Certified Product: Fortigate UTM appliances running FortiOS 5.0 Patch Release 10

Fortinet, Inc.
326 Moodie Drive
Ottawa  ON  K2H8G3

Fortigate UTM appliances running FortiOS 5.0 Patch Release 10 (hereafter referred to as Fortigate UTM v5.0.10), from Fortinet, Inc., was the subject of a Common Criteria evaluation performed by the Common Criteria Evaluation Facility at CGI IT Security Evaluation & Test Facility The evaluation was completed in March 2015.

The evaluation of Fortigate UTM v5.0.10 determined that this Information Technology (IT) product can be trusted, to conform to the requirements of the following protection profile and extended package; Protection Profile for Network Devices Version 1.1 (Errata #2) with the Stateful Traffic Filter Firewall Version 1.0 Extended Package.

Fortigate UTM v5.0.10 is a series of hardware security systems that are designed to protect computer networks from abuse. They reside between the network they are protecting and an external network such as the Internet, restricting the information flow between the networks to that permitted by a policy (set of rules) defined by an authorized administrator. They detect and eliminate the most damaging, content-based threats from email and Web traffic such as viruses, worms, intrusions, inappropriate Web content and more in real time.

The TOE is designed to provide firewall services ensuring network protection for Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6) networks. The TOE is capable of robust filtering based on information contained in IPv4, IPv6, ICMPv4, ICMPv6, TCP and UDP headers as specified by their respective RFCs. Additionally the TOE is capable of content inspection of FTP and H.323 protocols to work with the dynamic nature of these protocols.

The scope of this evaluation is defined by the security target, which identifies assumptions made during the evaluation, the intended environment for the Fortigate UTM v5.0.10, the IT security requirements to be met, and the level of confidence to which it is asserted that the Fortigate UTM v5.0.10 satisfies its IT security requirements.

Consumers are advised to carefully review the certification report to gain an understanding of the security functionality, the evaluated configuration, and the intended operating environment for Fortigate UTM v5.0.10.