FortiGate®-310B

ASIC-Powered Security at Switching Speeds

Datasheet

Distributed Perimeters Require Security at Switching Speeds

Traditional perimeter security technologies have become obsolete in defending against today’s blended security threats. Using multiple attack vectors, these threats are increasing in volume and sophistication, leveraging every available network connection point to proliferate. Organizations with mobile or remote users are causing centralized security perimeters to transform into a “distributed perimeter,” enabling new entry points for security threats. With so many network access points, it has become impossible to deploy a single point of network protection within an enterprise infrastructure.

Internal Segmentation Restraints

As networks grow, administrators aspire to segregate user-groups and applications such as VoIP into smaller security zones for improved security. Dividing the network with security segmentation points isolates security events, increases policy granularity, and protects sensitive information. Unfortunately most mid-range security devices lack the interface count or the raw throughput to facilitate extensive internal network security segmentation.

ASIC-Accelerated Multi-Threat Security Solution

The FortiGate-310B answers the call of growing mid-sized networks by integrating a purpose-built security processing ASIC, known as the FortiASIC Network Processor, designed to deliver security throughput at switching speeds. Eight hardware accelerated interfaces (expandable to 12) allow networks to enforce firewall policy between network segmentation points for layered security with switch-like performance. An additional purpose-built ASIC, known as the FortiASIC Content Processor, provides additional acceleration for content intensive security technologies such as intrusion prevention and antivirus scanning for dangerous traffic streams. The inclusion of an Advanced Mezzanine Card (AMC) expansion slot allows for even more flexibility, offering additional ASIC-accelerated ports for additional throughput or disk-based storage for local logging and content archiving. With numerous accelerated multi-threat security interfaces, organizations can create multiple security zones for various departments, users, access methods, and even devices to enforce network security at accelerated speeds.

Fortigate-310B Base Unit

Fortigate-310B with Optional 4-Port AMC Module (ASM-FB4)

Feature

Benefit

Hardware Acceleration

Up to 12Gbps FW & 9Gbps VPN combined with 800Mbps IPS and AV acceleration ensures security is never a bottleneck

Ten 10/100/1000 interfaces (expandable to 14)

Facilitates numerous internal segmentation points throughout the network

Modular Expansion

Flexible expansion options for four additional NP-accelerated ports or HDD for local logging and archiving

Unified Security Architecture

Multi-threat protection from a single device increases security and lowers costs

Fortinet’s Multi-Layered Security Solution

Fortinet’s multi-layered security solutions efficiently and economically provide an integrated set of security services in a single, easy-to-manage high-performance appliance that is capable of supporting a wide range of deployment scenarios. In addition, FortiGuard Subscription Services include everything from technical support, antivirus updates, antispyware, antispam, and Web content filtering to ensure that your security environment remains current and your corporate resources are protected against the latest blended threats. FortiGate systems come with a one-year limited hardware warranty and 90-day limited software warranty.

Fortinet Advanced Mezzanine Card (AMC) Expansion Modules

The AMC standard, also known as AdvancedMC™, was developed by the PCI Industrial Computers Manufacturers Group (PICMG), which has over 100 companies building to the specification. AdvancedMC has been developed to meet the requirements for the next generation of carrier grade communications equipment.

4-Port Gigabit Ethernet Module

ASM-FB4

80 GB AMC Storage Module

ASM-S08

The FortiGate-310B Offers:

FortiGate

310B Base Unit

310B with

Optional ASM-FB4

Hardware Specifications

Total 10/100/1000 Interfaces

10

14

Configurable Ports

10

14

AMC Expansion Slot

1 Single Width

N/A

System Performance

Firewall Throughput – Avg Size Packets (512 byte)

8 Gbps

12 Gbps

Firewall Throughput – Small Size Packets (64 byte)

8 Gbps

12 Gbps

IPSec VPN Throughput

6 Gbps

9 Gbps

Antivirus Throughput*

160 Mbps

IPS Throughput*

800 Mbps

Dedicated IPSec VPN Tunnels

3,000

Concurrent Sessions

500,000

New Sessions/Sec

20,000

Policies

8,000

Unlimited User Licenses

Yes

Dimensions

Height

1.75 inches (4.45 cm)

Width

17 inches (43.18 cm)

Length

12.6 inches (32 cm)

Weight

14 lbs (6.35 kg)

Rack Mountable

Yes

AC Power Required

100 - 240 VAC, 50 - 60 Hz, 8.0 Amp (Max)

Power Consumption (AVG)

120W

Environment

Operating temperature

32 to 104 deg F (0 - 40 deg C)

Storage temperature

-13 to 158 deg F (-25 to 70 deg C)

Humidity

5 to 95% non-condensing

Compliance

FCC Class A Part 15, UL/CUL, C Tick, VCCI

Certifications

ICSA Labs: Firewall, IPSec, Antivirus, IPS, Antispyware

* Antivirus performance is measured based on HTTP traffic with 32Kbyte file attachments and IPS performance is measured based on UDP traffic with 512byte packet size. Actual performance may vary depending on the network traffic and environment.

FortiGuard Security Subscription Services

With FortiGuard® Security Subscription services enabled, customers can rest assured that their Fortinet security platforms are performing optimally and protecting their corporate assets with the latest security intelligence. FortiGuard services deliver the latest security content directly to Fortinet products. Fortinet offers four standard subscription services: Antivirus, Intrusion Prevention, Web Filtering and Antispam services to protect against multiple types of new and emerging threats. FortiGuard services are updated by the Fortinet Global Threat Research Team, a team of experts working around the clock and around the world to keep Fortinet customers secure. The Fortinet Global Threat Research Team enables Fortinet to deliver comprehensive multi-threat protection, including zero-day protection from new and emerging threats. The FortiGuard Network is a network of global data centers that automatically deliver updates quickly and reliably to Fortinet products.

For customers requiring guaranteed response time to suspicious malware threats, Fortinet offers a premier version of the FortiGuard Antivirus Security Subscription service. Along with Service Level Agreements (SLAs), the premier service provides the customer with a direct conduit to the Fortinet Global Threat Research Team.

Fortinet also offers a premier version of the FortiGuard Web Filtering Security Subscription service. This higher-tier service offering includes guaranteed SLAs and a larger quota for rating URLs submitted to the Fortinet Global Threat Research Team.

FortiCare Support Services

Includes:

• 24/7/365 FortiCare Web-based support • 8x5 telephone-based technical support (24x7 - optional) • 1-Year limited hardware warranty

• Technical account management service available • Professional services available

GLOBAL HEADQUARTERS

Fortinet Incorporated

1090 Kifer Road, Sunnyvale, CA 94086 USA

Tel +1-408-235-7700 Fax +1-408-235-7737

www.fortinet.com/sales

EMEA SALES OFFICE-FRANCE

Fortinet Incorporated

120 Rue Albert Caquot

06560 Sophia Antipolis, France

Tel +33-4-8987-0510

Fax +33-4-8987-0501

APAC SALES OFFICE-SINGAPORE

3 Temasek Avenue

Level 21 Centennial Tower

Singapore 039190

Tel: +65-6549-7050

Fax: +65-6549-7259

©2008 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiOS, FortiAnalyzer, FortiASIC, FortiLog, FortiCare, FortiManager, FortiWiFi, FortiGuard, FortiClient, and FortiReporter are trademarks or registered trademarks of the Fortinet Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Licensed under U.S. Patent No. 5,623,600. Although Fortinet has attempted to provide accurate information in these materials, Fortinet assumes no legal responsibility for the accuracy or completeness of the information. Please note that no Fortinet statements herein constitute or contain any guarantee, warranty or legally binding representation. All materials contained in this publication are subject to change without notice, and Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice. FG-310B-DAT-R4-0808

Text Box: The FortiGate-310B Offers:

•	ASIC-Powered firewall security at switching speeds
•	Leading price/performance ratio
•	Customizable expansion options
•	Highest port density of any product in its class
•	Multi-threat security from a single device




Fortinet Advanced Mezzanine Card (AMC) 
Expansion Modules
The AMC standard, also known as AdvancedMC™, was developed by the PCI Industrial Computers Manufacturers Group (PICMG), which has over 100 companies building to the specification. AdvancedMC has been developed to meet the requirements for the next generation of carrier grade communications equipment.

4-Port Gigabit Ethernet Module
 
ASM-FB4	
•	4-Port FortiASIC hardware accelerated Gigabit SFP module 
•	(Includes 4x SX SFP transceivers)
•	4 Gbps Firewall performance 
•	3 Gbps IPsec (3DES) VPN performance 


80 GB AMC Storage Module
 
ASM-S08
	
•	80 Gigabyte hard disk drive storage module
•	High duty cycle hard drive design