Fortinet firewall technology combines ASIC-accelerated stateful inspection with an arsenal of integrated application security engines to quickly identify and block complex threats. FortiGate® firewall protection integrates with other key security features such as VPN, antivirus, intrusion prevention system (IPS), web filtering, antispam and traffic shaping to deliver multi-layered security that scales from SOHO/ROBO appliances to multi-gigabit core network or data center platforms. FortiManager™ and FortiAnalyzer™ turn-key appliances provide centralized management of thousands of FortiGate systems and detailed reporting capabilities for internal auditing and reporting.

Fortinet® antivirus technology combines advanced signature and heuristic detection engines to provide multi-layered, real-time protection against both new and evolving virus, spyware, and other types of malware attacks in web, email, and file transfer traffic. The FortiASIC™ content processor integrated into FortiGate® and FortiWifi™ products accelerates both signature scanning and heuristics/anomaly detection for virus / malware protection while delivering performance that scales from entry-level appliances to multi-gigabit core network or data center platforms. The FortiGuard® threat research team and global distributed network provides industry-leading antivirus signature updates for comprehensive protection against all types of content-level threats.

Fortinet intrusion prevention technology, available in all FortiGate® and FortiWifi™ platforms, can be installed at the network edge or at the network core to protect critical business applications from both external and internal attacks. Backed by the automatic, real-time updates delivered by the FortiGuard® Intrusion Prevention Service, FortiGate IPS technology combines a customizable database of thousands of known threats to stop attacks that evade conventional firewall defenses, plus anomaly-based detection that enables the system to recognize threats for which no signature has yet been developed. The combination of known and unknown threat prevention, plus tight integration with other Fortinet security technologies, enables FortiGate systems to stop the most damaging attacks at security check points regardless of whether the network is a wired, wireless, partner extranet, or branch office network connection.

Traditional firewalls detect and restrict applications by port, protocol and server address, and cannot detect malicious content or behavior in newer Web 2.0 applications. Fortinet Application Control, a feature provided in the FortiOS™ operating system, identifies and controls applications on networks and endpoints regardless of port, protocol, and IP address used. It gives you unmatched visibility and control over application traffic, even unknown applications from unknown sources.
FortiOS uses behavioral analysis, end-user association, and application classification to identify and restrict application usage at a granular level. Protocol decoders decrypt and examine network traffic to detect applications attempting to hide their activity through tunneling. Once network traffic is decoded, applications can be identified by their unique signatures and traffic shaping can be applied to restrict or block non-priority applications and traffic.
Application Control, coupled with the other security technologies included in FortiOS, give you complete content protection. By combining Intrusion Prevention, Data Loss Prevention, Antivirus, Antispam, and Web Filtering with Application Control, you can minimize the risks associated with allowing Web 2.0 applications in your network.
Fortinet Application Control leverages one of the largest application signature databases available - the FortiGuard® Application Control Database. This enables you to control more than 1,500 different Web-based applications, software programs, network services and network traffic protocols. FortiGuard Services deliver regularly scheduled updates to FortiGate consolidated security appliances, ensuring that Fortinet Application Control always has the latest signatures available.

Fortinet® antispam technology offers a wealth of features to detect, tag, quarantine, and block spam messages and their malicious attachments. FortiGate® and FortiWifi™ platforms and FortiClient™ end-point security agents offer integrated antispam functionality as part of their multi-layered protection, backed by the FortiGuard™ Antispam Service. FortiMail™ appliances complement this functionality with additional features that offer an even more effective barrier against the ever-rising volume of spam, providing the maximum levels of protection against sophisticated email attacks, and with FortiMail appliance's content archiving functions, assistance with regulatory compliance.

Fortinet IPSec and SSL VPN technologies in FortiGate® platforms are tightly integrated with other security features such as firewall, antivirus, web filtering and intrusion prevention, providing more comprehensive protection than VPN-only security appliances. FortiGate VPN solutions scale to meet the performance requirements of organizations of any size, from SOHO/ROBO and small businesses to large enterprises and service providers. FortiManager™ centralized management appliances provides the ability to manage complex VPN deployments involving thousands of FortiGate systems from a single console.

Fortinet Web filtering technology, integrated into all FortiGate® and FortiWifi™ appliances and FortiClient PC™ end-point security agents, blocks access to harmful, inappropriate, and dangerous websites which may contain phishing/pharming attacks, malware such as spyware, or objectionable content that can expose organizations to civil or criminal liability. Backed by an industry-leading ratings database and updated continuously by the FortiGuard® Web Filtering Service, Fortinet Web filtering helps organizations comply with government regulations and enforce appropriate organizational Internet usage policies.

Fortinet�s Web Application Security solutions provide specialized, layered application threat protection for medium and large enterprises, application service providers, and SaaS providers. FortiWeb web application firewall protects your web-based applications and internet-facing data. Automated protection and layered security protects web applications from sophisticated attacks such as SQL Injection, Cross Site Scripting attacks and data loss. Web Vulnerability Assessment module adds scanning capabilities to provide a comprehensive solution to meet your PCI DSS section 6.6 requirements.
The solution drastically reduces the time required to protect your regulated internet-facing data and leverages an intelligent, application-aware load-balancing engine to distribute traffic and route content across multiple web servers. This load balancing increases application performance, improves resource utilization and application stability while reducing server response times. Data compression and Independent SSL encryption processor increase transaction throughput and reduce processing requirements from web servers, providing additional acceleration for web application traffic.

Wireless networks are a significant source of risk for most enterprises, due to the lack of robust security technologies and the use of a separate security infrastructure for wireless networks. Fortinet reduces your WLAN risk with a comprehensive, integrated security solution for your wireless and wired networks. We integrate all wired and wireless traffic into a single FortiGate security platform, giving you unmatched visibility and control of all network threats.
You have the flexibility to choose between thick and thin access points (APs), all managed by the integrated Wireless Controllers in FortiGate platform that deliver comprehensive, proven threat management and policy enforcement. Fortinet's unique approach allows you to integrate security for your wired and wireless networks quickly and easily. You can manage all policies from a 'single pane of glass' management console, improving protection while simplifying your network.