Fortinet FortiGate-60C FG-60C-BDL 데이터 시트

FortiOS 4.0 is the software foundation of FortiGate multi-
threat security platforms. Developed solely for security, 
performance, and reliability, it is a purpose-built operating 
system that leverages the power of FortiASIC processors.

FIREWALL

ICSA Labs Certified (Corporate Firewall)

NAT, PAT, Transparent (Bridge)

Routing Mode (RIP, OSPF, BGP, Multicast)

Policy-Based NAT

Virtual Domains (NAT/Transparent mode)

VLAN Tagging (802.1Q)

Group-Based Authentication & Scheduling

SIP/H.323 /SCCP NAT Traversal

WINS Support

Explicit Proxy Support (Citrix/TS etc.)

VoIP Security (SIP Firewall/RTP Pinholing)

Granular Per-Policy Protection Profiles

Identity/Application-Based Policy

Vulnerability Management

IPv6 Support (NAT/Transparent mode)

VIRTUAL PRIVATE NETWORK (VPN)

ICSA Labs Certified (IPSec)

PPTP, IPSec, and SSL Dedicated Tunnels

SSL-VPN Concentrator (incl. iPhone client support)

DES, 3DES, and AES Encryption Support

SHA-1/MD5 Authentication

PPTP, L2TP, VPN Client Pass Through

Hub and Spoke VPN Support

IKE Certificate Authentication (v1 & v2)

IPSec NAT Traversal

Automatic IPSec Configuration

Dead Peer Detection

RSA SecurID Support

SSL Single Sign-On Bookmarks

SSL Two-Factor Authentication

LDAP Group Authentication (SSL)

NETWORKING/ROUTING

Multiple WAN Link Support

DHCP Client/Server

Policy-Based Routing

Dynamic Routing for IPv4 and IPv6 (RIP, OSPF, BGP, &

Multicast for IPv4)

Multi-Zone Support

Route Between Zones

Route Between Virtual LANs (VDOMS)

Multi-Link Aggregation (802.3ad)

IPv6 Support (Firewall, DNS, Transparent Mode, SIP,

Dynamic Routing, Admin Access, Management)

VRRP and Link Failure Control

sFlow Client

USER AUTHENTICATION OPTIONS

Local Database

Windows Active Directory (AD) Integration

External RADIUS/LDAP Integration

Xauth over RADIUS for IPSEC VPN

RSA SecurID Support

LDAP Group Support

DATA CENTER OPTIMIZATION

Web Server Caching

TCP Multiplexing

HTTPS Offloading

WCCP Support

ANTIVIRUS / ANTISPYWARE

ICSA Labs Certified (Gateway Antivirus)

Includes Antispyware and Worm Prevention:

HTTP/HTTPS

SMTP/SMTPS

POP3/POP3S

IMAP/IMAPS

FTP

IM Protocols

Flow-Based Antivirus Scanning Mode

Automatic “Push” Content Updates

File Quarantine Support

Databases: Standard, Extended, Extreme, Flow

IPv6 Support

WEB FILTERING

76 Unique Categories

FortiGuard Web Filtering Service Categorizes over 2

Billion Web pages

HTTP/HTTPS Filtering

Web Filtering Time-Based Quota

URL/Keyword/Phrase Block

URL Exempt List

Content Profiles

Blocks Java Applet, Cookies, Active X

MIME Content Header Filtering

IPv6 Support

APPLICATION CONTROL

Identify and Control Over 1,800 Applications

Control Popular IM/P2P Apps Regardless of Port/

Protocol:

AOL-IM  Yahoo

MSN

KaZaa

ICQ

Gnutella

BitTorrent  MySpace

WinNY

Skype

eDonkey  Facebook

HIGH AVAILABILITY (HA)

Active-Active, Active-Passive

Stateful Failover (FW and VPN)

Device Failure Detection and Notification

Link Status Monitor

Link failover

Server Load Balancing

WAN OPTIMIZATION

Bi-directional / Gateway to Client/Gateway

Integrated Caching and Protocol Optimization

Accelerates CIFS/FTP/MAPI/HTTP/HTTPS/Generic TCP

VIRTUAL DOMAINS (VDOMs)

Separate Firewall/Routing Domains

Separate Administrative Domains

Separate VLAN Interfaces

10 VDOM License Std. (more can be added)

WIRELESS CONTROLLER

Unified WiFi and Access Point Management

Automatic Provisioning of APs

On-wire Detection and Blocking of Rogue APs

Virtual APs with Different SSIDs

Multiple Authentication Methods

TRAFFIC SHAPING

Policy-based Traffic Shaping

Application-based and Per-IP Traffic Shaping

Differentiated Services (DiffServ) Support

Guarantee/Max/Priority Bandwidth

Shaping via Accounting, Traffic Quotas

INTRUSION PREVENTION SYSTEM (IPS)

ICSA Labs Certified (NIPS)

Protection From Over 3000 Threats

Protocol Anomaly Support

Custom Signature Support

Automatic Attack Database Update

IPv6 Support 

DATA LOSS PREVENTION (DLP) 

Identification and Control Over Sensitive Data in 

Motion

Built-in Pattern Database

RegEx-based Matching Engine for Customized 

Patterns

Configurable Actions (block/log)

Supports IM, HTTP/HTTPS, and More

Many Popular File Types Supported

International Character Sets Supported

ANTISPAM

Support for SMTP/SMTPS, POP3/POP3S, IMAP/

IMAPS

Real-Time Blacklist/Open Relay Database Server

MIME Header Check 

Keyword/Phrase Filtering

IP Address Blacklist/Exempt List

Automatic Real-Time Updates From FortiGuard 

Network

ENDPOINT COMPLIANCE AND CONTROL

Monitor & Control Hosts Running FortiClient Endpoint 

Security

MANAGEMENT/ADMINISTRATION

Console Interface (RS-232)

WebUI (HTTP/HTTPS)

Telnet / Secure Command Shell (SSH)

Command Line Interface

Role-Based Administration

Multi-language Support: English, Japanese, Korean, 

Spanish, Chinese (Simplified & Traditional), French

Multiple Administrators and User Levels

Upgrades and Changes via TFTP and WebUI

System Software Rollback

Configurable Password Policy

Optional FortiManager Central Management

LOGGING/MONITORING/VULNERABILITY

Local Event Logging 

Log to Remote Syslog/WELF Server

Graphical Real-Time and Historical Monitoring

SNMP Support

Email Notification of Viruses And Attacks

VPN Tunnel Monitor

Optional FortiAnalyzer Logging / Reporting

Optional FortiGuard Analysis and Management 

Service

FortiASICs are a family of purpose-built, high performance 
processors that use an intelligent proprietary content 
scanning engine and multiple algorithms to accelerate 
security and network services.

Note: The list above is comprehensive and may contain FortiOS features which are not available on all FortiGate
appliances. Consult FortiGate system documentation to determine feature availability.