FortiGate -900D - fortinet.com.cn

1 FortiGate - 900d FortiGate -900D 2 16 16 1100 24 FortiGate -900D -FortiOS Web FortiGate -900D fortinet FortiASIC NP6 CP8 FortiGate -900D FortiGate FortiOS FortiGate NSS IPS FortiGate IPv4 IPv6 52 Gbps 8 Gbps NSS Labs NGFW NGIPS 5 fortinet FortiASIC NP6 FortiASIC CP8 FortiASIC NP6 FortiASIC fortinet FortiASIC NP6 FortiOS 5 40 Gbps IPv4 IPv6 IPv6

2 IPv4 SCTP 2 VPN CAPWAP IP FortiASIC CP8 FortiASIC FortiASIC CP8 FortiASIC fortinet FortiASIC FortiASIC fortinet FortiGate -900D FortiOS FortiOS FortiOS IT FortiOS FortiView - fortinet FortiOS VLAN

3 FortiOS FortiGate FortiOS FortiOS LDAP Radius TACACS+ FortiOS FortiOS Web FortiOS 3000 -- fortinet fortinet IPS FortiGuard 7000 FortiManager FortiGate FortiAnalyzer FortiOS SIEM fortinet FortiCare fortinet fortinet GartnerUTM fortinet DHCP,NTP.

4 DNS DNS FortiGuard NTP,DDNS DNS Sniffer,loopback,VLAN vSwitch ECMP WAN RIPv1 v2 OSPF v2 v3 ISIS BGP4 PIM WCCP ICAP IPv6 IPv6 IPv6 IPv6 NGFW IPv6 NAT64 IPv6 IPSec VPN LDAP,Radius TACACS+ Windows AD, Novell eDirectory FortiClient Citrix Radius portal PKI SCEP CSR OCSP OS NAT/ &ALG dcerpc, dns-tcp, dns-udp, ftp, I, 0, ,MGCP, MMS, PMAP, PPTP, RAS, RSH, SIP,TFTP, TNS (Oracle)

5 VoIP /SCCP NAT traversal, RTP pin holing SCTP, TCP, UDP, ICMP, IP IP IP IP FQDN NAT NAT NAT NAT64, NAT46, NAT, NAT, PAT, Full Cone NAT, STUN QoS per-IP IP TOS DiffServ VPN IPSec VPN - : IPSEC IP/ DNS - : , - IPSec Phase1 Main ID - : ID, ID, ID- IKEv1, IKEv2 (RFC 4306)- IKE ( ), DHCP over IPSEC- Phase 1/Phase 2 : DES, 3 DES, AES128.

6 AES192,AES256 - Phase 1/Phase 2 : MD5, SHA1, SHA256, SHA384,SHA512 - Phase 1/Phase 2 Diffie-Hellman : 1, 2, 5, 14- XAuth - XAuth : (PAP, CHAP, Auto),NAT Traversal - IKE , NAT traversal fortinet - - - Phase 2 SA IPSEC VPN : , hub-and-spoke, , , VPN termination IPSEC VPN : SSL VPN portal: , , , , SSL VPN : URL SSL VPN SSL portal SSL VPN Web : Web : - HTTP/HTTPS Proxy, FTP, Telnet, SMB/CIFS, SSH.

7 VNC, RDP, Citrix SSL VPN SSL VPN MAC OSX Linux Windows Vista 64 Windows SSL VPN Java applet SSL VPN SSL Windows Per portal MAC SSL VPN SSL VPN VPN IPSEC SSL VPN VPN L2TP L2TP over IPSEC, PPTP, GRE over IPEC IPS IPS 7,000+ IPS IP IP IP / IPS IP IPv4 IPv6 DoS TCP SYN TCP / UDP/ SCTP ICMP TCP / UDP/SCTP/ ICMP / IDS sniffer IPS bypass 3000 19 Botnet, , Email, , , internet, IM, ,P2P, , , , , / , VoIP, , , Web ( )

8 Facebook / IP IP - HTTP/HTTPS, SMTP/SMTPS, POP3/POP3S,IMAP/IMAPS, MAPI, FTP/SFTP, SMB, ICQ, YM, NNTP fortinet - HTTP/HTTPS, STMP/SMTPS, POP3/POP3S, IMAP/IMAPS, MAPI, FTP/SFTP, ICQ, YM, NNTP - - - - Web DNS URL Web MIME Web Web 2 5 URL 78 70 Google Yahoo Bing&Yandex YouTube Web - Java Applet, ActiveX / cookie - HTTP post - - URL - HTTP - - Web Web Web / /IP IP IPS DLP - HTTP-POST, SMTP, POP3, IMAP, MAPI.

9 NNTP - /IP/ - ID DLP - HTTP-POST, HTTP=-GET,SMTP, POP3, IMAP, MAPI, FTP, NNTP - DLP FortiGate Windows Linux DLP DLP email, FTP, IM, NNTP, web - - / / / VPN Web - - Windows OS X iOS Android HA VRRP HA - - - - - HA fortinet - HA Web HTTPS SSH telnet console Web UI FortiManager, FortiCloud , web API SNMP, sFlow, syslog.

10 USB syslog FortiAnalyzer WebTrends FortiCloud TCP RFC3195 FortiAnalyzer VPN WiFi IP ICSA , SSL VPN, IPSEc VPN, AV IPS IPv6 Ready fortinet