FortiGate-900D

DATA SHEETFortiGate® 900D High Performance Enterprise Firewall for Large Branch Offices FortiGate 900D Features & Benefits With network bandwidth requirements doubling every 18 months and increases in sophisticated cyber threats, enterprise organizations with large branch offices know they need high-speed network security that also delivers highly effective next generation security. §§ Superior hardware accelerated next generation firewall offers best-in-class price/performance ratio §§ Integrated high port density Superior Next Generation Firewall Performance delivers maximum flexibility The FortiGate 900D appliance delivers superior performance through a combination of and scalability purpose-built FortiASIC™ processors, high port density with 10 GE ports and consolidated security features from the FortiOS™ operating system. It delivers better next generation firewall performance compared to alternate products and provides the best price/performance in the industry. §§ NSS Labs Recommended NGFW and NGIPS with consolidated security delivers top-rated protection Deeper Visibility and Top-rated Security §§ Application control plus identity This breakthrough threat prevention performance allows organizations to run NSS Labs and device-based policy Recommended intrusion prevention and application control and VB100 certified antimalware enforcement provides more capabilities for deeper inspection. Rich console views and reports together with a flexible granular protection policy engine provide the visibility and control to empower employees yet secure your enterprise. §§ Intuitive management interface enables broad and deep Finally, these features of the FortiGate FortiOS Network Security Platform are routinely visibility that scales from a single validated by independent real-world tests and are consistently getting superior ratings in FortiGate to thousands security effectiveness. Highlights Firewall Performance IPS Performance Interfaces 52 Gbps 8 Gbps Multiple 10 GE SFP+, GE SFP and GE RJ45 FortiGate Extensions FortiAP FortiClient FortiToken forti.net/fap forti.net/fct forti.net/ftk providing high-speed cryptography and content inspection services including: §§ Signature-based content inspection acceleration §§ Encryption and decryption offloading 10 GE Connectivity High speed connectivity is essential for network security segmentation. 4. USB Management Port USB Ports Console Port 2x GE RJ45 Management Ports 5. CAPWAP and IP tunnel acceleration §§ Custom FortiASIC™ processors deliver the power you need to detect malicious content at multi-Gigabit speeds §§ Other security technologies cannot protect against today’s wide range of content and connection-based threats because they rely on general-purpose CPUs. 16x GE RJ45 Ports 7. and ensure that your network security solution does not become a network bottleneck §§ Anomaly-based intrusion prevention.fortinet. The FortiGate 900D provides 10 GE slots that simplify network designs without relying on additional devices to bridge desired connectivity. SCTP and multicast traffic with ultra-low latency down to 3 microseconds §§ VPN. breakthrough FortiASIC NP6 network processor Powered by FortiASICs works inline with FortiOS functions delivering: §§ Superior firewall performance for IPv4/IPv6. 16x GE SFP Slots 6.DATA SHEET: FortiGate® 900D HARDWARE FortiGate 900D 5 MGMT 1 FortiGate 900D USB 2 3 5 7 9 11 13 15 3 10G SFP+ 17 19 21 23 25 27 29 31 18 20 22 24 26 28 30 32 7 MGMT 2 USB MGMT 1 1 CONSOLE 2 4 6 8 10 4 12 14 16 6 NP6 CP8 1U 10GE 256GB AC DUAL Interfaces 1.com . causing a dangerous performance gap §§ FortiASIC processors provide the performance needed to block emerging threats. 2x 10 GE SFP+ Slots Network Processor Fortinet’s new. checksum offload and packet defragmentation §§ Traffic shaping and priority queuing Content Processor The FortiASIC CP8 content processor works outside of the direct flow of traffic. 3. 2 www. 2. meet rigorous third-party certifications. net/guard during local business hours only. block the latest exploits. and forensic specialists. AV Comparatives and ICSA validated security and performance.com SERVICES FortiGuard™ Security Services FortiCare™ Support Services FortiGuard Labs offers real-time intelligence on the threat Our FortiCare customer support team provides global technical landscape. WiFi. other network and security vendors. extended software support. For more information. enhanced 170 unique zero-day vulnerabilities to date. §§ Detect. Middle East and Asia.DATA SHEET: FortiGate® 900D SOFTWARE FortiOS Control all the security and networking capabilities across the entire FortiGate platform with one intuitive operating system. §§ Solve your networking needs with extensive routing. For more information. Comprised of security Europe. totaling millions of service level agreements. including advanced exchange hardware replacement.fortinet. priority automated signature updates monthly. distributed via Fortinet Distributed Network to all Fortinet platforms. §§ Industry-leading protection: NSS Labs Recommended. implementation and deployment services. §§ A truly consolidated platform with one OS for all security and networking services for all FortiGate platforms. as well as law enforcement agencies: §§ Real-time Updates — 24x7x365 Global Operations research security intelligence. §§ Activate all the ASIC-boosted capabilities you need on the fastest firewall platform available. engineers. please refer to http://forti. FortiCare offers services to meet the threat researchers. §§ Security Research — FortiGuard Labs have discovered over §§ Comprehensive Support — For customers who need aroundthe-clock mission critical support. Reduce operating expenses and save time with a truly consolidated next generation security platform. escalation. VB100. operational customers globally. §§ Validated Security Intelligence — Based on FortiGuard §§ Professional Services — For customers with more complex intelligence. With support staff in the Americas.net/care 3 . Fortinet’s network security platform is tested and security implementations that require architecture and design validated by the world’s leading third-party testing labs and services. FortiOS Managment UI — FortiView. delivering comprehensive security updates across support for all Fortinet products. please refer to http://forti. LAN and WAN capabilities. the full range of Fortinet’s solutions. Policy Table and Application Control Panel For more information. please refer to the FortiOS data sheet available at www. switching. contain and block advanced attacks automatically in minutes with integrated advanced threat protection framework. the needs of enterprises of all sizes: team collaborates with the world’s leading threat monitoring §§ Enhanced Support — For customers who need support organizations. §§ Control thousands of applications. and filter web traffic based on millions of real-time URL ratings. §§ Premium Services — For global or regional customers who need an assigned Technical Account Manager. services and more. on-site visits and more. different network environments and other conditions may negatively affect performance results and other metrics stated herein. Active-Passive. 899 Kifer Road Sunnyvale. C-Tick. Antivirus. UDP) 52 / 52 / 33 Gbps Operating Temperature 32–104°F (0–40°C) Firewall Latency (64 byte. and certain other marks are registered trademarks of Fortinet. and actual performance and other results may vary and may be significantly less effective than the metrics stated herein.5 x 463. 1x 256 GB SSD onboard storage. using TLS v1.18 kg) GE RJ45 Management / HA Ports 2 Form Factor 1 RU USB Ports (Client / Server) 1/2 AC Power Supply 100–240V AC. Notwithstanding anything to the contrary. Inc.4 Gbps CAPWAP Throughput 11 Gbps Virtual Domains (Default / Maximum) 10 / 10 Maximum Number of FortiAPs (Total / Tunnel) 1024 / 512 Maximum Number of FortiTokens 1. long range for all systems with SFP+ and SFP/SFP+ slots 10 GE SFP+ Transceiver Module.408. FortiGate®. VCCI. FG-1000D and FXX-1000D GLOBAL HEADQUARTERS Fortinet Inc. 240V/3A Included Transceivers 0 Heat Dissipation 638. All rights reserved. and Fortinet disclaims all warranties.75 BTU/h Redundant Power Supplies Yes (Hot Swappable) System Performance and Capacity IPv4 Firewall Throughput (1518 / 512 / 64 byte. 2x GE RJ45 Management ports. ORDER INFORMATION Product SKU Description FortiGate 900D FG-900D 2x 10 GE SFP+ slots. 60–50 Hz. UDP) 52 / 52 / 33 Gbps Operating Environment and Certifications IPv6 Firewall Throughput (1518 / 512 / 86 byte. FortiASIC NP6 and CP8 hardware accelerated.000 High Availability Configurations Active-Active. FortiCare® and FortiGuard®.4. For absolute clarity. any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Short Range FG-TRAN-SFP+SR 10 GE SFP+ transceiver module. FL 33323 United States Tel: +1. 16x GE SFP slots.74 x 17.235. except to the extent Fortinet enters a binding written contract.000 Maximum Number of Registered Endpoints 2. IPsec VPN performance is based on 512 byte UDP packets using AES-256+SHA1. CAPWAP performance is based on 1444 byte UDP packets.2 W Onboard Storage 256 GB Current (Maximum) 100V/5A.24 lbs (9. Inc.. CE. signed by Fortinet’s General Counsel. Fortinet reserves the right to change. or otherwise revise this publication without notice.2 with AES256-SHA.0500 APAC SALES OFFICE 300 Beach Road 20-01 The Concourse Singapore 199555 Tel: +65. Suite 430 Sunrise. UDP) 3 μs Storage Temperature -31–158°F (-35–70°C) Firewall Throughput (Packet per Second) 49. whether express or implied. modify.000 Certifications ICSA Labs: Firewall. 10m / 32. Sunrise Blvd.250 m) New Sessions/Second (TCP) 280. All other product or company names may be trademarks of their respective owners. FST-PROD-DS-GT9H FG-900D-DAT-R8-201602 .8987. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions. IPS.6 Gbps Concurrent SSL-VPN Users (Recommended Maximum) 10. Network variables. 300 W Redundant Console Port 1 Power Consumption (Average / Maximum) 135 W / 187. in such event. Long Range FG-TRAN-SFP+LR 10 GE SFP+ transceiver module. and in no event will Fortinet be responsible for events or issues that are outside of its reasonable control.9990 Copyright© 2016 Fortinet. Fortinet®. please refer to technical documentation. long range for all systems with SFP+ and SFP/SFP+ slots 10 GE SFP+ Active Direct Attach Cable. CA 94086 United States Tel: +1. IPsec. whether express or implied.954.5 Mpps Humidity 20–90% non-condensing Concurrent Sessions (TCP) 11 Million Operating Altitude Up to 7. and the most current version of the publication shall be applicable.fortinet. Nothing herein represents any binding commitment by Fortinet. SSL-VPN IPsec VPN Throughput (512 byte) 25 Gbps Gateway-to-Gateway IPsec VPN Tunnels 2. with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and. representations. based on Enterprise Traffic Mix.22 x 18. Fortinet disclaims in full any covenants. and guarantees pursuant hereto.2 x 437. CB Firewall Policies 100.2 Hardware Accelerated GE RJ45 Ports 16 Weight 20.DATA SHEET: FortiGate® 900D SPECIFICATIONS FORTIGATE 900D FORTIGATE 900D Interfaces and Modules Dimensions and Power Hardware Accelerated 10 GE SFP+ Slots 2 Height x Width x Length (inches) 1. LAG support and redundant interfaces are limited to certain port configurations. UL/cUL. dual AC power supplies Optional Accessories/Spares SKU Description 1 GE SFP LX Transceiver Module FG-TRAN-LX 1 GE SFP LX transceiver module for all systems with SFP and SFP/SFP+ slots 1 GE SFP RJ45 Transceiver Module FG-TRAN-GC 1 GE SFP RJ45 transceiver module for all systems with SFP and SFP/SFP+slots 1 GE SFP SX Transceiver Module FG-TRAN-SX 1 GE SFP SX transceiver module for all systems with SFP and SFP/SFP+ slots 10 GE SFP+ Transceiver Module.2788 LATIN AMERICA SALES OFFICE Sawgrass Lakes Center 13450 W. transfer.000 Client-to-Gateway IPsec VPN Tunnels 10.7700 www. 16x GE RJ45 ports.400 ft (2. Clustering Note: All performance values are “up to” and vary depending on system configuration. up-to-date and detailed feature set.6395.000 Compliance FCC Part 15 Class A. NGFW performance is measured with Flow AV (Quick Mode).000 IPS Throughput (HTTP / Enterprise Mix) 8 / 4. and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. SSL Inspection is measured with IPS enabled and HTTP traffic.com/sales EMEA SALES OFFICE 905 rue Albert Einstein Valbonne 06560 Alpes-Maritimes.000 SSL-VPN Throughput 3. only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet and any such commitment shall be limited by the disclaimers in this paragraph and other limitations in the written contract.2 Gbps SSL Inspection Throughput 4 Gbps NGFW Throughput 2. please refer to the Administration Handbook and FortiOS Datasheet.368. IPS and Application Control enabled.8 ft SP-CABLE-ADASFP+ 10 GE SFP+ active direct attach cable. France Tel: +33. 10m / 32.8 ft for all systems with SFP+ and SFP/SFP+ slots AC Power Supply SP-FXX1000D AC power supply for FG-900D.24 Hardware Accelerated GE SFP Slots 16 Height x Width x Length (mm) 44. For complete..