Fortinet Security Products

Fortinet features the best Unified Threat Management (UTM), intergrading Firewall, Anti Virus, IPsec VPN, IPS, Web Content Filtering and Anti Spam, from small and mid sized businesses to large enterprises.

Ektec Systems is a Fortinet partner supplying, implementing and servicing the full Fortinet product line focusing on the local Montreal Market. Ektec Systems employs Fortinet Certified Network Security Professionals (FCNSP) to be able to provide our customers with the best possible Fortinet solutions.

Fortinet Product Overview:

Fortinet’s award-winning FortiGate™ series of ASIC-accelerated multi-threat security systems are the new generation of real time network protection systems. They detect and eliminate the most damaging, content-based threats from email and Web traffic such as viruses, worms, intrusions, inappropriate Web content and more in real time - without degrading network performance.

Most Industry Awards - Fortinet offers the industry's best products and has won the most awards in the network security industry, including Security Product of the Year. The company created and leads the rapidly growing Unified Threat Management (UTM) marketspace and is the only supplier of real time ASIC-accelerated network security systems. The combination of our suite of industry-leading FortiGuard Subscription Service offerings and our intelligent systems offer Enterprise, MSSP and SMB users unparalleled value, best in class performance, and unmatched functionality when compared to any single purpose security appliance or competing Unified Threat Mangement system.

Industry's Most Certifications - Our patented product innovation includes Fortinet's intelligent bridge technology, the FortiASIC chip design, FortiOS software, networking, security and content analysis. These technologies have received the most industry certifications including FIPS 140-2 and Common Criteria EAL4+ certifications and seven ICSA Certifications - antivirus, firewall, IPSec, SSL-TLS, IPS, and client antivirus detection & cleaning. FortiGate systems are also the only Unified Threat Management systems certified by the independent NSS test labs for Intrusion Detection and Prevention.

Best in Class Network Security Infrastructure - Each of Fortinet's key security applications and FortiGuard subscription services offer an 'always updated' enterprise-class security solution. Fortinet creates and maintains our global customer's security updates quicker than anyone else in the industry through the FortiGuard distribution network. Using more than one or two applications provides 360 degree security, logging and reporting for corporate-wide security needs. Fortinet offers users antivirus protection and content filtering separately or in conjunction with an existing firewall, VPN, and related devices, or as complete network protection systems with just a simple configuration change.

Firewall:

Fortinet's industry-leading FortiGate security systems delivers unmatched integrated security capabilities, ease of use and price/performance. Along with the stateful firewall, FortiGate system's use an arsenal of integrated application security engines to quickly identify and block today's blended attacks such as SoBig and Netsky from infecting the networks it protects. In addition, Fortinet's scalable product line offers FortiGate models to fit any network size with key security features such Stateful Firewall, VPN, Antivirus, IPS, Web Content Filtering, Antispam and Traffic Shaping available on all models. Fortinet's FortiManager™ and FortiAnalyzer™ turn-key appliances provide centralized management of thousands of FortiGate systems and detailed reporting capabilities for internal auditing and event correlation.

• ASIC-accelerated hardware and purpose-built secure OS
• Application-level security
• Virtual security domains and security zones
• Enterprise-tested high availability
• Security zones and policy-based configuration
• VoIP aware gateways
• Dynamic routing protocols, RIP, OSPF, BGP
• Detailed logging and reporting

Enterprise and Branch Office Firewall

Fortinet's industry-tested FortiGate Firewalls meet enterprise requirements for scalability, performance and reliability. Advanced security capabilities such as integrated Antivirus, IPS Antispam and URL filtering along with high-availability, wire-speed performance, and security zones are available on all FortiGate Models. In addition, Fortinet's wide breadth of FortiGate models offers a device to fit into any sized network while Fortinet's FortiManager™ system provides a single interface to centrally manage and easily deploy thousands of FortiGate systems.

Multi-Store Retail Deployments

FortiGate security systems offer retail customers a cost-effective solution to meet their unique business needs by securing applications such as POS (Point of Sale), inventory applications and online financial transactions, while Fortinet's ASIC-based, purpose built design delivers the reliability and application security needed by retailers to avoid costly network downtime. In addition, the FortiGate system's ease of deployment, accompanied by the full set of security features offered by every FortiGate system make managing and protecting multiple retail locations a turn key solution.

SOHO DSL/Cable Deployment

Fortinet's easy-to-deploy and easy-to-manage security systems deliver exceptional value and performance for securing a home office and small business network. FortiGate installation wizards enable installations to be up and running within minutes.

Anti Virus:

Fortinet's Advanced Antivirus technology uses a combination of both signature and heuristic detection engines to provide multi-layered, real-time protection against a multitude of attacks at the desktop and the network gateway. Ultra-high system performance is achieved using the integrated FortiASIC processor together with Fortinet's patent-pending technology known as CPRL or Content Pattern Recognition Language to accelerate both virus scanning and anomaly recognition.

• Scalable performance and models from SOHO to multi-gigabit antivirus protection
• ASIC-based hardware design
• Automatic updates of antivirus signatures
• Inspects SMTP, POP3, IMAP, FTP and HTTP
• Inspection of VPN (IPSec and SSL) content
• Bi-direction content filtering
• Compressed file format support: tar, gzip, rar, lzh, iha, cab, arj, zip
• Centralized management and reporting of thousands of FortiGate systems
• Transparent, NAT and Route modes

Deployed as part of a layered security design, FortiGate best-of-breed security systems provide application-layer protection against content-based threats that may bypass the gateway firewall.

DMZ Protection

Deployed to protect public facing web, FTP and Email servers deployed on DMZ segments of your existing firewall. Fortinet Advanced Antivirus technology detects and blocks virus infections at a fraction of the cost of traditional server software without impacting server performance by offloading virus scanning overhead.

Edge Protection

Deployed as the network security gateway, a single FortiGate security system can secure multiple DMZ's along with the corporate network from viruses and other content-based attacks. Fortinet's security zone and virtual domain features offer a lower total cost of ownership to enterprises needing to secure multiple networks.

Fortinet's advanced VPN solutions meet the price/performance requirements of any-sized enterprise. Fortinet's VPN offers secure and cost-effective alternatives to expensive, low-bandwidth Frame Relay circuits to connect multiple offices across the public Internet. FortiManager™ centralized VPN management appliance provides the ability to mange thousands of FortiGate systems from a single console. Tightly integrated with Fortinet's application security protection, Firewall, Antivirus, and IPS, Fortinet provides the most secure VPN solution available in the market today.

• ASIC accelerated VPN
• IKE: Pre-shared Key, Certs, Manual Keys
• Extensive user authentication, RADIUS< LDAP, Local Database, SecureID, X-Auth support for IPSec Clients
• IPSec, SSL, L2TP, and PPTP
• VPN content inspection - Antivirus, IPS, URL Filtering
• Hub-and-spoke configuration
• FIPS 140-2 certified
• Traffic shaping prioritizes traffic across VPNs

Deployed in parallel with an existing firewall, a FortiGate VPN gateway terminates VPNs from branch offices and extranet partners that require limited access to DMZ servers. With the FortiGate systems integrated security features, the administrator can configure granular security policies to control access to resources on the corporate LAN and DMZ.

Enterprise Hub-and-Spoke VPN

Hub-and-Spoke VPN configurations allow multiple remote sites to connect together without having dedicated tunnels to each site. An ideal application for this design is to transport VoIP traffic across the VPN's to reduce long-distance toll charges. Fortinet's traffic shaping features ensures VoIP traffic receives priority even through a VPN tunnel.

Enterprise Remote Access (IPSec and SSL)

Ideal for roaming users such asa remote salespeople needing secure access to resources on the corporate LAN such as email and intranet resources. Fortinet offers both a secure IPSec client (FortiClient™) and clientless SSL VPN for hotspot access in areas where IPSec may be blocked by a firewall. Strong authentication is enforced users can establish VPN session.

Fortinet offer a scalable and easy to deploy line of FortiGate IPS security systems that can be installed seamlessly at the network edge or as an IPS solution deployed at the network core to protect critical business applications from external as well as internal originating attacks. In addition, with Fortinet's SOHO and SME FortiGate models, security administrators are now able to cost-effectively deploy the same level of IPS protection at branch offices that in the past was only available for the corporate headquarters. By tightly integrating industry leading security technologies IPS, Antivirus, Antispam and Stateful Firewall, Fortinet delivers the best-in-class security available for enterprises and service providers to combat the complex blended threats that use multiple methods to infect hosts and self-propagate.

• ASIC-based hardware design
• Automatic updates of IPS signatures
• User-defined custom IPS signatures
• Inspection of VPN (IPSec and SSL) content
• Bi-directional IPS content filtering
• Signature and protocol anomaly engines
• Detailed logging and reporting
• Support for 50+ protocols and applications

Deployed in conjunction with an existing firewall, the FortiGate™ IPS system is deployed in the traffic path inspecting incoming and outgoing packets for malicious and malformed content. The FortiGate system's highly accurate IPS engine and high availability (HA) configuration ensures maximum availability of network resources.

Network Core and Branch Office IPS

Fortinet's flexible architecture and scalable product line allows for network core deployments to protect against external and internal attacks while the FortiGate system's extensive product line allows security administrators to cost effectively deploy IPS protection to smaller branch offices. FortiManager™ centralized management delivers a single console interface to manage thousands of FortiGate systems.

Enterprise with IPS Bypass

Fortinet's FortiBridge™ option offers enterprises fail-open protection for FortiGate systems deployed inline in transparent mode. The FortiBridge device's zero-power fail open technology means that the FortiBridge unit will also fail open in the event of a complete power failure.

IDS Deployment

For traditional IDS deployments, the FortiGate system's flexible architecture supports monitoring of traffic from a network tap or mirrored interfaces from the core switch. The FortiGate system can generate detailed traffic logs and alerts for analysis and auditing.

Surfing the Internet has become a critical part of conducting business, however inappropriate Internet usage has led to lower productivity, inappropriate use of company resources, harassment, legal liability, and human resource issues. Fortinet's FortiGuard Web Content Filtering Service regulates and provides valuable insight into all Web activities allowing customers to meet new Government Regulations, HR Policies & Corporate Internet Usage Policies. Fortinet's Web Content Filtering Solutions are also CIPA certified. The Children's Internet Protection Act (CIPA) is a federal law enacted by Congress in December 2000 to address concerns about access in schools and libraries to the Internet and other information.

• Industry-leading ratings database
• Extensive and granular ratings database
• Cost effective per-device subscription
• URL database is updated daily
• CIPA certified
• Simple setup, fully-integrated with all FortiGate security systems
• Integrated industry-leading antivirus scanning
• Scalable and stable high-speed database infrastructure

Fortinet's industry-leading FortiGuard™ Web Content Filtering Service offers enterprises of all sizes an easy to deploy and cost effective solution to control access to inappropriate web sites that may expose businesses to potentially liable material, jeopardize network security and consume valuable bandwidth. FortiGuard-hosted web filtering maintains the largest URL database in tech industry with over 26 million rated web sites and 56 categorized ratings.

As part of the database, FortiGuard can block access to security risk sites such as P2P, phishing and spyware web sites. In addition, Fortinet's per device subscription model offers significantly lower costs than competing vendors who offer per-user licensing for web filtering.

K-12 CIPA Certified Web Content Filtering

School districts deploy FortiGuard Web Content Filtering to meet federally mandated CIPA requirements to filter Internet usage. FortiGuard's industry leading web content filtering database and very granular categorized ratings are ideal in allowing administrators to apply very specific web access policies to groups of users.

Managed Security Service Providers

Today, many Small Medium Enterprises (SME's) are looking forward MSSP's to provide a one-stop solution for their networking security needs. MSSP's can deploy Fortinets web content filtering technologies to provide web filtering capabilities for SME's wishing to control access to inappropriate web sites that may expose businesses to potentially liable material, jeopardize network security and consume valuable bandwidth.

CIPA Certified Web Content Filtering for Libraries

To meet the Internet filtering requirements of CIPA, libraries can leverage Fortinet's industry leading CIPA compliant FortiGuard Web Content Filtering service. Unlike competing web filtering products which require a standalone server to be installed, enabling FortiGuard Web Content Filtering is as simple as enabling the feature on the FortiGate system.

Anti Spam:

Fortinet's FortiMail systems are optimized for enterprise customers, delivering a wealth of reliable and high performance features to detect, tag, quarantine and block spam messages and their malicious attachments. Quick installation with low maintenance overhead combined with Fortinet's award winning administration interface guarantees ease-of-use with a low cost of ownership making FortiMail appliances the most powerful and affordable enterprise-class email security systems available today.

• High Performance, hardened appliance with configurable RAID storage
• FortiGuard Antispam utilizes multiples spam detection methods
• Cost-effective per device Antivirus and Antispam subscription
• FortiGuard Antispam offers simple setup
• Full-featured email server capabilities
• Tri-mode functionality, Gateway, Transparent, Server
• Integrated industry-leading antivirus scanning
• Detailed logging and customized reporting

Utilizing FortiMail's™ integrated Antispam and Antivirus security, small-sized organizations can cost effectively fight spam without the need to deploy additional servers. All that is needed for organizations to take advantages of FortiGuard's™ in-the-cloud service along with six additional Antispam features is to enable the corresponding options on the FortiMail appliance. Fortinet's per device Antispam and Antivirus subscription services are much lower than competitive offerings which license their services on per user basis.

Large Enterprise with Multiple Mail Relays

FortiMail appliances deliver advanced antispam protection for large enterprises with multiple mail servers. Deploying multiple FortiMail appliances as mail transfer agents scales email performance for busy enterprises. Utilizing DNS MX weighted queuing provides redundancy allowing for fail over and load balancing of spam and antivirus scanning when running in gateway mode.

Small / Home Office Antispam Solution

Fortinet's SOHO models provide a cost effective Antispam security solution offering the same key security features found on the high end enterprise class systems. The FortiMail's ease of installation and management delivers set-and-go installations.

Fortinet Product Line:

FortiGate Family

 

 

Managing, Logging Products

 

Subscription Services