Fortinet FortiADC 4000D
Application Delivery Controllers

Overview:

The FortiADC D-series of Application Delivery Controllers (ADC) optimizes the availability, user experience, performance and scalability of Enterprise Application Delivery. The FortiADC D-series family of physical appliances delivers fast, secure and intelligent acceleration and distribution of demanding applications in the enterprise.

Enterprise Application Acceleration and Performance

FortiADC appliances utilize multi-core processor technology, combined with SSL offload to accelerate application performance. Using QoS policies, they are able to optimize and handle heavy Layer 4 through 7 traffic loads while delivering Latency Sensitive Applications for small, medium and large enterprises.

Application Availability

FortiADC appliances deliver 99.999% uptime for enterprise application services with intelligent local and global server load balancing. The appliances provide application layer health check mechanisms for automatic failover of application services and use Link Load Balancing to optimize WAN connectivity. This results in 24x7 application availability while reducing business continuity risks.

Application Aware Intelligence and Control

FortiADC application-aware appliances eliminate performance bottlenecks, reduce application deployment complexity and seamless application integration. Fully aware of Layers 4 through 7 application traffic, connections, transactions, and content, they enable IT organizations to create event-driven policies for intelligent distribution of application traffic across web and application servers, and eliminates the need to replicate content across multiple servers. Content awareness is extended to the ability to create complex rules to dynamically rewrite content on the fly.

SSL and Server Offloading

FortiADC offloads server-intensive SSL processing with support for 4096-bit keys, TCP connection management, data compression and HTTP request processing from servers. This speeds up response times, reduces load on the backend servers, allowing them to serve more users.

Disaster Recovery with Global Server Load Balancing

FortiADC’s included Global Server Load Balancing (GSLB) makes your network reliable and available by scaling applications across multiple data centers for disaster recovery or to improve application response times. Administrators can set up rules that direct traffic based on site availability, data center performance and network latency.

Link Load Balancing

Built-in Link Load Balancing (LLB) gives you the option to connect your FortiADC to two or more WAN links to reduce the risk of outages or to add additional bandwidth to relieve traffic congestion. FortiADC supports inbound and outbound Link Load Balancing to manage traffic leaving or entering the device. Using policy routing, FortiADC can support complex NAT and routing requirements to address almost any network LLB architecture. With Tunnel Routing you get high-speed, reliable site-to-site connectivity without the need to lease expensive WAN links. It aggregates multiple links to create a virtual tunnel to a remote data center that ensures availability especially for applications that are time sensitive and require large single-session bandwidth such as video conferencing.

HTTP Compression

Accelerate application performance and reduce overall bandwidth requirements with HTTP compression. FortiADC intelligently compresses HTTP and HTTPS traffic. By reducing server reply content size it accelerates performance and improves response times. FortiADC supports both industry standard GZIP and DEFLATE algorithms for many content types used by today’s latest web-based applications.

HTTP Caching

Reduce server overload, bandwidth saturation, high latency, and network performance issues with intelligent caching. FortiADC dynamically stores popular application content such as images, videos, HTML files and other file types to alleviate server resources and accelerate overall application performance.

Virtual Domains (VDOMs)

Managed service provider and enterprise data center administrators can divide a FortiADC into two or more virtual FortiADC devices, each operating as an independent application delivery controller. Each VDOM can provide completely separate ADC services, such as server load balancing, SSL offloading, and traffic routing policies. A multi- VDOM FortiADC can be centrally managed or can be assigned to a VDOM administrator to manage their own virtual ADC.

Enhanced Protection with IP Reputation Service

Attackers use many methods to infect and control devices to launch automated phishing, spamming, and DDoS attacks. The FortiGuard IP Reputation Service aggregates security data from around the world to provide up-to-date information about threatening sources. With feeds from distributed network gateways combined with world-class research done by FortiGuard Labs, organizations can stay up to date and proactively block attacks.

FortiGuard’s IP Reputation Service categorizes and blocks threats from sources associated with:

• DoS and DDoS attacks
• Phishing attacks or hosted Phishing web sites
• Anonymous traffic arriving from paid or anonymous proxies used to disguise real client identity
• Malicious software
• Spammers
• Command and control communication

High-performance, Secure Application Delivery

• Intelligent traffic management for optimized application delivery and availability.
• Server offloading for improved application acceleration, scale and TCO.
• SSL offload for accelerating application performance.
• Comprehensive server load balancing for 99.999% application uptime.
• Global Server Load Balancing for geographic resilience.
• Optimize WAN connectivity and ensure business continuity with Link Load Balancing.
• Prioritize applications and manage bandwidth using Quality of Service (QoS) policies.
• Accelerate content delivery with on the fly compression.
• Browser-based Web user interface for ease of management.
• Appliance and virtual machine form factor for greatest deployment flexibility.