The reason for choosing Fortinet
Carel has implemented different FortiGate appliances that integrate firewall, IPSec and SSL VPN, intrusion prevention, antivirus, antimalware, antispam, P2P security and web filtering, to protect the corporate network, as well as FortiManager, centralized management appliance to reach a complete control of the security structure, and FortiAnalyzer, which combines in a single system recordings, analysis and reporting, in order to have better information on all security-related events. The solution Fortinet is shown immediately very interesting and effective differing from the solution previously in use, in addition to an economic advantage, even for the best performance and the additional services offered, given that it is a UTM solution and not of a simple firewall / VPN concentrator. The Fortinet solution has also allowed us to manage an unlimited number of SSL VPN client connections, without the need to purchase additional licenses.
Features of the solution implemented
Carel has deployed a cluster of FortiGate-600C in the Italian headquarters, a cluster FortiGate-111C in the headquarters of China, 1 cluster FortiGate-110C in the US headquarters and all other locations in Germany, UK and Brazil FortiGate-80CM. In addition, to optimize the management of the solution in the central office has implemented a FortiAnalyzer 100C for collecting and analyzing data, as well as a 400B FortiManager centralized management, configuration and software distribution. The timing of completion and implementation were quick enough, once pre-configured devices have been shipped to foreign subsidiaries and has decided in some cases to replace simultaneously in various locations and in other cases, integration with existing equipment.
FortiGate appliances are mainly used in firewall functionality and VPN site-to-site VPN on multilink with backup and SSL VPN for agents / outside workers who are authenticated through LDAP. They were created traffic shaping policy to optimize bandwidth usage and Internet traffic inside the VPN with the Chinese home. Through the cluster of the office they are managed also different VLAN, including guest networks for wi-fi, built with third-party devices, and network DMZ. Carel is also considering the possibility of using additional features FortiGate UTM device installed, for example, the ability to switch to the management of all traffic on the internet browsing which would result in the transfer of several proxy servers and thus greater integration of security policy side firewall.