Skip to main content
Toshi_Esumi
SuperUser
Aug 30, 2023 7:52 PM UTC

I have some opposing opinions against this guy's post. Like saying "all layers on FortiGate". FortiSandbox is NOT a FortiGate. Separate Forti-somthing product. And so on and on.
But instead of fighting against a post by somebody who works for a company (probably using and/or selling Fortinet products), I would like to point you to below Fortinet's official explanation about this subject.

 

https://www.fortinet.com/resources/cyberglossary/osi-model

 

The OSI Model is just a networking model, which almost nobody implemented completely other than original demonstration by big computer companies in '70s. Still referenced and useful but the TCP/IP Model has become a de-fact standard and adopted by virtually everybody after '80s. But again, it's a networking model to connect main frame computers from different vendors a half century ago. The contemporary firewall concept like anti-virus, Intrusion protection, sandboxing, etc. wouldn't fit well to the model but go to application above the 7-layer network model. Or not so important if they fit any layers (who cares?).

 

Probably different people have different opinions about this rightfully.

 

Toshi

6 replies

adambomb1219
SuperUser
SuperUser
Aug 30, 2023 7:28 PM UTC

1-7 yeah that's true

Toshi_Esumi
SuperUser
SuperUser
Aug 30, 2023 7:52 PM UTC

I have some opposing opinions against this guy's post. Like saying "all layers on FortiGate". FortiSandbox is NOT a FortiGate. Separate Forti-somthing product. And so on and on.
But instead of fighting against a post by somebody who works for a company (probably using and/or selling Fortinet products), I would like to point you to below Fortinet's official explanation about this subject.

 

https://www.fortinet.com/resources/cyberglossary/osi-model

 

The OSI Model is just a networking model, which almost nobody implemented completely other than original demonstration by big computer companies in '70s. Still referenced and useful but the TCP/IP Model has become a de-fact standard and adopted by virtually everybody after '80s. But again, it's a networking model to connect main frame computers from different vendors a half century ago. The contemporary firewall concept like anti-virus, Intrusion protection, sandboxing, etc. wouldn't fit well to the model but go to application above the 7-layer network model. Or not so important if they fit any layers (who cares?).

 

Probably different people have different opinions about this rightfully.

 

Toshi

unknown1020
Explorer III
Aug 31, 2023 4:26 AM UTC

Thank you very much friend, this link will help me.

Rosseto
New Member
Aug 30, 2023 9:54 PM UTC

I consider it a better term as it can work on all layers, for example layer 7 firewall IF YOU HAVE a license and registration in the Fortiguard cloud, but as far as the other layers are concerned, I understand that it fulfills the various aspects of a network element well, for connectivity, routing, transport, etc...

spoojary
Staff
Staff
Aug 30, 2023 10:46 PM UTC

The link you provided seems to discuss different types of firewalls and their capabilities. It's accurate that FortiGate and similar advanced firewalls can work across multiple layers of the OSI model. This ability to operate at different layers allows them to provide comprehensive security features such as packet filtering, stateful inspection, intrusion prevention, application control, and more.

In summary, FortiGate firewalls can indeed operate at multiple layers of the OSI model, and this capability enables them to offer a wide range of security functionalities to protect networks and data.

unknown1020
Explorer III
Aug 31, 2023 4:27 AM UTC

but here it says that it works in layer 7,3 and 4 https://www.fortinet.com/resources/cyberglossary/osi-model

Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024