Every FortiGate hardware offers the following basic functionality:
![]() |
Virtual Private Network (VPN)
Fortinet provides fundamental VPN functionality, either as hardware through FortiGate appliances or as software through FortiClient. For example, multiple locations can be securely connected through a VPN network using two FortiGates (or standard-compliant third-party devices). |
![]() |
SD-WAN Services
SD-WAN is a way to manage a variety of connections and dynamically route traffic over the best available connection. SD-WAN provides both redundancy and increased capacity with multiple internet connections. Overall, SD-WAN solutions are significantly more cost-effective than MPLS when considering installation and deployment time. |
![]() |
Application Control
There are more and more applications relying on web services, making life increasingly difficult for administrators from a security standpoint. Therefore, it is becoming more important to work granularly to ensure performance, speed, reliability, and above all, security. An example is the misuse of protocols that can be tunneled and thus separated from application traffic. |
![]() |
FortiCare Support
Fortinet's expert team is available 24/7 for issues and handles tickets promptly. With FortiCare, you also receive important firmware updates for your Fortinet devices. There is an advance exchange that promptly provides you with a replacement device after approval of the RMA ticket for defective devices. The faulty device does not need to be sent to Fortinet beforehand. Please note that without a license, you can only use FortiCare support for 90 days. |
Fortinet Advanced Threat Protection (ATP) provides the following features in addition to the basic functionality of every FortiGate:
![]() |
Antivirus Fortinet's optimized antivirus technology uses machine learning to provide multi-layered real-time protection against numerous attack forms. It can recognize known virus signatures but can also identify altered and entirely new virus variants through grayware scans. Fortinet provides a spectrum of known viruses to accelerate the process of virus analysis. Part of Fortinet Advanced Malware Protection (APM). |
![]() |
Intrusion Prevention System (IPS) Intrusion Prevention Systems provide protection against known and future threats at the network level. In addition to signature-based detection, anomaly-based detection is performed. The system raises an alarm when data matches a specific attack behavior profile. In conjunction with FortiManager and FortiAnalyzer, highly complex VPN infrastructures can be implemented flexibly, easily, cost-effectively, and in a multi-tenant manner. |
![]() |
Mobile Security The drastic increase in mobile devices, some of which are also private property of users, presents companies with a new challenge: control over devices that, due to legal circumstances, cannot be accessed or can only be accessed in a highly restricted and regulated manner. With Fortinet Mobile Security, devices (type & manufacturer) and installed operating systems (type & release) can be identified based on specific parameters. Part of Fortinet Advanced Malware Protection (APM). |
![]() |
FortiSandbox Cloud With the powerful cloud-based FortiSandbox, companies and authorities can more reliably detect and prevent highly dangerous attacks, such as Advanced Persistent Threats (APTs). It is typically at the end of the line of many security mechanisms in an IT infrastructure, and it can take a few minutes to clear or eliminate threats. Part of Fortinet Advanced Malware Protection (APM). |
Fortinet Unified Threat Protection (UTP) offers the following features in addition to Fortinet ATP:
![]() |
Antispam Fortinet's antispam technology offers comprehensive capabilities to identify and block spam emails. In the same way, malicious email attachments are reliably detected to fend off attacks from spam bots and compromised systems. FortiGate and FortiWiFi platforms offer integrated antispam functionality as part of their multi-layered protection mechanisms. These are kept up-to-date through regular FortiGuard updates. |
![]() |
Web Filter Unauthorized internet surfing and the use of web-based applications often result in productivity loss, high network load, malware infections, and data loss. Through URL filtering, content filtering, and the FortiGuard web filter service, it can be ensured that no one stays where they shouldn't. At the same time, the network is kept secure by blocking inappropriate content. |
Fortinet Enterprise Protection offers the following features in addition to Fortinet UTP:
![]() |
Inline CASB Database and DLP The FortiGate ZTNA access proxy can be configured to function as an inline CASB, providing ZTNA access controls for SaaS traffic. DLP (Data Loss Prevention) is a cybersecurity solution that detects and prevents data breaches. DLP enables organizations to detect data loss and prevent unauthorized transmission of data outside the organization, as well as the unintended destruction of sensitive or personal data. |
![]() |
AI-based Inline Malware Prevention
The FortiGuard AI-based inline malware prevention service prevents suspicious files from entering the organization. A combination of AV, advanced threat filtering, and AI/ML isolates file-based threats, eliminating false positives and focusing on unknown threats that may pose a real risk. |
| FortiConverter Migrating old, complex device configurations to new next-generation solutions can be a significant challenge and take a lot of time. Often, errors are also made during this process. With FortiConverter, you can enable a smooth migration while automatically eliminating errors and duplicate information. This saves you time and effort. |
|
![]() |
Attack Surface Security The FortiGuard Attack Surface Security Service, integrated into FortiGate next-generation firewalls, continuously monitors and assesses your organization's security fabric infrastructure and existing controls to provide an overall assessment of your security posture. |