Data sheet FortiADC 2200F (FAD-2200F)
Tóm tắt cách tính năng của Cân bằng tải Fortinet FAD-2200F:
APPLICATION AVAILABILITY
- Virtual service definition with inherited persistence, load balancing method, and pool members
- Layer 4/7 application routing policy
- Layer 4/7 server persistence
- Custom scripting for SLB and content rewriting
- Scripting for event-driven rules using predefined commands, variables, and operators for SLB, content rewrite, persistencey, and security
- Advanced L7 application health check with support script for a customized health check
- Clone Traffic Pools
Layer 4-7 Application Load Balancing
- TCP, UDP, IP, DNS, HTTP, HTTPS, HTTP 2.0 GW, FTP, SIP, RDP, RADIUS, MySQL, MSSQL, RTMP, RTSP, and more applications
- L7 Content Switching and Rewriting – HTTP Host, HTTP Request URL, and HTTP Referrer – Source IP Address
- Persistent IP, has IP/port, hash header, persistent cookie, hash cookie, destination IP hash, URI hash, full URI hash, host hash, and host domain hash
- URL Redirect, HTTP request/response rewrite (includes HTTP body)
- Layer 7 DNS load balancing, security, and caching
Link Load Balancing
- Inbound and outbound LLB
- Support for policy route and SNAT
- Multiple health check target support
- Configurable intervals, retries, and timeouts
- Tunnel Routing
Security Fabric Connector
- FortiGLSB Cloud (One-Click-GSLB)
- FortiAuthentication
- FortiSIEM
- FortiAnalyzer
- FortiADC-CM
- FortiSandbox
External Fabric Connectors
- Kubernetes Service
- SAP Application
- AWS / OCI Connector
- Splunk Integration
Global Server Load Balancing (GSLB)
- Global data center DNS-based failover of web applications
- Delivers local and global load balancing between multi-site SSL VPN deployments
- DNSSEC
- DNS Access Control Lists
- GSLB setup wizard
Deployment Modes
- One arm-mode (Proxy with X-forwarded for support)
- Router mode
- Transparent mode (switch)
- High Availability (AA/AP Failover
WEB APPLICATION FIREWALL
Application Protection
- OWASP Top-10 Wizard
- Web Attack Signature
- API Protection
- Sensitive Data Protection
- Bot Detection
- Web Vulnerability Scanner
- HTTP RFC compliance
Security Services
- SQLi/XSS Injection Detection
- OpenAPI Validation
- API Gateway
- Web Scraping
- CSRF Protection
- Brute Force Protection
- Web Defacement Protection
- CAPTCHA Support
- Data Leak Prevention
- File Restriction
- Cookie Security
- XML/JSON/SOAP Validation
- HTTP Header Security
APPLICATION ACCELERATION
SSL Offloading and Acceleration
- Offloads HTTPS and TCPS processing while securing sensitive data
- Full certificate management features
- HTTP/S mirroring for traffic analyses and reporting
- Support TLS 1.3
HTTP and TCP Optimization
- 100x acceleration by off-loading TCP processing
- Connection pooling and multiplexing for HTTP and HTTPS
- HTTP Page Speed-UP for Web Server Optimization
- TCP buffering
- HTTP compression and decompression
- HTTP caching (static and dynamic objects)
- Bandwidth allocation with Quality of Service (QoS)
Authentication Offloading
- Local
- LDAP
- RADIUS
- Kerberos
- SAML 2.0 (SP and Idp)
- NTLM
- Two-Factor Authentication — FortiToken/ FortiToken Cloud, and Google Authentication
Networking
- Static NAT, Hide NAT, and Dynamic NAT for flexibility and scalability)
- VLAN and port trunking support
- Support integration with Cisco ACI, Nutanix, OpenStack, and Ansible
- NVGRE and VXLAN Support
- BGP and OSPF with Route Health Inspection (RHI)
- IPv6 Support (SLB, interfaces, routing, and firewall)
APPLICATION SECURITY
- FortiGuard Antivirus and FortiSandbox integration
- GEO IP security and logs (subscription required)
- Stateful Firewall
- Web Filtering (subscription required)
- IP Reputation (subscription required)
- IPv4 and six firewall rules
- Granular policy-based connection limiting
- Syn cookie protection
- Connection limits
- Intrusion Prevention System (subscription required)
- Application and Network DDoS Protection
- DNS Application Security
MANAGEMENT
- Central management for multiple FortiADC devices
- REST API
- SNMP with private MIBs with threshold-based traps
- Real-time Data Analytics
- Syslog support
- Role-based administration
- Real-time monitoring graphs
- Built-in reporting
- FortiView integration
- Data analytics
- Virtual Domains (VDOMs)