Proven Carrier-Grade Network Service (CGN) Solution
The FortiCarrier series has long provided iron-clad security services in many service provider and large enterprise networks. The new FortiCarrier 3000 E-Series focuses on the Carrier-Grade IPv4/v6 Network services, based on the same familiar interface and proven carrier-grade reliability of the FortiCarrier OS.
Coupled with a new architecture that is designed specifically for mobile deployments, the new FortiCarrier 3000 E-Series brings high predictability and service-level consistency to environments that generate massive amounts of connection set-ups and tear-downs. Thanks to Fortinet’s powerful Security Processing Unit (SPU) XP, FortiCarrier 3000 E-Series leads the industry in high-scalability (450 million concurrent sessions) and high-performance (160 Gbps) in a single CGN appliance.
Transparent Connectivity Service for the All-Connected World
The explosive growth of mobile devices and cloud services has created massive networks with no boundaries. To compound the issue, the recent global depletion of public IPv4 addresses strains the existing IPv4 infrastructures and increases the demand for Carrier-Grade Network IPv4 (CG-NAT) services.
Our new FortiCarrier 3000 E-Series fills that requirement with purpose-built Carrier-Grade IPv4/v6 Network service appliances. The platform’s advanced architecture comes with the industry’s largest concurrent connection scale designed to meet the most demanding requirements of IPv4 BYOD roll-outs and tomorrow’s IPv6 IoT expansions of large carrier networks.
FortiCarrier CG-NAT and IPv6 migration service is:
- Powered by Fortinet’s high-performance security processors (SPU XP2)
- Based on highly-effective and extensible security operating system
- Built for operational efficiency and the lowest TCO
- Available in two models: FCR-3600E (10 GE) and FCR-3800E (100 GE)
High Performance in Three Dimensions |
Specialized architecture designed for the most demanding IPv4/ v6 mobile network expansions that require massive connection scalability, high forwarding capacity and powerful processor to stabilize core networks from frequent signaling surges. |
Reduces Upgrade Churns |
Comprehensive Carrier-Grade NAT (NAT44, NAT444) options to meet any legacy IPv4 network upgrade requirements. A broad range of advanced IPv6 Migration technologies are included. |
Lowest Total Cost of Ownership |
The three-dimensional high-performances combined with the rich feature set in CG-NAT and IPv6 migration technologies enable FortiCarrier 3000 E-Series to offer the lowest total cost of ownership (TCO) of any CGN appliances in the market. |
Mobile Service Providers
The FortiCarrier 3000 E-Series CGN provides two critical functions for mobile broadband services. The architecture’s high scalability can be used to generate more revenue by expanding the subscriber base and the associated IP address infrastructure capacity, from a single internet-facing IP address into hundreds of thousands more private IP addresses.
Additionally, a deployment of the CGN appliance on the Gi/sGi interface also enhances the overall network security by hiding the subscribers’ IP addresses from the internet.
CGN Deployment in Mobile Service Provider Networks
Enterprise or Managed Service Providers
The comprehensive IPv4 and IPv6 feature sets allow FortiCarrier 3000 E-Series CGN to provide maximum deployment flexibility. Broad options of tunneling and encapsulation of IPv4 and IPv6 technologies are available to seamlessly connect any type of IP clients into any type of IP networks and finally to any internet content.
The accompanying diagram shows a typical use case — starting with the expansion of an existing IPv4 network and followed by the introduction of a new IPv6 network. Using different IPv4 and IPv6 transition technologies, both new native IPv6 and IPv4 clients can coexist.
To completely secure the mobile Evolved Packet Core, Fortinet recommends a complementary FortiGate with the FortiOS-Carrier license to be deployed as a Gi/sGi firewall. The same FortiGate can perform a secondary function as a RAN Security gateway to aggregate advanced mobile protocols, such as GTP, SCTP and IPsec.
CGN Deployment in Enterprise or Managed Service Provider Networks