Fortinet FortiADC-VM32

Key Features

• Application Availability Easy to use and configure Layer 4/7 policy and group management Virtual service definition with inherited persistence, load balancing method and pool members Static, default and backup policies and groups Layer 4/7 application routing policy Layer 4/7 server persistence Application load balancing based on round robin, weighted round robin, least connections, shortest response Granular real server control including warm up rate limiting and maintenance mode with session ramp down Custom Scripting for SLB and Content Rewriting Application Templates for Microsoft Applications including SharePoint, Exchange and Windows Remote Desktop Application and script health checks Clone Traffic Pools Layer 4 Application Load Balancing TCP, UDP stateless protocols supported Round robin, weighted round robin, least connections, shortest response L4 dynamic load balancing based on server parameters (CPU, Memory and disk) Persistent IP, has IP/port, hash header, persistent cookie, hash cookie, destination IP hash, URI hash, full URI hash, host hash, host domain hash Layer 7 Application Load Balancing DNS, HTTP, HTTPS, HTTP 2.0 GW, FTP, SIP, RDP, RADIUS, MySQL, RTMP, RTSP supported L7 content switching – HTTP Host, HTTP Request URL, HTTP Referrer – Source IP Address URL Redirect, HTTP request/response rewrite (includes HTTP body) Layer 7 DNS load balancing, security, and caching 403 Forbidden Rewrite Content rewriting Link Load Balancing Inbound and outbound LLB Support for Policy Route and SNAT Multiple health check target support Configurable intervals, retries and timeouts Tunnel Routing Global Server Load Balancing (GSLB) Global data center DNS-based failover of web applications Delivers local and global load balancing between multi-site SSL VPN deployments DNSSEC DNS Access Control Lists GSLB setup wizard Deployment Modes One arm-mode (Proxy with X-forwarded for support) Router mode Transparent mode (switch) High Availability (AA/AP Failover) Web Application Firewall Application Protection OWASP Top 10 Web Attack Signature Bot Detection Web Vulnerability Scanner HTTP RFC compliance: Security Services SQLi/XSS Injection Detection Web Scraping CSRF Protection Brute Force Protection Web Defacement Protection Data Leak Prevention File Restriction Cookie Security XML/JSON/SOAP Validation HTTP Header Security Application Acceleration SSL Offloading and Acceleration Offloads HTTPS and TCPS processing while securing sensitive data Full certificate management features SSL Forward Proxy for secure traffic inspection HTTP/S Mirroring for traffic analysis and reporting Support TLS 1.3 HTTP and TCP Optimization 100x acceleration by off-loading TCP processing Connection pooling and multiplexing for HTTP and HTTPS HTTP Page Speed-UP for Web Server Optimization and Acceleration TCP buffering HTTP Compression and Decompression HTTP Caching (static and dynamic objects) Bandwidth allocation with Quality of Service (QoS) HTTP and Layer 4 Rate Limiting Authentication Offloading Local LDAP RADIUS Kerberos SAML 2.0 (SP & Idp) Two-Factor Authentication — FortiToken and Google Authentication Networking NAT for maximum flexibility and scalability VLAN and port trunking support Cisco ACI, Nutanix, OpenStack and Ansible NVGRE and VXLAN Support BGP and OSPF with Route Health Inspection (RHI) IPv6 Support IPv6 routing IPv6 firewall rules Application Security FortiGuard Antivirus and FortiSandbox integration GEO IP security and logs (subscription required) Stateful firewall Web Filtering (subscription required) IP Reputation (subscription required) IPv4 and 6 firewall rules Granular policy-based connection limiting Syn Cookie Protection Connection Limits Intrusion Prevention System (subscription required) Application DDoS Protection DNS Security Management Single point of cluster management CLI Interface for configuration and monitoring Secure SSH remote network management Secure Web UI access Central management for multiple FortiADC devices RESTful API SNMP with private MIBs with threshold-based traps Real-time Data Analytics Syslog support Role-based administration In-build diagnostic utilities Real-time monitoring graphs Built-in reporting FortiView Integration Data Analytics Getting Started wizard for first-time login Virtual Domains (VDOMs)

Technical Specifications