Fortinet FortiGate-111C review
The most security features we’ve seen in an SMB appliance, it’s easy to deploy and manage, and the price is right too
Review Date: 23 Jan 2012
Reviewed By: Dave Mitchell
Price when reviewed: From £2,442 (£2,930 inc VAT)
Features & Design
Value for Money
Sitting at the top of Fortinet’s family of SMB appliances, the FortiGate-111C offers a remarkable range of security measures. At its foundation is the standard fare of SPI firewall plus IPsec and SSL VPNs, to which it adds intrusion prevention, antivirus, anti-malware, anti-spam, web filtering and P2P app controls.
Then there’s data leak prevention (DLP), integrated management of Fortinet’s FortiAP wireless APs, endpoint protection and vulnerability scanning. And an optional 64GB SSD can be used for high-speed web caching, logging, DLP archiving and quarantining.
Pairs of appliances can be used for high availability, and with one at each end of a site-to-site link they can perform WAN optimisation. The 111C has eight switched 10/100 Ethernet LAN ports and a pair of Gigabit WAN ports. It supports both NAT and transparent modes, and we used the latter to drop it between the lab’s LAN and internet connection. The cooling fans are very noisy, so the appliance will need to go in a cabinet.
Fortinet quotes impressive performance figures, with an intrusion prevention system (IPS) throughput of 450Mbits/sec. We tested this using the lab’s Ixia Optixia XM2 chassis equipped with two Xcellon-Ultra NP blades, and saw throughput settle at almost 460Mbits/sec.
The web interface opens with a smart dashboard, which can be customised with widgets. These include traffic history graphs for selected interfaces, tables for top applications and sessions, licence information, cache usage and system resources.
Firewall policies comprise sources, destinations, schedules, services and actions, and you can assign various UTM profiles to each. Antivirus profiles define which protocols you want scanned and whether you want infections to be removed or quarantined.
Fortinet’s own URL filtering database provides eight main categories and almost 80 subcategories. You can block or allow entire categories or subcategories, activate logging for each entry, apply usage quotas and enable a global Safe Search feature.
Application control policies use sensors for selected apps, and Fortinet provides almost 2,000 from which to choose. The FortiGuard anti-spam measures are also controlled with policies that decide which mail protocols to scan, and how spam is handled.
Data leak prevention which is really interesting and it is well secured too.
By benjamin5 on 24 Jan 2012
Poor review - No Hidden Costs
Purchased device based on recommendation here. What has not been mentioned is the license fees required starting at £1100 that you find you need when you come to set the device up!
Poor review - Cost of £2,400 for the device does not include required licenses - true cost in excess of £3,900.00
By Gary24 on 4 Jan 2013
Prices start from £2,400 and you don't have to buy all the features. In the printed review in Issue 210 it states clearly that all features at that time cost £3,543.
So far I haven't found another vendor that offers the same high level of features in an SMB security appliance for this price.
By DaveMitchell on 4 Jan 2013
- Microsoft supercharges PowerPoint with Office Mix
- Microsoft and Nokia deal tweaked ahead of completion
- Microsoft slashes custom XP support price
- Ubuntu LTS Server 14.04 extends cloud support
- Intel: PC sales are "encouraging"
- Google to rank encrypted pages higher
- Heartbleed: the race to reissue security certificates
- Dropbox boosts app line-up with Carousel and Mailbox for Android
- BlackBerry CEO says not selling off phones "any time soon"
- Microsoft halts business downloads of Windows 8.1 Update
- Hello Cortana, it's nice to meet you
- Windows 8.1 Update: an abject surrender
- The insane economics of Sky Now TV
- No such thing as a free app... so pay up if you want quality
- Time to outlaw crapware-laden installers
- Windows Phone 8.1 video: hands-on
- Office for iPad: key information
- Why every PC buyer owes Richard Durkin a debt of gratitude
- HTC One M8 vs Samsung Galaxy S5: 2014's big-hitters compared
- Windows XP end of life: key information
- Office: should you buy it, rent it - or dump it?
- Small server vs cloud: which is best for SMBs?
- The best mobile apps for business
- Windows XP: Microsoft’s ticking time bomb
- gTLDs: what your business should know about new domain names
- Can Microsoft survive? A look at servers and tools
- Can Microsoft survive? The future of Office
- A real-world guide to business VoIP
- Sack your PA: how to stay on top of your work life
- Power lies with the internet giants, not the governments
- Why laptops with serial ports matter to the Internet of Things
- Make your mobile battery last longer
- Small steps into handling Big Data
- Nexus 5: does it really run stock Android?
- How to get broadband to a garden office
- How to write your company's IT security policy
- Raspberry Pi and Wolfram: a must-have for every child
- Could you get by with Office Web Apps?
- The best Android antivirus apps for 2014
- Headings vs headers: how to use both in Word