Fortinet Fortivoice - Solucion de UTM + VoIP
4 likes2,689 views
The document describes the FortiGate Voice, an integrated multi-threat security and enterprise IP PBX device from Fortinet. It combines firewall, VPN, wireless LAN, VoIP media gateway, and IP PBX capabilities into a single device. The FortiGate Voice is targeted at small to medium enterprises needing integrated network security and IP telephony, as well as managed security service providers. It provides UTM security, IP routing, switching, and PBX features including voicemail, conferencing, and SIP trunking in an appliance optimized for performance.
Fortinet Fortivoice - Solucion de UTM + VoIP
- 1. FortiGate™ Voice Integrated Multi-Threat Security and Enterprise IP PBX services Fortinet Internal Sales Presentation April 2010
- 2. FortiGate Voice Overview Integrated Multi Service Business Gateway Combines multiple services into a single, integrated business gateway device, managed by a single console: Multi-threat UTM security gateway IP router Ethernet switch VoIP media gateway IP PBX Wireless LAN VPN with strong encryption
- 3. Multi-function, multi-threat security platform that connects and protects Remote and branch offices Large enterprises with many remote or branch offices that need integrated network security, VPN, and IP Telephony Small and Medium business enterprises looking to consolidate security and voice management into a single device Managed Security Service Providers (MSSPs) who wants to add IP Telephony services to existing security services portfolio SIP Trunking (VoIP) providers who want to add security to existing voice services portfolio FortiGate Voice Targeted Market
- 4. FortiGate Voice Targeted Market FortiGate Voice Small - Medium Enterprise Up to 50 seats and up to 20 concurrent calls. Autonomous IT and Telephony infrastructure FortiGate Voice Branch Office Up to 50 seats and up to 20 concurrent calls per office Centralized IT and Telephony infrastructure. Potential local PSTN breakout (FXO). FortiGate Voice Headquarter Branch FortiGate Voice FortiGate Voice SME Managed Security Service Provider Client A Client B Managed Security Service Provider Up to 50 seats per client and up to 20 concurrent calls per client. Autonomous or centralized (“in the cloud”) IT and Telephony infrastructure Centralized Management and Maintenance Branch
- 5. FortiGate Voice – Applications Purpose-Built Hardware Specialized OS Firewall Real Time Protection Flexible Capabilities High Performance Secured Platform Traffic Shaping VPN AV IPS Antispam WF SSL Insp DLP WANopt In today’s threatscape, network-based security relies on more than a single technology; Fortinet’s security PLATFORM provides both flexibility & defense-in-depth capabilities. AppCtrl Comprehensive Support Offerings World-Class Support In-House Update Services IP PBX WAP
- 6. FortiGate Voice – Products Integral PBX enabled branch office UTM solution FortiGate Voice 80C Targets SMB market with up to 50 users FortiWiFi Voice 80CS Supports WiFi Q2 Specification WAN 2 x 10/100/1000 LAN 8 Port 10/100 PSTN interfaces 4 x FXO (RJ11) phone ports Management 2 x USB, 1 x RJ45 Console Specification WAN 2 x 10/100/1000 LAN 6 Port 10/100 DMZ 1 x 10/100 Wireless 802.11 a/b/g/n Management 2 x USB, 1 x RJ45 Console GA GA
- 7. FortiGate Voice-80C – Network Interfaces WAN1 and WAN2 2 x 10/100/1000 Mbps - 1000BaseT Internal 1 to 8 (LAN) 8 x 10/100 Mbps - 100BaseTX Switched or routed FXO 1 to 4 4 x RJ-11 phone ports Connects FGV-80C with Local Exchange Replaces a standard analog PBX or analog phones
- 8. FortiGate Voice-80C Deployment Example ATA POTS SIP Soft-Client SIP Hard-phone (e.g. FortiFone-110) Telecom Service Provider VoIP Service Provider Corporate Network Connects office to NGN/IMS VoIP service provider (“SIP Trunking”) Remote worker Small/medium or remote business office Connects office to traditional Local Exchange Carrier (LEC) Connects office to cooperate network (“Toll Bypass”) FXO, a/b-wire SIP / VPN SIP / VPN SIP / IP LAN FWF-80C FGV-80C
- 9. FortiWiFi Voice-80CS – Network Interfaces WAN1 and WAN2 2 x 10/100/1000 Mbps - 1000BaseT DMZ 1 x 10/100 Mbps - 100BaseTX Internal 1 to 6 (LAN) 6 x 10/100 Mbps - 100BaseTX Switched or routed WiFi 802.11 a/b/g/n
- 10. FortiWiFi Voice-80CS Deployment Example ATA POTS SIP Soft-Client SIP Hard-phone (FortiFone) VoIP Service Provider Corporate Network Connects office to NGN/IMS VoIP service provider (“SIP Trunking”) Remote worker Small/medium or remote business office Connects office to cooperate network (“Toll Bypass”) SIP / VPN SIP / VPN SIP / IP LAN FWF-80C FWV-80CS WiFi SIP Phones or SIP Apps FXS
- 11. FortiWiFi Voice-80CS Deployment Example ATA POTS SIP Soft-Client SIP Hard-phone (FortiFone) VoIP Service Provider Corporate Network Connects office to NGN/IMS VoIP service provider (“SIP Trunking”) Remote worker Small/medium or remote business office Connects office to cooperate network (“Toll Bypass”) SIP / VPN SIP / VPN SIP / IP LAN FWF-80C Telecom Service Provider ATA FWV-80CS FXO, a/b-wire Connects office to traditional Local Exchange Carrier (LEC) WiFi SIP Phones or SIP Apps FXS
- 12. FortiGate Voice – Features (1) UTM solution with Integrated PBX and VoIP Media Gateway Includes IP PBX Features Voicemail Message notification Unified messaging Music on hold Automatic call distribution (ACD) Basic conference Statistics and Logging Supports standard SIP handsets, SIP soft-clients and ATA devices
- 13. FortiGate Voice – Features (2) Conference Units Session Controller Music on hold Voice transcoder Units Interactive Voice Response Voice Mail FortiOS™ SIP Trunking Service Provider PSTN Public Switch Local Exchange SIP FXO SIP SIP Endpoints (Hard-phones, ATAs, Soft-phones, WiFi Phones) VoiceMail HTTP, CLI Logging VoiceMail @ Flash Storage Announcements Voice Message Wave Service Provider Extensions Mail Server FortiAnalyzer … @
- 14. FortiGate Voice – Features (3) FGV Features Voicemail Allows a caller to leave voice messages in the FortiGate Voice. FortiGate Voice uses local flash disk storage with up to 60h of overall capacity. Users can access the voice mails via phone (dial *97 or shortcuts). The maximum recordable length of a single voice mail is configurable (default 60 seconds). Message Notification VoiceMail configuration allows to get a message notification via an eMail. This requires to connect FortiGate Voice with the eMail user account via SMTP. Unified Messaging Configurable Voice mail to eMail integration. The voice mail will be attached to an eMail and sent to the user’s account at the mail server. Music on hold The FortiGate Voice can insert music or voice while the caller is on hold Call Transfer FortiGate Voice supports user initiated call transfers. Automatic Call Distributor (ACD) Distributes an incoming call to a specific group of terminals (extension group).
- 15. FortiGate Voice – Features (4) FGV Features Standard Conference (3 party) Conferences can be initiated by the user phone. Conference Bridge / Meet me Call-in conference bridge initiated by GUI. Interactive Voice Response (IVR) or Auto Attendant Provides a Digital Receptionist service. The FortiGate Voice provides the caller a menu that can detect touch tones and allows the caller to pre-select for instance a service. One menu level is supported. Dial Plan Configurable dial plan that routes the outgoing call requests. Direct Inward Dialing (DID) Telephone Service Providers can allocate a range of public telephone numbers and forward calls directly to the user. The user can be assigned in the FortiGate Voice. The FortiGate Voice support inward dialing for calls via the FXO interfaces (FGV-80C) or via the SIP Trunk.
- 16. FortiGate Voice – Features (5) FGV Features Other Language Voice Prompts FortiGate Voice support the upload of alternative voice files, for instance in other language or with other content. Codecs G.711, G.729 (pass-thru) Statistics and Logging / Reporting: Leverages Fortinet event logging with FortiAnalyzer or SYSLOG compliant servers. Diagnosis CLI interface to diag extensions or SIP trunks. Call Monitoring Monitors inbound and outbound calls. Provides display filter options.
- 17. FortiGate Voice Performance Performance Specifications FG-80C/CM FGV-80C/ FWV-80CS FG-110C Firewall Throughput – 1,518 byte packet 700 Mbps 1 Gbps 1 Gbps Firewall Throughput – 512 byte packet 350 Mbps 500 Mbps 500 Mbps Firewall Throughput – 64 byte packet NA NA NA IPSec VPN Throughput 80 Mbps 100 Mbps 100 Mbps Antivirus Throughput 50 Mbps 65 Mbps 65 Mbps IPS Throughput 100 Mbps 200 Mbps 200 Mbps Static IPSec VPN Tunnels (System / VDOM) 200 50 / 500 1,500 Concurrent IPSec VPN Tunnels 300 1,500 1,500 Concurrent Sessions 100,000 400,000 400,000 New Sessions/Sec 5,000 10,000 10,000 Recommend # of Concurrent SSL Users 60 100 100 Maximum number of Policies (VDOM / System) 2,000 500 / 5,000 4,000 Number of VDOM (Max / Default) 10/10 10/10 10/10 Maximum number of registered SIP user agents NA 50 NA Number of SIP client registering per second NA 50 NA Maximum number of concurrent calls NA 20 NA Maximum number of call attempts per second NA 5 NA Maximum number of conference calls NA 5 NA Maximum length of all voice mails NA 60 hour NA
- 18. FortiGate Voice Quality Performance VoIP Quality Tests on FGV-80C Performed with NAVTEL analyser Tested SIP to SIP scenario 30 concurrentent SIP calls G.711 μ -law codec CPU ranged from 18% to 2% Estimated MOS score and R-Factor (ITU-T G.107) are „Excellent“ MOS R-Factor R-Factor MOS User Experience 90 43 (4.3) Excellent 80 40 (4.0) Good 70 36 (3.6) Fair 60 31 (3.1) Poor 50 26 (2.6) Bad
- 19. FortiGate Voice - Benefits Integrates Fortinet industry-leading UTM and voice security solution Lowers capital expenditures ($CapEx) and operational expenditures ($OpEx) costs by eliminating separate devices for network security, IP PBX and VoIP media gateways Avoid special skill setting for IP PBX service personal FortiGate Voice IP PBX configuration is common with configuring other UTM features Supports SIP Trunking Lowers costs by converging data and voice in an all-IP connection PSTN Bypass Reduces or eliminates need for separate PSTN and data circuits
- 20. FortiGate Voice-80C - Benefits Simplified Management Single management and logging interface Full GUI and CLI integration Common “Look and Feel” Logging and analysis with FortiAnalyzer Service Providers (SIP Trunks and FXO) SIP Extensions What to do with the call requests What is going on?
- 21. Series Components & Pricing Insert Regional Pricing Product Description SKU List Price FortiGate Voice-80C Dual 10/100/1000 ports, 8-port 10/100 switch, and 4 port PBX FGV-80C FortiGate Voice-80C Bundle Bundle - Dual 10/100/1000 ports, 8-port 10/100 switch, and 4 port PBX FGV-80C-BDL FortiWiFi Voice-80CS Wireless (802.11 a/b/g/n), Dual 10/100/1000 ports, 10/100 DMZ port, 6-port 10/100 switch, and IP PBX FWV-80CS FortiWiFi Voice-80CS Bundle Bundle - Wireless (802.11 a/b/g/n), Dual 10/100/1000 ports, 10/100 DMZ port, 6-port 10/100 switch, and IP PBX FWV-80CS-BDL FortiFone-100 SIP based VoIP phone for FortiGate Voice FON-100
- 22. Thank You! For more information please visit http://www.fortinet.com