multiple point solutions are not cost-effective and difficult to manage/maintain Fortinet’s FortiGate-50 to -100 series are the solution :  Tightly integrate multi-threat protection within cost-effective, unified threat management platforms  Utilize purpose-built platforms that effectively block today’s application- and network-borne attacks  Provides the performance, flexibility and manageability perfectly suited for small businesses

FortiGate 50 – 100 Series Platforms for SMB, SOHO, and Enterprise Branch Offices FortiGate /FortiGateFortiWifiFortiGateFortiGate FortiWifi 50B60B60B60 ADSL100A HARDWARE SPECIFICATIONS LAN / WAN / DMZ interfaces 3 / 2 / NA6 / 2 / 1 6 / 2 / 14 / 2 / 1 4 / 2 / 2 Internal switch YesYesYesYesYes Analog modem -Yes Yes -- ADSL interface ---Annex A- POE (Powered Device)Yes*---- CardBus SlotNoYesYesNoNo Wireless LAN 80211a/b/g b/g* -a/b/g -- (* FortiWifi 50B only) NETWORKING FEATURES DHCP/PPPoE Client/Server Yes Yes Yes Yes Yes Static/Dynamic Routing* Yes Yes Yes Yes Yes Traffic shaping Yes Yes Yes Yes Yes Radius, LDAP, Active DirYes Yes Yes Yes Yes Local DBYes Yes Yes Yes Yes User group supportYes Yes Yes Yes Yes SYSTEM PERFORMANCE Firewall/VPN 3DES 50/48 Mbps 100/64Mbps 100/64 Mbps 70/20 Mbps 100/40 Mbps Concurrent sessions 25,000 70,000 70,000 50, ,000 New sessions/second 2,000 3,000 3,000 2,000 4,000 Site-site IPSec VPN tunnels Antivirus throughput 19 Mbps 20 Mbps 20 Mbps 15 Mbps 20 Mbps

Fortinet Security Solutions for the 50 – 100 Series FortiGate /FortiGateFortiWifiFortiGateFortiGate FortiWifi 50B60B60B60 ADSL100A SECURITY FEATURES Gateway antivirus protection (virus, spyware, trojan) Yes Yes Yes Yes Yes Integrated IPS (signature & anomaly) Yes Yes Yes Yes Yes Integrated URL filtering Yes Yes Yes Yes Yes Integrated spam filtering Yes Yes Yes Yes Yes VPN (IPSec, SSL, PPTP) Yes Yes Yes Yes Yes VOIP Security (H323, SIP)Yes Yes Yes Yes Yes OPTIONAL SUBSCRIPTION SERVICES Automatic and scheduled Antivirus and IPS updates Yes Yes Yes Yes Yes URL categorizing Yes Yes Yes Yes Yes Antispam RBL/SURBL Yes Yes Yes Yes Yes CERTIFICATIONS ICSA: Firewall, IPSec, SSL, Antivirus, IPS COMPLIANCE FCC Class B (FG100A – Class A), Part 15, UL/CUL, C Tick, CE, VCCI

Advanced Real-Time Security Solutions Flexible Market Applications  Small Office / Home Office  Network edge, Branch offices, Tele-worker sites  Point-of-sale retail deployments (wired and wireless) Full suite of security services in one hardened platform  Antivirus  Intrusion Protection  Web filtering  Antispam filtering  Stateful firewall / Traffic shaping  IPSec/SSL VPN  Superior detection against anomalous threats such as: IM/P2P traffic Spyware, Malware, Phishing and Pharming Blended threats Cost-effective, high-performance platforms  Reliability and Manageability  Easy, rapid deployment with low operational costs

Fortinet’s Multi-Layered Security Platform 10/100 Mbps 1 Gbps 10 Gbps Remote / Branch Office FortiGate multi-layered security platforms… … with powerful hardware, software and security subscription flexibility * Includes Anti-Spyware Small Business Home Office

Fortinet Developed a Unique Technology for Complete, Real Time Network Protection Proprietary Fortinet Chip Hardware scanning engine Hardware encryption Real-time content analysis Real-time networking OS High performance Robust, reliable CORE TECHNOLOGY

FortiOS Operating System Best-in-Class Performance / Security Solutions Included in Every FortiGate FortiGate Series

Agenda The 50 – 100 Series Deployment Examples Detailed Product Information Ordering Guide Competitive Positioning

Next-generation SOHO/ROBO Security Antivirus + Antispam + Firewall + IPS + Web Content Filtering  Fortinet’s combination of security technologies protects both mobile workers and workstations at SOHO and ROBO locations.  Antivirus, antispyware, antispam, and intrusion prevention systems utilize a combination of signature and heuristic detection engines to provide multi- layered, real-time protection against a multitude of attacks.  FortiWifi-60A offers the ability to broadcast multiple SSIDs (Service Set Identifiers), with different security policies per SSID, maximizing infrastructure flexibility in multi-provider environments and conserving spectrum. FG-50B or 60B FW-60B

Enterprise Remote Office Branch Office Firewall + VPN + Secure Messaging ( , IM & P2P security)  Workers at remote offices often use vastly different business processes and applications.  Applications are protected using Fortinet’s modular set of security applications.  Complete management solution with centralized monitoring, reporting, logging, and analysis. FG-50B or 60B  Combining Fortinet’s antivirus and antispam technology with IM and P2P controls, and IM messaging remain secure and secure connectivity to central offices via firewalls and VPNs. FG-50B or 60B FW-50B or 60B

Agenda The 50 – 100 Series Deployment Examples Detailed Product Information Competitive Positioning Ordering Guide

FortiGate-50B: Complete Security and High Performance for Telecommuters & SOHOs Delivers increased performance  Up to 50 Mbps Firewall, 48 Mbps 3DES VPN throughput & 19 Mbps AV Easy deployment, includes all key security functions:  FW, AV, IDP, VPN, CF, etc… Dynamic updates against new attacks  From FortiGuard Network – No user action required Interfaces: 3 10/100 Internal port and 2 10/100 WAN  USB ports for firmware and configuration management Console Serial Connection Internal 12V DC WAN 1 & 2

FortiGate 50B Highlights Dual WAN interfaces 3 Internal switch ports New architecture with enhanced VPN and AntiVirus performance High Availability (HA) support brings scalability and reliability to the entry product Same form factor as the FortiGate 50A

FortiWifi-50B: The New Entry Level Wireless Security Gateway Delivers increased performance  Up to 50 Mbps Firewall, 48 Mbps 3DES VPN throughput & 19 Mbps AV Easy deployment, includes all key security functions:  FW, AV, IDP, VPN, CF, etc POE support to ease installation in location with hard to reach power source Same compact form factor as the FG-50B, provide space saving over the FWF-60A Console Serial Connection Internal 12V DC WAN 1 & 2

FortiWifi 50B Highlights Dual WAN interfaces, 3 Internal switch ports b/g wireless interface POE (Powered Device) : 802.3af support on WAN1. Draw power from POE power source devices for ease of deployment. New architecture with enhanced VPN and AntiVirus performance High Availability (HA) support brings scalability and reliability to the entry product Also includes advanced Wireless Security Features:  Multiple SSID (Service Set Identifier) supported (up to 4 SSIDs)  WEP & WPA  Enforced IPSec encryption for WLAN connections  MAC address binding

FortiGate-60B: Complete Security for Branch Offices & SOHOs A new FG-60 series platform against the ever evolving cyber threats Idea platform for  Remote Office of Large Enterprise,  Small Business  Customer Premise Equipment (CPE) for Service Provider  Mobile Point of Sales All-in-one security solution for wired and wireless secure access 6 Internal Switch Port PC Card Slot DMZ / WAN 2 / WAN 1 Modem

FortiGate-60B Highlights Performance enhancement from overall hardware improvement over the FortiGate-60 6 Internal Switch Port, 2 WAN and 1 DMZ Front PC Card slot for flexible connectivity  Support different 3G broadband wireless including : EV-DO, W- CDMA, HSPA, GPRS and etc. Integrated built-in analog modem for backup connectivity at no additional cost 3G Wireless PC card can also be used as backup connectivity High Availability support offers redundancy with no additional software license

FortiWifi-60B : The Ultimate Secure Wireless Access Based on FG-60B hardware platform Dual mode Wireless  Supports for a/b/g  PC Card slot for 3G wireless broadband Interfaces: 6 10/100 ports, 1 DMZ, 2 WAN and WLAN Integrated built-in analog modem for backup connectivity 3G wireless can be used a backup Dual WAN support with load balancing & failover

FG-60B and FW-60B 3G Highlights PC Card slot is open on both model. Cardbus card is not included in the package. Review release notes to ensure the desire 3G hardware has been verified for software and driver interoperability 3G service requires service contract from the local service providers Verified service providers: Service providers* to be verified: *The list of service providers to be verified are subjected to change without prior notice.

FortiGate-60 ADSL Highlights 4 LAN interfaces 2 WAN interfaces Integrated modem  ADSL modem (60 ADSL only) – Annex A only 70 Mbps Firewall performance 20 Mbps 3DES VPN performance 50K concurrent sessions

FortiGate-100A Product Positioning: DS1C/T1C (2 x T1 3.2 Mbps), up to 35 users Applications: Perimeter Security Gateway (FW, AV, IPS, Web Inspection, Anti-spam) Interfaces:  2 x WANs for redundant ISP links  2 x DMZs for isolation of critical outward facing functions (DNS, E-commerce, , etc)  4 x 10/100 port switch Increased Performance – 100Mbps FW, 40Mbps VPN, 25Mbps AV Additional redundancy options with HA Clustering

Agenda The 50 – 100 Series Deployment Examples Detailed Product Information Competitive Positioning Ordering Guide

SOHO/Branch Office Comparison Features FortiGate 50B Juniper-5GT Juniper-SSG 5 SonicWALL TZ150 Cisco ASA5505 Checkpoint VPN-1 UTM Edge UsersUnrestricted10Unrestricted Unrestricted 8 - Unrestricted Hardware Interfaces 5 10/100 Ethernet 7 10/100 Ethernet 5 10/100 Ethernet 8 10/100 Ethernet 6 10/100 Ethernet UTM Features FW, SSL & IPSec VPN, IPS, AV, WF FW, IPSec VPN, IPS, AV, WF (No SSL VPN) FW, IPSec VPN, IPS, AV, WF (No SSL VPN) FW, IPSec VPN,IPS, AV, WF (No SSL VPN) FW, SSL & IPSec VPN (No IPS, AV and WF) FW, IPSec VPN, IPS, AV (No SSL VPN and WF) Concurrent sessions 25, , VPN tunnels IPSec 3DES Performance 48 Mbps20 Mbps40 Mbps10 Mbps100 Mbps20-30 Mbps Firewall Performance 50 Mbps75 Mbps160 Mbps30 Mbps150 Mbps Mbps ASIC based performance (FW/VPN/AV) Yes/Yes/YesNo/No/No No/Yes/NoYes/No/NoNo/No/No

SOHO/Branch Office Comparison Features FortiGate / FortiWifi 60B Juniper-SSG 5 SonicWALL TZ190 Cisco ASA5505 Checkpoint VPN-1 UTM Edge UsersUnrestricted 10 - Unrestricted 8 - Unrestricted UTM Features FW, SSL & IPSec VPN, IPS, AV, WF FW, IPSec VPN, IPS, AV, WF (No SSL VPN) FW, IPSec VPN,IPS, AV, WF (No SSL VPN) FW, SSL & IPSec VPN (No IPS, AV and WF) FW, IPSec VPN, IPS, AV (No SSL VPN and WF) Hardware Interfaces 9 10/100 Ethernet 7 10/100 Ethernet8 10/100 Ethernet 6 10/100 Ethernet PC Card SlotYesNoYesNo 3G Wireless and WifiYesNoYesNo Analog ModemYesYes ($)No Concurrent sessions70, , VPN tunnels IPSec 3DES Performance 64 Mbps40 Mbps10 Mbps100 Mbps20-30 Mbps Firewall Performance100 Mbps160 Mbps30 Mbps150 Mbps Mbps ASIC based performance (FW/VPN/AV) Yes/Yes/YesNo/No/NoNo/Yes/NoYes/No/NoNo/No/No

FortiGate-100A Competitive Comparison Feature FortiGate-100AJuniper NetScreen-25 Cisco Pix 515E-R FW/VPN/AV ASIC Yes/Yes/YesYes/Yes/NoNo/Yes/No Network-based AV/content scanning Included (AV+Grayware) No Automatic Threat Response YesNo FW/VPN Performance 120/45 Mbps100/20 Mbps188/30 Mbps IDS/IPSYes sigs and anomalies Yes Limited to 250 attacks Limited 55 DoS sigs or separate system

Fortinet Complete Content Protection Solution Bundles Total solution to drive SOHO Unified Threat Management No User license limitation or enhanced software package Competitive solution bundle vs. Sonic Wall and Netscreen Enables Fortinet to effectively compete in low-end UTM market Simple purchasing – one SKU, one price Available for FG-50B, FW-50B, FG-60B, FW-60B, & FG100A Includes:  FortiGate Security platform  1 Year FortiCare Web Support  1 Year all FortiGuard Services (AV, IPS, Anti-Spyware, Web Filtering & Anti-spam)

Thank You! For more information please visit