• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •

FortiOS CarrierFortiOS Carrier

Securing Carrier Networks

Carrier-GradeSecurity Solutions

Multi-Threat Security and Content ProtectionFortiOS™ Carrier security solutions utilize a combination of signature, anomaly, behavioral and heuristic detection engines to provide real-time multi-layered security. Fortinet’s FortiOS Carrier provides a high-performance, scalable solution to detect and eliminate a wide spectrum of attacks including blended threats, intrusion attempts, viruses, trojans, worms, spyware, grayware, adware and denials-of-service.

FortiOS Carrier Security Platforms

Fortinet’s FortiOS Carrier security platforms provide end-to-end mobile network and device protection. FortiGate network-based ASIC-accelerated hardware platforms, available as integrated platforms or modular ATCA based platforms scale to meet the capacity and performance requirements of the largest networks. FortiOS Carrier security engines can be used separately or together to enable a comprehensive security solution based on the network and service requirements. Also available is FortiClient endpoint protection software that utilizes the power of Fortinet’s sophisticated security engines to protect mobile and personal computing devices and to protect the network from malware propagated by client devices.

Antivirus Protection Profi le

Antispam Protection Profi le

Client Protection

Cyber crime and network attacks pose serious threats to subscribers that can lead to service outages, customer dissatisfaction and increased support costs. FortiOS Carrier provides protection for client devices such as PC’s, basic wireless handsets and Windows Mobile and Symbian OS based smartphones.

Core Network Protection

Carrier-grade GTP Firewall:- GTP Profi le associated with Firewall policy- 3GPP 29.060 version 6.9.0

Transparent mode MPLS:- Intrusion Protection System (IPS) scanning

of MPLS encapsulated traffi c

MMS / IMS Protection

MMS Antivirus / Antispam:- MM1, MM3, MM4, MM7 interfaces - Reporting based on MSISDN and user agent

Secure Next Generation networks:- SIP Signalling fi rewall for NGN/IMS networks- Supports SIP/SDP and ALG driven NAT/NAPT

FortiGate-5050FortiGate-5020 FortiGate-5140

FortiClientMobile / PC

Software

FortiGateIntegrated Security PlatformsPowered by FortiOS Carrier

FortiGateModular ATCA Security Platforms

Powered by FortiOS Carrier

Protection Profiles

Associated on a per MISDN / per user basis.

The protection profi le provides:- Antivirus / Antispam- URL Categorization- Intrusion Protection (IPS)- Instant Messenger control

Parental Control Application

Associated on a per MISDN / per user basis.

The parental control application provides:- Filter Web URL categories- Content Rating / Blocking- Opt-in / Opt-out depending on the default

protection profi le settings

ADM-XB2

2-Port 10-Gigabit Ethernet 4-Port Gigabit Ethernet

ASM-FB4

FortiGate-3810A AMC Expansion Modules

FortiGate-3810A

FortiGate-3600AF iG 3600A

SIP Statistics / Logging

Direct / Proxy SIP Calling

SIP/SDP NAT/NAPT Context Based NAT

Message Rate Limiting

Redundant Proxy Path

SIP ALG Stateful Failover

NAT Support for Call Detail Record (CDR)

Protocol Anomaly Detection and Prevention

Multiple Filter Options Message, APN, IE removal, etc.)

Sanity Checking

Stateful Inspection

Over Billing Protection

High Availability Virtual Domain Support

MMS Content Scanning / Keyword Blocking

Antivirus Scanning / File Type Blocking

Antispam Detection

Per user services, such as URL fi ltering and logging. Reporting based on MSISDN and user agent. Notifi cations can be sent to the handset (sender/recipient)

Scanning of all MMS interfaces

VLAN and High Availability Support

FortiOS Carrier Security SolutionsFortiOS Carrier provided a fully integrated and complete solution securing the Application, Control, Transport and Access layers of the IP infrastructure network.

GTP Firewall

SIP / IMS Signalling Firewall

Secure Multimedia Messaging Service (MMS)

INTERNET

SUBSCRIPTION SERVICES

MM3

MM4MM7

WAPGateway

MM1

MMSC &FORIEGN

OPERATORSVALUE-ADDED

SERVICES

CENTRALIZED MANAGEMENT

CENTRALIZED REPORTING

P-CSCF

S-CSCF

HSS

I-CSCF

Applications

Media Gateway

INTERNET

SUBSCRIPTION SERVICES

SIP / DIAMETER

FORIEGNOPERATORS

PSTN / NGN

CENTRALIZED MANAGEMENT

CENTRALIZED REPORTINGIMSINFRASTRUCTURE

SGSN GGSNGn Gn

Gp

Gi

FORIEGNOPERATORS

INTERNET

CENTRALIZED MANAGEMENT

CENTRALIZED REPORTINGSUBSCRIPTION SERVICES

FortiGuard™ Distribution Network / Update ManagerFortiGuard is a global network of redundant high speed database servers that deliver real-time signature updates. FortiGuard is configurable in a hierarchical architecture where signature updates are cached in real-time from the Fortinet global database to a locally hosted service provider database. This enables service providers to flexibly customize their protection configuration while maximizing performance, ensuring security, and sustaining service levels. FortiGuard provides real-time ‘push / pull’ update services for Antivirus, Content Filtering, Antispam, System Software Updates and Intrusion Prevention Services.

Global Virus Research TeamFortinet’s Antivirus security services are created, updated and managed by a global team of Fortinet security professionals working around-the-clock, seven days-a-week to ensure that the latest attacks are detected and blocked before they can harm your corporate resources or infect your end-user computing devices. Fortinet provides the fastest Antivirus signature response times in the industry.

©2006-2007 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiOS, FortiAnalyzer, FortiASIC, FortiLog, FortiCare, FortiManager, FortiWiFi, FortiGuard, FortiClient, and FortiReporter are trademarks or registered trademarks of the Fortinet Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Licensed under U.S. Patent No. 5,623,600. Although Fortinet has attempted to provide accurate information in these materials, Fortinet assumes no legal responsibility for the accuracy or completeness of the information. Please note that no Fortinet statements herein constitute or contain any guarantee, warranty or legally binding representation. All materials contained in this publication are subject to change without notice, and Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice. SOL123 1207 R2

GLOBAL HEADQUARTERSFortinet Incorporated1090 Kifer Road, Sunnyvale, CA 94086 USATel +1-408-235-7700 Fax +1-408-235-7737www.fortinet.com/salespartners@fortinet.com

EMEA SALES OFFICE-FRANCEFortinet Incorporated120 rue Albert Caquot06560, Sophia Antipolis, FranceTel +33-4-8987-0510 Fax +33-1-5858-0025

APAC SALES OFFICE-HONG KONGFortinet IncorporatedRoom 2429-2431, 24/F Sun Hung Kai CentreNo.30 Harbour Road, WanChai, Hong KongTel +852-3171-3000 Fax +852-3171-3008

Fortinet Means Carrier-Grade SecurityFortiOS Carrier Security Solutions deliver the performance, reliability and scalability to protect next-generation IP based networks and services. Carrier Network Internet Protocol (IP) ServicesCarrier networks are evolving to an all-IP infrastructure capable of delivering a vast array of new multimedia services to drive revenue growth. IP infrastructure also allows carriers to reduce capital costs, speed time-to-market and gain competitive advantage. However IP networks also present new challenges. Maintaining quality-of-service, reliability and security equivalent to circuit-switched networks is critical to the success and profitability of new IP-based services.

IP networks are inherently open and therefore a target of hackers and criminals. Theft of services, identity fraud, and denial-of-service attacks are common. Spam, spyware, grayware, adware and inappropriate content clog networks and impact customer satisfaction. Subscribers expect carrier IP-based services to be reliable and secure. Managing service quality, support costs and revenue assurance is critical.

Fortinet FortiOS™ CarrierFortinet FortiOS Carrier platforms provide a fully integrated and complete solution to detect and eliminate a wide spectrum of attacks at all layers of the IP infrastructure. Patented ASIC-accelerated hardware platforms powered by Fortinet’s award winning FortiOS, enable an integrated portfolio of UTM (Unifi ed Threat Management) security services that deliver the highest level of multi-threat protection with industry-leading performance and scalability. Fortinet solutions are fully IPv6 compatible and support “dual-stack” and “IPv4 tunneling” for seamless transition to IPv6. The fully integrated FortiManager/FortiAnalyzer unifi ed management, logging and reporting systems make deployment, maintenance and operation easy and cost-effective.

Threat Evolution

Firewall Inspection / VPN

Proc

essi

ng P

ower

Req

uire

d

IPS(Intrusion Protection)

CompleteContent Level

Inspection

1990 1995 2000 2005 2007+

Viruses

MMS Malware

Email Spam

Spyware

Phishing / Pharming

Inapprpriate Web Content

Sophisticated Worms

Basic Worms

Intrusions

Network Eavesdropping

DOS / DDOS

CONTENT LEVEL

NETWORK LEVEL

SECURITYMulti-Layered

PERFORMANCEWire-Speed

FLEXIBILITYModular

COST-EFFECTIVECAPEX / OPEX

MANAGEABLEIntegrated

RELIABLEField Proven

Carrier-Grade Security Solutions

FortiOS Multi-Layered Security

Network / Content Security

FirewallIDS / IPS

Antivirus / Antispyware

Web Filtering

Antispam

Traffi c Shaping

IPsec / SSL VPN Co

mp

lete

Co

nte

nt

Pro

tect

ion

Mul

ti-L

ayer

ed S

ecur

ity

Integrated Management, Logging & Reporting

Management, Logging & ReportingFortiASIC Hardware Acceleration

Network / Content Processing

Ind

ust

ry L

ead

ing

Perf

orm

ance

Prot

ecti

on A

cros

s O

SI S

tack

NetworkProcessor

Fortinet Unique Intelectual Proptery

ContentProcessor

FortiASICTM - CP

FortiASICTM - NP