FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
wling_FTNT
Staff
Staff
Article Id 195181

Description


This article describes that the IPS, NGFW, and Threat Protection throughput specifications mentioned on FortiGate data sheets use Fortinet’s Enterprise Traffic Mix. This traffic mix closely resembles that used by NSS testing and is comprised of a good mix of applications with different packet sizes.

 

For example FortiGate 200F performance datasheet (attached: fortigate-200f-series.pdf).

 

200F.JPG

 

Note that different throughput specifications leverage different types of inspection for best security efficacy, a short explanation is below:

IPS: Firewall, Intrusion Prevention with logging enabled.

NGFW:  Firewall, Intrusion Prevention, and Application Control with logging enabled.

Threat Protection: Firewall, Intrusion Prevention, Application Control, Malware Protection (includes Antivirus, Malicious URL Filtering, and FortiSandbox), and logging enabled.

 

Scope

 

FortiGate.

 

Solution

The composition of the traffic flows is illustrated below.