Fortinet FortiTester 2000F
Performance Testing and Breach Attack Simulation

Overview:

FortiTester is a network security testing tool designed to identify and evaluate network security devices and applications. It can simulate network traffic, including malicious traffic, and test how security devices perform in detecting and mitigating threats. FortiTester supports a wide range of traffic types, including SSL, DDoS, and custom traffic.

It is an easy-to-use tool that allows security teams to assess the effectiveness of their network security solutions before deploying them in production environments. With FortiTester, organizations can ensure that their security infrastructure is capable of defending against advanced threats and is optimized for maximum performance.

Data Sheet FortiTester Available in:

• Appliance
• Virtual Machine
• Hosted
• Cloud

Features:

Performance Testing and Traffic Generation

HTTP, HTTPS, HTTP/2, UDP Throughput, RFC2544, SSLVPN and IPSEC testing, Traffic enterprise mix generation, and Q-in-Q traffic generation

Breach Attack Simulation

MITRE ATT&CK simulation testing, CVE-based IPS testing, Fuzzing testing, Web/IOT attacks, FortiGuard Malware strike pack, DDoS traffic generation and PCAP replay

Comprehensive API

Automate testing and simulation with full system, test simulation, and reporting API

Key Points

• Up-to-date cyber threat simulation based on real world insight of FortiGuard
• Best price and performance traffic generation and security testing system
• Flexible operation modes from one standalone device up to 8 devices combined
• Hardware, virtual appliances, and public cloud (AWS, Azure, GCP, OCI and Alibaba)
• Server-Class hardware and packetprocessing enhancements
• Throughput Testing up to 80 Gbps/ 800 Gbps Bi-directional Throughput
• Easy and Simple Web UI

FortiTester Use Cases

Secure Infrastructure Validation:	Evaluate Advanced Threat Protection (ATP) Technology Validate Technology, People, and Process
Breach Attack Simulation:	MITRE ATT&CK® Simulation Pre/Post Breach Simulation
Vendor Bake-Off:	Datasheet Performance Evaluation Future Proofing
Public Cloud Testing:	Architecture Validation Load Testing in Market Places

---

Highlights:

Traffic Generation and Performance Testing

• HTTP, HTTPS, and HTTP/2
• UDP (PPS/Payload)
• TCP (Throughput, TurboTCP, CPS)
• RFC 2544 / RFC 3511
• SSLVPN and IPSEC testing (CPS/RPS/CC/Throughput)
• PCAP Replay, GTP Replay
• Q-in-Q traffic generation
• Scheduled Testing (hourly, daily, monthly)

Traffic Mix

• Enterprise Mix, Fortinet Enterprise, Enterprise Lite, Custom

Protocol Support

• TCP (CIFS, SMBv2, FIX, FTP, IMAP, LDAP, NFS, POP3, RDP, SMTP, SSH), UDP, DHCP, ICMP, RTSP/RTP

Applications

• Amazon S3, AOL Chat, BitTorrent, DB2, Facebook, Gmail, GTalk, MSSQL, MySQL, NetFlix, Oracle TNS, PSQL, Twitter, WebEx, WhatsApp, Yahoo Mail, YouTube

Flexible Form Factor

• Powerful Appliances with 1G/10G/40G/100G output
• Up to 80 Gbps (3000E) and 800 Gbps (4000E x8) Bi-Directional traffic simulation
• VM form factor supporting ESXi, KVM, OpenStack
• Public Cloud support: AWS, Azure, Alibaba, GCP, OCI*
• Test Centre Mode - up to 8 devices in cluster (see model compatibility)

Breach Attack Simulation

• MITRE ATT&CK® adversary simulation
• Pre and Post breach simulation
• Comprehensive Reporting

Comprehensive Reporting

• PDF Exports
• API retrieval of cases result and reports

Security Testing

• DDoS testing (HTTP/UDP/TCP session flood)
• TCP / UDP / ICMP / IP Fuzzing Attack
• IPS Attacks (CVE-based and HTTP Evasion, Buffer Overflow, Code Injection, Path Traversal)
• Malware Strike Pack (Updated by FortiGuard daily with categories such as Ransomware and Trojan)
• Web Attacks (Cross Site scripting, SQL injection, Bad Robots, Privilege Escalation)
• Web Crawler (bulk URL replay

Extensive API Support

• Case Management
• System Management
• Object Management
• User Management
• MITRE ATT&CK Management

Third Party Integration

• Administrator and RADIUS support
• FortiSIEM v5.3.0 log integration
• SYSLOG
• SNMP traps and MIBs support
• Certification Management
• FortiOS v7.0.1+ (Security Fabric Integration)
• FortiManager v6.4.6 and 7.0.1 (License activation and FortiGuard server updates)

---

Deployment:

Standalone Mode

Test center works with the local traffic generator and receiver.

---

Test Centre Mode

Scale FortiTester performance by combining up to eight FortiTesters in a cluster.

---

Public Cloud Support

Scale FortiTester performance by combining up to eight FortiTesters in a cluster.

---

Specifications:

FortiTester 2000F
Hardware Specifications
Total Interfaces	4x 10 GE SFP+ slots, 1x Management GE RJ45 port
Storage	1 TB HD
Form Factor	2U
SSL Acceleration Card	No
Performance Examples and Application Support	Standalone mode	Test Center mode with 8 devices
HTTP Throughput	20 Gbps	160 Gbps
HTTP Connections Per Second	961,000	7,200,000
HTTP Concurrent Connections	9,000,000	72,000,000
SSL Throughput	15 Gbps	108.4 Gbps
SSL Connections Per Second	18,000	84,000
SSL Concurrent Connections	80,000	640,000
IPsec	320,000	2,560,000
SSL-VPN	Yes	Yes
Protocol TCP (CIFS, SMB, FIX, FTP, IMAP, LDAP, NFS, POP3, RDP, SMTP, SSH), UDP, DHCP, ICMP, RTSP/RTP	Yes	Yes
RFC2544 and 3511	Yes	Yes
IPS, Malware, MITRE ATT&CK, FUZZING, and DDOS	Yes	Yes
Replay — PCAP, Traffic, Attack, GTP	Yes	Yes
Traffic Mix (Enterprise / Lite / Fortinet Mix)	Yes	Yes
Dimensions
Height x Width x Length (inches)	1.73 x 17.24 x 22.83
Height x Width x Length (mm)	44 x 438 x 580
Weight	16.31 lbs (7.4 kg))
Power Required	100–240VAC, 63-47 Hz, Redundant
Power Comsumption	216 W / 240 W
Maximum Current	120V/5A, 240V/3A
Heat Dissipation	819 BTU/h
Redundant Power Supplies	Yes
Environment
Operating Temperature	32–104°F (0–40°C)
Storage Temperature	-4–158°F (-20–70°C)
Humidity	5–90% non-condensing
Operating Altitude	< 2000 m
Compliance
Regulatory Compliance	FCC Part 15 Class A, ICES, CE, RCM, VCCI
Safety	UL/cUL, CB , BSMI

---

Documentation:

Download the Fortinet FortiTester Datasheet (PDF).

---