FortiSwitch

The network switches that connect wired devices such as computers, cameras, phones and door controllers. They are managed from the FortiGate, as if they were part of it.

Using FortiLink, the switch is managed from the FortiGate like an extension of it. Each port can get its own VLAN and security policy, and PoE models can power cameras, phones and access points over the network cable.

Control has to reach every wired jack. A kiosk in a dayroom or a port in a classroom can be used to reach other devices, unless each port is locked down. FortiSwitch brings firewall-level control down to the individual port.

• Isolates inmate kiosks and classroom PCs from each other at the port.
• Disables unused ports, so a jack in an inmate area can’t be used.
• Shows what’s connected to each port, and where it is.
• Quarantines a device directly at its switch port.

• Private VLANs: devices on the same switch can reach the approved gateway but not each other, which blocks inmate-to-inmate traffic.
• Port control: unused ports can be disabled, and MAC or 802.1X rules can tie a port to its approved device.
• Port security: unused ports can be disabled and 802.1X can require devices to authenticate.
• PoE scheduling and status show camera or intercom power problems centrally.
• Quarantine: FortiGate can isolate a compromised device at its switch port.
• Fortinet lists FIPS 140-3 validation for FortiSwitch 7.6, for specific builds.