You are using an outdated browser. For a faster, safer browsing experience, upgrade for free today.

Network Security

Next-Generation Firewall (NGFW) & Secure SD-WAN

Our Solutions

  • Next-Generation Firewall (NGFW) & Secure SD-WAN

FortiGate Next-Generation Firewall (NGFW)

What is a Next-Generation Firewall?

Next-generation firewalls filter network traffic to protect an organization from external threats. Maintaining features of stateful firewalls such as packet filtering, VPN support, network monitoring, and IP mapping features, NGFWs also possess deeper inspection capabilities that give them a superior ability to identify attacks, malware, and other threats. Next-generation firewalls provide organizations with application control, intrusion prevention, and advanced visibility across the network. As the threat landscape continues to develop rapidly, traditional firewalls fall further behind and put your organization at risk. NGFWs not only block malware, but also include paths for future updates, giving them the flexibility to evolve with the landscape and keep the network secure as new threats arise.

FortiGate NGFW: Enterprise Firewalls

FortiGate NGFWs enable security-driven networking and consolidate industry-leading security capabilities such as intrusion prevention system (IPS), web filtering, secure sockets layer (SSL) inspection, and automated threat protection. Fortinet NGFWs meet the performance needs of highly scalable, hybrid IT architectures, enabling organizations to reduce complexity and manage security risks.

FortiGate NGFWs are powered by artificial intelligence (AI)-driven FortiGuard Labs and deliver proactive threat protection with high-performance inspection of both clear-text and encrypted traffic (including the industry’s latest encryption standard TLS 1.3) to stay ahead of the rapidly expanding threat landscape.

FortiGate NGFWs inspect traffic as it enters and leaves the network. These inspections happen at an unparalleled speed, scale, and performance and prevent everything from ransomware to DDoS attacks, without degrading user experience or creating costly downtime.

As an integral part of the Fortinet Security Fabric, FortiGate NGFWs can communicate within the comprehensive Fortinet security portfolio as well as third-party security solutions in a multivendor environment. To increase the speed of operations and response, they share threat intelligence, and improve security posture and automated workflow.

FortiGate: Next-Generation Firewalls Models and Specifications

FortiGate NGFW is available in many different models to meet your needs ranging from entry-level hardware appliances to ultra high-end appliances to meet the most demanding threat protection performance requirements. This ensures that enterprise campus, core data-center, or internal segments, FortiGate can fit seamlessly into your environment.

FortiGate 7060E

Threat Protection | 80 Gbps

SSL Inspection Throughput | 79.9 Gbps

Network Interfaces | Multiple 10 GE SFP+/SFP, 40 GE QSFP+, 100 GE CFP2/QSFP28

FortiGate 7040E

Threat Protection | 40 Gbps

SSL Inspection Throughput | 50 Gbps

Network Interfaces | Multiple 10 GE SFP+/SFP, 40 GE QSFP+, 100 GE CFP2/QSFP28

FortiGate 7030E

Threat Protection | 35 Gbps

SSL Inspection Throughput | 50 Gbps

Network Interfaces | Multiple 10 GE SFP+/SFP, 40 GE/100 GE QSFP28

FortiGate 5001E

Threat Protection | 13.5 Gbps

SSL Inspection Throughput | 17 Gbps

Network Interfaces | 2x 40GE QSFP+, 2x 10GE SFP+, 2x GE RJ45

FG 7000 Data-Sheet
FG 5000 Data-Sheet

FortiGate 6300F

Threat Protection | 60 Gbps

SSL Inspection Throughput | 90 Gbps

Network Interfaces | Multiple 40/100 GE QSFP28, 1/10/25 GE SFP28, 1/10 GE SFP+ and GE RJ45

FortiGate 6500F

Threat Protection | 100 Gbps

SSL Inspection Throughput | 130 Gbps

Network Interfaces | Multiple 40/100 GE QSFP28, 1/10/25 GE SFP28, 1/10 GE SFP+ and GE RJ45

FG 6000 Data-Sheet

FortiGate 4200F

Threat Protection | 35 Gbps

SSL Inspection Throughput | 38 Gbps

Network Interfaces | Multiple 100 GE/40GE QSFP28, multiple 25GE/10 GE SFP28/SFP+, two 10GE SFP+ HA, multiple 1 GE RJ45

FortiGate 3980E

Threat Protection | 20 Gbps

SSL Inspection Throughput | 32 Gbps

Network Interfaces | 10x 100GE QSFP28, 16x 10GE SFP+, 2x GE RJ45

FortiGate 3960E

Threat Protection | 13.5 Gbps

SSL Inspection Throughput | 30 Gbps

Network Interfaces | Multiple 40/100 GE QSFP+/QSFP28, 10 GE SFP+ and GE RJ45

FortiGate 3800D

Threat Protection | 13 Gbps

SSL Inspection Throughput | 23 Gbps

Network Interfaces | Multiple 100 GE CFP2, 40 GE QSFP+, 10 GE SFP+ and/or multiple GE SFP/RJ45 depending on variants

FortiGate 3700D

Threat Protection | 13 Gbps

SSL Inspection Throughput | 24 Gbps

Network Interfaces | Multiple 40 GE QSFP+, 10 GE SFP+ and GE SFP

FortiGate 3600E

Threat Protection | 30 Gbps

SSL Inspection Throughput | 34 Gbps

Network Interfaces | 6x 100 GE QSFP28, 32x 25 GE SFP28, 2x GE RJ45

FortiGate 3400E

Threat Protection | 23 Gbps

SSL Inspection Throughput | 30 Gbps

Network Interfaces | 4x 100 GE QSFP28, 24x 25 GE SFP28, 2x GE RJ45

FortiGate 3300E

Threat Protection | 17Gbps

SSL Inspection Throughput | 21 Gbps

Network Interfaces | 4x 40GE QSFP+, 4x 10GE RJ45, 16x 10GE/25GE SFP+/SFP28, 12x GE RJ45

FortiGate 3200D

Threat Protection | 15 Gbps

SSL Inspection Throughput | 20 Gbps

Network Interfaces | Multiple GE RJ45 and 10 GE SFP+ / GE SFP slots

FFortiGate 3100D

Threat Protection | 13 Gbps

SSL Inspection Throughput | 22 Gbps

Network Interfaces | Multiple 10 GE SFP+ | Multiple GE SFP and GE RJ45

FortiGate 3000D

Threat Protection | 13 Gbps

SSL Inspection Throughput | 19 Gbps

Network Interfaces | Multiple 10 GE SFP+ | Multiple GE SFP and GE RJ45

FortiGate 2500E

Threat Protection | 5.4 Gbps

SSL Inspection Throughput | 11.5 Gbps

Network Interfaces | 10x 10GE SFP+, 2x 10GE SFP+ bypass, 34x GE RJ45

FortiGate 2200E

Threat Protection | 11 Gbps

SSL Inspection Throughput | 17 Gbps

Network Interfaces | 4x 40GE QSFP+, 20x 10GE/25GE SFP+/SFP28, 12x GE RJ45

FortiGate 2000E

Threat Protection | 5.4 Gbps

SSL Inspection Throughput | 12.5 Gbps

Network Interfaces | 6x 10GE SFP+, , 34x GE RJ45

FortiGate 1800F

Threat Protection | 9.1 Gbps

SSL Inspection Throughput | 17 Gbps

Network Interfaces | Multiple 40 GE QSFP+, multiple 25GE, 10 GE SFP28/SFP+, two 10GE SFP+ HA, multiple 1 GE SFP, multiple 1 GE RJ45

FortiGate 1500D

Threat Protection | 5 Gbps

SSL Inspection Throughput | 10.5 Gbps

Network Interfaces | 8x 10GE SFP+/GE SFP, 16x GE SFP, 18x GE RJ45

FortiGate 1200D

Threat Protection | 4 Gbps

SSL Inspection Throughput | 6 Gbps

Network Interfaces | 4x 10GE SFP+/GE SFP, 16x GE SFP, 18x GE RJ45

FortiGate 1100E

Threat Protection | 7.1 Gbps

SSL Inspection Throughput | 10 Gbps

Network Interfaces | 2x40GE QSFP+, 4x25GE SFP28, 4x10GE SFP+/SFP, 8x1GE SFP, 16xGE RJ45

FortiGate 1000D

Threat Protection | 4 Gbps

SSL Inspection Throughput | 4 Gbps

Network Interfaces | 2x 10 GE SFP+, 16x GE SFP, 18x GE RJ45

FG 4000 Data-Sheet
FG 3000 Data-Sheet
FG 2000 Data-Sheet
FG 1000 Data-Sheet

FortiGate 900D

Threat Protection | 3 Gbps

SSL Inspection Throughput | 4 Gbps

Network Interfaces | Multiple GE RJ45, GE SFP and 10 GE SFP+ slots

FortiGate 800D

Threat Protection | 3 Gbps

SSL Inspection Throughput | 4 Gbps

Network Interfaces | Multiple GE RJ45, GE SFP, 10 GE SFP+ slots and bypass GE RJ45 pairs

FortiGate 600E

Threat Protection | 7Gbps

SSL Inspection Throughput | 8 Gbps

Network Interfaces | Multiple GERJ45, Multiple GE SFP, Multiple 10GE SFP+

FortiGate 500E

Threat Protection | 4.7 Gbps

SSL Inspection Throughput | 5.7 Gbps

Network Interfaces | Multiple GE RJ45, GE SFP and 10 GE SFP+ Slots

FortiGate 400E

Threat Protection | 5 Gbps

SSL Inspection Throughput | 4.8 Gbps

Network Interfaces | Multiple GE RJ45 and Multiple GE SFP Slots

FortiGate 300E

Threat Protection | 3 Gbps

SSL Inspection Throughput | 3.9 Gbps

Network Interfaces | Multiple GE RJ45 and GE SFP Slots

FortiGate 200E

Threat Protection | 1.2 Gbps

SSL Inspection Throughput | 1 Gbps

Network Interfaces | Multiple GE RJ45, GE SFP Slots

FortiGate 100F

Threat Protection | 1 Gbps

SSL Inspection Throughput | 1 Gbps

Network Interfaces | 2 x 10GE SFP+ Slots, 18 x GE RJ45 and 8x 1GE SFP and 4x GE RJ45/SFP Shared Media Pairs

FortiGate 100E

Threat Protection | 250 Mbps

SSL Inspection Throughput | 130 Mbps

Network Interfaces | Multiple GE RJ45, GE SFP Slots | PoE/+ Variants

FG 900D/800D/600E Data-Sheet
FG 500E/400E/300E Data-Sheet
FG 200E/100E/100F Data-Sheet

FortiGate 80E

Threat Protection | 250 Mbps

SSL Inspection Throughput | 180 Mbps

Network Interfaces | Multiple GE RJ45 | Varients with internal storage | Variants with PoE/+ interfaces

FortiGate 60F

Threat Protection | 700 Mbps

SSL Inspection Throughput | 750 Mbps

Network Interfaces | Multiple GE RJ45 | Variants with internal storage

FortiGate 60E

Threat Protection | 200 Mbps

SSL Inspection Throughput | 175 Mbps

Network Interfaces | Multiple GE RJ45 | WiFi variants | Variants with internal storage | Variants with PoE/+ interfaces

FortiGate 50E

Threat Protection | 160 Mbps

SSL Inspection Throughput | 185 Mbps

Network Interfaces | Multiple GE RJ45 | WiFi Variants | Variants with dual radios | Variants with internal storage

FortiGate 40F

Threat Protection | 600 Mbps

SSL Inspection Throughput | 310 Mbps

Network Interfaces | Multiple GE RJ45 | WiFi Variants

FortiGate 30E

Threat Protection | 150 Mbps

SSL Inspection Throughput | 160 Mbps

Network Interfaces | Multiple GE RJ45 | WiFi Variants

FortiGate 60D - Rugged

Threat Protection | 25 Mbps

SSL Inspection Throughput | 18 Mbps

Network Interfaces | 10x GE RJ45

FG 80E/60F/60E/50E Data-Sheet
FG 40F/30E/Rugged Data-Sheet

FortiGate-VM00

Throughput | 12 Gbps

vCPU | 1x vCPU core, (up to) 2 GB RAM

FortiGate-VM01, -VM01V

Throughput | 12 Gbps

vCPU | 1x vCPU core, (up to) 2 GB RAM

FortiGate-VM02, -VM02V

Throughput | 15 Gbps

vCPU | 2x vCPU cores, (up to) 4 GB RAM

FortiGate-VM04, -VM04V

Throughput | 28 Gbps

vCPU | 4x vCPU cores, (up to) 6 GB RAM

FortiGate-VM08, -VM08V

Throughput | 33 Gbps

vCPU | 8x vCPU cores, (up to) 12 GB RAM

FortiGate-VM16, -VM16V

Throughput | 36 Gbps

vCPU | 16x vCPU cores, (up to) 24 GB RAM

FortiGate-VM32, -VM32V

Throughput | 50 Gbps

vCPU | 32x vCPU cores, (up to) 48 GB RAM

FortiGate-VMUL, -VMULV

vCPU | Unlimited vCPU cores and RAM

FG VM Data-Sheet

Secure SD-WAN

What is Secure SD-WAN?

As the use of business-critical, cloud-based applications and tools continue to increase, distributed organizations with multiple remote offices are switching from performance-inhibited wide-area networks (WANs) to SD-WAN. SD-WAN is a software-defined wide-area network architecture to enable digital innovations. SD-WAN solutions transform an organization’s capabilities by leveraging the corporate WAN as well as multi-cloud connectivity to deliver high-speed application performance at the WAN Edge of branch sites. SD-WAN provides a dynamic path selection between—MPLS, 4G/5G, or broadband—ensuring organizations can quickly and easily access business-critical cloud applications. But SD-WAN solutions don’t provide in-built security which is critical for direct internet access. Secure SD-WAN enables organizations to enable NGFW with SD-WAN in simplified offering.

Learn more about a Fortune 500 customer that achieved a 65% cost reduction with Fortinet Secure SD-WAN

Fortinet Secure SD WAN Solution

Improve user experience and simplify operations at the WAN Edge with an integrated NGFW and Secure SD-WAN in a single offering.

Fortinet Secure SD-WAN Solutions

  • World's only ASIC Accelerated Secure SD-WAN
  • 5,000+ application identification with SSL Inspection
  • Self-Healing capabilities for better user experience
  • Cloud-On-Ramp for efficient SaaS adoption
  • Simplified Operations with SD-WAN Orchestrator

FortiGate Secure SD-WAN Models and Specifications

FortiGate SD-WAN is available in diverse form factors with many different models to choose from to meet your needs ranging from hardware, VM appliances to six different cloud marketplaces for WAN Edge transformation. FortiManager, that can be used to monitor and manage the FortiGate appliances is also available in different form factors including hardware, virtual and SaaS.

FortiGate/FortiWiFi 30E

NGFW Throughput | 200 Mbps

Threat Protection Throughput | 150 Mbps

VPN Throughput | 35 Mbps

Max G/W to G/W IPSEC | 200

Ports | 5x GE RJ45

FortiGate/FortiWiFi 40F

NGFW Throughput | 800 Mbps

Threat Protection Throughput | 600 Mbps

VPN Throughput | 4.4 Gbps

Max G/W to G/W IPSEC | 200

Ports | 5x GE RJ45

FortiGate/FortiWiFi 50E

NGFW Throughput | 220 Mbps

Threat Protection Throughput | 160 Mbps

VPN Throughput | 100 Mbps

Max G/W to G/W IPSEC | 200

Ports | 7x GE RJ45

FortiGate 60F

NGFW Throughput | 1 Gbps

Threat Protection Throughput | 700 Mbps

VPN Throughput | 6.5 Gbps

Max G/W to G/W IPSEC | 200

Ports | 8x GE RJ45

FortiGate/FortiWiFi 60E

NGFW Throughput | 250 Mbps

Threat Protection Throughput | 200 Mbps

VPN Throughput | 2 Gbps

Max G/W to G/W IPSEC | 200

Ports | 10x GE RJ45

FortiGate 80E

NGFW Throughput | 360 Mbps

Threat Protection Throughput | 250 Mbps

VPN Throughput | 2.5 Gbps

Max G/W to G/W IPSEC | 200

Ports | 14x GE RJ45, 2x Shared Port Pairs

FortiGate 100E

NGFW Throughput | 360 Mbps

Threat Protection Throughput | 250 Mbps

VPN Throughput | 4 Gbps

Max G/W to G/W IPSEC | 2,000

Ports | Multiple GE RJ45, GE SFP Slots | PoE/+ Variants

FortiGate 100F

NGFW Throughput | 1.6 Gbps

Threat Protection Throughput | 1 Gbps

VPN Throughput | 11.5 Gbps

Max G/W to G/W IPSEC | 2,500

Ports | 26 1GE, 4 1GE Shared Media, 2 10GE

FortiGate 200E

NGFW Throughput | 1.8 Gbps

Threat Protection Throughput | 1.2 Gbps

VPN Throughput | 9 Gbps

Max G/W to G/W IPSEC | 2,000

Ports | 18x GE RJ45, 4x GE SFP

FortiGate 300E

NGFW Throughput | 3.5 Gbps

Threat Protection Throughput | 3 Gbps

VPN Throughput | 20 Gbps

Max G/W to G/W IPSEC | 2,000

Ports | 16x GE RJ45, 16x GE SFP

FortiGate 400E

NGFW Throughput | 6Gbps

Threat Protection Throughput | 5 Gbps

VPN Throughput | 20Gbps

Max G/W to G/W IPSEC | 2,000

Ports | 16x GE RJ45, 16x GE SFP

FortiGate 500E

NGFW Throughput | 5 Gbps

Threat Protection Throughput | 4.7 Gbps

VPN Throughput | 20 Gbps

Max G/W to G/W IPSEC | 2,000

Ports | 2x 10 GE SFP+, 10x GE RJ45, 8x GE SFP

FG 80E/100E/F/200E/300E Data-Sheet
FG-WiFi 30E/50E/60E Data-Sheet
FG-WiFi 40F/60F Data-Sheet

FG 400E/500E Data-Sheet

FortiGate VM01/01V

NGFW Throughput | 850 Mbps

Threat Protection Throughput | 700 Mbps

VPN Throughput | 1 Gbps

Max G/W to G/W IPSEC | 2,000

Ports | Up to 10

FortiGate VM02/02V

NGFW Throughput | 1.5 Gbps

Threat Protection Throughput | 1.2 Gbps

VPN Throughput | 1.5 Gbps

Max G/W to G/W IPSEC | 2,000

Ports | Up to 10

FortiGate VM04/04V

NGFW Throughput | 2.5 Gbps

Threat Protection Throughput | 2 Gbps

VPN Throughput | 3 Gbps

Max G/W to G/W IPSEC | 2,000

Ports | Up to 10

FortiGate VM08/08V

NGFW Throughput | 4.5 Gbps

Threat Protection Throughput | 3.5 Gbps

VPN Throughput | 5.5 Gbps

Max G/W to G/W IPSEC | 40,000

Ports | Up to 10

FortiGate VM16/16V

NGFW Throughput | 9 Gbps

Threat Protection Throughput | 7 Gbps

VPN Throughput | 6.5 Gbps

Max G/W to G/W IPSEC | 40,000

Ports | Up to 10

FG VM Data-Sheet