Fortinet FortiTester 2000E
Performance Testing and Breach Attack Simulation

Overview:

Fortinet’s FortiTester solution offers enterprise and managed service providers a highly effective and affordable solution to ensure the most SECURE and RESILIENT infrastructure. Continuous validation is the best way to maintain a future-proof and secure infrastructure. FortiTester defines the Breach Attack Simulation (BAS) market, where security operations can assess the people, process, and technology on which the security of their organization depends.

PERFORMANCE TESTING AND TRAFFIC GENERATION

HTTP, HTTPS, HTTP/2, UDP Throughput, RFC2544, SSLVPN and IPSEC testing, Traffic enterprise mix generation, and Q-in-Q traffic generation

BREACH ATTACK SIMULATION

MITRE ATT&CK simulation testing, CVE-based IPS testing, Fuzzing testing, Web/IOT attacks, FortiGuard Malware strike pack, DDoS traffic generation and PCAP replay

COMPREHENSIVE API

Automate testing and simulation with full system, test simulation, and reporting API

Highlights

• Up-to-date cyber threat simulation based on real world insight of FortiGuard
• Best price and performance traffic generation and security testing system for enterprises and service providers
• Flexible operation modes from one standalone device up to 8 devices combined in Test Center mode
• Hardware, virtual appliances, and public cloud (AWS, Azure, GCP, OCI and Alibaba)
• Server-Class hardware and packetprocessing enhancements
• Throughput Testing up to 80 Gbps/ 800 Gbps Bi-directional Throughput with Standalone or Test Center mode
• Easy and Simple Web UI

FORTITESTER USE CASES

SECURE INFRASTRUCTURE VALIDATION	Evaluate Advanced Threat Protection (ATP) Technology Validate Technology, People, and Process
BREACH ATTACK SIMULATION	MITRE ATT&CK® Simulation Pre/Post Breach Simulation
VENDOR BAKE-OFF	Datasheet Performance Evaluation Future Proofing
PUBLIC CLOUD TESTING (AWS, AZURE, GCP, OCI, ALIBABA)	Architecture Validation Load Testing in Market Places

Highlights:

TRAFFIC GENERATION AND PERFORMANCE TESTING

• HTTP, HTTPS, and HTTP/2
• UDP (PPS/Payload)
• TCP (Throughput, TurboTCP, CPS)
• RFC 2544 / RFC 3511
• SSLVPN and IPSEC testing (CPS/RPS/CC/Throughput)
• PCAP Replay, GTP Replay
• Q-in-Q traffic generation
• Scheduled Testing (hourly, daily, monthly)

Traffic Mix

• Enterprise Mix, Fortinet Enterprise, Enterprise Lite, Custom

Protocol Support

• TCP (CIFS, SMBv2, FIX, FTP, IMAP, LDAP, NFS, POP3, RDP, SMTP, SSH), UDP, DHCP, ICMP, RTSP/RTP

Applications

• Amazon S3, AOL Chat, BitTorrent, DB2, Facebook, Gmail, GTalk, MSSQL, MySQL, NetFlix, Oracle TNS, PSQL, Twitter, WebEx, WhatsApp, Yahoo Mail, YouTube

FLEXIBLE FORM FACTOR

• Powerful Appliances with 1G/10G/40G/100G output
• Up to 80 Gbps (3000E) and 800 Gbps (4000E x8) Bi-Directional traffic simulation
• VM form factor supporting ESXi, KVM, OpenStack
• Public Cloud support: AWS, Azure, Alibaba, GCP, OCI*
• Test Centre Mode - up to 8 devices in cluster (see model compatibility)

BREACH ATTACK SIMULATION

• MITRE ATT&CK® adversary simulation
• Pre and Post breach simulation
• Comprehensive Reporting

COMPREHENSIVE REPORTING

• PDF Exports
• API retrieval of cases result and reports

SECURITY TESTING

• DDoS testing (HTTP/UDP/TCP session flood)
• TCP / UDP / ICMP / IP Fuzzing Attack
• IPS Attacks (CVE-based and HTTP Evasion, Buffer Overflow, Code Injection, Path Traversal)
• Malware Strike Pack (Updated by FortiGuard daily with categories such as Ransomware and Trojan)
• Web Attacks (Cross Site scripting, SQL injection, Bad Robots, Privilege Escalation)
• Web Crawler (bulk URL replay

EXTENSIVE API SUPPORT

• Case Management
• System Management
• Object Management
• User Management
• MITRE ATT&CK Management

THIRD PARTY INTEGRATION

• Administrator and RADIUS support
• FortiSIEM native support
• SYSLOG
• SNMP traps and MIBs support
• Certification Management

Specifications:

FortiTester 2000E
Hardware Specifications
Total Interfaces	4x 10 GE SFP+ slots, 1x Management GE RJ45 port
Storage	1 TB HD
Form Factor	1U
SSL Acceleration Card	No
Performance Examples and Application Support	Standalone mode	Test Center mode with 8 devices
HTTP Throughput	20.0 Gbps	160.0 Gbps
HTTP Connections Per Second	1,019,000	7,856,000
HTTP Concurrent Connections	9,000,000	72,000,000
SSL Throughput	15.9 Gbps	119.4 Gbps
SSL Connections Per Second	3,000	24,000
SSL Concurrent Connections	80,000	640,000
IPsec	Yes	Yes
SSL-VPN	Yes	Yes
Protocol TCP (CIFS, SMB, FIX, FTP, IMAP, LDAP, NFS, POP3, RDP, SMTP, SSH), UDP, DHCP, ICMP, RTSP/RTP	Yes	Yes
RFC2544 and 3511	Yes	Yes
IPS, Malware, MITRE ATT&CK, FUZZING, and DDOS	Yes	Yes
Replay — PCAP, Traffic, Attack, GTP	Yes	Yes
Traffic Mix (Enterprise / Lite / Fortinet Mix)	Yes	Yes
Dimensions
Height x Width x Length (inches)	1.73 x 17.24 x 22.83
Height x Width x Length (mm)	44 x 438 x 580
Weight	22 lbs (10 kg)
Power Required	100–240V AC, 63-47 Hz, Redundant
Power Consumption (Average / Maximum)	280 W / 330 W
Maximum Current	120V/5A, 240V/3A
Heat Dissipation	1226 BTU/h
Redundant Power Supplies	Dual Power Supplies
Environment
Operating Temperature	32–104°F (0–40°C)
Storage Temperature	-4–158°F (-20–70°C)
Humidity	5–95% non-condensing
Operating Altitude	Up to 7,400 ft (2,250 m)
Compliance
Regulatory Compliance	FCC Part 15 Class A, RCM, VCCI, CE, UL/c
Safety	CSA, C/US, CE, UL

Documentation:

Download the Fortinet FortiTester Series Datasheet (PDF).