Fortinet Buyers Guide

Your Step-by-Step Guide to Choosing the Fortinet

Next Gen Firewall Perfectly Suited to Your Network

Presented by

T: 317-225-4117 | E: sales@firewalls.com
 Table of Contents

Why Buy Fortinet? ………………………………………………………………….………………………………………….. Page 3

Fortinet Models by Recommended Number of Users ………………………………………………….………. Page 5

FortiCare & FortiGuard Bundles ………………………………………………………………………………………….. Page 6

What are FortiWifi & FortiRugged? …………….…………………………………………………………………………Page 8

Glossary of Fortinet Terms ………………………………………………………………………………………………….. Page 9

What Next? ………………………………………………………………………………………………………………………. Page 10

2
Why Buy Fortinet?

2017 Gartner Magic Quadrant Leader for NextGen Firewalls – Gartner, one of the largest cybersecurity
benchmarking institutions, gave Fortinet top marks as a Leader in their annual NGFW tests. Price-to-
performance value is rated high for Fortinet appliances along with excellent scores for customer
experience. The E Series especially shines with access to the latest generation of Fortinet Security
Processors, advanced threat protection, & integration with FortiFabric to create end-to-end security.

Figure 1 - Fortinet earns one of only three Leader positions for 2017 Gartner NGFW Testing

3
Why Buy Fortinet?

2018 NSS Labs Next Generation Firewall Report – NSS Labs is recognized as an authority that conducts
benchmarking reports for brands across the cybersecurity industry with real-world tests that compare
security performance, price-to-performance ratings, & resiliency. Fortinet aced their test with both
100% exploit block rate & the lowest Total Cost of Ownership per Mbps protected by the firewall.

Figure 2 - NSS Labs lauds Fortinet as top performer in both Security Effectiveness & Total Cost of Ownership

4
FortiGate Models by Recommended Number of Users

Recommended User Counts - Network security best practices dictate that organizations should
deploy a firewall that is able to comfortably house twice the number of users expected to
operate on a network. By leaving additional room in security infrastructure, businesses can
anticipate large influxes of users, accommodate future growth without purchasing new
hardware, & provide a high ceiling of throughput and other performance potential.

Throughput Requirements – Generally speaking, your firewall throughput should at least equal
your available Internet bandwidth to make the most of performance. Some networks may have
higher performance needs due to data-heavy job functions.

Security Service Subscriptions – The age of set-it-and-forget-it network security has long
passed. Today’s advanced threats require networks that proactively monitor, detect, prevent, &
mitigate threat actors from a multitude of attack angles. However, enabling these services
impacts the overall performance integrity of your network. Administrators that intend to deploy
security services should consider a firewall option with greater throughput potential than their
network may otherwise require.

FortiGate Models by Recommended Number of Users

1 to 10 Users 30E / 50E 200 to 300 Users 300D / 300E

10 to 25 Users 51E / 52E / 60E 300 to 500 Users 500D / 500E

25 to 35 Users 80E 500 to 750 Users 600D / 800D

35 to 50 Users 90E 750 to 1000 Users 900D / 1000D

1200D / 1500D /
50 to 100 Users 100D / 100E 1000 to 2500 Users
2000E

100 to 200 Users 200D / 200E Over 2500 Users 2500E / 3700D

Note: A “User” is defined as any Internet-connected device that will be operating on your network.
This includes not only PCs, but laptops, mobile devices, printers, IoT devices, & more. Before
purchasing a firewall, ensure that you have an accurate count of the total users that will be
connecting concurrently to your network.

5
FortiCare & FortiGuard Bundles

FortiCare Support Services – Fortinet provides global support on a per-product basis in the form of
FortiCare Support Services. In addition to technical support via an intuitive web portal, your appliance
will also receive firmware upgrades, access to technical resources & support ticket visibility, telephone &
live chat support, & a repair/replace option for hardware failures. FortiCare services are offered in both
8x5 & 24x7 packages depending on the needs of your network.

FortiGuard UTM Bundle – The FortiGuard Unified Threat Management (UTM) bundle extends threat
protection across your entire digital attack surface, providing advanced security services to stop zero-
day attacks and malware cocktails.

FortiGuard Enterprise Bundle – Combining the already potent service integrations outlined in the UTM
Bundle, the FortiGuard Enterprise Bundle is designed to address today’s most advanced threats. The
Enterprise bundle consolidates the comprehensive protection needed to defend against all cyberattack
channels from the endpoint to the cloud. The inclusion of CASB provides visibility, compliance, &
security for cloud-based applications. An easy-to-understand Security Rating provides administrators
with a continually-updated assessment of security posture and provides actionable recommendations
based on network feedback.

See Page 7 for a complete comparison of services included in FortiGuard bundles.

Figure 3- FortiGuard combines industry-leading services to create a comprehensive security posture

6
 Fortinet Service Bundle Comparisons
FortiGuard FortiGuard
UTM Enterprise

AnitVirus Protection

AntiSpam Protection

BotNet Protection

Content Disarm & Reconstruction

FortiSandbox Cloud

IP/Domain Reputation

Intrusion Prevention

Mobile Security

Application Controls

Virus Outbreak Protection

Web Filtering

FortiCare Support Services

Cloud Access Security Broker (CASB)

Industrial Security Service

Security Rating

7
What are FortiWifi & FortiRugged?

FortiWifi Wireless NextGen Firewalls – The FortiWifi series of wireless security gateways add a built-in
802.11 a/n/g wireless access point to a standard FortiGate appliance. Ideally built for small businesses, a
FortiWifi appliance enables the deployment of a small, secure wireless network without purchasing
additional external access points. All of the same protection & security services possible on a FortiGate
are made available for FortiWifi appliances.

FortiRugged Outdoor NextGen Firewalls – The FortiRugged series of outdoor firewalls are designed for
use in arenas, campgrounds, outdoor campuses, and any location where a traditional firewall device
would be impacted by exposure to the elements. Built with industrially-hardened materials with an IP67
rating, the ruggedized design lacks a fan & makes use of robust components that stand up to harsh
industrial environments. Operating with the same FortiOS & security bundle options, FortiRugged
appliances are the perfect fit for any deployment outside of the office.

8
Glossary of Fortinet Terms

While this is by no means an exhaustive list of cyber security or Fortinet-specific terminology, this
glossary outlines some of the more common acronyms and vocabulary you will encounter when
shopping for FortiGate appliances & services.

FortiGate D Series – The D Series is a line of next-gen firewalls making use of NP6 and CP8 content
processors. These compact, all-in-one security appliances deliver Fortinet’s connected UTM, perfect for
small businesses looking for robust security and enterprise-grade protection that’s easy to deploy.

FortiGate E Series – The E Series contains the latest generation of content processors, offering higher
performance speeds and additional encryption options. The E Series makes use of SPU NP6Lite and SPU
CP9 processors which work outside of the direct flow of traffic, accelerating inspection of data-heavy
security features.

POE – Power Over Ethernet is a technology for wired networks that allows electrical currents to be
carried through data cables in lieu of traditional power cords. Providing power to the device through a
single cord minimizes the number of wires necessary and simplifies complicated installs.

VZW – FortiGate models denoted by a “VZW” label contain an embedded 3G/4G/LTE wireless WAN
modem for use on Verizon Wireless networks.

DSL – FortiGate models denoted by a “DSL” label include a built-in DSL modem to provide redundant
connectivity links. These models also include support for 3G/4G connectivity via external USB ports.

SPU – Security Processing Units are hardware built into FortiGate devices which accelerate certain types
of traffic outside of normal traffic flows. Content Processors (CP) accelerate a wide range of security
functions while purpose-driven Security Processors (SP) accelerate specific security functions that may
otherwise negatively impact performance.

FortiCare – A support package that allows administrators access to firmware updates, repair/replace
options, and a wide array of Fortinet support options via web portal, telephone, live chat, & more.

FortiGuard – FortiGuard security packages are bundled security suites that feature a number of security
services working as one cohesive system to tackle the most advanced threats across all channels of
attack.

FortiFabric – The Fortinet Security Fabric is an integrated array of services & solutions that provide
comprehensive protection & visibility into every network segment, user, device, & application.
FortiFabric intends to create a holistic single-vendor approach to network security that replaces
networks featuring a confusing & inefficient patchwork of unrelated services & devices.

9
What Next?

Ultimately, the best decision you can make when shopping for a network firewall is to consult an expert
that you trust. Certified resellers can answer any questions specific to your needs to ensure you’re
getting the most out of your security investment without leaving performance on the table. Whether
you have to meet regulatory compliance standards, tackle complex deployments, or are looking to roll
out your first secure business network, cyber security experts possess specialized knowledge to help
keep your data safe.

Firewalls.com stocks its Indianapolis-based Security Operations Center with only engineers qualified at
the highest-possible certification tiers for all of the manufacturers and brands we represent. Our team
has assisted thousands of customers with finding the right appliances, services, & solutions to secure
their networks.

Visit our Fortinet Product Page for pricing, technical specifications,

datasheets, & more.

Speak with one of our network security gurus by phone at

317-225-4117 or message us at sales@firewalls.com.

Request a call on our Contact Us page to have a firewall expert

reach out to you.

Firewalls.com also offers advanced configurations, managed security services, Security-as-a-Service, &
premium support options & professional services. Get secure & stay secure with Firewalls.com.

10