A FortiGate that runs as software on your servers or in the cloud, rather than as a physical box.
It’s FortiOS running as a virtual machine on VMware, Hyper-V, KVM or public cloud. It has the same core policy features as a hardware FortiGate, licensed by CPU capacity.
Inmate program servers, such as learning or messaging systems, often share a data center with staff systems. Administrators need the same control over traffic between those servers as at the perimeter.
- Separates inmate program servers from jail management and medical systems.
- Logs traffic between servers.
- Extends the same policy to county or state cloud systems.
- East-west segmentation between virtual servers.
- Same policy language and management as physical firewalls.
- Deployable in county or state cloud accounts.
| Control | Priority | How this helps |
|---|---|---|
| SC-7Boundary Protection | P1 | Sets a boundary around virtualized CJI systems. |
| AC-4Information Flow Enforcement | P1* | Controls flows between workloads. |
| SI-4System Monitoring | P1 | Inspects traffic between servers. |
Fortinet’s FIPS page shows a 140-2 entry for FortiGate VM. Check current validation if it encrypts CJI.
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table