FortiGate-100D + 2*Fortinet FortiGate 60D Firewall

The FortiGate 100D delivers next generation firewall (NGFW) capabilities for mid-sized to large enterprises, with the flexibility to be deployed at the campus or enterprise branch.

• Protects against known exploits, malware and malicious websites using continuous threat intelligence provided by FortiGuard Labs security services.
• Provides industry-leading performance and protection for SSL encrypted traffic.
• Delivers an extensive routing, switching, wireless controller and high performance IPsec VPN capabilities to consolidate networking and security functionality
• Automatically builds Network Topology visualizations which discover IoT devices and provide complete visibility into Fortinet and Fabric-ready partner products
• Secure direct Internet access for Cloud applications for improved latency and reduce WAN cost spending

Cisco ASA 5516-X with FirePOWER Services, 8GE is a security appliance that provides advanced threat protection for network and cloud infrastructures. The key highlights of this product are:

1. Firewall: Stateful packet inspection firewall with an advanced security architecture.
2. Advanced Threat Protection: Integrates advanced threat protection through the FirePOWER module, providing threat-focused NGFW services.
3. Intrusion Prevention System (IPS): In-line threat detection and prevention through network, web and email traffic.
4. Advanced Malware Protection (AMP): Protects against file-based malware, zero-day threats, and other advanced attacks.
5. URL Filtering: Provides comprehensive protection against malicious and inappropriate web content.
6. 8 Gigabit Ethernet (GE) ports: 8 GE ports provide high-speed connectivity for large, data-intensive networks.
7. Scalability: Can be easily scaled to meet the growing needs of the network.
8. Centralized Management: FirePOWER Services can be centrally managed through the Firepower Management Center.
9. VPN Support: Supports site-to-site and remote-access VPN, providing secure remote access to the network