FortiGate® 3300E Series Data Sheet

The FortiGate 3300E series delivers high performance Next Generation Firewall (NGFW) capabilities for large enterprises and service providers. With multiple high-speed interfaces, high-port density, and high-throughput, ideal deployments are at the enterprise edge, hybrid data center core, and across internal segments. Fortinet leverages industry-leading IPS, SSL inspection, and advanced threat protection to optimize network performance. Fortinet's Security-Driven Networking securely integrates with the new generation of cybersecurity solutions.

Key Capabilities

Security

• Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement.
• Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic.
• Prevents and detects against known attacks using continuous threat intelligence from AI-powered FortiGuard Labs security services.
• Proactively blocks unknown sophisticated attacks in real-time with the Fortinet Security Fabric integrated AI-powered FortiSandbox.

Networking

• Application aware routing with in-built SD-WAN capabilities to achieve consistent application performance and the best user experience.
• Built-in advanced routing capabilities to deliver high performance with encrypted IPSEC tunnels at scale.

Management

• Includes a management console that is effective and simple to use, which provides a comprehensive network of automation & visibility.
• Provides Zero Touch Provisioning leveraging Single Pane of Glass Management powered by the Fabric Management Center.
• Predefined compliance checklists analyze the deployment and highlight best practices to improve the overall security posture.

Performance

• Engineered for Innovation using Fortinet's purpose-built security processors (SPU) to deliver the industry's best threat protection performance and ultra-low latency.
• Provides industry-leading performance and protection for SSL encrypted traffic including the first firewall vendor to provide TLS 1.3 deep inspection.

Security Fabric

• Enables Fortinet and Fabric-ready partners' products to provide broader visibility, integrated end-to-end detection, threat intelligence sharing, and automated remediation.
• Automatically builds Network Topology visualizations which discover IoT devices and provide complete visibility into Fortinet and Fabric-ready partner products.

Certification

• Independently tested and validated best security effectiveness and performance.
• Received unparalleled third-party certifications from NSS Labs, ICSA, Virus Bulletin, and AV Comparatives.

Deployment

Next Generation Firewall (NGFW)

• Reduces complexity and maximizes ROI by integrating threat protection security capabilities into a single high-performance network security appliance, powered by Fortinet's Security Processing Unit (SPU).
• Provides full visibility into users, devices, applications across the entire attack surface and consistent security policy enforcement irrespective of asset location.
• Protects against network exploitable vulnerabilities with Industry-validated IPS security effectiveness, low latency and optimized network performance.
• Automatically blocks threats on decrypted traffic using the Industry's highest SSL inspection performance, including the latest TLS 1.3 standard with mandated ciphers.
• Proactively blocks newly discovered sophisticated attacks in real-time with AI-powered FortiGuard Labs and advanced threat protection services included in the Fortinet Security Fabric.

IPS

• Purpose-built security processors delivering industry validated IPS performance with high throughput and low latency.
• Deploys virtual patches at the network level to protect against network exploitable vulnerabilities and optimize network protection time.
• Offers deep packet inspection at wire speeds for unparalleled threat visibility into network traffic including traffic encrypted with the latest TLS 1.3.
• Proactively blocks newly discovered sophisticated attacks in real-time with advanced threat protection provided by the intelligence services of the Fortinet Security Fabric.

Segmentation

• Adapts to any network topology, delivering end-to-end security from the branch level to data centers and extending to multiple clouds.
• Reduces security risks by improving network visibility from the components of the Fortinet Security Fabric, which adapt access permissions to current levels of trust and enforce access control effectively and efficiently.
• Delivers defense in depth security powered by high-performance L7 inspection and remediation by Fortinet's SPU, while delivering third party validated TCO of per protected Mbps.
• Protects critical business applications and helps implement any compliance requirements without network redesigns.

Mobile Security for 4G, 5G, and IoT

• Experiences high performance networking speeds with FQ, CGAT and accelerated IPv4 and IPv6 traffic, powered by multiple SPUs and 4G SGI LAN and 5G N6 security.
• Provides RAN Access Security with highly scalable and best performing IPsec aggregation and control security gateway (SecGW).
• Enables user plane security by full Threat Protection and visibility into GTP-U inspection.
• Offers 4G Signaling security to inspect various protocols such as SCTP, Diameter, GTP-C, SIP and provide protection against attacks.
• Provides 4G and 5G cores IoT signaling storm protection.
• High-speed interfaces enable deployment flexibility.

Diagram Description: A network topology illustrating FortiGate 3300E deployment in a data center. The diagram shows the Internet connecting to a FortiGate NGFW, which then connects to a FortiGate IPS/Segmentation device. Within the data center, FortiClient VPN Clients connect to the FortiGate IPS/Segmentation. FortiManager (Automation-Driven Network Management) and FortiAnalyzer (Analytics-powered Security & Log Management) are also depicted as part of the data center infrastructure, managing the FortiGate devices.

Secure Web Gateway (SWG)

• Secures web access from both internal and external risks, even for encrypted traffic at high performance.
• Enhances user experience with dynamic web and video caching.
• Blocks and controls web access based on user or user groups across URLs and domains.
• Prevents data loss and discovers user activity to known and unknown cloud applications.
• Blocks DNS requests against malicious domains.
• Provides multi-layered advanced protection against zero-day malware threats delivered over the web.

Hardware

FortiGate 3300E and 3301E

Hardware Description: The FortiGate 3300E series appliance features a front panel with various ports and indicators. From left to right, it includes: 1. USB Management Port, 2. Console Port, 3. Two GE RJ45 MGMT/Ports, 4. Twelve GE RJ45 Ports, 5. Four 10 GE RJ45 Ports, 6. Fourteen 25 GE SFP28 / 10 GE SFP+ Slots, 7. Two 25 GE SFP28 / 10 GE SFP+ HA Slots, and 8. Four 40 GE QSFP+ Slots. The front panel also indicates the presence of NP6, CP9, 20, 40GE, 25GE, AC DUAL power, and 2TB storage (for 3301E).

Powered by SPU

• Custom SPU processors deliver the power needed to detect malicious content at multi-Gigabit speeds.
• Other security technologies cannot protect against today's wide range of content- and connection-based threats because they rely on general-purpose CPUs, causing a dangerous performance gap.
• SPU processors provide the performance needed to block emerging threats, meet rigorous third-party certifications, and ensure that your network security solution does not become a network bottleneck.

Network Processor

Fortinet's new, breakthrough SPU NP6 network processor works inline with FortiOS functions delivering:

• Superior firewall performance for IPv4/IPv6, SCTP, and multicast traffic with ultra-low latency down to 2 microseconds.
• VPN, CAPWAP, and IP tunnel acceleration.
• Anomaly-based intrusion prevention, checksum offload, and packet defragmentation.
• Traffic shaping and priority queuing.

Content Processor

Fortinet's new, breakthrough SPU CP9 content processor works outside of the direct flow of traffic and accelerates the inspection of computationally intensive security features:

• Enhanced IPS performance with the unique capability of full signature matching at SPU.
• SSL Inspection capabilities based on the latest industry mandated cipher suites.
• Encryption and decryption offloading.

High-Speed Connectivity

High-speed connectivity is essential for network security segmentation at the core of data networks. The FortiGate 3300E series provides 40 GE and 25 GE interfaces, simplifying network designs without relying on additional devices to bridge desired connectivity.

Fortinet Security Fabric

Security Fabric

The Security Fabric is the cybersecurity platform that enables digital innovations. It delivers broad visibility of the entire attack surface to better manage risk. Its unified and integrated solution reduces the complexity of supporting multiple-point products, while automated workflows increase operational speeds and reduce response times across the Fortinet deployment ecosystem. The Fortinet Security Fabric covers the following key areas under a single management center:

• Security-Driven Networking that secures, accelerates, and unifies the network and user experience.
• Zero Trust Network Access that identifies and secures users and devices in real-time, on and off of the network.
• Dynamic Cloud Security that protects and controls cloud infrastructures and applications.
• AI-Driven Security Operations that automatically prevents, detects, isolates, and responds to cyber threat.

Diagram Description: A conceptual diagram of the Fortinet Security Fabric. At the center is the 'Fabric Management Center'. Surrounding it are interconnected components: 'Network Access', 'Secure WLAN/LAN', 'Endpoint', 'NGFW SD-WAN', 'Cloud Infrastructure', 'Applications', and 'Security Operations'. An 'Open Fabric Ecosystem' is also shown, indicating external integration.

FortiOS

FortiGates are the foundation of the Fortinet Security Fabric—the core is FortiOS. All security and networking capabilities across the entire FortiGate platform are controlled with one intuitive operating system. FortiOS reduces complexity, costs, and response times by truly consolidating next-generation security products and services into one platform.

• A truly consolidated platform with a single OS and pane-of-glass for across the entire digital attack surface.
• Industry-leading protection: NSS Labs Recommended, VB100, AV Comparatives, and ICSA validated security and performance.
• Leverages the latest technologies such as deception-based security.
• Controls thousands of applications, blocks the latest exploits, and filters web traffic based on millions of real-time URL ratings in addition to true TLS 1.3 support.
• Automatically prevents, detects, and mitigates advanced attacks within minutes with an integrated AI-driven security and advanced threat protection.
• Improves and unifies the user experience with innovative SD-WAN capabilities with the ability to detect, contain, and isolate threats with automated segmentation.
• Utilizes SPU hardware acceleration to boost network security performance.

Services

FortiGuard™ Security Services

FortiGuard Labs offers real-time intelligence on the threat landscape, delivering comprehensive security updates across the full range of Fortinet's solutions. Comprised of security threat researchers, engineers, and forensic specialists, the team collaborates with the world's leading threat monitoring organizations and other network and security vendors, as well as law enforcement agencies.

FortiCare™ Support Services

FortiCare customer support team provides global technical support for all Fortinet products. With support staff in the Americas, Europe, Middle East, and Asia, FortiCare offers services to meet the needs of enterprises of all sizes.

For more information, please refer to forti.net/fortiguard and forti.net/forticare.

Specifications

Order Information

Optional Accessories

Bundles

FortiGuard Labs delivers a number of security intelligence services to augment the FortiGate firewall platform. Customers can easily optimize the protection capabilities of their FortiGate with one of these FortiGuard Bundles.