F SRTINET. eee eee Internal Segmentation Party ree ely FortiGate® 5000 Series Scalable Data Center and Carrier Grade Security Systems The FortiGate 5000 series chassis-based security system: use highly flexible AdvancedTCA” (ATCA)-compliant architecture to protect cloud-based security-as-a- service and infrastructure-as-a-service environments. The 5000 series offer modular carrier-class hardware components with advanced Security Processing Unit (SPU)acceleration and consolidated security from the Fortis” operating system. security Networking + Protects against known exploits, malware and malicious URS. + Extensive routing and networking capabilities to support the sing continuous threat inteligence provided by FortiGuard Labs security services + Protects against unknown attacks using dynamic analysis au provides automated mitigation to stop targetedattacks Performance + Delivers industry's best threat protection performance au Ulta-low latency using purpose-built security pracessor (SPU) technology + Provides industry-leading performance and pratection for $3. encrypted trafic Certification + Independentlytestedand validated bestsecurty effectiveness. and performance + Received unparalleled third-party certifications fromNSSLabs, high-speed requirements of elecommunications carriersand large enterprises + Maselve scalabilty with accelerated IPv6 and VPN pfrefor high-speed intemet connectivity and cloud initiatives + Enables flexible deployment modes that ft into organizations’ evolving network infrastructure requirements ‘Management + Single Pane of Giass with Network Operations Genter (NOC) view provides 260° visibilty to identfyissues quickly ‘and intuitively + Predefined compliance checklist analyzes the deployment au highlights best practices to improve overall securty posture Security Fabric + Enables Fortinet and Fabric-ready pts ICSA, Virus Bulletin and AV Comparatives products to colaboralivelynegrateand RA peeaeal iar eae e am ee attack surface RX ro = F-50011 ESE Fecwal 0 Gbps a0 bee 112 Tops 7 13 bps 18 Cops 252 Gtns NGAW 10Gb 15 Gs 210 Goo Threat reocton 77 Goes “2.5 Gbps seocse Network inertces ie 40 GE GSFP inate 0 OE GBF inate 0 0 GFP DN aeForuGaie"s000 Sens ARCHITECTURE Flexible and Scalable + Chassis and biades systems that can be configured ® ‘various resiliency and network requirements + Security blades can be added as demand grows + Ease of maintenance and minimum clsruption with ra ‘swappable components Chassis The chassis enables the flexible system to scale effortlessly by allowing blades to be hot swapped according ta desired requirements. The system can also be configured for various resilience designs within the chassis as wellas between chassis, TherackmountATCA chassis provides centralized and redundant power supplies to its blades; and may be powered by either DC (or AC with an additional power interface. It faciltates backplane ‘communications between the blades which may be used for HA heartbeat and other control and data communications, The FortiGate §144C, FortiGate 51408 and FortiGate 5060 may house shelf managers that control chassis power allocation, ‘monitor chassis operating parameters, monitor and control chassis cooling, and can signal alerts via the alarm module ifthe chassis encounters problems. Security Blades High performance, Securty Processing Unit (SPU) powered ‘security blades run on FortiOS or FortiCarrier which apply access policies and securty profiles on the traffic they recelve from the networking blades via backplane or front panel interfaces, These blades may operate NATiroute andlor ransparentmode. They also support VDOMSs (virtual domains) within the chstr. Networking Blades Uptotwonetworking blades maybe installedon aForiGate 51440, FortiGate 51408 and FortiGate 5060 in designated siots. These blades connect the system to the network while connected to the ‘mute securty blades via the chassis backplane. The networking blade clusters the secur blades with traficdstibution, Networking blades can assign security blades into service groups Which are isolated clusters coexisting ina single chassis. Two networking blades may either operate as active-passive HA or separately with its own cluster. Reo)FeruGate"So00 Seres DEPLOYMENT Next Generation Perimeter Security Firewalls alone aren't enough to block today’s blended threats and attacks. Data centers require multhiayered security technologies that examine entire packet flows, from content inspection through reassembly, stopping threats at the perimeter. The FortiGate 5000 series offers this rtcal functionality wthoutcompromising performance and scalability Carrier Grade Security The ATCA chassis and components ofthe FortiGate 5000 series are deal or telecommunication operators and service providers wit stancard-based assurance for reliability and robustness. Its unbeatable high capacity is essential as data networks continue o grow ric inthe near future MSSP Core Security The FortiGate 5000 series delivers comprehensive securtyforManaged Security Service Providers (MSPS) The ful suite of SPU-accelerated secutly modules allows for customizable features fr specie customers, while virtualization features lke VDOMS provide up to 6,000 separate securty domains, Final, the fullsuiteofFortinet integratedmanagementappiications —including granular reporting features — offer unprecedented visit into the securlty posture of customers while identifying their highest risks.CHASSIS FortiGate 5144C Next Generation 14U 19-Inch rack mount ATCA chassis with 40 Gi lo 14 FortiGate 6000 series blades Backplane and capable of Dual-Dual-Star topology. It can install up oni Ba (a en ae a arava specteatons abit) Eecoane revs mount AdvancedTCA™-compliant Chassis. + Based on industry-conforming standards assuring ‘+ Highly scalable with minimum service disruptions as carrier-grade performance, rellablity, 9.999% avaliablity hot swapped blades may be added to increase capacity and serviceability with ease + Redundant fans, power modules, self managers and am © *_ Comprehensive managementand monitoring facilites modules options shelf managers and alarm modules Reo)FeruGate"So00 Seres SECURITY BLADES FortiGate 5001D res sla Com} Le) Fa) Ra =) FortiGate 5001E/5001E1 Latestpurpose-builtFortiGate security blade with carer-class, capacity and protection. = g LaJ g/F Ic Lex] Se 2 CSERUSPOTS 2 2 Russcunsoeeot 1 1 IroiesTinscees Zeer 2 0GESFPAER Lease 20008 ‘eos sorte") renal Trougpat 161851264 byte UDP paket) 90/40/48 Goes 0/80/50 Cope renal Lene (64 De UDP pacts) as sus Freya Tsun Pacies Pe sexe) ersupes 5 pes (ncuret Serears 75) "nen oon New SessoneSecmra TCP) 585.000 640.000 Nema Feval Pobies 200000 200.00 2500s od (hen Gateway Pec VEN Tarr sson0 4000 SSLPN Tacos 5m Sons ‘oncuret $5. VPN Uses einen rn) 25000 25.000 | IPS Theowghout HTTP Enterpse Mi 16/13 os 251 1060s “Sst nspecton Trowgrpue? cers srs Pepicabon Conte Trovenpi™ acs oes NGA Trop ocr | 15 cops Tweet retecion Tneushod™ 77 Gps sachs CAPHAP THowoU 15s 15.cos ‘in banat (beaut Mana) 0/500 707800 aman Nurbe of Regsieed Foils 2000 20,000 ‘an Nurber of Frias (Teal Tune) 4096 71.028 096 71.008 Panera Eee Poner Consumption (Average / Maxaman) 120/225 91 250/278 W Heat sspaton ei) 7 Tun ‘ue s6TUn ‘Operating Temperature 32-1067 (040°C) ‘Sage Terperue 5-450 (25-10°S) Huot 10-0 conser emma cottaters FOCPan 1s CCL CE US, CB CSA Las Few Pa Sins SL.VPN NESCent Ye - se sieemanraasan ann spt enon eee STRFOF eS BASS | Papen MYeHTHEEREDATRACH: 29 ‘epee Wh Ps fateh tre e255 3 Conejo mel te TFN HRW ree Soe Cs ee Eps etches hes nae pena ren siseuPS Alcon env \aaepeacon eae eee oh CAPNA- pms eOT HDF esForuGaie"s000 Sens NETWORKING BLADES FortiController 5903C/5913C High Performance networking biade that provides 10/40-gigabit fabric and t-gigabit base backplane channel layer-2 switching ina dual star architecture. abe Cane eres MGEOSPs 2 IOGEGHE Powe Comurgtin verge Mannan) 25014000 20/400 fe Came eres Benger a I0GESTF ex sation ‘es06Tun ssoTun usrapementienaces HSER ‘GE Rus nee Teneeraire SeA100F OA) aeDH OC) Tne Tanssires RGR A acs Supe Tenpee ESF SEO) 9 F S) 06 Sacipane FaxieSigpod 8 ve Hari) Oeming 5-50 roecnteshg “GE Beaune Fave SiPom ve v8 ompan {Eso pone Fa0ic supa - = cantsne FOCPat CHEE CT VOCE LUE 8 55S AESCertec vs 1 Nexmun Tae Thoatout 120s 200 Noximun Conaurent Sessions _—_168tton ‘25Mien New Sessonsecmnd TOF) 3 20tion 360 AC POWER SUPPLIES. FortiGate 5053B and Power Supply Unit 5000B ‘The FortiGate 50538 is a 1U 19.inch rack mount power supply shelf with PSU-5000B hot swappable power supplies to convert AC power to DC power and to supply power to a FortiGate 5000 series chassis. ie ie rat Yo F Pesce. (fee SoTv AC High ne pa 50598 win PSUS0006 1zow — Za0w — aeaw — aa00W ‘ow 2a00w BROW ((00-184V AC Low ine mpt Now Amenea, Meno, Japan, et) 6 Reo)FeruGate"So00 Seres ADDITIOINAL AVAILABLE COMPONENTS Chassis a ana apa TO — Sa en ips Bacon Support - - ‘Sheffaraye (Detut/Wavina) 772 ve aa Netoreng Bae Spot ve ve Dimensions HeihstihaLenge renee) Seexi7sixt8s2 assxtoe2s eentwanatengnem) pousssnars st ous8sxar Weate 28 (7345) ats 28) cers atm Security Blades 2 ® 2 i 208 08 = SysemPetomance Final Teugat 10/40/4008 40/40/40 Cees {Sb 188 UOP oe) | rm ie see ose 2 Zoi 00 a0 Ses ros a.m 70H en 00 seam fe ova. 0 5k zon 0000 frcmcel Yar Pe Trego aos 756m ove 107/500 500 300 096TH (ata Tanna 7 no Cunt eoneer Sows (um) = ealOsspaten(iaxmum)~ ——TS4BTUR ‘eseTun (peraing Terrace aiMDeF AOC) sB-1ONF OC) ‘Stage Tempest ZION (S-55C) _-AB-ABEE (98-70°0) uit Se roncocesmg ”§-S'Snonconershy Scomotence centers FOCPar TS Cas8& Tek VOC CE, ASML ULL. NeBScertes ve. ors Fett 8 Foe py Sus Cpe eae = nto aang os UN over Consunpion Age Man) 187/225 FetBsston Aiea) ‘Operaing Terra 2-108 0 ‘Sivan: Teno uma 7oscsrosconirsug 2-97 ecocensing centers FOC Pat 1SCHSSA CK YOO, CE LUC C3 SALA Fens Psa PS Ans SSLVEN Webs eries - - cpt Sttnte tee mara 9'9I 20 aro anc Seo se ‘Woven: seirarimsscnetd Za UDPESSEEURyAES SHForuGaie"s000 Sens ADDITIONAL AVAILABLE COMPONENTS Networking Blades IGE SFP GES 1I0GE SFP Navapeet nestaces SERS GERI GERMS Tncues Tansceies| DAO GESE TR RCEn A DADO SFE TR ve Ye v8 ve ve Ye sytem emer cocens 206ops, 60. = ‘20 uien “0Nton 150/160 210/250 219/286 ‘Sprang Temperature 2-1007F O40) S108F 0-H) 2-104 OAD) ‘SoayeTerpewue 15-158 (35-70°5) S158 (35-10°5) SS-S6 (35-707) Fumity 20-59% oncandersng 20-50% non condensing 20-80% oncondensng NeBscertes - - - “Opry Oat FORTINET SECURITY FABRIC. Security Fabric ks Qype gy ee The Security Fabric allows security to dynamically expand and 9 72. ‘adapt as more and mare workloads and data are added. Security sramcesy ove ptt es, arc epietens ~® > vy, O- Seer bewert I Fotiatesarethe foundation ofSecuny Fabri expancingsecuity -@ SOL @- ‘vey aca oy perl oer Fe xX security products and Fabrc-Ready Parinersoltions. NQ Y Reo)FeruGate"So00 Seres FORTINET SECURITY FABRIC FortiOS Control all the security and networking capabilities across the entire FortiGate piatform with one intuitive operating system. Reduce ‘operating expenses and save time with a truly consolidated next- ‘generation security platform. + Atruly consolidated platform with one OS for all security au networking services for al FortiGate platforms, + Industry-leading protection: NSS Labs Recommended, VB100, ‘AV Gomparatives, and ICSA validated security and performance. + Control thousands of applications, black the latest exploits, au fiter web traffic based on millions of real-time URL ratings. + Prevent, detect, and mitigate advanced attacks abretdwith Integrated advanced threat protection, + Fulfilyournetworkingneeds with extensive routing, iy/PN and SD.WAN capatilties. + Utilize SPU hardware acceleration o boost securtty aptland Performance. A Formore information, please referto the ForliOS data ‘sheet available at wow fortinet.com More Features with FortiCarrier Software License + SIPAMSsignalingfrewallprotects + MMS security — contentsmitand + GTP firewall delivers protocol internalinfrastructureand service protection (keyword biocking, ‘anomaly detectionand prevention ‘against malicious messages and antivirus, fle-type blocking, antispam ‘with multiple fiter options for overload whileprovidingNATservices detection) with per-user services end-to-end security ‘and redundaney, providing VoIP provide enhanced end-user security edge scalability anda platform for for Increased uptime and higher managed security services ‘customer satisfaction SERVICES FortiGuard” FortiCare” Security Services FortiGuard Labs offers realtime inteligence on the threat landscape, delivering comprehensivesecuty updates across the full range of Fortinet’s solutions. Comprised of security threat researchers, engineers, and forensic specialists, the team collaborates with the world’s leading threat monitoring organizations and other network and security vendors, as wells law enforcement agencies, (ur FortiCare customer support team provides global technical support for all Fortinet procuets. With support staffin the Americas, Europe, Middle East, and Asia, FortiCare offers services to meet the needs of enterprises of al sizes. Formore information, please referto fort netfortiguard and fortnetforticareForuGaie"s000 Sens ORDER INFORMATION Fora suo onene FESWCO —Wteseastrumatcciacel tarps PEN nats eT LGSa mac tt Mee NEAT oe {ates an por aes cronarg FSS pme hes FeneaeFMC DE Oss FOSWICSENEES Wes casametG anal Sac bosgs, FE ne eT RUA Iatmaape Too areas ane tpas0 canes ecg" S098 poe ees NBS ceed Foals FAC Salonga ———*FESTAE Rab st arg So TR anne aaa Fone Sac Fania) FOSHAN FTC nytt, “TotGaeswiCFanTay __——*FGSUACTANA_FOSTMC ntact “Fonsi as6 Power Enya FG tasS FEM Fes PEM pwerery moa FonGee SC arFuer FOO FOstuD are Fatale 5140 BancFene! F-51409" sto tor otter wivarbae aonnarpa) Foncnastuc eanceae ——FaSt4io5R—_SHGDSTWaRtbas ana wnarear summons) Foncate 16 Ce Fostb0c sutestnsaramaic alte tcgans 27s ns Sa AUsaareale (tena PTT oe tates argon ces acre DFS SIS8 pow eves FotGaesidefanTay _—_—~=SC SSMU FAN Fastabranut Forcast sna vane Festa si) Fal net nasipewmnemnne Fons Sib sat am ager Fara sal) Satabrrnage srr stss Fea S05 crass FOSDOC — sUssasisnoOualSufcctasgins 70 Zann alr RUEaEneOS etna WABGRTARATE BB cn part eaten cee pornos Fete 0 Fan Tip FORE Fantay Fosost aise Fence soe serine Foust Satara aa Foie 050 Ste ASF ars Fetsisie __Solaempai br tet case Feil 056 Pover Camere Tay FOS0SB AC poner ceva cosy cna apa PSUSTOS oa nia nd Ferils 00 Sores Pous Sup Und PSLS00E ower spy et rE ere, AC over a 20am, gaan SES et seem Fete 500 FOSIOIE sera tientn240 0577 prs 0GESFP pet, CERLSargerergs FUICNPACPEhabeBe SHS rere S00 GSOOIE] Seatac 0G Sars. 20 GE TPs GE RUS aur OT FOTASC RPS CrOTCMHD EE ce Sb soos se “FonGae SGD ~~~ «FSD ‘Seta 5257 pts GE POE SP par GE raps ESSE Feat s001 FOSIOIC Sealy ode wh 2x 10GE GFP prs,2.GE RS renapenepus 12865 EE0oteacsioage Fetsuten 32058 ream ctr oe wn 6 10GE SFP bers 2 OCE Sve ols GE RL magenta Sw B88 Fecorteersi63S == FSTRLSENC—_Nanangnse yen 40 SFr ets 2 10GE STE Ene ok SERS rama se Festcortle 9196 FSTRLESI36 ‘tot oe wn 109 GE Cac ss .19E Ps as mee 5A SPs Fest Suteh 008 F500 Teor Hew 1DGE SFP le sm BOE Sas oa, HOE RLS angen FetSuten 5288 Fea ctr dew (0CE SFP apc sox 0CE Se te ol, GE RL mage Fk Fetcoreoer 108 FST Ntotng as wm0CE SFP ane HOSE SPs se as OE LAS gene ee pm OESFPUCTanceve:Vecle ———_FOTRAX 1 GESFPLbacoveade rales wh Sane SPS? ts {1GESFPRUS Tanezeve Nooie __FGTRNGC 1 GE SFPRAStarst rs a sane wo SFP a STPSFPY SG SGESFPSivancayerionie ——-FaTRNSL Sa S72 Surawrmarnanunteaismeneum ee ane oS" >+ ene {2GESFPs Tarecverota ShaRange FG-TRMSEPVGR 10GE SEP areca reve, satrap ral ses wih SP and SFDSFP sls “0GEXFP Tnssver Mote, tert Range FOTRANAEPSR—10GEXFP ance mat, tage false wn XP es 10GE SFP Taser Moose, Lo Range FETRLGFPALR 10 SFP+anscher re, lg age a Sons wih SFP Td SFTP 90S “OGEXFPTiasceverMogue LngRange _FSTRANAR __10GE XFPYaSCoer move keg age aSISens WMXFPSOS “AOE GSFPrTransotes Sot Range FGTRNGEFPHSR 0 GE GEFF+ taser, sor age at Wh OSs SES “BGE CFPZ Vater Long Range Fs TRAVEFSbis¢ —‘00GE CPP Yareraar Sng ge ow ange ode tber tra jee umn CFPD SH 100GE CFP? Tansee Stat Range FGTRANGEP?SRI0 100GE CFPZanscever, 10 canal ariel nt Sr ng 3 SJSENS wth CFP? Sa OE SFP+ Acie DectAtacn Cie” SP-CABLEADASPr 10 SFP>acive reach able, {Um G28 Rr alasiens wih Pr ane SFPSFP ls awe Sass Rekeons emo co ee