Fortinet's Fortigate-100 Secures SMB Networks

While these issues seem to guarantee a future of gloom and doom for smaller networks, there is hope for solution providers installing security solutions. With many offices turning to remote or off-site workforces, securing only a network's perimeter may not be enough. For proper protection, solution providers will need to secure all Internet entry points—including branch offices and other remote locations—along with the primary LAN.

Fortinet offers the channel a complete line of firewall and security appliance solutions. CRN Test Center engineers reviewed the FortiGate-100, a security appliance designed to meet the needs of SMBs and branch offices.

The FortiGate-100 is geared toward small offices that need extra security features and increased network speed. Features include a DMZ port, antivirus support, intrusion detection and prevention, content filtering and shaping, and an SPI firewall. Processing speed is assured by the use of a dedicated ASIC processor.

The key differentiator between the FortiGate-100 and similar security appliances is the product's focus on antivirus integration. The unit blocks viruses at network entry points by scanning both inbound and outbound traffic. All HTTP, SMTP, POP3 and IMAP requests are scanned for viruses. It also blocks infected files from being uploaded or downloaded and notifies the end user if a virus is present.

The FortiGate-100 incorporates a content-filtering engine, which can block offensive content based on URLs or key words. Solution providers will find the included VPN server an added bonus, providing secure remote connectivity via IPSEC, L2TP or PPTP, all industry-standard protocols. What's more, the unit has no preset user limit, allowing it to service as many users as the processor can concurrently handle. This feature makes the appliance extremely scalable.

Intrusion prevention and detection are built into the unit's FortiOS operating system. Solution providers looking to add monitoring services will appreciate the remote management and monitoring capabilities, along with extensive logging features. The ICSA-certified firewall rounds out system security by offering stateful packet inspection and network address translation and is hardened against denial-of-service attacks.

Extensive feature sets like those found on the FortiGate-100 often mean complex administration and deployment tasks. Not so--the Web-based management console is easy to master, and associated wizards take most of the complex administration tasks out of the equation.

Fortinet's channel program is split into three segments--Distribution, Value Added Solution Providers and an MSSP Partner Program--each with their own levels of participation. The Value Added Solution Provider level is broken down into four levels--Platinum, Gold, Silver and Bronze. The MSSP Partner Program has two levels--Star and Premier--based on the number of trained engineers at a company, revenue and marketing commitments. Margins range from 23 percent to 37 percent on hardware products and 20 percent on service. The FortiGate-100 costs $1,395.

Fortinet partners must have a minimum of one Fortinet Certified Sales Engineer on staff. Product training and and certification are available through the company. Regional sales managers, sales representatives and field engineers are available to assist partners with sales and engineering support. Sales and technical training are offered in person or over the Web. Fortinet also offers monthly training Web seminars.