Network & Communication

Distributed Denial of Service (DDoS) attacks remain a top threat to IT security and have evolved in almost every way to do what they do best: shut down access to your vital online services.

Unlike intrusion and malware attacks, DDoS attackers have learned that they don't need to attack only end-point servers to shut you down. They attack any IP address that routes to your network: unused IP addresses, Inter-router-link public IP addresses, or Firewall/Proxy/WiFi Gateway public IP addresses.

Cloud-based CDN and DNS-based cloud mitigation cannot protect you from these attacks. What is the impact to your business if your users cannot reach cloud services because your firewall or demarc router public IP is being DDoSed? Your CDN-based web servers may be up but your business is down!

Sophisticated multi-vector and multi-layer DDoS attacks use direct and reflected packets where the spoofed, randomized source IP addresses are impossible to ACL. These attacks are increasingly common as Mirai-style code has morphed into many variants and has been commercialized by providers of "stresser" sites. Anyone can call down large attacks for a few dollars.

To combat these attacks, you need a solution that dynamically protects a large attack surface.

A Different and Better Approach to DDoS Attack Mitigation

FortiDDoS massively parallel machine-learning architecture delivers the most advanced and lowest-latency DDoS attack mitigation on the market today, without the performance compromises normally associated with CPU-based systems. FortiDDoS inspects 100% of both inbound and outbound Layer 3, 4, and 7 packets, to the smallest packet sizes, resulting in the fastest and most accurate detection and mitigation in the industry.

In place of pre-defined or subscription-based signatures to identify attack patterns, FortiDDoS uses autonomous machine learning to build an adaptive baseline of normal activity from hundreds-of-thousands of parameters and then monitors traffic patterns against those baselines. Should an attack begin, FortiDDoS sees the deviation and immediately takes action to mitigate it, often from the first packet.

HIGHLIGHTS | Powerful Parallel Architecture = Flexible, Autonomous Defenses

FortiDDoS protects you from known and "zero-day" attacks without creating local or downloading subscription signatures for mitigation. Other vendors try to conserve CPU real-time by inspecting a relatively small number of parameters at a low sample rate, unless and until an explicit signature is created. FortiDDoS' massively parallel architecture samples 100% of even the smallest packets, for over 230,000 parameters for each Protection Profile. This method allows FortiDDoS to operate completely autonomously, finding some attacks on the FIRST packet and all attacks within two seconds - broader and faster mitigation than any other vendor or method. There is no need to adjust settings, read pcaps, or add regex-style manual signatures or ACLs in the middle of attacks. While attacks are being mitigated, FortiDDoS continues to monitor all other parameters to instantly react to added or changed vectors.

Extend, Ensure, and Secure Your Network

FortiExtender offers scalable, cost-effective, and resilient 5G, LTE, and Ethernet solutions. Driven by Fortinet's unique approach of Secure Networking, FortiExtender allows organizations business continuity, improved network availability while securing connectivity with wired broadband and cellular networks. \

From secure point of sale (POS) systems to vehicle fleet communication, FortiExtender provides reliable broadband access to the internet and extends the value of the Fortinet Security Fabric to support fluid business operations dependent on remote device connectivity.

Secure Networking | Security Fabric Integration

Integration with Fortinet SD-WAN and FortiGate appliances secures internet edge breakouts with a complete set of Web, Content, and Device security controls far beyond other industry solutions.

Optimal Signal Strength

A single PoE cable provides optimal 5G/LTE signal vs complex, lossy antenna cables or limited strength USB modems. Dual SIM and Dual Modem options offer up to 5X network reliability

Simplified Management

Manage your FortiExtender from the FortiManager, FortiGate, or FortiExtender Cloud dashboard, making network changes, security controls, and policy automation simple.

Features | Superior Management, Security, and Control

FortiExtenders are a true plug-and-play device. Once connected to the FortiGate, they appear as a regular network interface in FortiOS management. IT administrators can manage the connection as well as implement complete UTM security and control, just like any other FortiGate interface. In addition, FortiOS will display data quota usage on the wireless WAN interface, providing complete visibility of the connection to ensure costly carrier data limits are not exceeded. The superior management, security, and control of the FortiExtender ultimately reduces IT costs while extending, ensuring, and securing the network.

Flexible Deployment for Optimal Signal Strength

FortiExtender devices are designed to receive the best possible 5G/LTE signal. The device utilizes Power over Ethernet (PoE) so you can run a high-quality ethernet cable to a location with optimal signal strength, up to 100 m away from the FortiGate or Network Switch.

Flexible 5G/LTE Connectivity

The FortiExtender family of 5G/LTE appliances support dual SIM and dual modem options, enabling up to four different ISPs for 5G/LTE connectivity. Our dual SIM models allow for one active and one passive cellular link, providing fast failover. Dual Modem options provide two active and two passive links, for the fastest failover and disaster recovery. You can also configure the FortiExtender to utilize an ISP link until a certain data usage threshold is reached. At that point, FortiExtender can automatically shift over to another ISP and use that 5G/ LTE connection. Additional conditions can be set to shift the connection between SIM cards, allowing you to balance connectivity and cost.

Flexible WAN Connectivity

FortiExtender offers new WAN connectivity options with an Ethernet WAN port, in addition to the LTE WAN links. With this WAN port, you can connect to a DSL, cable, or another modem for additional WAN connectivity options. Load-balancing and failover options enable your FortiExtender to manage your WAN connections across several options to ensure connectivity at the best cost point.

Extend Connectivity and Improve Network Availability

FortiExtender offers scalable, cost-effective, and resilient 5G and LTE solutions. Driven by Fortinet's unique approach of Security-driven networking FortiExtender allows organizations business continuity, improved network availability while securing connectivity with wired broadband and cellular networks.

From secure point of sale (POS) systems to vehicle fleet communication, FortiExtender provides reliable broadband access to the internet and extends the value of the Fortinet Security Fabric to support fluid business operations dependent on remote device connectivity.

Security Fabric Integration

Integration with FortiGate appliances provides a single pane of glass management of the wired and wireless WAN connections and security which reduces Total Cost of Ownership for your WAN and improves manageability of remote connections in your network.

Designed for Optimal Signal Strength

Can be located to maximize 3G/4G/LTE/5G signal strength (via Ethernet up to 100m from the FortiGate appliance or network switch) without using lossy antenna cables or limited strength USB modems.

Simplified Management Options

Manage your FortiExtender from the FortiGate or the cloud. FortiExtender Cloud offers hosted management of an unlimited number of FortiExtenders anywhere in the world.

FEATURES | Superior Management, Security, and Control

FortiExtenders are a true plug-and-play device. Once connected to the FortiGate, they appear as a regular network interface in FortiOS, providing a single pane of glass management. This enables administrators to manage the connection as well as implement complete UTM security and control, just like any other FortiGate interface. In addition, FortiOS will display data quota usage on the wireless WAN interface, providing complete visibility of the connection to ensure costly carrier data limits are not exceeded. The superior management, security, and control of the FortiExtender ultimately reduces the Total Cost of Ownership for your WAN.

Flexible Deployment for Optimal Signal Strength

FortiExtender devices have been engineered to be installed in the best possible location to achieve the maximum 3G/4G/LTE/5G wireless signal strength. The unit is powered using Power over Ethernet, enabling the device to be located for optimal signal strength, even up to 100m away from the FortiGate or Network Switch.

Extend, Ensure, and Secure Your Network

FortiExtender offers scalable, cost-effective, and resilient 5G, LTE, and Ethernet solutions. Driven by Fortinet's unique approach of Security-driven networking FortiExtender allows organizations business continuity, improved network availability while securing connectivity with wired broadband and cellular networks.

From secure point of sale (POS) systems to vehicle fleet communication, FortiExtender provides reliable broadband access to the internet and extends the value of the Fortinet Security Fabric to support fluid business operations dependent on remote device connectivity.

Security-Driven Networking | Security Fabric Integration

Integration with Fortinet SD-WAN and FortiGate appliances secures internet edge breakouts with a complete set of Web, Content, and Device security controls far beyond other industry solutions.

Optimal Signal Strength

A single PoE cable provides optimal 5G/LTE signal vs complex, lossy antenna cables or limited strength USB modems. Dual SIM and Dual Modem options offer up to 5X network reliability.

Simplified Management

Manage your FortiExtender from the FortiManager, FortiGate, or FortiExtender Cloud dashboard, making network changes, security controls, and policy automation simple.

Features | Superior Management, Security, and Control

FortiExtenders are a true plug-and-play device. Once connected to the FortiGate, they appear as a regular network interface in FortiOS management. IT administrators can manage the connection as well as implement complete UTM security and control, just like any other FortiGate interface. In addition, FortiOS will display data quota usage on the wireless WAN interface, providing complete visibility of the connection to ensure costly carrier data limits are not exceeded. The superior management, security, and control of the FortiExtender ultimately reduces IT costs while extending, ensuring, and securing the network.

Flexible Deployment for Optimal Signal Strength

FortiExtender devices are designed to receive the best possible 5G/LTE signal. The device utilizes Power over Ethernet (PoE) so you can run a high-quality ethernet cable to a location with optimal signal strength, up to 100 m away from the FortiGate or Network Switch.

Extend Connectivity and Improve Network Availability

FortiExtender offers scalable, cost-effective, and resilient 5G and LTE solutions. Driven by Fortinet's unique approach of Security-driven networking FortiExtender allows organizations business continuity, improved network availability while securing connectivity with wired broadband and cellular networks.

From secure point of sale (POS) systems to vehicle fleet communication, FortiExtender provides reliable broadband access to the internet and extends the value of the Fortinet Security Fabric to support fluid business operations dependent on remote device connectivity.

Security Fabric Integration

Integration with FortiGate appliances provides a single pane of glass management of the wired and wireless WAN connections and security which reduces Total Cost of Ownership for your WAN and improves manageability of remote connections in your network.

Designed for Optimal Signal Strength

Can be located to maximize 3G/4G/LTE/5G signal strength (via Ethernet up to 100m from the FortiGate appliance or network switch) without using lossy antenna cables or limited strength USB modems.

Simplified Management Options

Manage your FortiExtender from the FortiGate or the cloud. FortiExtender Cloud offers hosted management of an unlimited number of FortiExtenders anywhere in the world.

FEATURES | Superior Management, Security, and Control

FortiExtenders are a true plug-and-play device. Once connected to the FortiGate, they appear as a regular network interface in FortiOS, providing a single pane of glass management. This enables administrators to manage the connection as well as implement complete UTM security and control, just like any other FortiGate interface. In addition, FortiOS will display data quota usage on the wireless WAN interface, providing complete visibility of the connection to ensure costly carrier data limits are not exceeded. The superior management, security, and control of the FortiExtender ultimately reduces the Total Cost of Ownership for your WAN.

Flexible Deployment for Optimal Signal Strength

FortiExtender devices have been engineered to be installed in the best possible location to achieve the maximum 3G/4G/LTE/5G wireless signal strength. The unit is powered using Power over Ethernet, enabling the device to be located for optimal signal strength, even up to 100m away from the FortiGate or Network Switch.