F O R T I G AT E E N T E R P R I S E S E R I E S

Real Time Content Security

for Large Enterprises
FortiGate™ Antivirus Firewalls are the world’s leading UTM security appliance that provides 7 enterprise-
class security functions to proactively detect and stop today’s sophisticated blended attacks. Based on
Fortinet’s revolutionary FortiASIC™ Content Processor technology, security functions are accerlerated to
provide class leading performance and value in a hardened security platform. FortiGate platforms are the
only systems that can detect and eliminate viruses, worms, and other content-based threats without reducing network perfor-
mance — even for real-time applications like Web browsing. FortiGate systems also include integrated firewall, content filtering,
VPN, intrusion detection and prevention, and traffic shaping functions, making them the most cost effective, convenient and
powerful network protection solutions available.

The FortiGate-800 or 800F is an ideal solution for high performance antivirus and content filtering gateway, or as a complete
network protection solution leveraging firewall, VPN, and IDP capabilities. The FortiGate-800 Antivirus Firewall features 4 10/100/
1000 tri-speed ethernet ports for networks running at gigabit speeds and 4 user-definable 10/100 ports that provide granular
security through multi-zone capabilities, allowing administrators to segment their network into zones and create policies be-
tween zones. The FortiGate-800F Antivirus Firewall has 4 gigabit speed Small Form-factor Pluggable (SFP) ports for users that
require fiber connectivity, combined with 4 user definable 10/100 ports. A high-availability port allows two or more FortiGate-800
or 800F Antivirus Firewalls to be configured in redundant clusters for improved scalability and uptime. All FortiGate-800 Antivirus
Firewall models are kept up to date automatically by Fortinet’s FortiProtect™ Network, which provides continuous updates for
FortiGuard subscription services that ensure protection against the latest viruses, worms, Trojans, and other threats — around the
clock, and around the world.

Product Highlights
• Combines stateful firewall, antivirus, IDS/IDP, antispam, web • Reduce IT administration expenditures by eliminating threats
filtering, VPN, and traffic shaping in a single hardened solution and infections before the enter your network
to provide unsurpassed feature, functionality, and value
• Lower corporate exposure to litigation brought about by
• Proactively detects and stops network-based threats such as inappropriate or unauthorized network use
viruses, worms, trojans, spyware and other malicious content in
• Extensive 3rd party validation and certification with ICSA Labs,
real-time
FIPS 140-2, Common Criteria EAL4+, and numerous editorial
• Protection for more than 6000 threats with automatic updates awards
to provide timely protection against the latest attacks
• A complete enterprise class security solution with centralized
• Award winning technology combining stateful inspection, management, logging, reporting and FortiGuard security
signature matching, deep packet inspection, full content services
reassembly, and activity inspection with the industry’s only
• Intuitive graphical user interface with Wizard-driven setup
threat correlation engine - Dynamic Threat Prevention System.
routines provides class leading, lowest total cost of ownership
• Class leading cost of ownership with easy to use graphical user
interface for rapid setup, fast implementation, and low TCO

REAL TIME NETWORK PROTECTION

F O R T I G AT E E N T E R P R I S E S E R I E S

Key Features & Benefits

Feature Description
Firewall Prevents access from unauthroized users and applications, provides granular customized security policies

Antivirus Proactively identifies and stops viruses and worms before they can infect individual systems

Intrusion Detection & Inline proactive network defenses prevent malicious activity
Prevention

Antispam Identifies, tags, or removes spam emails to preserve email resources and improve employee productivity

Web Filtering Filters web surfing activities to prevent inappropriate use and abuse of network resources, and helps
improve regulatory compliance while reducing exposure to legal liability

VPN Provides secure remote connectivity for mobile users, remote and branch offices, and partners

Traffic Shaping Ensures business productivity by guaranteeing bandwidth for critical applications

Spyware Blocking Proactively identifies and blocks user access to spyware, keystroke loggers, and other malicious code

Operation Mode Flexible deployment options for either transparent or NAT/route mode

Automated Updates Ensures protection against the latest threats by automatically updating virus, attack signatures and
detection engines

Logging and Reporting Enterprise-class logging and reporting with a complete family of management products

System Specifications
FortiGate-800

Tri-speed
(10/100/GigE) User Definable USB
Keypad and Internal, External, 10/100 Ports Port Power Power
LCD Display DMZ, High Ports 1-4 Console Connection Switch
Availablility Ports Interface

FortiGate-800F

SFP
Ports User Definable USB
Keypad and Internal, External, 10/100 Ports Port Power Power
LCD Display DMZ, High Ports 1-4 Console Connection Switch
Availablility Ports Interface

REAL TIME NETWORK PROTECTION

FORTIGATE ENTERPRISE SERIES

Specifications FortiGate-800/800F FortiGate-800/800F

Interfaces SNMP •
10/100 Ethernet Ports 4 Email notification of viruses and attacks •
4 x 10/100/1000 Gigabit Ethernet Ports FG-800 only VPN tunnel monitor •
4 x SFP Ports (SX transceivers standard*) FG-800F only
High Availability (HA)
System Performance Active-active/Active-passive HA •
Concurrent sessions 400,000 Stateful failover (FW and VPN) •
New sessions/second 10,000 Device failure detection & notification •
Firewall throughput 1 Gbps Link status monitor •
168-bit Triple-DES throughput 200 Mbps Link failover •
Users Unrestricted
Policies 20K Networking
Schedules 256 Multiple WAN link support •
Multi-zone support •
Antivirus, Worm Detection & Removal Route between zones •
Scans HTTP, FTP, SMTP, POP3, IMAP, Policy-based routing •
and encrypted VPN Tunnels •
Quarantine infected messages • System Management
Block by file size • Console interface •
Automatic update of antivirus database WebUI (HTTPS) •
from FortiProtect Network • Multi-language support •
Command line interface •
Firewall Modes and Features Secure Command Shell (SSH) •
NAT, PAT, Transparent (bridge) • FortiManager System •
Routing mode (RIP v1, v2) •
Policy-based NAT • Administration
Virtual domains (NAT/Transparent mode) 2/10 Role-based administration •
VLAN tagging (802.1q) • Multiple administrators and user levels •
User Group-based authentication • Upgrades & changes via TFTP & WebUI •
H.323 NAT Traversal • System software rollback •
WINS support •
User Authentication
VPN Internal database •
PPTP, L2TP, and IPSec • External LDAP/RADIUS database support •
Dedicated tunnels 3000 RSA SecurID •
Encryption (DES, 3DES, AES) • Xauth over RADIUS support for IPSec VPN •
SHA-1 / MD5 authentication • IP/MAC address binding •
PPTP, L2TP, VPN client pass though •
Traffic Management
Hub and Spoke VPN support •
Diffserv setting •
IKE certificate authentication •
Policy-based traffic shaping •
IPSec NAT Traversal •
Guaranteed/Maximum/Priority bandwidth •
Dead peer detection •
Dimensions
Content Filtering
Height / Width / Length 1.75 inches, 16.75 inches, 12 inches
URL/keyword/phrase block •
Weight 10 lb (4.5 kg)
URL Exempt List •
Rack Mountable •
Content profiles 32
Blocks Java Applet, Cookies, Active X • Power
FortiGuard™ web filtering support • AC input voltage 110 to 240VAC
AC input current 4A
Dynamic Intrusion Detection and Prevention
Frequency 50 to60Hz
Intrusion prevention for over 1300 attacks •
Power Dissipation 300W max
Automatic real-time updates from
FortiProtect Network • Environmental
Customizable detection signature list • Operating Temperature 41 to 95 °F
(5 to 40 °C)
Anti-Spam
Storage Temperature -4 to 176 °F
Real-time Blacklist/Open Relay Database Server •
(-20 to 80 °C)
MIME header check •
Humidity 10 to 90%
Keyword/phrase filtering •
non-condensing
IP address blacklist/exempt list •
Regulatory
FCC Class A Part 15 •
Logging/Monitoring
CE •
Internal logging/removable HD 40G
UL •
Log to remote Syslog/WELF server •
ICSA Antivirus, Firewall, IPSec, NIDS •
Graphical real-time and historical monitoring •
*LX transceivers are available as an additional option.

REAL TIME NETWORK PROTECTION

 FORTIGATE ENTERPRISE SERIES

Australia Hong Kong Taiwan

Level 17, 201 Miller Street Room 3206, 32/F 18F-1, 460 SEC.4
North Sydney 2060 Convention Plaza - Office Tower Xin-Yi Road
Australia 1 Harbour Road, WanChai Taipei, Taiwan, R.O.C.
Hong Kong
Tel: +61-2-8923-2555 Tel: +886-2-8786-0966
Fax: +61-2-8923-2525 Tel: +852-3171-3000 Fax: +886-2-8786-0968
Fax: +852-3171-3008
China United Kingdom
Cyber Tower, Suite B-903 Japan Quatro House
2 Zhongguancun Nan Ave. Kokusai Tameike Building 6F Frimley Road
Hai Dian, Beijing 100086 2-12-10 Akasaka, Minato-ku Camberley
China Tokyo 107-0052 Surrey, GU16 7ER
Japan UK
Tel: +8610-8251-2622
Fax: +8610-8251-2630 Tel: +81-3-5549-1640 Tel: +44-(0)-8707-353666
Fax: +81-3-5549-1641 Fax: +44-(0)-8707-353667
France
4 Place de la Defense Korea
92974 Paris La Défense Cedex 27th Floor United States
France Korea World Trade Center (Until October, 2005)

159 Samsung-Dong 920 Stewart Drive

Tel: +33-1-4610-5000 Kangnam-Ku Sunnyvale, CA 94085
Tech Support: +33-4-9300-8810 Seoul 135-729 USA
Fax: +33-1-5858-0025
Korea
(After October, 2005)
Germany Tel: +82-2-6007-2007 1090 Kifer Road
Feringapark
Fax: +82-2-6007-2703 Sunnyvale, CA 94086
Feringastrasse 6
USA
85774 München-Unterföhring
Germany
Tel: +1-408-235-7700
Fax: +1-408-235-7737
Tel: +49-(0)-89-99216-300
Email: [email protected]
Fax: +49-(0)-89-99216-200

Specifications subject to change without notice. Copyright 2005 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiASIC, FortiGuard, FortiOS and FortiProtect are trademarks of Fortinet, Inc.
DAT1140505

REAL TIME NETWORK PROTECTION