FortiGate NGFW Firewalls and FortiGuard Security Services
Fortinet's extensive lineup of FortiGate firewall appliances can meet the requirements of virtually any deployment scenario including enterprise campus, core data-center, or internal segments. All models include proprietary security processors (SPUs) that can perform SSL/TLS inspection, IPS signature matching, and Suite B cryptography without compromising performance. All Fortinet FortiGate firewalls combine a full complement of next-generation security functions in one compact device. Threat protection capabilities include antivirus, granular policy control, application visibility and control, and intrusion prevention systems. FortiGate firewalls are all powered by Fortinet's FortiOS operating system and integrate natively with Fortinet's security fabric and subscription services for unified management. A fully redundant architecture with support for real-time failover provides 99.999% reliability. Multiple high-speed interfaces support the increasingly heavy traffic of modern hybrid networks.
Fortinet offers a variety of subscription services to enhance network, cloud, application and endpoint security and to provide advanced threat management and analytics, SIEM, and sandboxing for FortiGate firewalls. Available individually or as bundles, and managed by Fortinet's FortiGuard threat intelligence and research organization, these subscription services include:
Fortinet Entry-level FortiGate Firewalls
FortiGate entry-level NGFW firewalls are value-priced desktop appliances designed for small businesses and branch offices. The fanless design and small footprint of these devices allow them to operate inconspicuously in an office environment. Fortinet's proprietary security processing units (SPUs) offer industry-leading performance for IPsec VPN, threat protection, and SSL-inspection. To streamline management, Fortinet's FortiCloud services offer zero-touch deployment, cloud-based management, extended logging, and a wealth of configuration options. Integrated SD-WAN support allows branch offices to distribute network traffic dynamically across multiple sites. The firewalls also make it possible to avoid expensive MPLS lines by allowing direct Internet access for SaaS cloud apps.
FortiGate 30-50 Series Firewalls
Fortinet's FortiGate 30-50 Series firewalls are designed for connecting branch locations to your Fortinet Security Fabric. These appliances support firewall throughput as high as 2.5 Gbps and include multiple integrated 1 GE ports. The FortiGate 30E includes a GE RJ45 WAN port, four GE RJ45 switch ports, a console port, and a USB port. Firewall throughput is 950 Mbps; IPS is 300 Mbps; next-generation firewall throughput is 200 Mbps; and Threat Protection performance is 150 Mbps. You can connect an iOS device to the USB port and run the FortiExplorer wizard app and be configured and protected in a few minutes. The FortiWiFi 30E firewall adds a 802.11 a/b/g/n WiFi interface.
The FortiGate 50E includes two GE RJ45 WAN ports, five GE RJ45 switch ports, a console port, and a USB port. Firewall throughput is 2.5 Gbps; IPS throughput is 350 Mbps; NGFW throughput is 2.5 Gbps; and Threat Protection performance is 150 Mbps. The FortiWiFi 50E/-2R model includes a dual radio 802.11a/b/g/n/ac WiFi interface. The FortiGate 51E and FortiGate FortiWiFi 51E include an internal 32 GB SSD drive. The FortiGate 52E firewall includes two internal 32 GB SSD drives.
FortiGate 60-90 Series Firewalls
Fortinet's FortiGate 60-90 Series firewalls are designed for branch offices and mid-size businesses. These devices deliver firewall performance of up to 4 Gbps. In the FortiGate 60E Series, all models come with a console port and a USB port, and all but the FortiGate 60E-POE model include seven GE RJ45 switch ports, two GE RJ45 WAN ports, and a GE RJ45 DMZ port. The FortiGate 60E-POE has eight integrated GE RJ45 PoE/+ ports, two GE RJ45 WAN ports, and no DMZ port. All models in the FortiGate 60E Series including the baseline FortiGate 60E deliver firewall throughput of 3 Gbps, IPS throughput of 400 Mbps, NGFW throughput of 250 Mbps, and Threat Protection throughput of 200 Mbps. The FortiWiFi 60E and the FortiWiFi 61E include 802.11 a/b/g/n/ac WiFi and the FortiWiFi 61E, like the FortiGate 61E, comes with 128 GB of SSD internal storage.
The faster performing FortiGate 80E Series firewalls are intended for relatively small environments, such as enterprisre branch offices, that require high availability. All models in this series deliver firewall throughput of 4 Gbps, IPS throughput of 450 Mbps, NGFW throughput of 360 Mbps, and Threat Protection throughput of 250 Mbps. All models also include a console port, a USB port, two GE RJ45 DMZ/HA ports, and two GE RJ45/SFP shared media pairs. The FortiGate 80E and the FortiGate 81E include 12 GE RJ45 ports. The FortiGate 80E-POE and the FortiGate 81E-POE include 12 GE RJ45 PoE/+ ports. The FortiGate 81E and FortiGate 81E-POE also include 128 GB of internal SSD storage.
FortiGate 90 Series firewalls were formerly the high-end of Fortinet's entry-level firewall product line. The FortiGate 90D-POE and the FortiWiFi 90D-POE appliances support firewall throughput of 3.5 Gbps, IPS throughput of 50 Mbps, NGFW throughput of 30 Mbps, and Threat Protection throughput of 25 Mbps. Both firewalls include 10 GE RJ45 switch ports, four RJ45 PoE ports, two GE RJ45 WAN ports, a console port, a USB management port, and two USB ports. The FortiWiFi 90D-POE firewall includes an 802.11 a/b/g/n wireless interface. FortiGate 94D-POE and FortiGate 98D-POE firewalls offer high performance and very high switch density. Both appliances deliver firewall throughput of 3.5 Gbps, IPS throughput of 41 Mbps, NGFW throughput of 25 Mbps, and Threat Protection throughput of 22.5 Mbps. Both firewalls also incorporate 24 FE RJ45 PoE ports, a USB Management port, two GE RJ45 WAN ports, a console port, a USB port, and 32 GB of internal SSD storage. The FortiGate 94D-POE has 24 integrated GE RJ45 switch ports and two GE SFP DMZ slots. The FortiGate 98D-POE firewall includes 72 GE RJ45 switch ports and four GE SFP DMZ slots.
Fortinet's FortiGate Rugged Series firewalls are all-in-one security appliances designed to operate under harsh conditions and feature a high level of vibration tolerance and a wide thermal operating range. FortiGate Rugged Series firewalls work with FortiGuard Industrial Security Service to provide specialized, real-time protection for critical industrial and control networks. Performance is moderate. The FortiGate Rugged 30D includes four GE RJ45 Ports, two GE SFP Slots, two DB9 Serial Interface/Console ports, and a USB port. Firewall throughput is 900 Mbps; IPS throughput is 180 Mbps; NGFW throughput is 45 Mbps; and Threat Protection performance is 16 Mbps. The FortiGate Rugged 35D has three GE RJ45 ports. Firewall throughput is 550 Mbps; IPS throughput is 210 Mbps; NGFW throughput is 65 Mbps; and Threat Protection performance is 16 Mbps.
The FortiGate Rugged 60D has four GE RJ45 ports, two shaired media pairs (GE RJ45 ports/GE SFP slots), an RJ45 console port, a USB management port for FortiExplorer, and a DB9 serial interface. Firewall throughput is 1.5 Gbps; IPS throughput is 95 Mbps; NGFW throughput is 40 Mbps; and Threat Protection performance is 23 Mbps. The speedier FortiGate Rugged 90D firewall has three GE RJ45 ports, two GE SFP slots, a GE RJ45 bypass pair, two DB9 serial console interfaces, and two USB interfaces. Firewall throughput is 2 Gbps; IPS throughput is 350 Mbps; NGFW throughput is 370 Mbps; and Threat Protection performance is 280 Mbps.
Fortinet Mid-range FortiGate Firewalls
FortiGate mid-range NGFW firewalls are high-performance rack-mount appliances designed for midsize organizations and for deployment at the campus or enterprise branch. Fortinet's purpose-built security processers allow these firewalls to deliver best-in-class performance for SSL-encrypted traffic. Native integration with subscription services managed by FortiGuard Labs provides continually updated protection from exploits, encrypted malware, malicious websites, botnets, ransomware, and unknown attacks.
FortiGate 100-200 Series Firewalls
Fortinet's FortiGate 100-200 Series firewalls are designed to protect small and mid-size businesses and enterprise branch locations. These devices deliver firewall throughput as high as 20 Gbps and all include multiple switch ports. FortiGate 100E Series firewalls deliver firewall throughput of 7.4 Gbps; IPS throughput of 500 Mbps; NGFW throughput of 360 Mbps; and Threat Protection performance of 250 Mbps. The FortiGate 100E has two GE RJ45 MGMT/DMZ ports, two GE RJ45 high-availability (HA) ports, 14 GE RJ45 ports, and two GE RJ45/SFP shared media pairs. The FortiGate 101E firewall comes with the same port configuration and includes 480GB of internal SSD storage. The FortiGate 100EF firewall two GE RJ45 MGMT/DMZ ports, two GE RJ45 HA ports, eight GE RJ45 ports, and 8 GE SFP slots. The FortiGate 140E-POE firewall includes two GE RJ45 MGMT/HA ports, 14 GE RJ45 ports, 24 GE RJ45 POE ports, and two GE SFP DMZ slots.
The FortiGate 100F series security appliance delivers firewall throughput of 20 Gbps; IPS throughput of 2.6 Gbps; NGFW throughput of 1.6 Gbps; and Threat Protection performance of 1 Gbps. The device includes a USB port, a console port, two GE RJ45 MGMT/DMZ ports, two GE RJ45 WAN ports, two GE RJ45 HA ports, 12 GE RJ45 ports, two 10 GE SFP+ FortiLink slots, four GE SFP slots, and four GE RJ45/SFP shared media pairs. The FortiGate 101F version adds 480GB of internal SSD storage.
The FortiGate 200E series firewall offers firewall throughput of 20 Gbps; IPS throughput of 2.2 Gbps; NGFW throughput of 1.8 Gbps; and Threat Protection performance of 1.2 Gbps. The firewall has a USB port, a console port, two GE RJ45 Management/HA ports, two GE RJ45 WAN ports, 14 GE RJ45 ports, and four GE SFP slots. The FortiGate 201E version adds 480GB of internal SSD storage. includes two GE RJ45 MGMT/HA ports, 14 GE RJ45 ports, 24 GE RJ45 POE ports, and two GE SFP DMZ slots.
FortiGate 300-600E Series Firewalls
Fortinet's FortiGate 300-600 Series firewalls are mid-range security appliances designed to protect medium-size organizations and branch offices. These rack-mount units deliver firewall throughput up to 36 Gbps and all include multiple high-speed network interface ports. The FortiGate 300E delivers firewall throughput of 32 Gbps; IPS throughput of 5 Gbps; NGFW throughput of 3.5 Gbps; and Threat Protection performance of 3 Gbps. The device includes a USB port, a console port, two GE RJ45 Management/HA ports, 16 GE RJ45 ports, and 16 GE SFP slots. The FortiGate 301E model comes with 240GB of internal SSD storage. The FortiGate 400E provides firewall throughput of 32 Gbps; IPS throughput of 7.8 Gbps; NGFW throughput of 6 Gbps; and Threat Protection performance of 5 Gbps. The device includes a USB port, a console port, two GE RJ45 Management/HA ports, 16 GE RJ45 ports, and 16 GE SFP slots. The FortiGate 401E version of this firewall includes 240GB of internal SSD storage.
The FortiGate 500E security appliance provides firewall throughput of 36 Gbps; IPS throughput of 7.9 Gbps; NGFW throughput of 5 Gbps; and Threat Protection performance of 4.7 Gbps. The device incorporates one USB port, one console port, two GE RJ45 Management/HA ports, eight GE RJ45 ports, eight GE SFP slots, and two 10 GE SFP+ slots. The FortiGate 501E version includes 240GB of internal SSD storage. The FortiGate 600E firewall provides firewall throughput of 36 Gbps; IPS throughput of 10 Gbps; NGFW throughput of 9.5 Gbps; and Threat Protection performance of 7 Gbps. The device includes a USB and a console port, two GE RJ45 Management/HA ports, eight GE RJ45 ports, eight GE SFP slots, and two 10 GE SFP+ slots. The FortiGate 601E includes 240GB of internal SSD storage.
FortiGate 800D and 900D Firewalls
Fortinet's FortiGate 800D and 900D firewalls are intended for medium-sized to large enterprises. The FortiGate 800D firewall provides firewall throughput of 36 Gbps; IPS throughput of 4.2 Gbps; NGFW throughput of 4 Gbps; and Threat Protection performance of 3 Gbps. The device includes a USB and a console port, two GE RJ45 Management/HA ports, two bypass GE RJ45 pairs, 20 GE RJ45 ports, eight GE SFP slots, two 10 GE SFP+ slots, and 240GB of internal SSD storage. The FortiGate 900D appliance delivers firewall throughput of 52 Gbps; IPS throughput of 4.2 Gbps; NGFW throughput of 4 Gbps; and Threat Protection performance of 3 Gbps. The firewall includes a USB management port, a console port, two GE RJ45 Management/HA ports, 16 GE RJ45 ports, 16 GE SFP slots, two 10 GE SFP+ slots, and 256GB of internal SSD storage.
Fortinet High-end FortiGate E-Series Firewalls
FortiGate high-end NGFW firewalls are high-performance rack-mount appliances intended for large enterprises and service providers and have the versatility to be used at the enterprise/cloud edge, data center core, or internal segments. These appliances deliver very low latency for enterprise edge deployments and also offer Layer 7 advanced security features to support intent-based segmentation within the data center.
FortiGate 1000 and 2000 E-Series Firewalls
Fortinet's FortiGate 1000 and 2000 E-Series firewalls are intended for large enterprises and service providers. These compact rack-mount appliances deliver firewall throughput as high as 158 Gbps and all include multiple high-speed switch ports. The FortiGate 1100E delivers firewall throughput of 80 Gbps; IPS throughput of 12.5 Gbps; NGFW throughput of 9.8 Gbps; and Threat Protection performance of 7.1 Gbps. The firewall includes two USB ports, a console port, two GE RJ45 MGMT/HA ports, 16 GE RJ45 ports, eight GE SFP slots, four 10 GE SFP+ slots, four 25 GE SFP28/10 GE SFP+ slots, and two 40 GE QSFP+ slots. The FortiGate 1101E version includes 480GB of internal SSD storage.
The FortiGate 2000E delivers firewall throughput of 90 Gbps; IPS throughput of 11.5 Gbps; NGFW throughput of 9 Gbps; and Threat Protection performance of 5.4 Gbps. The firewall comes with console and USB ports, two GE RJ45 management ports, 32 GE RJ45 ports, 10 10GE SFP+ slots, and 480GB of internal SSD storage. The FortiGate 2200E series delivers firewall throughput of 158 Gbps; IPS throughput of 16.5 Gbps; NGFW throughput of 13.5 Gbps; and Threat Protection performance of 11 Gbps. The appliance includes console and USB ports, two GE RJ45 management ports, 12 GE RJ45 ports, 18 25GE SFP28/10GE SFP+ slots, two 25GE SFP28/10GE SFP+ HA slots, and four 40GE QSFP+ slots. The FortiGate 2200E model adds two internal 1TB SSD drives. The FortiGate 2500E provides firewall throughput of 150 Gbps; IPS throughput of 11.5 Gbps; NGFW throughput of 9 Gbps; and Threat Protection performance of 5.4 Gbps. The firewall comes with console and USB ports, two GE RJ45 management ports, 32 GE RJ45 ports, 10 10GE SFP+ slots, two 10GE SFP+ SR (LC Connector, bypass), and 480GB of internal SSD storage.
FortiGate 3000 E-Series Firewalls
Fortinet's FortiGate 3000 E-Series firewalls are high performance and compact security appliances targeted at large enterprises and service providers. These high-end devices support firewall throughput of up to 1.05 Tbps and very high port density. The FortiGate 3300E supports firewall throughput of 160 Gbps; IPS throughput of 27 Gbps; NGFW throughput of 23 Gbps; and Threat Protection performance of 17 Gbps. The appliance comes with a USB management port, a console port, two GE RJ45 MGMT ports, 12 GE RJ45 ports, four 10 GE RJ45 ports, 14 25 GE SFP28 / 10 GE SFP+ slots, two 25 GE SFP28/10 GE SFP+ HA slots, and four 40 GE QSFP+ slots. The FortiGate 3301E version includes two internal 1TB SSD drives.
The FortiGate 3400E/-DC delivers firewall throughput of 240 Gbps; IPS throughput of 44 Gbps; NGFW throughput of 34 Gbps; and Threat Protection performance of 23 Gbps. The firewall includes a USB management port, a console port, two GE RJ45 management ports, two 25 GE SFP28/10 GE SFP+/GE SFP HA slots, 22 25GE SFP28/10 GE SFP+/GE SFP slots, and four 100 GE QSFP28/40 GE QSFP+ slots. The FortiGate 3401E/-DC version includes two internal 2TB SSD drives. The FortiGate 3600E supports firewall throughput of 240 Gbps; IPS throughput of 55 Gbps; NGFW throughput of 40 Gbps; and Threat Protection performance of 30 Gbps. The firewall includes a USB management port, a console port, two GE RJ45 management ports, two 25 GE SFP28/10 GE SFP+/GE SFP HA slots, 30 25GE SFP28/10 GE SFP+/GE SFP slots, and six 100 GE QSFP28/40 GE QSFP+ slots. The FortiGate 3601E/-DC version includes two internal 2TB SSD drives.
The FortiGate 3960E/-DC supports firewall throughput of 620 Gbps; IPS throughput of 30 Gbps; NGFW throughput of 22 Gbps; and Threat Protection performance of 13.5 Gbps. The firewall comes with a console port, a USB port, two GE RJ45 management ports, 16 1/10 G SFP/SFP+ slots, and six 40/100 GE QSFP+/QSFP28 slots. The FortiGate 3980E/-DC delivers firewall throughput of 1,05 Tbps; IPS throughput of 32 Gbps; NGFW throughput of 28 Gbps; and Threat Protection performance of 20 Gbps. The firewall comes with a console port, a USB port, two GE RJ45 management ports, 16 1/10 G SFP/SFP+ slots, and 10 40/100 GE QSFP+/QSFP28 slots.
How Progent Can Help You Build Fortinet FortiGate Firewall Solutions
Fortinet's extensive portfolio of FortiGate firewalls offer a broad range of deployment strategies and configuration options that give you the ability to select a firewall solution that matches your organization's current needs and plans for future growth. Progent's network architecture experts can assist you to design and manage an efficient, modern network infrastructure that integrates Fortinet FortiGate firewalls seamlessly with network components from other leading vendors. Progent's GISA and CISSP-ISSP-certified cybersecurity experts can help you to create and tune security policies appropriate for your requirements and based on leading practices. Progent's security assessment consultants and stealth penetration testing experts can evaluate the effectiveness of your current firewall environment and verify the security profile of your digital ecosystem. Progent's Technical Response Center can provide fast access to a top-tier firewall consultant for emergency online support.
Progent can provide a variety of consulting services to help organizations of any size build a cohesive, enterprise-wide security solution that protects on-premises, cloud-based, and mobile digital assets. Progent's project management consultants can help you plan and carry out a cost-effective plan to migrate from legacy security appliances to modern firewalls. Progent's mobile integration experts can help you manage the security of smartphones and tablets by providing services such as iPhone and iPad integration and Android phone and tablet consulting. Progent's ProSight WAN Watch 24x7 remote network monitoring and reporting services deliver continual proactive protection for your network. Progent's disaster recovery planning experts can help you design and verify disaster recovery and business continuity plans based on industry best practices. Progent's QTS Data Center Test Lab is available to prototype new firewall solutions and verify their effectiveness in delivering the performance and security your organization needs.
Contact Progent for FortiNet FortiGate Firewall Consulting Services
To ask Progent about consulting help with FortiNet FortiGate next-generation firewalls, call