High Performance NGFW Extended

D I S C L A I M E R This document contains confidential material proprietary to Fortinet, Inc. This document and information and ideas herein may not be disclosed, copied, reproduced or distributed to anyone outside Fortinet, Inc. without prior written consent of Fortinet, Inc. This information is pre-release and forward looking and therefore is subject to change without notice. The purpose of this document is to provide a statement of the current direction of Fortinet s product strategy and product marketing efforts. Please note that this Product Roadmap is neither intended to bind Fortinet to any particular course of product marketing and development nor to constitute a part of the license agreement or any contractual agreement with Fortinet or its subsidiaries or affiliates. 2

Agenda Market High Performance Competence FortiGuard 3

Global Success with Diversified Products Billings by Region Revenue by Segment Nine of Top 10 Global 100 Nine of Top 10 Global 100 Aerospace & Defense Seven of Top 10 Global 100 Computer Services Seven of Top 10 Global 100 Major Banks 4

Global Customers Top 5 Global Carriers Top 10 Fortune 500 Top 10 Global 500 Banks 5

Network Security Market - $11B Opportunity IDC Market Forecasts (except Advanced Threat Protection, which is a Fortinet estimate) 2012 $11 Billion $1B WOC $1.2B SWG $1.9B IPS 2016 $13 Billion ATP $750M WOC $1B SWG $1B IPS $2.1B $2.7B UTM/NGFW UTM/NGFW $5.3B $725M VPN VPN $786M $2.6B FW FW $2.4B 6 Fortinet - Confidential

Analyst Perspectives No Consensus around Security Appliances Naming or Functionality - Segmentation Gateways - UTM for SMBs - NGFW for Enterprises - Enterprise Firewalls (NGFW) - SMB Firewalls (UTM) - Branch Office Firewalls - Data Center Firewalls - Integrated Security Appliance - UTM 7

Gartner Definitions UTM Standard network stateful firewall functions Remote access and site-to-site virtual private network (VPN) support Web security gateway functionality (anti-malware, URL and content filtering) Network intrusion prevention focused on blocking attacks against unpatched Windows PCs and servers All UTM products contain other security capabilities, such as email security, Web application firewalls or data loss prevention. NGFW The firewall market has evolved from simple stateful firewalls to NGFWs, incorporating full-stack inspection to support intrusion prevention, application-level inspection and granular policy control. 8

NGFW Market Drivers 1. More and more reports point to infected web sites or web applications as the primary source of infection (Application Control) 2. APTs require a new response mechanism ( Sandboxing Web Filtering) Source: Competitive Landscape: NGFW Appliance Market, WW, 2013. Gartner, 4/13.) 3. Advancements in processing power and inspection engines now offer converged security to larger enterprises (Consolidation). 9

NGFW Security Capabilities Features/Presets NGFW NGFW+ SWG NGFW+ ATP NGFW (Extend) Security FW/VPN IPS App Control Explicit Proxy Web Filter AntiVirus Sandbox Authentication* Email Filter DLP Endpoint Control Vulnerability Scan 10

Additional Consideration Initiate a multi-year plan to improve your organizations coverage of encrypted traffic and start with inbound and outbound web traffic decrypting SSL traffic on a firewall implies a loss of 74% for throughput. Source: Security Leaders Must Address Threats from Rising SSL Traffic, Gartner, 12/13.) 11

12 Focus Areas

SSL Performance Faster IPS Engine 3.0 Harnesses the power of the FortiASIC-CP8 10Gbps CP8 2Gbps FortiOS 5.0 FortiOS 5.2 13 Figures shown apply to FortiGate-3600C

FortiSandbox Deep AV Scan & Real Time 96% RAP before Sandbox No need to Sandbox if caught Cloud Check Real time check on latest malware rating Full Sandbox Catch anything not caught by signature detection Downloaded & Dropped Files Recursively Scanned Forensics Behavior Report Register FortiGate linked to FortiSandbox Integrated ATP Evolution 14 Derek Manky

FortiSandbox Deep AV Scan & Real Time 96% RAP before Sandbox No need to Sandbox if caught Cloud Check Real time check on latest malware rating Full Sandbox Catch anything not caught by signature detection Downloaded & Dropped Files Recursively Scanned Forensics Behavior Report Register FortiGate linked to FortiSandbox Integrated ATP Evolution 15 Derek Manky

Single Policy Multiple Source decision process Merges IP, User and Device Policies Single Policy to Answer Where, Who and What BYOD Specific access based on device type (limit, block) Captive Portal Single Sign On AND AND Nework Access for Users, Devices and Apps 16 Robin Liao

Building a bigger FortiGate Extended Management For remote device management wired access point Manage Only Connection Scalability, increases the number of FortiSwitches that can be managed Encrypted FortiLink Allows for wide area network connectivity for remotely sited switches Internet FortiLink 17

NSS Labs Third Party Validation FortiGate 800C FortiGate 3240C FortiGate 3600C 100% Overall Protection» Stability & Reliability» Firewall Enforcement» Security Effectiveness Lowest TCO» $2 / Protected Mbps Lowest Latency» 5 μs latency 64 byte packets Top 2 vendors 96% Overall Protection Passed 100% Evasion Tests 6.25 Gbps IPS performance Ultra low latency 96% Overall Protection Passed 100% Evasion Tests Fortinet Earned Triple Recommend Rating in the Latest NSS Labs Tests 18 https://cms.myfortinet.com/share/page/site/productportal/documentlibra ry#path=%252fcompetitive%252f0- Fortinet%252fNSS%2520Labs%2520Reports

19 NSS Labs Third Party Validation

Fortinet Advantage: Performance Mbps Firewall VPN Gbps NGFW UTM Policy Security 20 Fortinet - Confidential

Fortinet Advantage: Simplified Point Products Consolidated Solution Internet Router Web Filtering Internet Firewall AV VPN Switch FortiGate IPS/App Advanced Threat Protection (Sandbox) Data Center Firewall Next Generation Firewall Unified Threat Management 21 Fortinet - Confidential

Firewall Solutions Edge or Core Firewall (NGFW) Enterprise Campus Carrier Firewall Platform Cloud/Carrier Data Center Firewall (Core, Perimeter, VM) Data Center INTERNET Branch Firewall (NGFW) Branch Office Client Firewall (VPN) Remote End Points Distributed Enterprise Unified Threat Management (UTM) 22 Fortinet - Confidential

Two Types of Competitors Software Based Network Based Limited multifunction Performance Not Scalable for SMB or Telco Missing New Functions (NGFW) Old, Slow & No Focus 23

Deployment Scenarios FortiGate 5000 MSSP/ Carrier Data Center PA 7050 FortiGate 1000/ 3000 Enterprise Core PA 4000/ 5000 FortiGate 200-800 FortiGate 20-100 Distributed Enterprise SMB PA 2000/ 3000 PA 200/ 500 24

FortiGate 3700D vs. PA 5060 Fortinet has 8X FW Performance Price Firewall Packet Per Second (Mpps) Sessions 160Gbps $100K 100Mpps $168.5K $130K 30M 20Gbps 110Gbps 15Mpps 60Mpps 4Mbps 13M FortiGate 3700D PA 5060 40G Ports 26

Products have Poor Performance FGT 5000 MSSP/ Carrier Check Point 61000 FGT 3000 FGT 1000 FGT 200-800 FGT/FW 20-100 Data Center Enterprise Core Distributed Enterprise SMB Check Point 21000 Check Point 13500 Check Point 12000 Check Point 4000 Check Point 600 2200 30

FortiGate 3700D vs. Checkpoint 21700 Twice the Performance Half the Price Price Firewall Packet Per Second (Mpps) Sessions 160Gbps $168.5K $100K 100Mpps 110Gbps 60Mpps 30M 13M FortiGate 3700D Check Point 21700 w/ SAM 40G Ports 31

Products are Confusing & Lack Features FGT 5000 MSSP/ Carrier FGT 3000 Data Center FGT 1000 FGT 200-800 Enterprise Core Cisco ASA 5585-X Sourcefire 3D8000 Distributed Enterprise FGT/FW 20-100 Cisco ASA 5500-X SMB Cisco ASA 5505 33

FortiGate 3700D vs Cisco ASA 5585-X SSP20 Fortinet has 16X Performance 160Gbps Price Firewall Sessions Connection Per Second IPS $100K $115K 44M 300K 23 Gbps 10Gbps 1M 50K 2 Gbps FortiGate 3700D Cisco ASA 5585-SSP20 (FW/IPS) 40G Ports 34

Products are Falling Way Behind FGT 5000 MSSP/ Carrier SRX 5000 FGT 3000 FGT 1000 FGT 200-800 FGT/FW 20-100 Data Center Enterprise Core Distributed Enterprise SMB SRX 3000 SRX 1000 SRX 100-650 35

FortiGate 3700D vs. Juniper SRX 3400 Twice the Performance Half the Price Price Firewall Packet Per Second (Mpps) Sessions 160Gbps $168.5K $100K 100Mpps 30M 110Gbps 60Mpps 13M FortiGate 3700D Juniper SRX 3400 40G Ports 36

Packet Per Second Session Capacity Performance Rack Space & Performance vs. Competitors Fortinet FortiGate-5140B Juniper SRX 5800 150 Gbps firewall 15 Mpps 20M sessions Check Point 61000 200 Gbps firewall 50 Mpps 70M sessions Cisco Catalyst 6500 w/ ASA SM 80 Gbps firewall 20 Mpps 40M sessions Palo Alto PA 7050 120 Gbps firewall 105 Mpps 24M sessions 5 x $1.4M = $7M 3 x $1.267M = $3.8M 7 x $550K = $3.8M 5 x $1.253M = $6.3M VS. 7 x $1.4M = $9.8M 2 x $1.267M = $2.5M 3 x $550K = $1.6M 6 x $1.253 = $7.5M 560 Gbps firewall 630 Mpps 280M sessions Price $900K 42 x $1.4M = $58.8M 13 x $1.267M = $16.4M 32 x $550K = $17.6 M 12 x $1.253 = $15M 38 Source: Competitors US/North America Price Lists 2013

Feature & Certification Comparison No One Comes Close 39 Fortinet - Confidential

Threat Landscape Update & Strategy What is FortiGuard? FORTIGUARD ANTIVIRUS SERVICE FORTIGUARD APPLICATION CONTROL SERVICE FORTIGUARD ANTISPAM SECURITY SERVICE FORTIGUARD INTRUSION PREVENTION SERVICE FORTIGUARD WEB SECURITY SERVICE FORTIGUARD WEB FILTERING SERVICE FORTIGUARD DATABASE SECURITY SERVICE FORTIGUARD VULNERABILITY MANAGEMENT SERVICE FORTIGUARD IP REPUTATION SERVICE FortiGuard Services 40

Threat Intelligence and Response 3,100 Application control signatures 75 Terabytes Of Threat Samples 12,500 Vulnerability management signatures Spam e-mails intercepted Attempts to access malicious websites blocked 250 Million Rated websites in 78 categories 1000 Web application firewall attack signatures Network intrusion attempts resisted Website categorization requests Botnet command and control attempts thwarted Malware programs neutralized 70 Intrusion prevention signatures 8,000 Hours of research in labs around the globe 235,000 New and updated antivirus definitions 66 Million New and updated antispam signatures 725,000 URL ratings for web filtering 41

End-to-End Security Solutions FortiBalancer FortiADC Coyote Point FortiVoice FortiManager FortiAnalyzer FortiBridge FortiCamera High End FortiGate-5000 & 3000 Mid Range FortiGate-1000 to 100 Desktop FortiGate/FortiWiFi-90 to 20 FortiDNS FortiScan FortiAP FortiSandbox FortiCloud FortiSwitch FortiDDoS FortiClient FortiAuthenticator FortiToken FortiMail FortiCache 42 FortiWeb FortiDB

44 Let s Grow your Businesses Together!