Fortinet ASM-CX4 Bypass Module
Hardware Bypass Options for FortiGate Multi-Threat Security Systems

Overview:

Ensure Network Continuity

IT administrators are faced with the challenge of securing a network while also ensuring that the network is always available. For critical network segments, this could mean that network availability is valued over ensuring that all traffic is inspected for malicious activity. High availability solutions, where a system fails over to either an active or standby unit, can reduce the risk of a network outage while still providing security services. To further reduce the risk, however, of a network outage due to a power failure or a security device malfunction, bypassing the device altogether with a fail-to-wire solution can ensure network continuity at times when security cannot be provided.

Fortinet ASM-CX4 and ASM-FX2 modules provide bypass functionality to FortiGate multi-threat security systems equipped with an available singlewidth Advanced Mezzanine Card (AMC) expansion bay. The ASM-CX4 is a single-width AMC module which provides four (4) 10/100/1000 copper (RJ-45) Ethernet interfaces for two protected segments of network traffic. The ASM-FX2 is a single-width AMC module which provides two (2) gigabit fiber (LC, 850nm) Ethernet interfaces for a single protected segment of network traffic. Operating in transparent mode during normal operation, both modules automatically bridge network traffic in the event of a system failure or power outage to ensure mission-critical network continuity.

Fortinet Bypass Modules Benefits:

• Fail-to-Wire bypass functionality maximizes network uptime by using Fortinet bypass modules to automatically fail-to-wire in the event of a power outage or any other type of event that would cause the host device to degrade the availability of the network segment. The modules automatically return to normal operating mode when conditions permit.
• The modular form factor of the Fortinet bypass modules empower customers with the ability to add bypass functionality to existing systems with an available single-width AMC expansion bay or to customize a new solution to match defined requirements.
• FortiOS™ integration increases the administrator's ability to monitor and control the bypass status of interfaces remotely, with the ability to view mode of operation, manually switch interfaces into bypass or normal operation mode, and configure thresholds for automatic bypass fail-to-wire.

Features	Benefits
Fail-to-Wire Bypass	Maximize network uptime by using Fortinet bypass modules to automatically fail-to-wire in the event of a power outage or any other type of event that would cause the host device to degrade the availability of the network segment. The modules automatically return to normal operating mode when conditions permit.
Modular Form Factor	Empowers customers with the ability to add bypass to existing systems with an available single-width AMC expansion bay or to customize a new solution to match defined requirements.
FortiOS™ Integration	Increases the administrator’s ability to monitor and control the bypass status of interfaces remotely, with the ability to view mode of operation, manually switch interfaces into bypass or normal operation mode, and configure thresholds for automatic bypass fail-to-wire.

 

FortiOS 4.0 Software Redefines Networks Security

FortiOS 4.0 is a purpose-built operating system that leverages the power of specialized FortiASIC hardware to offer increased levels of security and performance. Fortinet developed FortiOS 4.0 software solely for the FortiGate multi-threat security platform. FortiOS software enables a comprehensive suite of security services – firewall, VPN, intrusion prevention, antimalware, antispam, web filtering, application control, data loss prevention, vulnerability management, and end point network access control.

The FortiASIC Advantage

FortiASIC processors power FortiGate platforms. With exclusive hardware, the purpose built, highperformance network, security, and content processors use intelligent and proprietary digital engines to accelerate resource-intensive security services.

FortiGate Multi-Threat Security Solutions

FortiGate multi-threat security solutions provide an integrated set of security services in a single, easyto- manage platform that is capable of supporting a wide range of deployment scenarios. FortiGate systems provide essential security services, with fully integrated firewall, Virtual Private Network (VPN), intrusion prevention, antivirus/antispyware, Web filtering, antispam, and application control. To ensure that the security effectiveness of the FortiGate solutions remains at the highest levels possible, Fortinet offers FortiGuard® subscription services that include antivirus updates, intrusion prevention updates, an antispam rating service, and a Web filtering rating service. A wide range of hardware models is available for any network size—from the remote office or branch office to the high-speed core or data center.