Fortinet FG-TRAN-LX 用户手册
5
SOFTware FeaTUreS
More Features with FortiCarrier Software License
*For complete,up-to-date & detailed feature set, please refer to the
Administration Handbook and FortiOS Datasheet
Administration Handbook and FortiOS Datasheet
Extensive Network Support
FortiOS meets numerous network design requirements.
A wealth of routing, multicasting and network resiliency
protocols are supported for interoperating with other
networking devices.
A wealth of routing, multicasting and network resiliency
protocols are supported for interoperating with other
networking devices.
Superior IPS capabilities
Over 4000 IPS signatures enables you to stop attacks
that evade more conventional firewalls. Behavior-based
heuristics recognize zero day threats for which no signature
has been created.
that evade more conventional firewalls. Behavior-based
heuristics recognize zero day threats for which no signature
has been created.
Application Control
Advanced application control lets you define and enforce
policies for thousands of applications running across
networks regardless of port or the protocol used for
communication.
policies for thousands of applications running across
networks regardless of port or the protocol used for
communication.
Powerful Policy Management
Two types of policy management views - global and
section view - are available to suit your preferences. Policy
objects can be easily edited from the policy table. Available
management features include policy object search,
tagging, sorting and filtering.
section view - are available to suit your preferences. Policy
objects can be easily edited from the policy table. Available
management features include policy object search,
tagging, sorting and filtering.
With FortiManager integration, you have the ability to set
up sophisticated policy implementation and provisioning
workflows to meet compliance or operational requirements.
FortiAnalyzer enables complete and accurate configuration
audit trails to reside externally for secured storage.
up sophisticated policy implementation and provisioning
workflows to meet compliance or operational requirements.
FortiAnalyzer enables complete and accurate configuration
audit trails to reside externally for secured storage.
Flexible Role-based Administration
Access profiles can be defined to provide granular access
to VDOMs and system functionalities. This is valuable in
facilitating compliant enterprise-class security operation
workflows.
to VDOMs and system functionalities. This is valuable in
facilitating compliant enterprise-class security operation
workflows.
Beyond Next Generation Firewall
Capabilities
FortiOS supports various value-adding components to the
network that is unique in the market. This includes in-box
token server, wireless controller and vulnerability scanner.
These features simplify network design and deployment
while also providing more secure implementations without
incurring additional cost.
network that is unique in the market. This includes in-box
token server, wireless controller and vulnerability scanner.
These features simplify network design and deployment
while also providing more secure implementations without
incurring additional cost.
Broad IPv6 Support
Maintaining security for both IPv4 and IPv6 traffic will be
crucial to the success of mixed networks. Malware and
network threats are independent of IPv4 or IPv6. FortiOS is
able to use IPv6 security policies to provide access control
and UTM protection for IPv6 traffic. FortiOS has been
successfully evaluated as compliant with core protocol and
interoperability tests defined by IPv6 Ready Logo Phase 2.
crucial to the success of mixed networks. Malware and
network threats are independent of IPv4 or IPv6. FortiOS is
able to use IPv6 security policies to provide access control
and UTM protection for IPv6 traffic. FortiOS has been
successfully evaluated as compliant with core protocol and
interoperability tests defined by IPv6 Ready Logo Phase 2.
World-Class Technical Support
Fortinet FortiCare support offerings provide comprehensive
global support for all Fortinet products and services.
You can rest assured your Fortinet security products
are performing optimally and protecting your users,
applications, and data around the clock.
global support for all Fortinet products and services.
You can rest assured your Fortinet security products
are performing optimally and protecting your users,
applications, and data around the clock.
• SIP/IMS signaling firewall protects
internal infrastructure and service
against malicious messages and
overload while providing NAT services
and redundancy, providing VoIP edge
scalability and a platform for managed
security services
against malicious messages and
overload while providing NAT services
and redundancy, providing VoIP edge
scalability and a platform for managed
security services
• MMS security - content scanning and
protection (keyword blocking, antivirus,
file-type blocking, antispam detection)
with per-user services provide enhanced
end-user security for increased uptime
and higher customer satisfaction
file-type blocking, antispam detection)
with per-user services provide enhanced
end-user security for increased uptime
and higher customer satisfaction
• GTP firewall delivers protocol anomaly
detection and prevention with multiple
filter options for end-to-end security
filter options for end-to-end security