Fortinet Product Matrix
Fortinet Product Matrix
November 2023
Interfaces 5x GE RJ45 10x GE RJ45 10x GE RJ45 8x GE RJ45, 2x Shared Port Pairs
8x GE RJ45, 2x 10GE Shared 2x 10 GE SFP+, 18x GE RJ45, 4x 4x 10 GE SFP+, 18x GE RJ45, 8x 8x 10GE SFP+ , 8x GE SFP, 18 x
Interfaces
Port Pairs Shared Port Pairs, 8x GE SFP GE SFP GE RJ45
Local Storage 120 GB (91G) 480 GB (101F) 480 GB (201F) 960 GB (401F)
Power Supplies Single AC PS, dual inputs Dual AC PS Dual AC PS Dual AC PS
Form Factor Desktop 1 RU 1 RU 1 RU
Variants — — — —
1
FortiGate® Network Security Platform - *Top Selling Models Matrix
FG-600F FG-900G FG-1000F FG-1800F FG-2200E
Firewall Throughput
139 / 137.5 / 70 Gbps 164 / 163 / 153 Gbps 198 / 196 / 134 Gbps 198 / 197 / 140 Gbps 158 / 155 /100 Gbps
(1518/512/64 byte UDP)
IPsec VPN Throughput (512 byte) 1 55 Gbps 55 Gbps 55 Gbps 55 Gbps 98 Gbps
IPS Throughput (Enterprise Mix) 2 14 Gbps 26 Gbps 19 Gbps 22 Gbps 21 Gbps
NGFW Throughput (Enterprise Mix) 2, 4 11.5 Gbps 22 Gbps 15 Gbps 17 Gbps 13.5 Gbps
Threat Protection Throughput (Ent. Mix) 2, 5 10.5 Gbps 20 Gbps 13 Gbps 15 Gbps 11 Gbps
Firewall Latency 4.12 μs / 2.5 μs 8 3.78 / 2.5 μs 8 3.45 μs 3.22 μs 3.09 μs
Concurrent Sessions 8 Million 16 Million 7.5 Million 12 Million / 40 Million7 24 Million
New Sessions/Sec 550,000 720,000 650,000 750,000 / 2 Million7 500,000
Firewall Policies 10,000 10,000 100,000 100,000 100,000
Max G/W to G/W IPSEC Tunnels 2,000 2,000 20,000 20,000 20,000
Max Client to G/W IPSEC Tunnels 50,000 10,000 100,000 100,000 100,000
SSL VPN Throughput 4.3 Gbps 9 10 Gbps 9 5.3 Gbps 9 11 Gbps 10 Gbps
Concurrent SSL VPN Users
10,000 10,000 10,000 10,000 30,000
(Recommended Maximum, Tunnel Mode)
SSL Inspection Throughput (IPS, avg. HTTPS) 3
9 Gbps 16.7 Gbps 10 Gbps 12 Gbps 17 Gbps
Application Control Throughput (HTTP 64K) 2 32 Gbps 74.8 Gbps 44 Gbps 34 Gbps 52 Gbps
Max FortiAPs (Total, Tunnel) 1024 / 512 1024 / 512 4,096 / 2,048 4,096 / 2,048 4,096 / 2,048
Max FortiSwitches 96 96 196 196 196
Max FortiTokens 5,000 5,000 20,000 20,000 20,000
Virtual Domains ( Default/Max) 10 / 10 10 / 10 10 / 250 10 / 250 10 / 500
* Featured Top selling models, for complete FortiGate offerings please visit www.fortinet.com. FortiGate virtual appliances are also available. All performance values are “up to” and vary depending on system
configuration.
2
FortiGate® Network Security Platform - *Top Selling Models Matrix
FG-3500F FG-3600E FG-3700F FG-4200F FG-4400F
Firewall Throughput
595 / 590 / 420 Gbps 240 / 240 / 150 Gbps 589 / 589 / 420 Gbps 800 / 788 / 400 Gbps 1.15 / 1.14 / 0.50 Tbps
(1518/512/64 byte UDP)
IPsec VPN Throughput (512 byte) 1 165 Gbps 140 Gbps 160 Gbps 210 Gbps 310 Gbps
IPS Throughput (Enterprise Mix) 2 72 Gbps 55 Gbps 86 Gbps 52 Gbps 94 Gbps
NGFW Throughput (Enterprise Mix) 2, 4 65 Gbps 40 Gbps 80 Gbps 47 Gbps 82 Gbps
Threat Protection Throughput (Ent. Mix) 2, 5 63 Gbps 30 Gbps 75 Gbps 45 Gbps 6 75 Gbps 6
Firewall Latency 2.98 μs 3.27μs 3.56 μs / 1.45 μs 8 3.02 μs 2.98 µs
Concurrent Sessions 140 Million / 348 Million 7
50 Million 140 Million 210 Million / 450 Million 7 210 Million / 700 Million 7
New Sessions/Sec 1 Million / 5 Million 7 950,000 930,000 1 Million / 7 Million 7 1 Million / 10 Million 7
Firewall Policies 200,000 200,000 200,000 400,000 400,000
Max G/W to G/W IPSEC Tunnels 40,000 40,000 40,000 40,000 40,000
Max Client to G/W IPSEC Tunnels 200,000 200,000 200,000 200,000 200,000
SSL VPN Throughput 16 Gbps 9 12 Gbps 16 Gbps 9 16 Gbps 16 Gbps
Concurrent SSL VPN Users
30,000 30,000 30,000 30,000 30,000
(Recommended Maximum, Tunnel Mode)
SSL Inspection Throughput (IPS, avg. HTTPS) 3
63 Gbps 34 Gbps 55 Gbps 50 Gbps 86 Gbps
Application Control Throughput (HTTP 64K) 2 135 Gbps 95 Gbps 190 Gbps 135 Gbps 140 Gbps
Max FortiAPs (Total, Tunnel) 4,096 / 2,048 4,096 / 2,048 4,096 / 2,048 8,192 / 4,096 8,192 / 4,096
Max FortiSwitches 300 300 300 300 300
Max FortiTokens 20,000 20,000 20,000 20,000 20,000
Virtual Domains ( Default/Max) 10 / 500 10 / 500 10 / 500 10 / 500 10 / 500
4x 400GE QSFP-DD, 4x
6x 100GE QSFP28/40GE 6x 100GE QSFP28/40GE 8x 100GE QSFP28/40GE 12x 100GE QSFP28/40GE
ULL 25GE SFP28, 20x
Interfaces QSFP+, 32x 25GE SFP28, QSFP+, 32x 25GE SFP28, QSFP+, 18x 25GE SFP28, QSFP+, 20x 25GE SFP28,
50GE SFP56, 2x 10GE
2x GE RJ45 2x GE RJ45 2x GE RJ45 2x GE RJ45
RJ45
1. IPsec VPN performance test uses AES256-SHA256. 5. Threat Protection performance is measured with Firewall, IPS, Application Control, and Malware
2. IPS, Application Control, NGFW and Threat Protection are measured with Logging enabled. Protection enabled, Enterprise Mix traffic.
3. SSL Inspection performance values use an average of HTTPS sessions of different cipher suites. 7. Requires Hyperscale license
4. NGFW performance is measured with Firewall, IPS and Application Control enabled, Enterprise Mix 8. With Ultra-Low Latency ports
traffic. 9. Uses RSA-2048 certificate 10. FortiOS 7.4+ is required for 100 GE support
3
FortiManager™ Centralized Management Platform
FMG-VM-BASE to
FMG-200G FMG-410G FMG-1000F FMG-3000G FMG-3700G
FMG-VM-UL-UG
Devices/VDOMs (Maximum) 30 150 1,000 4,000+ 10,000+ 10 to Unlimited
Sustained Log Rates 50 50 50 150 150 Hardware dependent
GB/Day 2 2 2 10 10 1-50
4x GE RJ45, 2x GE 2x GE RJ45, 2x 10GE 2x GE RJ45, 2x 25GE 2x 10GE RJ45,
Total Interfaces 4x GE RJ45 1 / 4 (vNIC Min / Max)
SFP SFP+ SFP28 2x 25GE SFP28
60x 4TB HDD +
Storage Capacity 2x 4 TB 8x 4 TB 8x 4 TB 16x 4 TB 80 GB / 16 TB (Min / Max)
6x 3.2TB NVMe SSD
4
FortiNAC™ Network Access Control Solution
FNC-CA-500F FNC-CA-600F FNC-CA-700C FNC-M-550F
Mid-range Control and High Performance Control and Ultra High Performance Centralized
Type
Application Server Application Server Control and Application Server Management Appliance
Large Environments with few Multi-site environments with
Target Environment Small Environments Medium Environments
Persistent Agents multiple appliances
Manages up to 5,000 ports in Manages up to 15,00 ports in Manages up to 25,000 ports in
Capacity manage up to 50 CA servers
the network* the network* the network*
Ports in the network = total number of switch ports + maximum number of concurrent wireless connections. FortiNAC sizes the appliance capacity
based on total port counts not total number of devices. Virtual appliances are also available, please refer to www.fortinet.com for more information
1. Tested based on files with 80% documents and 20% executables. Includes both static and dynamic analysis with pre-filtering enabled; measured based on v4.2.22
2. Based on a ratio of one user per 25 emails
2x 40GE QSFP
2x 10GE SFP+, 4x 4x 10GE SFP+, 4x 10x 10GE SFP+ Bypass, 10x 10GE
4x GE RJ45 2 (+2 bypass) x GE
Total Interfaces 4x GE RJ45 GE RJ45 Bypass, GE RJ45 Bypass, (incl. 2 Bypass) , 8x SFP+ (incl. 2 By-
4x GE SFP RJ45, 4x GE SFP
4x GE SFP 4x GE SFP GE RJ45 Bypass pass) , 8x GE RJ45
Bypass
Virtual appliances are also available, please refer to www.fortinet.com for more information
5
Virtual Appliance Support Matrix
VMWare Citrix Xen Microsoft Nutanix Amazon Microsoft Oracle Google Alibaba
Xen KVM
vSphere Server Hyper-V AHV AWS Azure OPC/OCI GCP Aliyun
FortiManager-VM • • • • • • •/# • • • •
FortiAnalyzer-VM • • • • • • •/# • • • •
FortiWeb Manager-
• •
VM
FortiAuthenticator-
• • • • • • •
VM
FortiVoice-VM • • • • • •
FortiRecorder-VM • • • • #
FortiSandbox-VM • • • • •/# #
FortiSIEM-VM • • • • • • •
FortiProxy-VM • •
*Available as FortiGate-VMX solution for VMware NSX environment, AzureStack and RackSpace (PAYG)
# on-demand
www.fortinet.com
Copyright © 2023 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product
or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser
that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any
such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise
revise this publication without notice, and the most current version of the publication shall be applicable. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise
revise this publication without notice, and the most current version of the publication shall be applicable.
Fortinet is committed to driving progress and sustainability for all through cybersecurity, with respect for human rights and ethical business practices, making possible a digital world you can always trust. You represent and warrant to Fortinet that you will not use
Fortinet’s products and services to engage in, or support in any way, violations or abuses of human rights, including those involving censorship, surveillance, detention, or excessive use of force. Users of Fortinet products are required to comply with the Fortinet EULA
(https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf) and report any suspected violations of the EULA via the procedures outlined in the Fortinet Whistleblower Policy (https://secure.ethicspoint.com/domain/media/en/gui/19775/Whistleblower_Policy.pdf).
PROMTX-2023-R142-NOV (Web)