Fortinet(R) Unveils World's Fastest Data Center Firewall Appliance; Eliminates Security Bottlenecks With 160 Gbps Throughput and 40 GbE Ports in a Compact Footprint

New FortiGate-3700D Is the First to Use Latest FortiASIC(TM) Network Processor Technology to Deliver Breakthrough IPv4 to IPv6 Firewall Performance Parity

Marketwired

SUNNYVALE, CA--(Marketwired - Oct 7, 2013) - Fortinet® (NASDAQ: FTNT) -- a global leader in high-performance network security -- today announced a new high performance, compact network firewall appliance for enterprise data centers, large service providers, cloud providers and carriers. The new FortiGate®-3700D, which includes four 40 GbE (QSFP+) and 28 10GbE (SFP+) ports, is able to achieve up to 160 Gigabits per second (Gbps) firewall throughput. Using Fortinet's new custom NP6 ASIC, the FortiGate-3700D is able to deliver best-in-class performance, low latency and IPv4 to IPv6 performance parity. Fortinet is the first network security company to deliver 100 Gbps+ firewall throughput and 40 GbE ports in a compact appliance, which redefines the standard for price per gigabit protected, price per port density, power dissipation per gigabit and space per gigabit. This performance improvement lowers both capital and operational costs for customers while providing the highest performance and lowest latency available.

Data Center Customers Feel the Need for Speed
Infonetics recently conducted a high speed firewall survey of large organizations (over 1,000 employees) that have already deployed high-end firewalls, defined as firewalls that currently support greater than 40 Gbps aggregate throughput. The move to faster network technologies is forcing enterprises to look at upgrading every component of their IT infrastructure, and the need to add new high speed interfaces to firewalls (10 GbE, 40 GbE and eventually 100 GbE) tops the list of drivers for investing in new high-end firewalls.

Jeff Wilson of Infonetics commented, "After port speeds, we asked respondents to tell us what maximum stateful inspection throughput they will require their high-end firewalls to support in the next year, and over 80% are looking for platforms with over 100 Gbps of aggregate performance, with the largest group looking for 100 Gbps to 199 Gbps." He continued, "Having high speed interfaces means nothing unless the device has the throughput to match."

The full report can be downloaded at: www.fortinet.com/resource_center/solution_briefs/faster-firewalls-for-faster-networks.html

FortiOS Flexibility
The new FortiGate-3700D leverages FortiOS 5, the industry's most advanced network security operating system. FortiOS is a security-hardened, purpose-built operating system that is the foundation of all FortiGate network security platforms. It can be used across large or small enterprise infrastructures and multiple security application personalities.

FortiOS 5 allows for flexible deployment models within the data center such as core firewall, which provides very high performance firewall with ultra low latency or edge firewall, which can be used to serve internal or external communities with varying trust levels using different firewall personalities, including firewall + VPN, firewall + IPS, NGFW, advanced threat protection and more.

Data Center Network Segmentation
As customers build out new or redesign data centers, they are starting to incorporate network segmentation into the architecture. The segmentation may be based on perimeter architecture, services, function or regulatory requirements and effectively separates networks physically or virtually to better provide security service level agreements. Fortinet offers physical, hybrid or virtual network segmentation via its virtual domain (VDOM) capability.

The FortiASIC™ Advantage
The FortiGate-3700D features the latest FortiASIC NP6 processor, which has been designed in-house by Fortinet's network ASIC experts.

Numbers   NP6   NP4
Gate Count   280 Million   97 Million
Technology   40nm   130nm
Power Consumption   10W   10W
Packet Forwarding pps (IPv4)   50 Million   30 Million
Packet Forwarding pps (IPv6)   50 Million   -
IPSec Throughput (AES 256+SHA1)   25 Gbps   10 Gbps
Latency   2-4 micro s   2-4 Micro s

The Network Processor ASIC delivers huge performance benefits over a traditional CPU plus software approach. This enables FortiGate high performance network security appliances to have a smaller footprint and consume less power but still deliver the highest throughput numbers at a very low price.

IPv6 Ready
IPv6 is picking up momentum globally, and it is very important for firewall devices sitting at the edge of a network to be able to process IPv6 routed traffic just as fast as IPv4. Additionally, customers often require Network Address Translation (NAT46, NAT64, NAT66), which requires additional processing capabilities. The FortiASIC Network Processor allows FortiGate appliances to deliver comparable IPv6 and IPv4 throughput and translation, eliminating the performance bottleneck other security vendors cause.

High Availability
The Data Center requires extremely high availability to maintain Application Service Level Agreements. FortiOS 5 provides multiple forms of high availability (HA) such as Active-Active, Active Passive or Virtual Cluster. Depending on the configuration, failover times are in the sub-second range. Multiple HA deployment modes allow tight integration into different data center architectures.

Cloud Ready Management
To simplify the management and analysis of physical and virtual security infrastructures deployed in large data centers and multi-tenant cloud environments, Fortinet provides single-pane-of-glass management with the FortiManager family of physical and virtual management devices. FortiManager centralized management allows security administrators to configure and manage thousands of physical appliances and virtual machines. Flexible APIs, such as JSON and XML, allow automated configuration and provisioning of devices. The FortiAnalyzer family of physical and virtual devices provides centralized logging and reporting, which enables administrators to analyze, report and archive security event, network traffic, Web content and messaging data to accurately measure policy compliance.

"For some time our data center customers have been asking us for higher firewall throughput and high speed port connections as they consolidate data centers around a 40 or 100 Gbps switching infrastructure/fabric. We have an aggressive roadmap to deliver on these requests starting with the FortiGate-3700D," said Michael Xie, founder, CTO and vice president of engineering for Fortinet. "Not only have we delivered the required throughput, but we've done it at a CAPEX and OPEX, compact form factor, latency and port density not seen in the industry thus far."

Availability
The FortiGate-3700D will be available this quarter. For more information on the FortiGate-3700D  please visit: http://www.fortinet.com/products/fortigate/3700D.html

To download the Infonetics report referenced above, please visit: www.fortinet.com/resource_center/solution_briefs/faster-firewalls-for-faster-networks.html 

About Fortinet (www.fortinet.com)
Fortinet (NASDAQ: FTNT) is a worldwide provider of network security appliances and a market leader in unified threat management (UTM). Our products and subscription services provide broad, integrated and high-performance protection against dynamic security threats while simplifying the IT security infrastructure. Our customers include enterprises, service providers and government entities worldwide, including the majority of the 2012 Fortune Global 100. Fortinet's flagship FortiGate product delivers ASIC-accelerated performance and integrates multiple layers of security designed to help protect against application and network threats. Fortinet's broad product line goes beyond UTM to help secure the extended enterprise -- from endpoints, to the perimeter and the core, including databases and applications. Fortinet is headquartered in Sunnyvale, Calif., with offices around the world.

Copyright © 2013 Fortinet, Inc. All rights reserved. The symbols ® and ™ denote respectively federally registered trademarks and unregistered trademarks of Fortinet, Inc., its subsidiaries and affiliates. Fortinet's trademarks include, but are not limited to, the following: Fortinet, FortiGate, FortiGuard, FortiManager, FortiMail, FortiClient, FortiCare, FortiAnalyzer, FortiReporter, FortiOS, FortiASIC, FortiWiFi, FortiSwitch, FortiVoIP, FortiBIOS, FortiLog, FortiResponse, FortiCarrier, FortiScan, FortiAP, FortiDB, FortiVoice and FortiWeb. Other trademarks belong to their respective owners. Fortinet has not independently verified statements or certifications herein attributed to third parties, and Fortinet does not independently endorse such statements. Notwithstanding anything to the contrary herein, nothing herein constitutes a warranty, guarantee, binding specification or other binding commitment by Fortinet, and performance and other specification information herein may be unique to certain environments. This news release may contain forward-looking statements that involve uncertainties and assumptions. Changes of circumstances, product release delays, or other risks as stated in our filings with the Securities and Exchange Commission, located at www.sec.gov, may cause results to differ materially from those expressed or implied in this press release. If the uncertainties materialize or the assumptions prove incorrect, results may differ materially from those expressed or implied by such forward-looking statements and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements. Fortinet assumes no obligation to update any forward-looking statements, and expressly disclaims any obligation to update these forward-looking statements.

FTNT-O

Contact:
Media
Rick Popko
Fortinet, Inc.
408-486-7853
rpopko@fortinet.com

Investor
Michelle Spolver
Fortinet, Inc.
408-486-7837
mspolver@fortinet.com

Rates

View Comments