Fortinet FortiADC 420F
Advanced Application Delivery Controller
Click here to jump to more pricing!
Please Note: All Prices are Inclusive of GST
Overview:
Application Delivery with Security and Optimization
In recent years, the landscape of application delivery has undergone significant transformations influenced by evolving technology trends and the increasing adoption of cloud computing. Many organizations are integrating on-premises data centers with public cloud environments to optimize application performance, enhance scalability, and improve overall business agility.
Introduction
FortiADC, the advanced Application Delivery Controller (ADC), optimizes application delivery, enhances performance, and ensures application security whether hosted on-premises or in the cloud.
FortiADC offers robust L4-L7 load-balancing capabilities with scripting support for content manipulation and Advanced SSL Services (offloading and mirroring).
FortiADC also offers application acceleration, Application Access Gateway (App Portal), and built-in security features like Web Application Firewall protection for any application threats (Adaptive Learning, OWASP Top10 Compliance Policy), DDoS Protection, ZTNA, and more.
FortiADC Overview
Highlights
Application Availability
Applications are the lifeblood of a company’s online presence. Unresponsive applications can result in lost revenue and customers taking their future business elsewhere. Application performance, scalability, and resilience are key but none of this matters unless the end-user has a good experience and completes their transaction. FortiADC is a dedicated Application Delivery Control solution that provides a multi-tenancy solution (VDOM and ADOM), high availability, and scalability with hybrid solution deployment (on-premises and cloud offering) to your applications.
Web Application Protection
FortiADC Web Application Firewall (WAF) provides a comprehensive security solution designed to protect web applications from a wide range of threats. Our WAF includes robust features such as AL (Adaptive Learning), which dynamically analyzes client and server traffic to build policies in real-time for blocking web attacks. In addition to adaptive learning, FortiADC WAF offers extensive WAF signatures, ensuring protection against the OWASP Top 10 vulnerabilities. It also includes advanced API security and safeguards against credential stuffing attacks, delivering a holistic and intelligent approach to application security.
Application Anywhere (GSLB)
The FortiADC included Global Server Load Balancing (GSLB) module on-prem or in the cloud (FortiGSLB Cloud) makes your network reliable and available by scaling applications across multiple data centers for disaster recovery or to improve application response times. Customers can set up rules based on site availability, data center performance, and network latency.
Data Optimization
FortiADC provides multiple services that speed the delivery of applications to users. The PageSpeed suite of website performance enhancement tools can automatically optimize HTTP, CSS, Javascript, and image delivery to application users. FortiADC also provides Dynamic Caching and HTTP Compression and Decompression to improve end-user experience and server productivity.
Agentless Application Gateway
The FortiADC Agentless Application Gateway provides secure, clientless access to internal applications via a web browser, eliminating the need for client-side agents. It supports multi-factor authentication (MFA) and single sign-on (SSO) for enhanced security. Administrators can create customized web portals, controlling access to applications based on user groups. With real-time session visibility, it ensures secure, efficient access for remote users without compromising performance.
AI Security
FortiADC now supports AI security with Threat Analytics and FortiGuard Advanced Bot Protection.
- Threat Analytics continuously assesses your security posture by monitoring attacks on your web assets and evaluating your WAF and Security configuration and, based on the Insights, provides recommended actions that can enhance your WAF and Security configuration settings, block future attacks, and reduce false positives.
- FortiGuard Advanced Bot Protection is a comprehensive defense against the ever-present threat of bots. It provides a cutting-edge SaaS solution to safeguard your web applications and digital assets from the ever-evolving threat of bots using client and server telemetry and deep learning.
Advanced Security Services
As the threat landscape evolves, many new risks require a multi-pronged approach for protecting applications. FortiADC provides multi-vector protections starting from the network—IPS, Antivirus, IP Reputation, and to the Applications—DLP, Sandbox, Credential Stuffing, and WAF Signatures, and up to AI Security with Threat Analytics and Advanced Bot Protection.
SSL Offloading and Visibility
FortiADC delivers high capacity decryption and encryption with the latest cryptography standard using hardware-based SSL ASIC. FortiADC provides SSL offloading, SSL inspection and visibility to inspect traffic for threats, speeds up server response, and reduces the load on the backend server. FortiADC also integrates with Gemalto’s SafeNet Enterprise Hardware Security Module (HSM).
Scripts and DevOps Tools
FortiADC Scripts provides the flexibility to create custom event-driven rules using predefined commands, variables, and operators. Using easy-to-create scripts, you get the flexibility you need to extend your FortiADC with an advanced content rewrite and application decisions. FortiADC also offers a range of DevOps tools, such as RestfulAPI, Declarative API, Terraform, cloud-init, and Ansible, enhancing the efficiency of application deployment, management, and automation.
Automation and Connectors
FortiADC Fabric Connectors provide open API-based integration and orchestration with multiple software-defined networks (SDN), cloud, management, and partner technology platforms. Fortinet Fabric Connectors deliver turnkey, open, and deep integration into third party services such as K8s, AWS, OCI, and SAP, in multi-vendor ecosystems, enabling scalability, security automation, and simplified management.
Analytics and Visibility
FortiADC offers a comprehensive monitoring system for your network and application. With FortiView, customers can get real-time and historical data into a single view on your FortiADC. We also provide a network logical topology of real-servers, user/application data-analytics, security threats, attack maps, and some other system events and alerts. FortiADC supports ADC Manager to manage multiple FortiADC devices remotely, and integrates with third party solutions such as Splunk, FortiAnalyzer, and FortiSIEM for more visibility, correlation, automated response, and remediation.
Security Fabric Connectors
FortiADC fabric connectors seamlessly integrate FortiADC with various Fortinet Security Fabric solutions, enabling automated processes for managing dynamic security updates without manual intervention. These connectors define the type of integration and facilitate a cohesive ecosystem for Fortinet products to work together harmoniously. FortiADC supports a range of Security Fabric Integration with: FortiGate, FortiSIEM, FortiAnalyzer, FortiGSLB, Threat Analytics, and FortiGuard Advanced Bot Protection. The overarching goal is to enhance collaboration and automation across the Fortinet product suite through Fabric Connectors.
Use Cases
FortiADC supports multiple use cases for any organization (Telco, Education, Health-Care, Finance and more...).
Find out FortiADC key use-cases for your organization:
Experience with FortiADC Bundles
Elevating Security Across Networks, Applications, and Beyond
Networking Security
Fortify your infrastructure against any network threats with advanced networking security features. This bundle ensures robust protection, minimizes vulnerabilities, and safeguards your network integrity
Application Security
Shield your applications from potential attacks with the comprehensive Application Security Bundle. Benefit from tailored defenses against application-specific threats, ensuring your critical applications’ uninterrupted performance and reliability
AI Security
Embrace the future of cybersecurity with the AI Security Bundle. Powered by cutting-edge AI/ML models, this bundle offers proactive defense against sophisticated attacks. Analyze threats in real-time, allowing you to stay ahead of cyber threats and respond effectively.
Features:
| USE CASES SUPPORTED FEATURES | |
|---|---|
| Application Availability | Advanced L4-L7 Load-balancing (Application and protocols) |
| Presistency, Advanced Health-check, Content Routing, and Rewrite | |
| Scripting Support and L7 Content Routing and Manipulation | |
| SSL Advanced Services | TLS1.3 (Offloading/Mirroring) and SSL Forward Proxy |
| SSL Management (client/server side) + Let’s Encrypt support | |
| Application Anywhere | Global Server Load Balancing (Geo-location, RR, Weight, and more) |
| Geo-IP Protection and IP Reputation | |
| DNS Security and DNSSEC | |
| Application Optimization | Dynamic Caching and Compression |
| HTTP Page Speed (Optimization and Multiplexing) | |
| Application Protection | Web Application Firewall and Web Vulnerability Scanner |
| API Security (OpenAPI, API-GW, API Discovery) | |
| WAF (AL) Adaptive Learning Support | |
| FortiGuard Web Application Security Signature | |
| Credential Stuffing Defense | |
| OWASP top-10 Compliance | |
| Advanced Bot Protection | |
| Application Access Gateway | Application Authentication — Form, Basic, and SSO |
| Agentless Application Gateway (WebTop) | |
| SAML, Kerberos, OAuth2.0, LDAP, RADIUS, FortiToken, Google Auth, FortiAuthenticator, Azure EntraID | |
| FortiGuard Cloud Sandbox | |
| FortiGuard Data Loss Prevention | |
| System and Networking | VDOM/ADOM Support |
| Full NAT (1:1, Dynamic, Statis, and Hide-NAT) | |
| High Availability (VRRP A/A, A/P Failover) | |
| IPv4 and IPv6 Support | |
| Dyanmic Routing (BGP, OSPF) and NVGRE and VXLAN Support | |
| Networking Security | DDoS Protection (Network and Application) |
| Stateful Firewall | |
| Zero Trust Application Gateway | |
| FortiGuard Intrusion Prevention | |
| FortiGuard Malware (AV) Protection | |
| Data Analytics and SecOps | FortiView — Data Analytics |
| OWASP top-10 Real Time Monitoring | |
| Real Time Reporting, Monitoring, Logging, and SNMP | |
| Threat Analytics AI | |
| Fabric Integration and DevOps Tools | Integration — SAP, K8s, OCP, AWS, MS (SharePoint, RDP, Exchange), Splunk, Cisco-ACI, and more |
| Security Fabric — FortiGate, FortiSIEM, FortiAnalyzer, FortiClient, FortiAuthenticator, FortiGSLB | |
| Restful, and Declerative API, Ansible, Terraform, and Cloud-init | |
| 24x7 Premium Support | FortiCare Premium Support |
Specifications:
| Specification | FortiADC 420F | FortiADC 1200F/-DC |
|---|---|---|
| System Performance | ||
| L4/L7 Throughput | 20 Gbps | 40 Gbps / 30 Gbps |
| L4 CPS | 700,000 | 1,000,000 |
| L4 HTTP RPS | 2.1M | 3,000,000 |
| Maximum L4 Concurrent Connection | 25M | 36,000,000 |
| L7 CPS (1:1) * | 200,000 | 240,000 |
| SSL CPS/TPS (1:1) 2K keys ** | 20,000 | 35,000 |
| SSL Bulk Encryption Throughput | 10 Gbps | 19 Gbps |
| Compression Throughput | 14 Gbps | 20 Gbps |
| SSL Acceleration Technology | ASIC | ASIC |
| Virtual Domains | 45 | 45 |
| Hardware Specifications | ||
| Memory | 32 GB ECC | 32 GB ECC |
| Network Interfaces | 4x 10 GE SFP+, 4x GE SFP, 4x GE RJ45 | 8x RJ45 GE, 8x SFP GE, 8x SFP+ 10G |
| 10/100/1000 Management Interface | 2 | 2 |
| Storage | 120 GB SSD | 240 GB SSD |
| Management | HTTPS, SSH CLI, Direct Console DB9 CLI, SNMP | HTTPS, SSH CLI, Direct Console DB9 CLI, SNMP |
| Power Supply | Single (support Dual hot-swap PSU) | Dual (support hot-swap PSU) |
| Trusted Platform Module (TPM) | No | Yes |
| Dimensions | ||
| Height x Width x Length (inches) | 1.73 x 17.24 x 16.54 | 1.73 x 21.5 x 17.3 |
| Height x Width x Length (mm) | 44 x 438 x 420 | 44 x 548 x 440 |
| Weight | 14.11 lbs (6.4 kg) | 22.5 lbs (10.2 kg) |
| Environment | ||
| Form Factor | 1U Appliance | 1U Appliance |
| Input Voltage | 100–240V AC, 50–60 Hz | 100–240V AC, 50–60 Hz |
| Power Consumption (Average / Max) | 68 W / 140 W | 251 W / 320 W |
| Maximum Current | 9A / 17A | 100V / 7A, 240V / 3.5A |
| DC Power Supply | — | Supported |
| Heat Dissipation | 232 BTU/h | 856 BTU/h |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) | 32°F to 104°F (0°C to 40°C) |
| Storage Temperature | -4°F to 167°F (-20°C to 75°C) | -4°F to 167°F (-20°C to 75°C) |
| Humidity | 10% to 85% relative humidity, non-operating, non-condensing | 10% to 85% non-condensing |
| Forced Airflow | Front to Back | Front to Back |
| Compliance | ||
| Regulatory Compliance | FCC Part 15 Class A, RCM, VCCI Class A, CE, UL/c | FCC/ ICES, CE, RCM, VCCI, BSMI |
| Safety | CSA, C/US, CE, UL | UL/ cUL, CB |
** Layer 7 CPS — measures number of new HTTP connections (1 HTTP request per TCP connection).
** Tested with 1 HTTP request per SSL connection; SSL Ciphers=RSA-AES256-SHA; 2K Keys
Documentation:
Download the FortiADC Data Sheet (PDF).
- Pricing and product availability subject to change without notice.