FortiSwitch Secure Access switches deliver a Secure, Simple, Scalable Ethernet solution with outstanding security, performance and manageability for threat conscious small to mid-sized businesses, distributed enterprises and branch offices. Tightly integrated into the FortiGate® Network Security Platform, the FortiSwitch Secure Access switches can be managed directly from the familiar FortiGate interface. This single pane of glass management provides complete visibility and control of all users and devices on the network, regardless of how they connect.
Security Fabric Integration
Reduces complexity and decreases management cost with network security functions managed through a single console via FortiGate. This integration allows all users to be authenticated against the same user database, regardless of whether they connect to the wired or wireless network, including temporary guest users.
In addition, same security policy can apply to a user or device regardless of how or where they connect to the network.
Simplify Network Deployment
The Power over Ethernet (PoE) capability in some models, enables simple installation of wireless Access Points and IP phones in the network.
Highlights
- Secure Access switches suitable for wiringcloset and desktop installations
- Ideal for converged network environments; enabling voice, data and wireless traffic to be delivered across a single network
- Devices are identified and users authenticated prior to being granted access to the network
- Centralized security and access management from FortiGate interface
- Up to 48 ports in a compact 1 RU form factor
- Stackable up to 300 switches per FortiGate depending on model
- Supports Wire-speed switching and Store and Forward forwarding mode
|
FortiSwitch D-Series |
802.1x Port Authentication |
Yes |
Yes |
MAC Address-Based Authentication |
No |
Yes |
MAC Black/White Listing |
No |
Yes |
Layer 3,4 Stateful Firewall to Control Access |
No |
Yes |
TACACS+/RADIUS Admin Access |
Yes |
Yes |
DHCP Relay/DHCP Snooping |
No |
Yes |
Virtual Domain |
No |
Yes |
Layer 3, Dynamic Routing |
No |
Yes |
Inter-VLAN Routing |
No |
Yes |
Policy-Based Routing |
No |
Yes |
DNS Server |
No |
Yes |
VLANs Supported |
4K |
1K |
Auto Discovery of Multiple Switches |
1 |
16 (model dependent) |
Software Upgrade of Switches |
1 switch |
Central upgrade of each switch |
VLAN Configuration |
1 switch |
Central VLAN provisioning of entire switch network |
Policy Control of Users and Devices |
No |
Yes |
Syslog Collection |
Yes |
Yes (FortiGate syslog only) |
Switch POE Control |
Yes |
Yes** |
LAG support from FortiSwitch to FortiGate |
Yes |
Yes** |
Support for FortiGate in HA cluster |
Yes |
Yes** |
Firewall |
No |
Yes |
IPS, AV, Application Control |
No |
Yes |
** Roadmap: enabled with FOS 5.4 release
FortiLink Mode
The FortiSwitch Secure Access Switch series integrates directly into the FortiGate* Connected UTM, with switch administration and access port security managed from the familiar FortiGate interface. Regardless of how users and devices connect to the network, you have complete visibility and control over your network security and access through this single pane of glass, perfectly suited to threatconscious organizations of any size.
Standalone Mode
Virtualization and cloud computing have created dense high-bandwidth Ethernet networking requirements in the data center, pushing the limits of existing data center switching. FortiSwitch Data Center switches meet these challenges by providing a high performance 10 or 40 GE capable switching platform, with a low Total Cost of Ownership. Ideal for Top of Rack server or firewall aggregation applications, as well as enterprise network core or distribution deployments, these switches are purpose-built to meet the needs of today’s bandwidth intensive environments.
|
FortiSwitch D-Series |
Jumbo Frames |
Yes |
Auto-negotiation for port speed and duplex |
Yes |
IEEE 802.1D MAC Bridging/STP (will interoperate) |
Yes |
IEEE 802.1w Rapid Spanning Tree Protocol (RSTP, will interoperate) |
Yes |
IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) |
Yes |
IEEE 802.1p Mapping to Priority Queue |
Not supported |
Edge Port / Port Fast |
Yes |
IEEE 802.1Q VLAN Tagging |
Yes |
Private VLAN |
Not supported on FS-108D-POE, FS-224D-POE |
IEEE 802.3ad Link Aggregation with LACP |
Yes |
Unicast/Multicast traffic balance over trunking port |
Yes |
(dst-ip, dst-mac, src-dst-ip, src-dst-mac, src-ip, src-mac) |
(MAC only) |
IEEE 802.1AX Link Aggregation |
Yes |
Spanning Tree Instances (MSTP/CST) |
15/1 |
IEEE 802.3x Flow Control and back-pressure |
Yes |
IEEE 802.3 10Base-T |
Yes |
IEEE 802.3u 100Base-TX |
Yes |
IEEE 802.3z 1000Base-SX/LX |
Yes |
IEEE 802.3ab 1000Base-T |
Yes |
802.3ae 10 Gigabit Ethernet |
in FS-5xx, 4xx family |
802.3 CSMA/CD Access Method and Physical Layer Specifications |
Yes |
IEEE 802.3af-2003/2009 POE |
Not supported on FS-124D |
Storm Control |
Yes (except FS-108D-POE, FS-224D-POE) |
Static Routing (Software-based only) |
Up to 64 static routes, usable for software routing (like management traffic) |
Static Routing (Hardware-based) |
64 static routes (16K on FS-5xx family)* |
L3 Host/ARP Entries |
4K on FS-1xx, 2xx, 4xx family* 24K on FS-5xx family |
IGMP Snooping (v1/v2/v3) |
1023 groups on FS-1xx, 2xx, 4xx, 5xx. Not supported on FS-108D-POE, FS-224D-POE |
Port Mirroring |
Yes |
Admin Authentication Via RFC 2865 RADIUS |
Yes |
802.1x authentication with port-based assignment |
Yes |
sFlow |
Yes, All models except FS-108D-POE, FS-224D-POE |
ACL Tables |
1K entries on FS-5xx family 512 on FS-1xx, 2xx, 4xx, 5xx families Not supported on FS-108D-POE, FS-224D-POE |
Telnet / SSH |
Yes |
HTTP / HTTPS |
Yes |
SNMP v1/v2c/v3 |
Yes |
SNTP |
Yes |
LLDP (802.1ab, Link Layer Discovery Protocol) (receive and transmit) |
Yes |
Standard CLI and web GUI interface |
Yes |
Software download/upload: TFTP/FTP/GUI |
Yes |
Managed from FortiGate |
Yes |
RFC 2571 Architecture for Describing SNMP Framework |
Yes |
DHCP Client |
Yes |
RFC 854 Telnet Server |
Yes |
RFC 2865 RADIUS |
Yes |
RFC 1643 Ethernet-like Interface MIB |
Yes |
RFC 1213 MIB-II |
Yes |
RFC 1354 IP Forwarding Table MIB |
Yes |
RFC 2572 SNMP Message Processing and Dispatching |
Yes |
RFC 1573 SNMP MIB II |
Yes |
RFC 1157 SNMPv1/v2c |
Yes |
RFC 2030 SNTP |
Yes |
* Check Release notes/Admin guide for Static Routing release details.
** MIBs have been tested with Solarwinds NPM tool.