fortigate 5000 series solution data sheet...fortigate ® 5000-series solution 3 安全刀片...
TRANSCRIPT
DATA SHEET
FortiGate® 5000系列解决方案可扩展数据中心及运营商安全解决方案
集成Security Fabric
FortiGate设备是Fortinet Security Fabric的核心,构成了Fortinet企业解决方案的骨干。
部署模式
数据中心防火墙
运营商级防火墙
硬件加速
SPU CP8和NP6
由于许多企业都在向大数据、公有云和物联网方向发展,安全架构提供商必须为用户提供更高性能、可靠性和可扩展性的安全设备。FortiGate 5000系列基于机框的可扩展平台,可提供开创性的吞吐量性能。即使是最苛求的运营商或企业数据中心需求,FortiGate 5000系列也可让用户达到最满意的效果。
20,000 5,000 4,096 Yes
第三方认证
Bundles
Bundle
防火墙吞吐量
并发会话数
新建会话/秒
IPS吞吐量
FG-5144C (Base) 160 Gbps 46 Million 1.13 Million 36 Gbps
FG-5144C (Base 2) 320 Gbps 92 Million 2.26 Million 72 Gbps
FG-5144C (Base 3) 480 Gbps 138 Million 3.39 Million 108 Gbps
FG-5144C (Base 4) 640 Gbps 184 Million 4.52 Million 144 Gbps
FG-5144C (Full) 960 Gbps 276 Million 6.78 Million 216 Gbps
安全刀片
FG-5001D 80 Gbps 23 Million 565,000 18 Gbps
基于独立安全刀片之各,而不是基于控制模块系统
FortiGate® 5000-Series Solution
2 www.fortinet.com
机框
FortiGate 5144C下一代14U 19英寸机架式ATCA机框,配置40Gbps背板和Dual-Dual-Star拓扑能力。该机框最多可安装14块FortiGate 5000系列刀片。
FORTIGATE 5144C
硬件规格
可用插槽 14
高可用背板矩阵 内置40 Gbps背板支持 Yes
Shelf Manager (默认/最大) 1 / 2
双网络刀片支持 Yes
尺寸规格
高x 宽x 长 (英寸) 24.44 x 19.06 x 21.63
高 x 宽 x 长 (cm) 62.1 x 48.4 x 55.0
重量 108 lbs (50 kg)
电源和环境
电源需求 DC/AC1
机框耗电量(最大) ** 960 W
散热 ** 3,276 BTU/h
运行温度 32–104°F (0–40°C)
储存温度 -13–158°F (-35–70°C)
湿度 5–90%5–90%无结露
合规
认证 FCC Part 15 Class A, C-Tick, VCCI, CE, BSMI, UL/cUL
** 可选FortiGate-5053B电源架提供AC电源
** 请参照单独的机框手册计算总耗电量
!H/S
ACTH/SOOS
!H/S
ACTH/SOOS
Primary PowerEntry Modules
ChassisGround
Connector
RTMSlot Numbers
Back Fan Tray 3 Back Fan Tray 4
RTMAir Baf�e
Slot Covers
Backup PowerEntry Modules
FortiGate 5001DBoards
Slots 4, 6, 8, 10,12, and 14
FortiGate 5001DBoards
Slots 3, 5, 7, 9, 11, and 13
FortiController 5903CBoards
Slots 1 and 2
ESDSocket
Slot Numbers
Front Fan Tray 1 Front Fan Tray 2
Primary Shelf Manager Secondary Shelf Manager
Air FilterFrame
FortiGate® 5000-Series Solution
3
安全刀片
FortiGate 5001D最新的特制FortiGate安全刀片可提供运营商级的安全防护能力。其上运行的是FortiOS 5——全球最安全的操作系统。
MGMT 1 and MGMT 210/100/1000 Copper
Management Interfaces
3 and 410 G ig
SFP+ NetworkInterfaces
Base and Fabricnetwork activity
LEDs
RJ-45Console
ExtractionLever
RetentionScrew
USB
ExtractionLever
RetentionScrew
IPMLED
(boardpo s ition)
OOSLED
S TALED
PWRLED
ACCLED
Factory Use
NMI Switch
1 and 240 Gig
QSFP+ NetworkInterfaces
CP8NP6 200GB40GE FortiCarrier
FORTIGATE 5001D
接口和存储
40 GE QSFP+接口 2
10 GE SFP+接口 2
GE RJ45接口 2
RJ45 Console接口 1
包含收发器 2x 10 GE SFP+ SR
内置存储 200 GB
系统性能
防火墙吞吐量 (1518 / 512 / 64 byte UDP 包) 80 / 80 / 45 Gbps
防火墙延时(64 byte UDP包) 3 μs
防火墙吞吐量 (包/秒) 67.5 Mpps
并发会话 (TCP) 23 Million
每秒新建会话 (TCP) 565,000
防火墙策略数 200,000
IPSec VPN吞吐量 (512字节 ) 25 Gbps
网关到网关IPSec VPN隧道数 40,000
客户端到网关IPSec VPN隧道数 64,000
SSL VPN吞吐量 6.5 Gbps
并发SSL VPN用户数(推荐最大值) 25,000
IPS吞吐量 (HTTP / 企业混合流量) 1 18 / 13 Gbps
SSL检测吞吐量 2 9 Gbps
ExtractionLever
RetentionScrew
ExtractionLever
RetentionScrewOOS
LEDSTALED
PWRLED
F1 and F2100 Gig Fabric Channel
CFP2 NetworkInterfaces (data)
B1 and B210 Gig Base Channel
SFP+ Interfaces(heartbeat andmanagement)
MGMT10/100/1000 Copper
Management Interface
RJ-45Console
USB
IPMLED
(boardposition)
FORTICONTROLLER 5913C
接口
背板通道接口 2x 100 GE CFP2
Base Channel接口 2x 10 GE SFP+
管理接口 1x GE RJ45
包含收发器 2x 10 GE SFP+ SR
40 GE背板通道支持 Yes
10 GE背板通道支持 Yes
GE背板通道支持 —
系统性能
最大网络吞吐量 200 Gbps
最大并发会话数 135 Million
每秒新建会话 (TCP) 3.6 Million
电源和环境
耗电量 (平均 / 最大) 280 / 400 W
散热 955 BTU/h
运行温度 32–104°F (0–40°C)
存储温度 -13–158°F (-35–70°C)
湿度 20–90% 无结露
合规
证书 FCC Part 15 Class A, C-Tick, VCCI, CE, UL/cUL, CB
FORTIGATE 5001D
应用控制吞吐量 3 18 Gbps
NGFW吞吐量 4 10 Gbps
威胁防护吞吐量 5 7.7 Gbps
CAPWAP吞吐量 6 15 Gbps
虚拟域 (默认/最大) 10 / 500
最多支持FortiToken数量 5,000
最多支持注册FortiClient数量 20,000
最多支持FortiAP数量 (总计 / 隧道模式) 4,096 / 1,024
电源和环境
耗电量 (平均 / 最大) 189 / 226 W
散热 774 BTU/h
运行温度 32–104°F (0–40°C)
存储温度 -13–158°F (-25–70°C)
湿度 20–90% 无结露
合规
认证 FCC Part 15 Class A, C-Tick, VCCI, CE, UL/cUL, CB, ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6
NEBS Certified —
注: 所有性能指标均为“最大”值,根据设备配置不同会有变化。IPsec VPN性能是基于512字节UDP包和AES-256+SHA1算法测出。1. IPS性能是使用1M字节HTTP文件和企业混合流量测出。2. SSL检测吞吐量是开启IPS、AES256-SHA TLS v1.2算法,使用HTTP流量测出。3.应用控制性能是使用64字节HTTP流量测出。4. NGFW吞吐量是基于企业混合流量,同时开启IPS和应用控制功能测出。5.威胁防护吞吐量是基于企业混合流量,同时开启IPS、应用控制和防病毒功能测出。6. CAPWAP性能基于1444字节UDB包测出。
网络刀片
FortiController 5913C高性能、SPU DP2加速网络刀片,配置有100GE接口和10/40GE背板和1GE网管背板通道接口。
GLOBAL HEADQUARTERSFortinet Inc.899 KIFER ROADSunnyvale, CA 94086United StatesTel: +1.408.235.7700www.fortinet.com/sales
EMEA SALES OFFICE905 rue Albert Einstein06560 Valbonne FranceTel: +33.4.8987.0500
APAC SALES OFFICE300 Beach Road 20-01The ConcourseSingapore 199555Tel: +65.6395.2788
LATIN AMERICA SALES OFFICESawgrass Lakes Center13450 W. Sunrise Blvd., Suite 430 Sunrise, FL 33323United StatesTel: +1.954.368.9990
Copyright© 2017 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.
FST-PROD-DS-GT5KBUNDLE FG-5KBUNDLE-DAT-R9-201701
FortiGate® 5000-Series Solution
定购信息
SKU 组件
仅硬件Bundle 硬件+ 服务Bundle 机框 安全背板 网络背板 服务*
FG-5144C-HW-BASE FG-5144-BASE-BDL-950-DD FG-5144C-DC 2x FG-5001D 1x FCTRL-5913C
UTM Bundle (24x7 FortiCare加NGFW, AV, Web Filteringd和 Antispam服务)(每一块安全背板)
FG-5144C-HW-BASE-2 FG-5144C-BASE-2-BDL-950-DD FG-5144C-DC 4x FG-5001D 1x FCTRL-5913C
FG-5144C-HW-BASE-3 FG-5144C-BASE-3-BDL-950-DD FG-5144C-DC 6x FG-5001D 2x FCTRL-5913C
FG-5144C-HW-BASE-4 FG-5144C-BASE-4-BDL-950-DD FG-5144C-DC 8x FG-5001D 2x FCTRL-5913C
FG-5144C-HW-FULL FG-5144-FULL-BDL-950-DD FG-5144C-DC 12x FG-5001D 2x FCTRL-5913C
只可适用于硬件+服务Bundle
Bundle项 SKU 描述FortiGate 5144C BASE HW Bundle FG-5144C-HW-BASE 14U 14-slot 5144C chassis, 2x FG-5001D security blades, 1x FCTRL-5913C networking blade, 4 PEMs, 4 fan Units, 2 shelf FRU
data modules, 1 shelf manager, front and RTM air baffles, and 4 pairs DC cables for connecting to FG-5053B power shelves.
FortiGate 5144C BASE HW Bundle with Services FG-5144C-BASE-BDL-950-DD FG-5144C-HW-BASE plus 2x 24x7 FortiCare and FortiGuard UTM bundles for FG-5001D security blades and 1x 24x7 FortiCare for FCTRL-5913C networking blade.
FortiGate 5144C BASE 2 HW Bundle FG-5144C-HW-BASE-2 14U 14-slot 5144C chassis, 4x FG-5001D security blades, 1x FCTRL-5913C networking blade, 4 PEMs, 4 fan units, 2 shelf FRU data modules, 1 shelf manager, front and RTM air baffles, and 4 pairs DC cables for connecting to FG-5053B power shelves.
FortiGate 5144C BASE 2 HW Bundle with Services FG-5144C-BASE-2-BDL-950-DD FG-5144C-HW-BASE-2 plus 4x 24x7 FortiCare and FortiGuard UTM bundles for FG-5001D security blades and 1x 24x7 FortiCare for FCTRL-5913C networking blade.
FortiGate 5144C BASE 3 HW Bundle FG-5144C-HW-BASE-3 14U 14-slot 5144C chassis, 6x FG-5001D security blades, 2x FCTRL-5913C networking blade, 4 PEMs, 4 fan units, 2 shelf FRU data modules, 1 shelf manager, front and RTM air baffles, and 4 pairs DC cables for connecting to FG-5053B power shelves.
FortiGate 5144C BASE 3 HW Bundle with Services FG-5144C-BASE-3-BDL-950-DD FG-5144C-HW-BASE-3 plus 6x 24x7 FortiCare and FortiGuard UTM bundles for FG-5001D security blades and 2x 24x7 FortiCare for FCTRL-5913C networking blade.
FortiGate 5144C BASE 4 HW Bundle FG-5144C-HW-BASE-4 14U 14-slot 5144C chassis, 8x FG-5001D security blades, 2x FCTRL-5913C networking blade, 4 PEMs, 4 fan units, 2 shelf FRU data modules, 1 shelf manager, front and RTM air baffles, and 4 pairs DC cables for connecting to FG-5053B power shelves.
FortiGate 5144C BASE 4 HW Bundle with Services FG-5144C-BASE-4-BDL-950-DD FG-5144C-HW-BASE-4 plus 8x 24x7 FortiCare and FortiGuard UTM bundles for FG-5001D security blades and 2x 24x7 FortiCare for FCTRL-5913C networking blade.
FortiGate 5144C FULL HW Bundle FG-5144C-HW-FULL 14U 14-slot 5144C chassis, 12x FG-5001D security blades, 2x FCTRL-5913C networking blade, 4 PEMs, 4 fan units, 2 shelf FRU data modules, 1 shelf manager, front and RTM air baffles, and 4 pairs DC cables for connecting to FG-5053B power shelves.
FortiGate 5144C FULL HW Bundle with Services FG-5144C-FULL-BDL-950-DD FG-5144C-HW-FULL plus 12x 24x7 FortiCare and FortiGuard UTM bundles for FG-5001D security blades and 2x 24x7 FortiCare for FCTRL-5913C networking blade.
可选项 SKU 描述
Chassis
FortiGate 5144C Shelf Manager FG-5144C-SM 5144C shelf manager with ShMM-700R mezzanine card and radial IPMB bus
FortiGate 5144C Fan Tray FG-5144C-FAN-F FG-5144C fan tray front
FortiGate 5144C Fan Tray FG-5144C-FAN-R FG-5144C fan tray rear
FortiGate 5144C Shelf FRU Data Module FG-5144C-SFRU FG-5144C shelf FRU data module
FortiGate 5144C Power Entry Module FG-5144C-PEM FG-5144C PEM, power entry module
FortiGate 5144C Air Filter FG-5144C-AF FG-5144C air filter
FortiGate 5144C Blank Panel FG-5144C-ABF 5000 front slot blank panel with air baffle (aluminum/plastic)
FortiGate 5144C Blank Panel FG-5144C-ABR 5000 RTM slot blank panel with air baffle (aluminum/plastic)
FortiGate 5053B Power Converter Tray FG-5053B AC power converter shelf for high capacity 5000 chassis, supports up to 4 PSU-5000B power supply units, unpopulated
FortiGate 5000 Series Power Supply Unit PSU-5000B Power supply unit for FG-5000 series, AC power supply unit, 1,200 Watts maximum, requires FortiGate 5053B shelf
安全刀片FortiGate 5001D FG-5001D Security blade with 2x 40 GE QSFP+, 2x 10 GE SFP+/GE SFP slots, 2x GE RJ45 management ports, 200 GB SSD onboard storage
网络刀片FortiController 5913C FCTRL-5913C Networking blade with 2x 100 GE CFP2 fabric ports and 2x 10 GE SFP+ base ports, includes 2 SR SFP+