Re: Fortigate 3.0

Russ,
Ok - you got me - we have put in the Fortiagte 100a. The support for SSL
was the kicker. At this point it is set up in a simple transparent mode and
we had the thought of waiting for 3.0 to do the "real" configuration. Any
idea when this would be comming out?

"Somebody." <somebody.@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:tW2bf.1891$43.1122@xxxxxxxxxxxxxxx!nnrp1.uunet.ca...
>I had a demo of Fortigate's version 3.0 OS yesterday. It's no longer NDA
>so I can talk about it.
>
> Besides dozens of little things that make the GUI (which was already very
> good) easier and faster to use, they've added SSL VPN (That's VPN
> connection without installing client software!), doubled the throughput of
> the AV engine while getting clear of the Trend patents, added a virtual
> inteface construct that will be familiar to all you route-based VPN fans
> from NetScreen landd, and improved reporting and logging to the point that
> there are some graphs right on the unit you can pull off now, and the
> boxes can now talk to Active Directory so your logging can include user
> name. In fact *you can replace a Websense installation with this box now*
> for all but the most very complex needs. Wow.
>
> The management app that was Windows based for the FortiManager product is
> no more, it's all browser based for every box they sell, so it's
> completely platform independant.
>
> The FortiManager, FortiGate, and Fortilogger work better together, even
> displaying each other's information within their GUIs.
>
> Fortigates have added Peer to Peer and IM to the supported Antivirus
> protocols list, and improved their capabilities and explicit blocking
> rules for these protocols, (ie you can for example block files but not
> chat if you wanted to) as well as underestanding the usernames used within
> the program (so you could whitelist 3 MSNM users and block the rest for
> example) and they're re-organized the IPS in a very useful way that will
> allow tremendous flexibility by policies for application of IPS.
>
> In short, almost my entire wish list was fulfilled, and I'm *really*
> excited about these boxes now, boxes for which I was already a big fan.
>
> Slated for release in December, to run on all current boxes.
>
> --
>
> -Russ.
>
> *The only thing you truly control, is you.*
>
>


.

Relevant Pages

  • Re: PCI security conundrum
    ... VPN of PPTP ... Kick SSL to only allow ssl v3 ... Get a external cert ... "The SSL-based service running on this host appears to support the use of "weak" ciphers, which are those that have key-lengths of less than 128 bits." ...
    (microsoft.public.windows.server.sbs)
  • Re: PCI security conundrum
    ... ssl v2 support in IIS ... VPN of PPTP ... Kick SSL to only allow ssl v3 ... Get a external cert ...
    (microsoft.public.windows.server.sbs)
  • RE: Cache.EffectivePrivateBytesLimit shrinks as box gets bigger?
    ... control the cache size and the machine with 2gb of physical ram/3gb page file ... The smaller machine EffectivePrivateBytesLimit comes out at 60% of physical ... Microsoft MSDN Online Support Lead ... When I started to look into it, I found that the older boxes all had ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Secure workgroups!
    ... many cheap boxes rather than few expensive boxes. ... require an authentication server and a directory, ... which VPN product to use! ... simpler to manage than using hardware ...
    (microsoft.public.security)
  • RE: Cache.EffectivePrivateBytesLimit shrinks as box gets bigger?
    ... virtual memory available for cache useage. ... Microsoft MSDN Online Support Lead ... When I started to look into it, I found that the older boxes all had ...
    (microsoft.public.dotnet.framework.aspnet)