Fortinet FortiClient Datasheet

Download

Page 1

••••••••••••••••••

™

FortiClient

Desktop, Laptop and PDA Endpoint Security Solution

Datasheet

Unified Security Agent for PC and Mobile Endpoints

Personal computer (PC) desktop and laptop devices have empowered today’s business users with the capability to access enterprise applications and mission critical data both in the office and on the road. The proliferation of highly mobile smartphone devices that use open operating systems (OS) promise even greater access to enterprise applications and mission critical data. Unfortunately, all devices are exposed to blended threats such as viruses, spam, spyware and worms. Additionally, users accessing inappropriate and dangerous web content jeopardize device integrity, negatively impact productivity and create security and legal exposure. While point product security agent technology, such as antivirus agents, are available to protect devices from certain threats, such methods fall short from comprehensively protecting against blended threats and do not enforce content access guidelines.

FortiClient PC™ and FortiClient Mobile™ provide unified security agent features for personal computers and smartphones. The FortiClient product is a client-based software solution designed to be used in connection with our FortiGate appliances to provide security features for enterprise computers and mobile devices. The feature set includes personal firewall, IPsec VPN, antivirus, Web filtering, WAN acceleration, email DLP and antispam. Powered by the FortiGuard security subscription services for constantly-updated protection to help ensure devices are protected on a real-time basis against current and emerging threats, FortiClient lightweight unified software agents are available for Microsoft® Windows XP™, Microsoft Vista™, Windows Mobile™ and Symbian™ operating systems.

Key Solution Features and Benefits

Antivirus & Antispyware

Provides comprehensive protection against viruses, spyware, keyloggers,

Trojans, adware and grayware for Windows-based laptops desktops and smartphones.

FortiClient PC

Secure IPsec VPN

Empowers Windows based mobile laptops, desktops and smartphones with the capability to access enterprise applications securely with DES / 3DES encryption.

Powerful Personal Firewall

Monitors network trafﬁ c and enforces the appropriate application access control on Windows based laptops, desktops, smartphones and Symbianbased smartphones.

Advanced Antispam

Built in antispam that incorporates into MS Outlook for Windows based desktop and laptops and SMS antispam for Windows and Symbian-based mobile smart phones.

Web Content Filtering

Provides real-time web content access enforcement to ensure compliance is available for Windows-based laptops and desktops.

Mobile: Incoming Call Filter

Block calls except for whitelisted callers, or callers in the Phonebook. Forward blocked callers to another number. Send blocked calls a text message. Provide local answering machine.

Mobile: Phone Security

Encrypt contacts and SMS messages. Secure Notebook facility. File encryption.

WAN Acceleration

Speeds services like VPN for remote PC connections over the WAN.

FortiClient Mobile

Blended Threats and Compliance Requirements

Threats are coming from ever y direc tion and cyber cr iminals are employing evermore s ophis ticated tools. Unprote cted net work s a re a sewer of nas t y w orms and zombie s t hat exploit a pp li catio n v ul nerabili ties to dis able de vices, s te al in forma tion or acces s s ystems. If this were not enough web con tent and web po r tals a re use d t o s nare u ns uspec tin g a nd unpro tec ted user s into re ve aling sens iti ve in formation such as passwords and as vehicles to plant poisonous mixes of new blended threats.

Page 2

FortiClient Securing Personal and Mobile Computing:

END POINT

Application Virus, Spyware

& Malware Threats

FortiClient PC

Application Protection

Viruses

Spyware

Adware

Keyloggers

Dialers

Antivirus

Antispyware

Antiadware

Antikeylogger

Antidialer

Application Threat Vectors

Application ACL

END POINT

Network Threats

FortiClient PC

Network Protection

DDOS

DOS

Port Scanning

RFC Compliance

Pattern Matching

Network Threat Vectors

Personal Firewall

IPsec VPN

END POINT

Spam and Web

Content Threats

FortiClient PC

Content Policy Enforcement

Pornographic Sites

Racism/Hate Sites

Phishing Sites

Antispam

Content Policy Threats

Web Content

Filtering Firewall

Spam

ENTERPRISE

NETWORK

MOBILE

NETWORK

Mobile

Centralized Reporting

Centralized ManagementCentralized Reporting Centralized Management

WIRELESS

NETWORK

CORPORATE

LAN

Application Protection

Application hacker tool kits utilize single or blended application malware techniques to compromise a devices operating system and associated applications. FortiClient application multi-layered protection thwarts viruses, spyware, adware, keylogger, dialer and grayware techniques used by cyber criminals.

Network Protection

Network reconnaissance, snifﬁng of clear text trafﬁc and zero day network worms attempt to comprise devices. FortiClient multi-layered Personal Firewall and IPsec VPN capabilities thwart various network techniques used by cyber criminals.

Content Policy Protection & Enforcement

Inappropriate email spam content typically harbors an array of malware intended to negatively impact productivity, while unsanctioned Web content access violates corporate guidelines. FortiClient antispam and Web content ﬁltering features protect against unwanted email content and restricts unapproved web content access.

Deployment Overview

Page 3

FortiClient PC FortiClient Mobile

Speciﬁ cations FortiClient PC Windows Mobile Symbian

Supported Platforms ........................................Windows XP, Windows Server 2003 .................Symbian S60 7/8/9 ........................................... Windows Mobile 2003,

................................................................Windows 2000, Windows Vista ........................ ......................................................................... 2003SE, 5.0, 6.0

Security Features:

Antivirus ........................................................... Yes ................................................................... Yes .................................................................... Yes

Personal Firewall ............................................. Yes ................................................................... Yes .................................................................... No

Intrusion Protection System (IPS) ...................Ye s ................................................................... No ..................................................................... No

Address Book Protection ..................................Yes ................................................................... No .....................................................................Yes

IPSEC VPN ........................................................ Yes ................................................................... No .....................................................................Yes

Email Antispam ................................................ Yes ................................................................... No ..................................................................... No

Email DLP......................................................... Yes ................................................................... No .....................................................................No

Web Content Filtering ......................................Ye s ...................................................................No ..................................................................... No

WAN Acceleration.............................................Yes ................................................................... No ..................................................................... No

SMS Antispam..................................................Ye s ................................................................... Yes .................................................................... Yes

SMS Filtering ...................................................N/A ..................................................................Yes .................................................................... Yes

FortiClient Features

FortiClient supports the following features:

Central management of devices using FortiManager system

Local antivirus, antispam and Web content ﬁ ltering signature updates

Single security agent available in t wo modes

Flexible product packaging

Provides enforcement of security policies and conﬁ guration lock down of devices with a password override feature available. Bulk installs via Windows Installer script feature for FortiClient PC. Note: FortiManager/FortiAnalyzer support is only for FortiClient PC.

FortiManager’s Update Manager provides local hosting and deployment of FortiGuard Security Subscription Services for FortiClient PC.

Both FortiClient PC and FortiClient Mobile support a “suite” mode which includes the complete security feature set. FortiClient PC also supports a “light” mode providing only Personal Firewall and VPN capabilities.

FortiClient PC is available in enterprise bundles while FortiClient Mobile is available on a per device basis. Both provide a complete multi-layered suite of security features at the price point of traditional single antivirus security agents.

Centralized Policy Management

Fortinet’s management system makes deployment, conﬁ guration and policy control quick and easy.

Deployment Scalability

FortiClient deployments can scale to an unlimited number of devices and receive security subscription updates from the FortiGuard update service or from the FortiManager system.

Low Total Cost of Ownership

Unlike point product agents that provide a single security feature, FortiClient is a true uniﬁ ed security agent that bundles all the necessary capabilities into a single low cost and easy to manage application.

Page 4

••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••

TECHNICAL SPECIFICATIONS AND FEATURES

GENERAL

Anti-Leak Banned Word L ist Desktop Antivirus Remote VPN Client Personal Firewall Antivirus Scanning / Cleaning Quarantine Infected Files Registr y Monitoring User-Deﬁnable File Types for Scanning Scans Compressed Files Scheduled Scanning Antivirus and Spyware Scanning Manual and Scheduled Updates Antivirus Logs Mobile: Phone Security Mobile: Incoming C all Filter

CENTRALIZED MANAGEMENT

Client Version and Status Monitoring Update Server Override Central Logging and Repor ting Conﬁguration Lockdown Group Conﬁgurations

USER AUTHENTICATION

Extended Authentication ( XAUTH) Management, Logging, and Monitoring Searchable VPN Logs VPN Tunnel Diagnostics Test VPN Connection Monitor Packet Logs

ANTIVIRUS / ANTISPYWARE

Conﬁgurable File Types to Scan Including Files with N o

Extension Manual Scan Real-time Protection Automatic Submission of Suspicious Files to For tinet Notiﬁcation V irus Signature is Out of Date Email Scanning Incoming and Outgoing Including Attachment s Heuristics Scanning Virus File Quarantine

PERSONAL FIREWALL

Conﬁgurable Network Security Zones Intrusion Prevention Advanced Firewall Rules Securit y Levels: Low, Medium, and High Application Access Control Intrusion Blocking Zone-Based Traf ﬁc Control Active Connection Monitor

ANTISPAM

Suppor ts Outlook Express, Outlook 2000 and Newer Ver sions Customizeable Banned Word List Customizeable Black/ White List Continuously Updated Dat abase Automatic Submission of MI S-Rated Emails

CRYPTOGRAPHY

3DES A nd DES SHA-1 And MD5 AES (128, 192, 256-Bit) PKI PKCS #7 Certiﬁcate Chains PKCS #12 Certiﬁcate Import

IPSEC VPN

Autokey I KE ( Preshared) / Authkey I KE Certiﬁcate ESP and A H NAT Traversal Main and Aggressive Mode IK E Redundant Gateway Support DHCP over IPsec Manual Virtual IP Multiple Remote Networks VPN Policy Retrieval from FortiGate® Unit Dead Peer Detection Simpliﬁed Conﬁguration Proces s Split Tunneling

WEB CONTENT FILTERING

76 Categories HTTPS Site Inspection /Blocking Password Protected Conﬁg Customizable Block Proﬁles Predeﬁned Usage Proﬁles for Adults and Children User Deﬁnable Block / Bypass List Continuously Updated Dat abase

FortiClient PC SYSTEM REQUIREMENTS

PC-C ompatible Computer with Pentium Processor or

Equivalent

Operating Systems and Minimum R AM:

- Microsoft Windows 2000 - 64MB

- Microsoft Windows XP - 128MB

- Microsoft Windows Ser ver 2003 - 128MB

- Microsoft Windows Vis ta - 512MB 20MB of Free Hard Disk Space Native Microsof t TCP/IP Communications Protocol Native Microsof t PPP Dialer for Dial-Up Connec tions Ethernet for Net work Connections Microsoft Internet E xplorer 5.0 or Later

FortiClient Mobile WINDOWS MOBILE SYSTEM REQUIREMENTS

Mobile Device with A RM Processor or Equivalent Compatible Operating Sys tems:

- Windows Mobile 2003, 2003SE, 5.0, 6.0

- Pocket PC 200 3, Pocket PC 2003 SE, Pocket PC 2003 Phone Edition, Pocket PC 2003 Phone Edition SE

3MB Free Disk Space English and Simpliﬁed Chinese L anguage Support

FortiClient Mobile SYMBIAN OS SYSTEM REQUIREMENTS

Mobile Device with A RM Processor or Equivalent Compatible Operating Sys tems:

- Symbian S60 7/ 8/ 9

500 KB Free Disk Space English and Simpliﬁed Chinese L anguage Support

FortiGuard® Subscription Services

Includes:

 •Automaticupdatesfromover50redundanthigh-speeddatabaseser versaroundtheglobe.  •C ompleteW ildlistvirusprotectionforover30,0 00activevirusesfromFortiGuard’sactivedatabaseofover1.5Millionviruses.  •Real-timesignatureupdatesforprotectionagainstover5,100threats.  •7 7ratedWebcategoriesformoreaccurateWebcontentfiltering.  •Webfilteringformorethan47millionURLswithmorethan70languagessupported.

FortiCare® Subscription Services

8x5 Enhance Support (Optional)  Premium Support (Optional) 

About Fortinet (www.fortinet.com)

Fortinet is the pioneer and leading provider of ASIC-accelerated unied threat management, or UTM, security systems, which are used by enterprises and service providers to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection--including rewall, antivirus, intrusion prevention, VPN, spyware prevention and anti-spam -- designed to help customers protect against network and content level threats. Leveraging a custom ASIC and unied interface, Fortinet solutions offer advanced security functionality that scales from remote ofce to chassis-based solutions with integrated management and reporting. Fortinet solutions have won multiple awards around the world and are the only security products that are certied in ve programs by ICSA Labs: (Firewall, Antivirus, IPSec, Network IPS and Anti-Spam). Fortinet is privately held and based in Sunnyvale, California.

GLOBAL HEADQUARTERS

Fortinet Incorporated 1090 Kifer Road, Sunnyvale, CA 94086 USA Tel +1-408-235-7700 Fax +1-408-235-7737

www.fortinet.com/sales

Copyright© 2009 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions. Network variables, different network environments and other conditions may affect performance results, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding contract with a purchaser that expressly warrants that the identied product will perform according to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Certain Fortinet products are licensed under U.S. Patent No. 5,623,600.

EMEA SALES OFFICE-FRANCE

Fortinet Incorporated 120 rue Albert Caquot 06560, Sophia Antipolis, France Tel +33-4-8987-0510 Fax +33-4-8987-0501

24x7 Comprehensive Support (Optional)  Professional Services (Optional) 

APAC SALES OFFICE-SINGAPORE

Fortinet Incorporated 61 Robinson Road #09-04 Robinson Centre Singapore 068893 Tel: +65-6513-3730 Fax: +65-6223-6784

90-Day Limited Software Warranty 

FTC-4.0-DAT-R1-0809