Tests Demonstrate Fortinet(R) FortiGate(TM) Is World's Fastest Firewall
January 31, 2012 09:00 ET
Tests Demonstrate Fortinet® FortiGate™ Is World's Fastest Firewall
FortiGate-5140B Undergoes Massive-Scale, Real-World Testing and Achieves 500 Gbps+ of Actual Application Traffic, Three Times Faster Than the Leading Competition
SUNNYVALE, CA--(Marketwire - Jan 31, 2012) - [ Fortinet® ] (
"In a world filled with applications and escalating threats, IT buyers must evaluate firewalls by looking at the effects of the actual applications seen in the network such as email, instant messaging, databases and social networking," said Dennis Cox, BreakingPoint CTO and co-founder. "Firewall testing that simply looks at throughput, as many do, is faulty, and standards are changing to reflect demand for real-world testing. Fortinet has been a leader in performing real-world firewall testing throughout their development and QA cycles, and their ability to realize these speeds under actual network conditions is a testament to what proper testing can produce."
Performance Matters
As a business grows and volumes of data increase, it becomes increasingly important to make sure the security solution in place is not becoming a productivity- and profit-killing bottleneck. This is especially true for financial services firms operating networks that require proprietary data to be protected while still maintaining low latency during client transactions. Additionally, transaction-intensive businesses, such as e-commerce sites and retail data centers, can benefit from a high-performance security appliance, such as the FortiGate-5140B, as it can accelerate their business while helping to protect credit card data and personal information to comply with PCI DSS regulations.
The Secret's in the ASIC
The FortiGate-5140B achieves its high performance through the use of custom FortiASIC™ processors that are built on a technology platform first engineered at Fortinet more than 10 years ago. FortiASIC processors provide the performance acceleration to block emerging threats, meet rigorous third-party certifications and ensure a particular FortiGate appliance doesn't become a network bottleneck. Competing firewall manufacturers, on the other hand, tend to use consumer off the shelf processors (COTS) in their products. The downside to this approach is that such general purpose processors are not designed with security in mind and cannot meet the security demands of today's high-speed networks.
Testing Methodology
Testing was performed by Fortinet using five BreakingPoint FireStorm CTMs in December 2011. Each BreakingPoint FireStorm CTM test system is capable of generating 120 Gbps of stateful application traffic. The FortiGate-5140B chassis under test consisted of 14 FortiGate-5001B high-performance blades, with each blade capable of 40 Gbps firewall throughput and up to 11 million concurrent sessions per blade.
Benchmark Results
The FortiGate-5140B was put through a number of industry-standard tests for performance.
- Stateless UDP traffic: the type of traffic typically seen in financial trading and streaming environments, showed 559 Gbps for large (1518 byte) packets, 547 Gbps for small (64 byte) packets and 557 Gbps for IMIX. The small packet performance was able to read over 813 million packets per second with only 9 microseconds of latency. That's 1332% faster than Fortinet's next closest competitor's offering.
- Stateful TCP traffic: seen in today's typical enterprise environments, showed 542 Gbps for HTTP and 526 Gbps with real-world application traffic. Application traffic included Facebook, Zynga Farmville, Pandora radio, AOL Instant Messenger, Microsoft Outlook and others. The FortiGate-5140B was also able to process more than 2.6 million connections per second, roughly 433% higher than its nearest competitor.
"It's time for firewall vendors to back up their performance claims under realistic network loads," said Michael Xie, founder and CTO at Fortinet. "This test proves definitively that Fortinet provides the world's fastest firewall, confirming our commitment to providing customers with an uncompromised combination of security and performance. And this is only the beginning, as we work to continue to push the Fortinet performance envelope even further in the future."
About Fortinet ([ www.fortinet.com ])
Fortinet (
More information can be found at [ www.worldsfastestfirewall.com ]
Copyright © 2012 Fortinet, Inc. All rights reserved. The symbols ® and ™ denote respectively federally registered trademarks and unregistered trademarks of Fortinet, Inc., its subsidiaries and affiliates. Fortinet's trademarks include, but are not limited to, the following: Fortinet, FortiGate, FortiGuard, FortiManager, FortiMail, FortiClient, FortiCare, FortiAnalyzer, FortiReporter, FortiOS, FortiASIC, FortiWiFi, FortiSwitch, FortiVoIP, FortiBIOS, FortiLog, FortiResponse, FortiCarrier, FortiScan, FortiDB and FortiWeb. Other trademarks belong to their respective owners. Fortinet has not independently verified statements, certification, ortests herein attributed to third parties and Fortinet does not independently endorse such statements. Nothing in the news release constitutes a warranty, guaranty, or contractually binding commitment and, in addition, any product specifications or product performance discussed herein may be based on the products in a particular environment under particular circumstances. This news release may contain forward-looking statements that involve uncertainties and assumptions. If the uncertainties materialize or the assumptions prove incorrect, results may differ materially from those expressed or implied by such forward-looking statements and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements, including but not limited to, any statements related to expected trends in cybercriminal activity. These trends are difficult to predict and any stated expectations regarding these trends may not ultimately be correct. Fortinet assumes no obligation to update any forward-looking statements, and does not intend to update these forward-looking statements.
FTNT-O