IT administrators are faced with the challenge of securing a network while also ensuring that the network is always available. For critical network segments, this could mean that network availability is valued over ensuring that all traffic is inspected for malicious activity. High availability solutions, where a system fails over to either an active or standby unit, can reduce the risk of a network outage while still providing security services. To further reduce the risk of a network outage due to a power failure or a security device malfunction, bypassing the device altogether with a fail-to-wire solution can ensure network continuity at times when security cannot be provided.

Fortinet ASM-CX4 and ASM-FX2 modules provide bypass functionality to FortiGate multi-threat security systems equipped with an available single-width Advanced Mezzanine Card (AMC) expansion bay. The ASM-CX4 is a single-width AMC module which provides four (4) 10/100/1000 copper (RJ-45) Ethernet interfaces for two protected segments of network traffic. The ASM-FX2 is a single-width AMC module which provides two (2) gigabit fiber (LC, 850nm) Ethernet interfaces for a single protected segment of network traffic. Operating in transparent mode during normal operation, both modules automatically bridge network traffic in the event of a system failure or power outage to ensure mission-critical network continuity.

• Fail-to-Wire bypass functionality maximizes network uptime by using Fortinet bypass modules to automatically fail-to-wire in the event of a power outage or any other type of event that would cause the host device to degrade the availability of the network segment. The modules automatically return to normal operating mode when conditions permit.
• The modular form factor of the Fortinet bypass modules empower customers with the ability to add bypass functionality to existing systems with an available single-width AMC expansion bay or to customize a new solution to match defined requirements.
• FortiOS™ integration increases the administrator's ability to monitor and control the bypass status of interfaces remotely, with the ability to view mode of operation, manually switch interfaces into bypass or normal operation mode, and configure thresholds for automatic bypass fail-to-wire.

Modules	ASM-CX4	ASM-FX2
Interfaces	Four (4) 10/100/1000 Base-T	Two (2) 1000 Base-SX
Protected Segments	Two (2) Segments	One (1) Segment
Form Factor	Single-Width AMC	Single-Width AMC