שיחת ייעוץ חינם: 1-800-800-570

Fortinet FortiCarrier 3950B
10-GbE Consolidated Security Appliances for Service Providers

Fortinet FortiCarrier 3950B

Fortinet FortiCarrier 3950B Series
FortiCarrier-3950B
Fortinet FortiCarrier-3950B Appliance
- 2 SFP+ 10-Gig ports (2 SFP+ SR-type transceivers included), 4 SFP 10/100/1000 FortiASIC  accelerated ports, 2 10/100/1000 ports, 5 FMC slots, and dual AC power supplies, Carrier Edition
#FCR-3950B
המחיר שלנו: הצעת מחיר
FortiCarrier-3950B 8x5 Enhanced Bundle
Fortinet FortiCarrier-3950B 8x5 Enhanced Bundle, 1 Year
*Includes Hardware Unit, Return and Replace, Firmware Upgrades, 8x5 Enhanced Support, Antivirus, IPS, Web Content Filtering, & Antispam
#FCR-3950B-BDL
המחיר שלנו: הצעת מחיר

מחירים נוספים מופיעים למטה, או לחצו כאן!

שימו לב: כל המחירים באתר כוללים מע"מ, לפי המחירון המומלץ של Fortinet לאזור EMEA. החיוב יבוצע על פי שער "העברות והמחאות מכירה" של המטבע (דולר אמריקאי) ביום אישור ההזמנה.

Overview:

FortiCarrier-3950B consolidated security appliances deliver unmatched levels of performance, scalability, and security in a compact 3-RU form factor to protect critical applications across your service provider, mobile operator, or large enterprise networks.

 

The FortiCarrier-3950B appliance provides up to 120 Gbps of firewall performance through the use of modular expansion capabilities and innovative FortiASIC processors. Wire-speed firewall performance at 10-GbE and GbE link speeds ensure that protecting your network and applications from the latest blended threats won’t affect performance or delivery of services. FortiCarrier-3950B appliances feature five (5) Fortinet Mezzanine Card (FMC) expansion bays which allow you to customize your appliance for your unique network environment, all in a space-saving 3-RU appliance form factor.

FortiCarrier-3950B and FortiCarrier-3951B consolidated security appliances offer unmatched levels of performance, scalability, and security to protect critical applications across service provider, mobile operator and large enterprise networks. Built from the ground up by Fortinet, FortiCarrier-3950B/3951B appliances combine three essential elements to achieve these benefits; custom hardware including FortiASIC™ processors, a modular architecture for future growth, and consolidated security from the FortiOS™ Carrier operating system.

High Performance Hardware

The FortiCarrier-3950B/3951B series provides up to 120 Gbps of firewall performance through the use of modular expansion capabilities and innovative FortiASIC processors. In addition, the FortiCarrier-3950B/3951B series boasts the highest overall consolidated security performance in the FortiCarrier appliance line. Wire-speed firewall performance at 10-GbE and GbE link speeds ensure that security won't slow your network.

Modular Scalability

FortiCarrier-3950B/3951B appliances feature a modular, space-saving 3-RU appliance form factor, with up to five Fortinet Mezzanine Card (FMC) expansion bays. The FMC expansion bays allow you to customize your appliance for your unique network environment. The FortiCarrier-3951B model has one FMC bay dedicated to local storage, supporting up to four Fortinet Storage Modules (FSM). One 64 GB solid-state disk (SSD) FSM is included with each FortiCarrier-3951B. The FSM enables additional FortiOS software features such as local event storage and WAN optimization.

Consolidated Security

Using the advanced FortiOS Carrier operating system, FortiCarrier-3950B/3951B consolidated security appliances effectively neutralize a wide range of threats facing networks today. Whether deployed as high-performance firewalls, or as comprehensive consolidated security solutions, FortiGate appliances protect critical assets with some of the most effective security available today.

Features & Benefits:


Features Benefits
Hardware Accelerated Performance FortiASIC processors ensure that FortiCarrier consolidated securityappliances will keep pace with traffic flows in your network
Additional Capacity on Demand Fortinet expansion slots provide greater flexibility by supporting additional hardware-accelerated ports and localized storage of event data
Consolidated Security Architecture FortiCarrier consolidated security appliances offer better protection and lower cost when compared with multi-point security products
Centralized Management FortiManager and FortiAnalyzer centralized management and reporting appliances simplify the deployment, monitoring and maintenance of your security infrastructure

FortiOS Carrier 4.0—Software Features by Industry:

FortiOS Carrier 4.0 Software Redefines Network Security for Service Providers
FortiCarrier platforms leverage FortiOS™ Carrier software to protect the core IP network infrastructure and application service network infrastructure layers of the network. Features such as a GTP firewall, secure MMS with scanning of all interfaces, and an SIP/IMS signaling firewall assure service providers of the security, privacy, and quality of service that are critical to profitability, competitive advantage, and service delivery success.

The FortiASIC Advantage
FortiASIC processors power FortiCarrier platforms. With exclusive hardware, the purpose built, high-performance network, security, and content processors use intelligent and proprietary digital engines to accelerate resource-intensive security services.

Managed Security Features
Dynamic Security Profiles
  • Assignment of Service Policy by User (Up to 600,000 Users) Service Policy Can Define the Settings for Any of the Advanced Security Services Provided by FortiOS Carrier
  • Enables Parental Control and Opt-Out Services

Virtual Domain (VDOM)

  • Support for Hundreds of Enterprise Customers per Physical Blade/Appliance, Scaling to Thousands of Enterprise Customers per Chassis

Consolidated Security

  • Firewall (ICSA Labs Certified)
  • IPSec VPN (ICSA Labs Certified)
  • SSL-VPN (ICSA Labs Certified)
  • Intrusion Prevention System (ICSA Labs Certified)
  • Gateway Antivirus (ICSA Labs Certified)
  • Web Filtering (Over 2 Billion URLs Categorized)
  • Antispam Filtering
  • Application Control (Thousands of Applications Categorized)
  • Data Loss Prevention (DLP)
  • L2 / L3 Routing with Rate Limiting
  • SSL-Based Traffic Inspection

Refer to FortiOS 4.0 Software Brochure for Complete Details on the Wide-Range of Consolidated Security Features Offered

Centralized Logging and Alerting
  • Provided by FortiAnalyzer Appliances
  • All Log and Alert Functions Configurable per Customer
  • Consolidates Security and System Event Logs
  • Event Correlation, Graphical Reports, Network Data Statistics

Centralized Management

  • Provided by FortiManager Appliances
  • Deployment Configuration / Provisioning
  • Real-Time Monitoring
  • Device & Security Policy Maintenance
  • Localized Security Content Update Server & Rating Database for Managed Devices
Voice Security Features
SIP Signaling Firewall
  • Stateful and SIP Protocol-Aware Firewall
  • Hardware Accelerated RTP Processing for Reduced Packet Loss, Packet Latency, and Jitter.
  • SIP Transparent (Inspect Only) & NAT (Rewrite SIP Header) Operating Modes
  • Supports SIP Servers in Proxy or Redirect Operating Mode
  • Configurable RTP Pinholing Support
  • Supports Complex Source & Destination SIP NAT Environments (SIP & RTP Protocols)
  • NAT IP Preservation Retains Originating IP Address for Administrative Purposes (e.g. Billing)
  • SIP Tracking over Session Lifespan
  • SIP Session Failover for Active-Passive High Availability
  • SIP Session Load Balancing (via Virtual IP Load Balancing)
SIP Signaling Firewall (Continued)
  • Geographical Redundancy Support
  • SIP Rate Limiting to Prevent SIP Server Flooding / Overload
  • IP Topology Hiding of SIP & RTP Server (via NAT and NAPT)
  • Configurable SIP Command Control Blocks Unauthorized SIP Methods
  • Configurable SIP Blocking for Messages that Exceed Defined Maximum Header Length
  • SIP Registrar Exclusively Option to Avoid Spoofing of Clients
  • SIP Communication Logging to FortiAnalyzer Appliances
  • SIP Statistics (Active Sessions, Total Calls, Calls Failed/Dropped, Call Succeeded)
Additional Voice Security Technologies
  • Intrusion Prevention System with VoIP Protocol Anomaly & VoIP Protocol Aware Signature-Based Inspection Capabilities
  • Denial of Service (DoS) Sensor Protects Trusted Zones from Flooding Attacks
  • Integrated IPSec for Secured Tunnels Between Trusted Zones
  • Virtual Domain (VDOM) Support for Additional Isolation of Infrastructure within the Same Physical Environment
Mobile Security Features
Dynamic Security Profiles
  • Assignment of Service Policy by MSISDN (Mobile Station)
  • Service Policy Can Define the Settings for Any of the Advanced Security Services Provided by FortiOS Carrier
  • Enables Parental Control and Opt-Out Services

MMS General

  • Support for Multiple MMS Policy Profiles for Consolidated or MVNO Deployments
  • Customizable Notification Messages (Per MVNO)
  • MSISDN Header Parsing (Including Cookie Extraction & Hex-Based Conversions for MM1/MM7 Message Types)
  • MMS File Intercept to FortiAnalyzer Appliances for Forensic Analysis
  • MMS Content Archive (Full MMS Message Archiving to FortiAnalyzer Appliances with HTTP/SMTP Transport Headers)
  • Per MSISDN & Per Mobile Station Type Reporting of Malicious Activity via FortiAnalyzer Appliances
MMS Antivirus
  • Monitor Only & Active Blocking Modes (Per Interface Type)
  • Simultaneous Malware Scanning of MM1/MM3/MM4/MM7 Message Types
  • Remove Malicious Content Only Option (Allows Message Transaction to Complete)
  • File Type Analysis with Configurable Block or Intercept Actions (File Extension Independent)
  • Configurable Retrieve Message Scanning (MM1) to Avoid Redundant Inspection
  • Per Sender Scanning with Configurable Block/Archive/ Intercept Actions
  • MM1/MM7 Client & Server Comforting

MMS Antispam/Antifraud

  • MM1/MM4 Flood Detection with Three Configurable Thresholds with Discrete Actions
  • MM1/MM4 Duplicate Message Detection with Configurable Thresholds and Actions
  • Configurable Alert Notification to Administrator of Spam or Fraud Activity
  • MM1/MM7 Banned Word Scoring with Configurable Block/ Pass Actions
GTP Firewall
  • Based on 3GPP 29.060 version 6.9.0 Integrated Intrusion Prevention Inspection for GTP Payloads
  • For Gn/Gp Interfaces GTP Packet Sanity Check, Length Filtering & Type Screening
  • GSN Tunnel Limiting & Rate Limiting
  • GTP Stateful Inspection
  • Hanging GTP Tunnel Cleanup
  • GTP Tunnel Fail-Over for High Availability
  • GTP IMSI Prefix (up to 1000) & APN (up to 2000) Filtering
  • GTP Sequence Number Validation
  • IP Fragmentation of GTP Messages
  • GGSN & SGSN Redirection
  • Detecting GTP-in-GTP Packets
  • GTP Traffic Counting & Logging
  • Anti-Overbilling Together with Gi Firewall
  • Encapsulated Traffic Filtering with Anti-Spoofing Capabilities
  • GTP Protocol Anomaly Detection and Exploit Prevention
  • Handover Control to Prevent Session Hijacking
  • For Gi Interface
    Anti-Overbilling Together with Gn/Gp Firewall

Specifications:


Model FortiCarrier-3950B FortiCarrier-3951B
  FortiCarrier-3950B FortiCarrier-3951B
Interfaces and Modules
Total Network Interfaces 8 / 108 1 8 / 88 1
Hardware Accelerated 10-GbE SFP+ Interfaces 2 / 12 1 2 / 10 1
Hardware Accelerated 1-GbE SFP Interfaces 4 / 104 1 4 / 84 1
Non-Accelerated 10/100/1000 Interfaces 100 1 80 1
Management 10/100/1000 Interfaces 2 2
Transceivers Included 2x SR SFP+ 2x SR SFP+
Fortinet Mezzanine Card (FMC) Expansion Slots 5 4
Fortinet Storage Module (FSM) Expansion Slots - 4
Local Solid State Disk Storage Included - 64GB SSD (1x FSM-064)
System Performance
Firewall Throughput (1518 byte UDP packets) 20 - 120 Gbps 1,2 20 - 120 Gbps 1,2
Firewall Throughput (512 byte UDP packets) 20 - 120 Gbps 1,2 20 - 120 Gbps 1,2
Firewall Throughput (64 byte UDP packets) 20 - 120 Gbps 1,2 20 - 120 Gbps 1,2
Firewall Throughput (Packets Per Second) 180 Mpps 150 Mpps
IPSec VPN Throughput (AES256+SHA1) 8 - 50.5 Gbps 1,2 8 - 42 Gbps 1,2
IPS Throughput 12.5 Gbps 3 10 Gbps 3
Antivirus Throughput 1.5 Gbps 1.5 Gbps
Gateway-to-Gateway IPSec VPN Tunnels (System/VDOM) 10,000 / 5,000 10,000 / 5,000
Client-to-Gateway IPSec VPN Tunnels 64,000 64,000
Concurrent Sessions 10 Million 10 Million
New Sessions/Sec 175,000 175,000
Concurrent SSL-VPN Users (Recommended Max) 25,000 25,000
SSL-VPN Throughput 590 Mbps 590 Mbps
Firewall Policies (VDOM/System) 100,000 / 50,000 100,000 / 50,000
Virtual Domains (Max / Default) 250 / 10 250 / 10
Wireless Access Points Controlled 1,024 1,024
Unlimited User Licenses Yes Yes
Redundant Power Supplies (Hot Swappable) Yes Yes
Dimensions
Height 5.25" (13.3 cm) - 3 RU
Width 17.5" (44.4 cm)
Length 27.65" (70.2 cm)
Weight 60.0 lb (27 Kg)
Rack Mountable Yes
Environmental
AC Power 100-240 VAC, 50-60 Hz, 7.0 - 12.0 Amp (Max)
Power Consumption (AVG) 507 W
Heat Dissipation 1,728 BTU/h
Operating Temperature 32 – 104 deg F (0 – 40 deg C)
Storage Temperature -31 – 158 deg F (-35 – 70 deg C)
Humidity 20 to 90% non-condensing
Compliance
Regulatory Compliance FCC Class A Part 15, UL/CUL, C Tick, VCCI

1 Higher figure uses FMC modules to achieve the stated performance.
2 Maximum Firewall and VPN system performance is based on fully populated system with FMC-XD2 modules.
3 Maximum IPS performance is based on fully populated system with FMC-XG2 modules.

FortiCarrier-3950B/3951B consolidated security appliances also include:

  • Multiple Deployment Modes (Transparent/Routing)
  • Integrated Switch Fabric (ISF)
  • Advanced Layer-2/3 Routing Capabilities
  • High Availability (Active/Active, Active/Passive, Clustering)
  • Virtual Domains (VDOMs)
  • Data Center Traffic Optimization
  • Traffic Shaping and Prioritization
  • WAN Optimization
  • Multiple Device Authentication Options
Management Options:
  • Local Web-Based Management Interface
  • Command Line Management Interface (CLI)
  • Local Event Logging (Memory/Disk if available)
  • Centralized Management (FortiManager appliance required)
  • Centralized Event Logging (FortiAnalyzer appliance required)

Architecture:

Integrated Switch Fabric Architecture

FortiCarrier-3950B/3951B high-performance consolidated security appliances bring together an Integrated Switch Fabric (ISF) and modular expansion capabilities. This combination provides a uniquely scalable forwarding and security processing architecture, all leveraging Fortinet-designed ASIC technologies. At the heart of the FortiCarrier-3950B/3951B series is a 240 Gbps switch fabric. The ISF enables full mesh connectivity between all FMC slots with each FMC slot providing 40 Gbps of connectivity bandwidth to the ISF. Bandwidth is divided between the physical port and the FortiASIC layer, meaning that any port will be able to utilize any FortiASIC processing resource found in any FMC slot without suffering a performance penalty.

High-Level Integrated Switch Fabric Architecture

Fortinet Mezzanine Card Expansion

The Fortinet Mezzanine Card (FMC) form factor is the basis for the Fortinet specialized modules designed to integrate with the FortiCarrier-3950 series. Each FMC module integrates FortiASIC processors and network interfaces on a single module, providing a cost effective way to increase performance and port density. System performance is no longer limited to the base system, with additional performance available on demand.

FortiASIC Processors

FortiASIC processors are the foundation for Fortinet's unique hardware platforms. They are a family of purpose built, highperformance network, security, and content processors that use intelligent and proprietary content scanning engines to accelerate resource-intensive security services. Coupled with the FortiOS Carrier security-hardened operating system, FortiASIC technology delivers extreme performance and security.

Services & Support:


FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiCarrier 3950 Series Datasheet (.PDF)

הערות תמחור:

The FortiCarrier 3950B-DC (FCR-3950B-DC) is also available with DC Power,
Request a Quote for Pricing here!

Fortinet FortiCarrier 3950B Series
FortiCarrier-3950B
Fortinet FortiCarrier-3950B Appliance
- 2 SFP+ 10-Gig ports (2 SFP+ SR-type transceivers included), 4 SFP 10/100/1000 FortiASIC  accelerated ports, 2 10/100/1000 ports, 5 FMC slots, and dual AC power supplies, Carrier Edition
#FCR-3950B
המחיר שלנו: הצעת מחיר
FortiCarrier-3950B 8x5 Enhanced Bundle
Fortinet FortiCarrier-3950B 8x5 Enhanced Bundle, 1 Year
*Includes Hardware Unit, Return and Replace, Firmware Upgrades, 8x5 Enhanced Support, Antivirus, IPS, Web Content Filtering, & Antispam
#FCR-3950B-BDL
המחיר שלנו: הצעת מחיר
FortiCarrier-3950B 1 Year Hardware Bundle Upgrade
1 Year Hardware Bundle Upgrade from 8x5 to 24x7 FortiCare Contract for FortiCarrier-3950B
#FC-10-03950-274-01-12
המחיר שלנו: הצעת מחיר
FortiCarrier-3950B 8x5 Bundle Subscription
The 8x5 Bundle Subscription includes 8X5 Hardware Return and Replace (3 Days), Firmware Upgrades, 8x5 Enhanced Support, Anti-Virus, IPS, Content Filtering and Anti-Spam.
8x5 for FortiCarrier-3950B, 1-Year Bundle
#FC-10-03950-900-02-12
המחיר שלנו: הצעת מחיר
8x5 for FortiCarrier-3950B, 2-Year Bundle
#FC-10-03950-900-02-24
המחיר שלנו: הצעת מחיר
8x5 for FortiCarrier-3950B, 3-Year Bundle
#FC-10-03950-900-02-36
המחיר שלנו: הצעת מחיר
FortiCarrier-3950B 24x7 Bundle Subscription
The 24x7 Bundle Subscription includes Advanced Hardware Replacement (Next Business Day), Firmware Upgrades, 24X7 Comprehensive Support, Anti-Virus, IPS, Content Filtering and Anti-Spam.
24x7 for FortiCarrier-3950B, 1-Year Bundle
#FC-10-03950-950-02-12
המחיר שלנו: הצעת מחיר
24x7 for FortiCarrier-3950B, 2-Year Bundle
#FC-10-03950-950-02-24
המחיר שלנו: הצעת מחיר
24x7 for FortiCarrier-3950B, 3-Year Bundle
#FC-10-03950-950-02-36
המחיר שלנו: הצעת מחיר
FortiGuard Subscriptions 1-Year
Antivirus (AV) Service for FortiCarrier-3950B, 1-Year
#FC-10-03950-100-02-12
המחיר שלנו: הצעת מחיר
IPS/Application Control Service for FortiCarrier-3950B, 1-Year
#FC-10-03950-108-02-12
המחיר שלנו: הצעת מחיר
Web Filtering Service for FortiCarrier-3950B, 1-Year
#FC-10-03950-112-02-12
המחיר שלנו: הצעת מחיר
FortiCarrier-3950B FortiCare 8x5
The FortiCare 8x5 includes 8x5 Enhanced Support, Return and Replace, Firmware Upgrades, VPN, Traffic Management
8x5 FortiCare for FortiCarrier-3950B, 1-Year
#FC-10-03950-311-02-12
המחיר שלנו: הצעת מחיר
8x5 FortiCare for FortiCarrier-3950B, 2-Year
#FC-10-03950-311-02-24
המחיר שלנו: הצעת מחיר
8x5 FortiCare for FortiCarrier-3950B, 3-Year
#FC-10-03950-311-02-36
המחיר שלנו: הצעת מחיר
FortiCarrier-3950B FortiCare 24x7
The FortiCare 24x7 includes 24x7 Comprehensive Support, Advanced Hardware Replacement (Next Business Day), Firmware Upgrades, VPN, and Traffic Management
24x7 FortiCare for FortiCarrier-3950B, 1-Year
#FC-10-03950-247-02-12
המחיר שלנו: הצעת מחיר
24x7 FortiCare for FortiCarrier-3950B, 2-Year
#FC-10-03950-247-02-24
המחיר שלנו: הצעת מחיר
24x7 FortiCare for FortiCarrier-3950B, 3-Year
#FC-10-03950-247-02-36
המחיר שלנו: הצעת מחיר
Fortinet FortiCarrier Electronic Upgrade License
Fortinet Electronic FortiCarrier Upgrade License Certificate for Supported FortiGate Models
#FCR-EUPG
המחיר שלנו: הצעת מחיר