1. © Copyright Fortinet Inc. All rights reserved.
Connect and Secure Retail
Lan & Wan Solutions – Excellence Fortinet Partner
Giugno 2015

2. 2
 Target
» 40 million card numbers, 70 million records
 Home Depot
» 56 million card numbers, 53 million records
 Michaels
» 2.6 million card numbers
 Staples
» 1.6 million card numbers
 Goodwill Industries
» 868,000 card numbers
2014: Year of the Retail Data Breach

3. 3
 New retail technologies
» Wireless POS, sales tablets,
guest Wi-Fi, smart digital signage,
presence analytics
 Compliance requirements
» PCI, regional data privacy
compliance
 Security threats
» Advanced Persistent Threats
 Multiplied by many locations
Technology Demands on Retail Networks

4. 4
Fortinet Connect and Secure Solution
PoE Interfaces
Space & Energy Saving
FW & VPN Web Filtering
3G/4G connectivitySSL Inspection User/Device ID
IPS DLP
Application Control Vuln. Scanning
AV/Sandbox Anti-spam
Hybrid WAN
WiFi Controller
WAN Optimization
Endpoint Control
Token Service
SoftwareFeatures
HardwareFeatures
Wireless Net
WAN
3G/4G
Wired Net PoE
FortiGate
FortiAP
Management/
Reporting
FortiManager
FortiAnalyzer
FortiSwitch
WAN/VPN
FortiPresence
FortiExtender

5. 5
Retail Store Device Proliferation
Multiple
Management
Consoles
Inconsistent
Networking
Functions
Potential
Gap in Protection
Slower Threat
Response
WAN
Acceleration
Web
Filtering
IPS
Application
Control
WiFi Controller
Advanced
Threat
Protection
Antivirus
Firewall
Management
SaaS Gateway
VPN
INTERNET

6. 6
INTERNET
FortiGate Device Consolidation
FortiGate consolidates networking and security
technologies into a single high performance appliance
Firewall
VPN
Application Control
IPS
Web Filtering
Antivirus
WAN Acceleration
Data Leakage Protection
WiFi Controller
Advanced Threat Protection
SaaS Gateway
FortiGate
DCFW
NGFW
UTM
Management
Single
Management
Console
Integrated
Networking
& Security
Consolidated
Security Policy
Faster
Threat Response

7. 7
Performance&Scalability
FW <1G 1G – 2G 2G – 4G
NGFW <250Mbps 250MB – 1G 275MB – 1G
Ports 1 – 5 GE 1 – 10 GE 1 – 48 GE
FortiGate Entry Level Family
FG-30D/-POE
FWF-30D/-POE
FG-60D/-POE
FWF-60D/-POE
FG/FWF-60D-
3G4G
FG-80D
FG-94D-POE
FWF-90D/-POE
FG-70D
FG/FWF-92D
FG-90D/-POE
FGR-60D
CPU
CPU
SoC2
SoC2 SoC2
FG-98D-POE

8. Secure in-store Connectivity
Wireless LAN, Wired LAN, Wireless WAN

9. 9
FortiWiFi Overview
FortiWiFi
INTERNET
Small Deployments -
Up to 300 sq meters
or 3,000 sq feet
FortiWiFi

10. 10
FortiWiFi Family
FWF-30D/30D-POE FWF-60D/60D-POE FWF-90D/90D-POE
Thick AP ✓ ✓ ✓
Number of radios 1 1 1
IEEE 802.11 standards a/b/g/n a/b/g/n a/b/g/n
802.11n support 2x2 MIMO 2x2 MIMO 2x2 MIMO
Max client association rate 300Mbps 300Mbps 300Mbps
Max number of SSIDs 8 8 8
Max Managed FortiAP
(Total/ Local Bridge)
2/2 10 / 5 32 / 16

11. 11
FortiAP overview
FortiAP
INTERNET
Larger Deployments -
More than 300 sq
meters or 3,000 sq feet
FortiGate/FortiWiFi
WLAN Controller

12. 12
FortiAP Family
3x3:3
DualRadio
DualBand
2x2:2
SingleRadio
1x1:1
Remote Outdoor Indoor
802.11ac
802.11ac
FAP-28C
FAP-14C
FAP-11C
FAP-222C
FAP-112D
FAP-24D
FAP-223C
FAP-221C
FAP-321C
FAP-320C
802.11ac
802.11ac
FAP-224D
FAP-25D
FAP-21D
802.11ac

13. 13
 Wireless IDS
 Rogue AP Suppression
 Layer 7 Application Control
 Integrated Guest Captive Portal
Fortinet Wireless Features for Retail

14. 14
PoENon-PoE
8 port 24 port 48 port
FortiSwitch Secure Access Family
FS-28C
FS-224D-POE
FS-348B
FS-324B-POE
FS-108D-POE
FS-124D-POE
FS-124D
FSR-112D-POE
FS-448B

15. 15
FortiGate Switch
Management
» Uses modified CAPWAP
protocol – like FortiAP
» View port speed,
status, etc.
» Apply security policy
» Authentication via
802.1x or captive portal
» Segment Network
Switch Segmentation for PCI Compliance

16. 16
 Modems connected directly to CPE
 CPE usually located in a wiring closet
 Poorly located for optimal 3G/4G reception
Problems with 3G/4G WAN in Retail

17. 17
 Houses a 3G/4G modem
 Can be installed for optimal coverage
 Connects to FortiGate via Ethernet cable
FortiExtender Wireless WAN Solution

18. 18
FortiExtender family
FortiExtender-20B
• Indoor w/ Security Lock
• USB Modem
• PoE or AC powered
FortiExtender-100B
• Outdoor, IP55 Rated
• USB Modem
• Ruggedized Construction
• PoE Powered
FortiExtender-100A-
VZW (Band 13)
• Outdoor, IP55 Rated
• Internal Verizon 4G Modem
Ruggedized Construction
• PoE powered

19. Retail Presence Analytics
FortiPresence

20. 20
 Components:
» FortiAP or FortiWiFi: Detects
Wi-Fi signal from smartphones
» FortiGate: Aggregates signal
information from multiple APs
» FortiPresence: Processes data
and presents analytics on
dashboard
FortiPresence Solution Overview
FortiPresence

21. 21
 Measure
» Total/New/Repeat
» Dwell time duration
» A/B store comparison
» VIP Alert
» Real-time Heat maps
» And more…
FortiPresence: Measure. Connect. Influence
 Connect
» Social Wi-Fi Login
» Marketing Opt-in
» Push coupon
 Influence
» Analyzes Wi-Fi traffic
» Detect product search
» API can trigger:
» Smart digital signs
» Instant price cuts
» Push Coupons

22. 22
Case Study - Bobbejaanland Theme Park
• Located in Flanders, Belgium
• 56 acres, 50 attractions, 750,000+ visitors per year
Challenge
Retail Theme Park
• Growing attendance and improving profitability
• Increasing utilization of rides and attractions
• Connecting wireless Point-of-Sale systems
• Enabling guest Wi-Fi for visitors
Solution
• FortiGate
– Deployed as Security Appliance and Wireless Controller
• 30+ FortiAP Access Points
• FortiPresence Analytics Service

23. 23
Contattaci gratuitamente…
In questi anni di partnership con la casa
madre, Lan & Wan Solutions ha ottenuto tutte
le specializzazioni previste nei vari iter di
certificazione, raggiungendo la qualifica di
Partner Of Excellence.
Certified experts in Fortimail and email
security
Certified experts in Fortiweb and web
application firewall protection
Certified experts in FortiAp, FortiWifi
and wireless security
Contacts
Tel. +39 049 8843198 DIGIT (5)
contacts@lanewan.it
www.lanewan.it