Fortinet FortiProxy 4000G
Fast, Secure, and Scalable Security for any Organization

Overview:

FortiProxy is a secure web gateway that protects employees against internet-borne attacks by incorporating multiple detection techniques such as web, video, and DNS filtering, data loss prevention, antivirus, intrusion prevention, and Client Browser Isolation.

---

Secure Web Gateway Services:

Web and Video Filtering

FortiGuard’s cloud-delivered AI-driven web filtering service provides comprehensive threat protection to address threats including ransomware, credential-theft, phishing, and other webborne attacks. It uses AI-driven behavior analysis and correlation to block unknown malicious URL’s almost immediately, with near-zero false-negatives.

The Web Filtering service leverages industry-leading threat intelligence from FortiGuard labs. This is based on telemetry gathered from over 10 billion real-world events per day. FortiGuard Web Filtering has a database of hundreds of millions of URLs classified into 90+ categories to meet granular web controls and reporting. Help achieve regulatory compliance and granular video control with industry-first advanced video filtering.

DNS Filtering

Protect against sophisticated DNS-based threats including DNS tunneling, C2 server identification, and domain generation algorithms (DGAs). DNS filtering provides full visibility into DNS traffic while blocking high-risk domains including malicious newly registered domains (NRDs), parked domains, and more.

Granular Application Control

With the constant increase in the usage of social apps, it’s vital for organizations to provide very granular controls. For instance, they may want to allow access but prevent specific actions like posts. FortiProxy supports all major social websites (including Facebook, LinkedIn, Twitter, Instagram), and supports more than 3000 apps. In addition, SaaS Apps can be classified using the cloud database that’s maintained by FortiGuard.

Data Loss Prevention

Protect sensitive data from leaving your network, ensure data privacy and regulatory compliance requirements. Sensitive files can be fingerprinted or watermarked and the outgoing traffic is examined to identify any data leakage.

Intrusion Prevention

FortiProxy uses a combination of signature as well as signature-less engines to prevent intrusions. IPS signatures can be based on exploits, known vulnerabilities or anomaly patterns. Signature-less techniques are used to detect SQL injection, domain generation algorithm attacks, java and flash exploits. FortiGuard Labs generates more than 100 IPS rules every week, blocking more than 4 million network intrusion attempts.

Client Browser Isolation

Client-based native browser isolation (NBI) uses a Docker container to isolate the browser from the external networks. Client browser isolation provides a full browser isolation to stop phishing, account takeover, and malware without performance overhead and without the need for SSL inspection.

Sandboxing

Complement with a two-step AI based sandboxing approach. Suspicious and at-risk files are subjected to the first stage of analysis that quickly identifies known and emerging malware through FortiSandbox’s ML powered static analysis. Second stage analysis is done in a contained environment to uncover the full attack lifecycle leveraging behavior-based ML with dynamic analysis detection engine more efficient and effective against new zero-day threats

Content Analysis

Enforce acceptable usage by detecting and preventing illicit images and videos with AI-driven content analysis. With the addition of the Content Disarm and Reconstruction service, you can reduce mean time to detection (MTTD) with low latency content sanitization. A broad range of file types are supported beyond traditional signature-based and reputation-based measures.

WAN Optimization and Advanced Caching

Today at many locations, bandwidth is a bottleneck, and to keep operation costs low, it may be prohibitive to provide additional bandwidth. In these environments, FortiProxy is also able to greatly optimize and accelerate the network by enabling caching of content and by enabling WAN Optimization features.

Use Cases:

Features Summary:

Specifications:

	FortiProxy 400G	FortiProxy 2000G	FortiProxy 4000G
System Information
License Capacity	500–6,000 users	500–20,000 users	500–60,000 users
Deployment Modes	Inline Proxy, Transparent/WCCP Proxy, Explicit Proxy, Routed Proxy
Virtual Domain	up to 10 VDOM	up to 100 VDOM	up to 250 VDOM
Hardware Specifications
Memory	16 GB	128 GB	256 GB
Management	HTTP/S, SSH, CLI, SNMP, Console RJ45	HTTP/S, SSH, CLI, SNMP, Console RJ45	HTTP/S, SSH, CLI, SNMP, Console RJ45
Network Interfaces	4x GE RJ45	2x 10 GE SFP+, 2x GE SFP ports, 2x GE RJ45 ports	4x 10 GE SFP+, 2x GE SFP ports, 4x GE RJ45 ports
Bypass Interfaces	—	2x GE RJ45 ports	2x GE RJ45 ports
Storage	4 TB (2 TB x2) Hard Disk	8 TB (2 TB x4) Hard Disk	8 TB (2 TB x4) Hard Disk
Power Supply	Single (Optional Dual)	Dual	Dual
Environment
Form Factor	1U Appliance	2U Appliance	2U Appliance
Input Voltage	100–240V, AC 60–50 Hz	100–240V AC, 50–60 Hz	100–240V AC, 50–60 Hz
Power Consumption (Average / Maximum)	120 W / 151 W	289 W / 353 W	549 W / 670 W
Maximum Current	100V/5A, 240V/3A	100V/7.5A, 240V/3.9A	100V/10A, 240V/5A
Heat Dissipation	550 BTU/h	1,238 BTU/h	2,321 BTU/h
Operating Temperature	32–104°F (0–40°C)	32–104°F (0–40°C)	32–104°F (0–40°C)
Storage Temperature	-13–158°F (-25–70°C)	-13–158°F (-25–70°C)	-13–158°F (-25–70°C)
Humidity	5–95% non-condensing	8–90% non-condensing	10%–90% non-condensing
Dimensions
Height x Width x Length (inches)	1.73 x 17.24 x 16.38	3.5 x 17.2 x 31.9	3.5 x 17.2 x 31.9
Height x Width x Length (cm)	44 x 438 x 416	88 x 445 x 810	88 x 445 x 810
Weight	25 lbs (11 kg)	43 lbs (19.4 kg)	43 lbs (19.4 kg)
Compliance
Safety Certifications	FCC, ICES, CE, RCM, VCCI, BSMI (Class A), UL/cUL, CB

Documentation:

Download the Fortinet FortiProxy Series Datasheet (PDF).