326 Moodie Drive
Canada K2H 8G3
Fortinet FortiGate™ Unified Threat Management Solutions and FortiOS™ 4.0 CC Compliant Firmware (hereafter referred to as FortiGate 4.0), from Fortinet, Incorporated, was the subject of a Common Criteria evaluation performed by the Common Criteria Evaluation Facility at EWA-Canada, Ottawa, Canada. The evaluation was completed in December 2011.
The evaluation of FortiGate 4.0 determined that this Information Technology (IT) product can be trusted, to Evaluation Assurance Level (EAL) 4 augmented with ALC_FLR.3, to conform to the requirements of the associated security target.
FortiGate 4.0 is a family of stand-alone firewall appliances that reside between the network they are protecting and an external network such as the Internet, restricting the information flow between the networks to that permitted by a policy defined by an authorized administrator. FortiGate 4.0 implements firewall, web filtering, VPN, antivirus and intrusion detection/prevention functionality. FortiGate 4.0 supports secure remote administration using FIPS 140-2 validated cryptography.
The scope of this evaluation is defined by the security target, which identifies assumptions made during the evaluation, the intended environment for FortiGate 4.0, the IT security requirements to be met, and the level of confidence (evaluation assurance level) to which it is asserted that FortiGate 4.0 satisfies its IT security requirements.
Consumers are advised to carefully review the certification report to gain an understanding of the security functionality, the evaluated configuration, and the intended operating environment for FortiGate 4.0.