The TOE is a family of FortiGate next-generation firewall (NGFW) appliances running FortiOS software. The TOE provides high performance, multilayered validated security and granular visibility for end-to-end protection across the entire enterprise.
","evaluation_configuration":"The TOE is FortiGate/FortiOS 6.4 Version 6.4 (FIPS-CC-64-6) running on a physical or virtual device.
\r\n\r\n
The physical boundary of the TOE includes the FortiGate hardware models and the virtual appliances shown below. The virtual appliances are evaluated as virtual Network Devices (vND), which is case 1 of Section 1.2 of NDcPP v2.2e.
\r\n\r\n| \r\n Model \r\n | \r\n\r\n CPU \r\n | \r\n\r\n Architecture \r\n | \r\n\r\n RAM \r\n | \r\n\r\n Boot \r\n | \r\n\r\n Storage \r\n | \r\n\r\n ASIC \r\n | \r\n\r\n Entropy \r\n | \r\n\r\n CAVP \r\n | \r\n
| \r\n FG-61E \r\n | \r\n\r\n Fortinet SoC3 \r\n | \r\n\r\n ARMv7-A \r\n | \r\n\r\n 2 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9Lite \r\n | \r\n\r\n SoC3 \r\n | \r\n\r\n A2225 A2269 A2241 \r\n | \r\n
| \r\n FG-61F \r\n | \r\n\r\n Fortinet SoC4 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 2 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9XLite \r\n | \r\n\r\n SoC4 \r\n | \r\n\r\n A2225 A2269 A2242 \r\n | \r\n
| \r\n FWF-61E \r\n | \r\n\r\n Fortinet SoC3 \r\n | \r\n\r\n ARMv7-A \r\n | \r\n\r\n 2 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9Lite \r\n | \r\n\r\n SoC3 \r\n | \r\n\r\n A2225 A2269 A2241 \r\n | \r\n
| \r\n FWF-61F \r\n | \r\n\r\n Fortinet SoC4 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 2 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9XLite \r\n | \r\n\r\n SoC4 \r\n | \r\n\r\n A2225 A2269 A2242 \r\n | \r\n
| \r\n FG-81E \r\n | \r\n\r\n Fortinet SoC3 \r\n | \r\n\r\n ARMv7-A \r\n | \r\n\r\n 2 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9Lite \r\n | \r\n\r\n SoC3 \r\n | \r\n\r\n A2225 A2269 A2241 \r\n | \r\n
| \r\n FG-81E-PoE \r\n | \r\n\r\n Fortinet SoC3 \r\n | \r\n\r\n ARMv7-A \r\n | \r\n\r\n 2 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9Lite \r\n | \r\n\r\n SoC3 \r\n | \r\n\r\n A2225 A2269 A2241 \r\n | \r\n
| \r\n FG-81F \r\n | \r\n\r\n Fortinet SoC4 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9XLite \r\n | \r\n\r\n SoC4 \r\n | \r\n\r\n A2225 A2269 A2242 \r\n | \r\n
| \r\n FG-81F-2R \r\n | \r\n\r\n Fortinet SoC4 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9XLite \r\n | \r\n\r\n SoC4 \r\n | \r\n\r\n A2225 A2269 A2242 \r\n | \r\n
| \r\n FG-81F-2R-3G4G-PoE \r\n | \r\n\r\n Fortinet SoC4 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9XLite \r\n | \r\n\r\n SoC4 \r\n | \r\n\r\n A2225 A2269 A2242 \r\n | \r\n
| \r\n FG-81F-2R-PoE \r\n | \r\n\r\n Fortinet SoC4 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9XLite \r\n | \r\n\r\n SoC4 \r\n | \r\n\r\n A2225 A2269 A2242 \r\n | \r\n
| \r\n FG-81F-PoE \r\n | \r\n\r\n Fortinet SoC4 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9XLite \r\n | \r\n\r\n SoC4 \r\n | \r\n\r\n A2225 A2269 A2242 \r\n | \r\n
| \r\n FG-90E \r\n | \r\n\r\n Fortinet SoC3 \r\n | \r\n\r\n ARMv7-A \r\n | \r\n\r\n 2 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9Lite \r\n | \r\n\r\n SoC3 \r\n | \r\n\r\n A2225 A2269 A2241 \r\n | \r\n
| \r\n FG-91E \r\n | \r\n\r\n Fortinet SoC3 \r\n | \r\n\r\n ARMv7-A \r\n | \r\n\r\n 2 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 128GB \r\n | \r\n\r\n CP9Lite \r\n | \r\n\r\n SoC3 \r\n | \r\n\r\n A2225 A2269 A2241 \r\n | \r\n
| \r\n FG-101E \r\n | \r\n\r\n Fortinet SoC3 \r\n | \r\n\r\n ARMv7-A \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9Lite \r\n | \r\n\r\n SoC3 \r\n | \r\n\r\n A2225 A2269 A2241 \r\n | \r\n
| \r\n FG-101F \r\n | \r\n\r\n Fortinet SoC4 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9XLite \r\n | \r\n\r\n SoC4 \r\n | \r\n\r\n A2225 A2269 A2242 \r\n | \r\n
| \r\n FG-201E \r\n | \r\n\r\n Intel Celeron G1820 \r\n | \r\n\r\n Haswell \r\n | \r\n\r\n 4GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-201F \r\n | \r\n\r\n Intel Xeon D-1627 \r\n | \r\n\r\n Hewitt Lake \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 30GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-301E \r\n | \r\n\r\n Intel i5-6500 \r\n | \r\n\r\n SkyLake \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-401E \r\n | \r\n\r\n Intel i5-8500 \r\n | \r\n\r\n Coffee Lake \r\n | \r\n\r\n 8GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-501E \r\n | \r\n\r\n Intel i7-6700 \r\n | \r\n\r\n SkyLake \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-601E \r\n | \r\n\r\n Intel i7-8700 \r\n | \r\n\r\n Coffee Lake \r\n | \r\n\r\n 16 GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-1101E \r\n | \r\n\r\n Intel Xeon E-2186G \r\n | \r\n\r\n Coffee Lake \r\n | \r\n\r\n 16 GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 960GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-1801F \r\n | \r\n\r\n Intel Xeon W-3223 \r\n | \r\n\r\n Cascade Lake \r\n | \r\n\r\n 24GB \r\n | \r\n\r\n 30GB \r\n | \r\n\r\n 2TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-1801F-DC \r\n | \r\n\r\n Intel Xeon W-3223 \r\n | \r\n\r\n Cascade Lake \r\n | \r\n\r\n 24GB \r\n | \r\n\r\n 30GB \r\n | \r\n\r\n 2TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-2000E \r\n | \r\n\r\n Intel Xeon E5-1660v4 \r\n | \r\n\r\n Broadwell \r\n | \r\n\r\n 32 GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-2201E \r\n | \r\n\r\n Intel Xeon Gold 6126 \r\n | \r\n\r\n SkyLake \r\n | \r\n\r\n 24 GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 2TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-2500E \r\n | \r\n\r\n Intel Xeon E5-1650v3 \r\n | \r\n\r\n Haswell \r\n | \r\n\r\n 32 GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 480GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-2601F \r\n | \r\n\r\n Intel Xeon Gold 6208U \r\n | \r\n\r\n Cascade Lake \r\n | \r\n\r\n 48 GB \r\n | \r\n\r\n 30 GB \r\n | \r\n\r\n 2 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-2601F-DC \r\n | \r\n\r\n Intel Xeon Gold 6208U \r\n | \r\n\r\n Cascade Lake \r\n | \r\n\r\n 48 GB \r\n | \r\n\r\n 30 GB \r\n | \r\n\r\n 2 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-3301E \r\n | \r\n\r\n Intel Xeon Gold 5118 \r\n | \r\n\r\n SkyLake \r\n | \r\n\r\n 96 GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 2TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-3401E \r\n | \r\n\r\n Intel Xeon Gold 6130 \r\n | \r\n\r\n SkyLake \r\n | \r\n\r\n 96 GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 2TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-3401E-DC \r\n | \r\n\r\n Intel Xeon Gold 6130 \r\n | \r\n\r\n SkyLake \r\n | \r\n\r\n 96 GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 2TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-3601E \r\n | \r\n\r\n Intel Xeon Gold 6152 \r\n | \r\n\r\n SkyLake \r\n | \r\n\r\n 96 GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 2TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-4201F \r\n | \r\n\r\n Intel Xeon Gold 6248 \r\n | \r\n\r\n Cascade Lake \r\n | \r\n\r\n 384 GB \r\n | \r\n\r\n 30 GB \r\n | \r\n\r\n 4 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-4201F-DC \r\n | \r\n\r\n Intel Xeon Gold 6248 \r\n | \r\n\r\n Cascade Lake \r\n | \r\n\r\n 384 GB \r\n | \r\n\r\n 30 GB \r\n | \r\n\r\n 4 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-4401F \r\n | \r\n\r\n Intel Xeon Gold 6248 \r\n | \r\n\r\n Cascade Lake \r\n | \r\n\r\n 384 GB \r\n | \r\n\r\n 30 GB \r\n | \r\n\r\n 4 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-4401F-DC \r\n | \r\n\r\n Intel Xeon Gold 6248 \r\n | \r\n\r\n Cascade Lake \r\n | \r\n\r\n 384 GB \r\n | \r\n\r\n 30 GB \r\n | \r\n\r\n 4 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-5001E1 \r\n | \r\n\r\n Intel Xeon E5-2690v4 \r\n | \r\n\r\n Broadwell \r\n | \r\n\r\n 64GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 480 GB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-6300F \r\n | \r\n\r\n Intel Xeon D-1567 \r\n | \r\n\r\n Broadwell \r\n | \r\n\r\n 192GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 2 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n Entropy Token \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-6301F \r\n | \r\n\r\n Intel Xeon D-1567 \r\n | \r\n\r\n Broadwell \r\n | \r\n\r\n 192GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 2 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n Entropy Token \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-6500F \r\n | \r\n\r\n Intel Xeon D-1567 \r\n | \r\n\r\n Broadwell \r\n | \r\n\r\n 320GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 2 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n Entropy Token \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
| \r\n FG-6501F \r\n | \r\n\r\n Intel Xeon D-1567 \r\n | \r\n\r\n Broadwell \r\n | \r\n\r\n 320GB \r\n | \r\n\r\n 16GB \r\n | \r\n\r\n 2 TB \r\n | \r\n\r\n CP9 \r\n | \r\n\r\n Entropy Token \r\n | \r\n\r\n A2225 A2269 A2240 \r\n | \r\n
\r\n
TOE Virtual Appliance and Related Hardware
\r\n| \r\n Model \r\n | \r\n\r\n License \r\n | \r\n\r\n Hypervisor \r\n | \r\n\r\n CPU* \r\n | \r\n\r\n Entropy \r\n | \r\n\r\n CAVP \r\n | \r\n
| \r\n FortiGate-VM64 \r\n | \r\n\r\n VM01 | \r\n\r\n VMware ESXi 6.7 \r\n | \r\n\r\n Intel Xeon Intel Xeon Intel Xeon \r\n | \r\n\r\n Token via USB pass-through \r\n | \r\n\r\n A2291 A2298 \r\n | \r\n
| \r\n VM02 | \r\n|||||
| \r\n VM04 | \r\n|||||
| \r\n VM08 | \r\n|||||
| \r\n VM16 | \r\n|||||
| \r\n VM32 | \r\n|||||
| \r\n VMUL | \r\n
* Provided with PacStar 451/455
\r\n\r\n
","security_evaluation_summary":"
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which FortiGate/FortiOS 6.4 was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Rev. 5. The product, when configured as identified in the FortiOS 6.4 and FortiGate NGFW Appliances FIPS140-2 and Common Criteria Technote, March 9, 2023 01-649-0773518-20230309, satisfies all of the security functional requirements stated in the FortiGate/FortiOS 6.4 Security Target, Version 1.2, March 2023. The project underwent CCEVS Validator review. The evaluation was completed in March 2023. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report (Report Number CCEVS-VR-VID11296-2023) prepared by CCEVS.
","environmental_strengths":"The TOE provides the following security functions:
\r\na) Security Audit. The TOE generates logs for auditable events. These logs can be stored locally in protected storage and/or exported to an external audit server via a secure channel.
\r\nb) Cryptographic Support. The TOE implements a variety of key generation and cryptographic methods to provide protection of data both in transit and at rest within the TOE. In the evaluated configuration, the TOE is in FIPS mode to support the cryptographic functionality. The TOE implements cryptographic protocols such as SSH, TLS, HTTPS, and IPsec.
\r\nc) Residual Data Protection. The TOE ensures that data cannot be recovered once deallocated.
\r\nd) Stateful Traffic and Packet Filtering. The TOE allows for the configuration and enforcement of stateful packet filtering/firewall rules on all traffic traversing the TOE.
\r\ne) Identification and Authentication. The TOE implements mechanisms to ensure that users are both identified and authenticated before any access to TOE functionality or TSF data is granted. Remote login attempts are limited to an administrator-configured threshold, after which the user must wait for a defined period of time before login attempts can be made. It provides the ability to both assign attributes (user names, passwords and roles) and to authenticate users against these attributes. The TOE also provides X.509 certificate validation for its TLS and IPsec connections.
\r\nf) Security Management. The TOE provides a suite of management functionality, allowing for full configuration of the TOE by an authorized administrator.
\r\ng) Protection of the TSF. The TOE implements a number of protection mechanisms (including authentication requirements, self-tests and trusted update) to ensure the protection of the TOE and all TSF data. The TOE maintains its own time source free from outside interference for the purpose of generating logs and executing time sensitive operations.
\r\nh) TOE Access. The TOE provides session management functions for local and remote administrative sections. Administrative sessions have a defined lifetime for both local and remote sessions, users connecting to the TOE will be presented with a warning and consent banner prior to authentication.
\r\ni) Trusted Path/Channels. The TOE provides secure channels between itself and local/remote administrators and other devices to ensure data security during transit.
","features":[]}