Fortinet FortiGate-111C review
The most security features we’ve seen in an SMB appliance, it’s easy to deploy and manage, and the price is right too
Review Date: 23 Jan 2012
Reviewed By: Dave Mitchell
Price when reviewed: From £2,442 (£2,930 inc VAT)
Features & Design
Value for Money
Sitting at the top of Fortinet’s family of SMB appliances, the FortiGate-111C offers a remarkable range of security measures. At its foundation is the standard fare of SPI firewall plus IPsec and SSL VPNs, to which it adds intrusion prevention, antivirus, anti-malware, anti-spam, web filtering and P2P app controls.
Then there’s data leak prevention (DLP), integrated management of Fortinet’s FortiAP wireless APs, endpoint protection and vulnerability scanning. And an optional 64GB SSD can be used for high-speed web caching, logging, DLP archiving and quarantining.
Pairs of appliances can be used for high availability, and with one at each end of a site-to-site link they can perform WAN optimisation. The 111C has eight switched 10/100 Ethernet LAN ports and a pair of Gigabit WAN ports. It supports both NAT and transparent modes, and we used the latter to drop it between the lab’s LAN and internet connection. The cooling fans are very noisy, so the appliance will need to go in a cabinet.
Fortinet quotes impressive performance figures, with an intrusion prevention system (IPS) throughput of 450Mbits/sec. We tested this using the lab’s Ixia Optixia XM2 chassis equipped with two Xcellon-Ultra NP blades, and saw throughput settle at almost 460Mbits/sec.
The web interface opens with a smart dashboard, which can be customised with widgets. These include traffic history graphs for selected interfaces, tables for top applications and sessions, licence information, cache usage and system resources.
Firewall policies comprise sources, destinations, schedules, services and actions, and you can assign various UTM profiles to each. Antivirus profiles define which protocols you want scanned and whether you want infections to be removed or quarantined.
Fortinet’s own URL filtering database provides eight main categories and almost 80 subcategories. You can block or allow entire categories or subcategories, activate logging for each entry, apply usage quotas and enable a global Safe Search feature.
Application control policies use sensors for selected apps, and Fortinet provides almost 2,000 from which to choose. The FortiGuard anti-spam measures are also controlled with policies that decide which mail protocols to scan, and how spam is handled.
Data leak prevention which is really interesting and it is well secured too.
By benjamin5 on 24 Jan 2012
Poor review - No Hidden Costs
Purchased device based on recommendation here. What has not been mentioned is the license fees required starting at £1100 that you find you need when you come to set the device up!
Poor review - Cost of £2,400 for the device does not include required licenses - true cost in excess of £3,900.00
By Gary24 on 4 Jan 2013
Prices start from £2,400 and you don't have to buy all the features. In the printed review in Issue 210 it states clearly that all features at that time cost £3,543.
So far I haven't found another vendor that offers the same high level of features in an SMB security appliance for this price.
By DaveMitchell on 4 Jan 2013
- AMD’s "Seattle" ARM chips set for 2014 release
- Adobe’s subscription-only Creative Cloud goes live
- BBC "misled" MPs over failed £100 million IT project
- Join the PC Pro Business Lunch for the finance sector
- MPs "shocked" Huawei-BT deal wasn't vetted
- Government wastes "three days a year" booting PCs
- Windows 8.1 brings back the Start button
- Microsoft connects Skype to Lync
- Cisco moves to block Microsoft-Skype deal
- Half of the UK’s biggest sites break cookie rules
- Adobe Dreamweaver CC review: first look
- Huawei Ascend P6 review: first look
- Adobe Illustrator CC review: first look
- Let MPs tell us what they really want ISPs to block
- Adobe Photoshop CC review: first look
- WWDC 2013 and iOS 7 launch: live blog
- Sony VAIO Pro review: first look
- Want child porn blocked? Meet the IWF
- Is it worth upgrading a media centre to Windows 8?
- Flickr redesign: is it enough to tempt photographers back?
- Software subscriptions return us to a life of servitude
- How to get a job in cloud computing
- Are today's tech start-ups simply get-rich-quick schemes?
- Choosing the right tablet for business
- Best free antivirus for 2013
- The best business broadband: how to choose the right package
- Choosing your web hosting package: space, bandwidth, service-level agreements and email handling
- Windows Server 2012 features in-depth
- How to protect your business against spear phishing
- How to install virtual servers with Hyper-V
- Facebook "click on the photo" scams: how they work
- Three alternatives to Word's spelling and grammar checker
- Google two-step verification: a must for business email
- Microsoft Office and the death of upgrades
- The ICO's shame-faced u-turn on cookies
- Start8 and ModernMix: making Windows 8 work on a desktop
- How to boost your mobile reception
- How to fix Facebook: Social Fixer
- Taking the stress out of WordPress updates
- Where to download free web fonts
There are dozens of exciting prizes up for grabs on PC Pro Competitions. All our competitions are free to enter. Try your luck.ENTER NOW