Fortinet FortiGate-111C review
The most security features we’ve seen in an SMB appliance, it’s easy to deploy and manage, and the price is right too
Review Date: 23 Jan 2012
Reviewed By: Dave Mitchell
Price when reviewed: From £2,442 (£2,930 inc VAT)
Features & Design
Value for Money
Sitting at the top of Fortinet’s family of SMB appliances, the FortiGate-111C offers a remarkable range of security measures. At its foundation is the standard fare of SPI firewall plus IPsec and SSL VPNs, to which it adds intrusion prevention, antivirus, anti-malware, anti-spam, web filtering and P2P app controls.
Then there’s data leak prevention (DLP), integrated management of Fortinet’s FortiAP wireless APs, endpoint protection and vulnerability scanning. And an optional 64GB SSD can be used for high-speed web caching, logging, DLP archiving and quarantining.
Pairs of appliances can be used for high availability, and with one at each end of a site-to-site link they can perform WAN optimisation. The 111C has eight switched 10/100 Ethernet LAN ports and a pair of Gigabit WAN ports. It supports both NAT and transparent modes, and we used the latter to drop it between the lab’s LAN and internet connection. The cooling fans are very noisy, so the appliance will need to go in a cabinet.
Fortinet quotes impressive performance figures, with an intrusion prevention system (IPS) throughput of 450Mbits/sec. We tested this using the lab’s Ixia Optixia XM2 chassis equipped with two Xcellon-Ultra NP blades, and saw throughput settle at almost 460Mbits/sec.
The web interface opens with a smart dashboard, which can be customised with widgets. These include traffic history graphs for selected interfaces, tables for top applications and sessions, licence information, cache usage and system resources.
Firewall policies comprise sources, destinations, schedules, services and actions, and you can assign various UTM profiles to each. Antivirus profiles define which protocols you want scanned and whether you want infections to be removed or quarantined.
Fortinet’s own URL filtering database provides eight main categories and almost 80 subcategories. You can block or allow entire categories or subcategories, activate logging for each entry, apply usage quotas and enable a global Safe Search feature.
Application control policies use sensors for selected apps, and Fortinet provides almost 2,000 from which to choose. The FortiGuard anti-spam measures are also controlled with policies that decide which mail protocols to scan, and how spam is handled.
Data leak prevention which is really interesting and it is well secured too.
By benjamin5 on 24 Jan 2012
Poor review - No Hidden Costs
Purchased device based on recommendation here. What has not been mentioned is the license fees required starting at £1100 that you find you need when you come to set the device up!
Poor review - Cost of £2,400 for the device does not include required licenses - true cost in excess of £3,900.00
By Gary24 on 4 Jan 2013
Prices start from £2,400 and you don't have to buy all the features. In the printed review in Issue 210 it states clearly that all features at that time cost £3,543.
So far I haven't found another vendor that offers the same high level of features in an SMB security appliance for this price.
By DaveMitchell on 4 Jan 2013
- Will the next Windows 8.1 update arrive next month?
- BT One Phone lets SMBs ditch landlines for mobiles
- Microsoft shows Modern apps running in desktop windows
- Apple and IBM buddy up for enterprise push
- Windows Phone 8.1 starts rolling out to Nokia phones
- Government broadband plans "lack ambition"
- SMBs get Office 365 price cuts, new plans
- Windows 7: you can keep it until 2020
- BlackBerry Passport's square for spreadsheets
- Microsoft to release six updates this Patch Tuesday
- How Google Glass ruined my lunch hour
- Smartphone battery packs: can a USB power pack beat the festival battery blues?
- Windows Easy Transfer – not so "easy" in Windows 8.1
- Formula 1: what a difference virtualisation makes
- Office of the future: comfy chairs and tablets everywhere
- I went to Glastonbury and the only thing that got high was my smartphone
- Meet the robots helping teach children
- PaperLater: would you pay to print the internet?
- Amazon vs Kobo: how much to make the ebook switch?
- Phishing emails: how I nearly got caught out
- Five worst SMB security threats... and how to solve them
- Doing business in a social era
- How to configure SysLookup for your network
- The 18 best Outlook tips for increasing productivity: become an Outlook expert with these lesser-known tips
- Office: should you buy it, rent it - or dump it?
- Small server vs cloud: which is best for SMBs?
- The best mobile apps for business
- Windows XP: Microsoft’s ticking time bomb
- gTLDs: what your business should know about new domain names
- Can Microsoft survive? A look at servers and tools
- How to add in-app purchasing to an iPhone, Android or Windows app
- Remote-control ransomware: TeamViewer and software hardball
- Why laptops with serial ports matter to the Internet of Things
- Make your mobile battery last longer
- Small steps into handling Big Data
- Nexus 5: does it really run stock Android?
- How to get broadband to a garden office
- How to write your company's IT security policy
- Raspberry Pi and Wolfram: a must-have for every child
- Could you get by with Office Web Apps?