FORTISWITCH-648F LAYER2/3 FGT CTLR CMPTBL W/32X2.5G RJ45+16X5G

Security, Performance, and Manageability

The FortiSwitch™ campus family offers an unparalleled combination of security, performance, and manageability, making it the ideal choice for the enterprise campus that prioritize safeguarding against threats. As campus network design continues to adapt to emerging technologies and evolving business requirements, the FortiSwitch enterprise campus switching architecture empowers network administrators with enhanced visibility, control, and manageability. The platform's scalability, agility, and ease of management contribute to a highly secure environment, providing a robust foundation for any sized campus.

Secure Networking through FortiLink

FortiLink is an innovative proprietary management protocol that enables seamless integration and management between a FortiGate Next-Generation Firewall and the FortiSwitch Ethernet switching platform. By using FortiLink, the FortiSwitch becomes a logical extension of the FortiGate, allowing for centralized management of both network security and access layer functions through a single interface.

Native Entry-Level Network Access Control at No Cost

FortiLink integration enables basic Network Access Control (NAC) functionality to profile and securely onboard devices as they connect. FortiLink NAC offers visibility, automated segmentation, and microsegmentation of IoT devices, quarantine if compromised, and virtual patching to help protect against threats.

Dynamic Segmentation and Policy Enforcement

Implementing dynamic port-level security in a large campus Ethernet switching environment traditionally requires hands-on effort and ongoing maintenance. FortiSwitch campus switching architecture automates dynamic segmentation through FortiLink, empowering IT administrators to control traffic within segments, limiting the scope of threats. The automation of segmentation makes making policy enforcement easier and more efficient, while NGFWlevel policies ensure granular control and zero-trust access for users and devices.

Role and Device-based Access Control and Policy Enforcement

Whether leveraging Fortinet Identity Access Management (IAM) or third-party identity providers, FortiLink automation can leverage identity to make granular role-based policy decisions.

Secure Access Service Edge (SASE)

This FortiSwitch enterprise architecture offers a built-in foundation for zero-trust network access (ZTNA) and secure access service edge (SASE), allowing you the flexibility to easily deploy the type and level of security you need at the edge of your network.

Operational Simplicity

Deploying, managing, and optimizing an Ethernet switching infrastructure has traditionally been challenging and time-consuming. FortiSwitch switching architecture can be securely deployed and managed in minutes through zero-touch deployment. Whether FortiSwitch is deployed in standalone mode or FortiLink mode, automation and orchestration offer intuitive workflows and unified views to provision, manage, and optimize your campus. This is available through both FortiCloud and on-premises management. Centralized management delivers a unified, single view of both the LAN and security. This provides a consistent user experience for optimal operational efficiency, simplifying management, optimization, and troubleshooting. The result is a shorter mean time to repair both network and security issues.

• Standalone or Integrated FortiLink deployment option
• On premise and cloudbased management options
• Zero-touch deployment
• Entry level network access control at no cost
• Role and device-based access control and policy enforcement
• Dynamic segmentation and Micro Segmentation
• Secure access service edge (SASE) support
• Up to 48 access ports in a compact 1 RU form factor
• Stacking up to 300 switches per FortiGate
• Wire-speed switching with up to 40GE uplinks