The FortiGate 3900E series delivers high performance next generation firewall (NGFW) capabilities for large enterprises and service providers. With multiple high-speed interfaces, high-port density, and high-throughput, ideal deployments are at the enterprise edge, hybrid data center core, and across internal segments. Leverage industry-leading IPS, SSL inspection, and advanced threat protection to optimize your network’s performance. Fortinet’s SecurityDriven Networking approach provides tight network integration to the new security generation
Firewall | IPS | NGFW | Threat Protection | Interfaces |
---|---|---|---|---|
620 Gbps | 30 Gbps | 22 Gbps | 13.5 Gbps | Multiple 40/100 GE QSFP+/QSFP28, 1/10 GE SFP/SFP+ slots and GE RJ45 |
Interfaces
Fortinet’s new, breakthrough SPU NP6 network processor works inline with FortiOS functions delivering:
Fortinet’s ninth generation custom SPU CP9 content processor works outside of the direct flow of traffic and accelerates the inspection.
The industry’s highest-performing cybersecurity platform, powered by FortiOS, with a rich ecosystem designed to span the extended digital attack surface, delivering fully automated, self-healing network security.
FortiOS, Fortinet’s leading operating system enable the convergence of high performing networking and security across the Fortinet Security Fabric delivering consistent and context-aware security posture across network endpoint, and clouds. The organically built best of breed capabilities and unified approach allows organizations to run their businesses without compromising performance or protection, supports seamless scalability, and simplifies innovation consumption. The release of FortiOS 7 dramatically expands the Fortinet Security Fabric’s ability to deliver consistent security across hybrid deployment models consisting on appliances, software and As-a-Service with SASE, ZTNA and other emerging cybersecurity solutions.
FortiGuard Labs offers real-time intelligence on the threat landscape, delivering comprehensive security updates across the full range of Fortinet’s solutions. Comprised of security threat researchers, engineers, and forensic specialists, the team collaborates with the world’s leading threat monitoring organizations and other network and security vendors, as well as law enforcement agencies.
Fortinet is dedicated to helping our customers succeed, and every year FortiCare services help thousands of organizations get the most from their Fortinet Security Fabric solution. We have more than 1,000 experts to help accelerate technology implementation, provide reliable assistance through advanced support, and offer proactive care to maximize security and performance of Fortinet deployments.
FG-3980E/-DC | FG-3960E/-DC | |
---|---|---|
Interfaces and Modules | ||
Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 10 | 6 |
Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 | |
GE RJ45 Management Ports | 2 | |
USB Ports | 1 | |
Console Port | 1 | |
Onboard Storage | – | |
Included Transceivers | 2x SFP+ (SR 10 GE) | |
System Performance — Enterprise Traffic Mix | ||
IPS Throughput | 32 Gbps | 30 Gbps |
NGFW Throughput | 28 Gbps | 22 Gbps |
Threat Protection Throughput | 20 Gbps | 13.5 Gbps |
System Performance and Capacity | ||
IPv4 Firewall Throughput (1518 / 512 / 64 byte, UDP) |
1.05 Tbps / 1.05 Tbps / 680 Gbps |
620 Gbps/ 610 Gbps/ 370 Gbps |
Firewall Latency (64 byte, UDP) | 4 μs | |
Firewall Throughput (Packet per Second) | 1,020 Mpps | 555 Mpps |
Concurrent Sessions (TCP) | 160 Million | |
New Sessions/Second (TCP) | 800,000 | 720,000 |
Firewall Policies | 200,000 | |
IPsec VPN Throughput (512 byte) | 400 Gbps | 280 Gbps |
Gateway-to-Gateway IPsec VPN Tunnels | 40,000 | |
Client-to-Gateway IPsec VPN Tunnels | 200,000 | |
SSL-VPN Throughput | 9.5 Gbps | 9 Gbps |
Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) |
30,000 | |
SSL Inspection Throughput (IPS, avg. HTTPS) | 26 Gbps | 23 Gbps |
SSL Inspection CPS (IPS, avg. HTTPS) | 17,000 | 14,000 |
SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 12 Million | |
Application Control Throughput (HTTP 64K) | 55 Gbps | 40 Gbps |
CAPWAP Throughput (HTTP 64K) | 14 Gbps | 13.5 Gbps |
Virtual Domains (Default / Maximum) | 10 / 500 | |
Maximum Number of FortiSwitches Supported | 300 | |
Maximum Number of FortiAPs (Total / Tunnel) | 8,192 / 4,096 | |
Maximum Number of FortiTokens | 20,000 | |
High Availability Configurations | Active / Active, Active / Passive, Clustering | |
Dimensions and Power | ||
Height x Width x Length (inches) | 8.8 x 17.2 x 27.3 | |
Height x Width x Length (mm) | 222 x 437 x 695 | |
Weight | 106.3 lbs (48.2 kg) | 100.8 lbs (45.8 kg) |
Form Factor | Rack Mount, 5 RU | |
AC Power Supply | 100–240V AC, 50–60 Hz | |
Power Consumption (Average / Maximum) | 1172 / 2350 W | 960 / 2110 W |
AC Current (Maximum) | 12A@100V, 10A@240V | |
Heat Dissipation | 8,019 BTU/h | 7,200 BTU/h |
Redundant Power Supplies (Hot Swappable) | Yes, Hot Swappable | |
Operating Environment and Certifications | ||
Operating Temperature | 32–104°F (0–40°C) | |
Storage Temperature | -31–158°F (-35–70°C) | |
Humidity | 10–90% non-condensing | |
Noise Level | 63 dBA | |
Forced Airflow | Front to Back | |
Operating Altitude | Up to 7,400 ft (2,250 m) | |
Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/ cUL, CB | |
Certifications | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN, USGv6/IPv6 |
Download the Fortinet FortiGate 3900 Series Data Sheet (PDF).
Hardware | FortiGate 3960E Base Appliance | |
---|---|
FortiGate 3960E | #FG-3960E |
Licença | FortiGate 3960E Enterprise Protection |
|
1 ano – FortiGate-3960E 1 Year Enterprise Protection (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and FortiCare Premium) | #FC-10-03961-811-02-12 |
3 anos – FortiGate-3960E 3 Year Enterprise Protection (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and FortiCare Premium) | #FC-10-03961-811-02-36 |
5 anos – FortiGate-3960E 5 Year Enterprise Protection (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and FortiCare Premium) | #FC-10-03961-811-02-60 |
Licença | FortiGate 3960E Unified Threat Protection (UTP) | |
1 ano – FortiGate-3960E 1 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium) | #FC-10-03961-950-02-12 |
3 anos – FortiGate-3960E 3 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium) | #FC-10-03961-950-02-36 |
5 anos –FortiGate-3960E 5 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium) | #FC-10-03961-950-02-60 |
Licença | FortiGate 3960E FortiCare Premium Support | |
1 ano – FortiGate-3960E 1 Year FortiCare Premium Support | #FC-10-03961-247-02-12 |
3 anos – FortiGate-3960E 3 Year FortiCare Premium Support | #FC-10-03961-247-02-36 |
5 anos – FortiGate-3960E 5 Year FortiCare Premium Support | #FC-10-03961-247-02-60 |
Licença | FortiGate 3960E FortiCare Elite Support | |
1 ano – FortiGate-3960E 1 Year FortiCare Elite Support | #FC-10-03961-284-02-12 |
3 anos – FortiGate-3960E 3 Year FortiCare Elite Support | #FC-10-03961-284-02-36 |
5 anos – FortiGate-3960E 5 Year FortiCare Elite Support | #FC-10-03961-284-02-60 |
Licença | FortiGate-3960E Upgrade FortiCare Premium to Elite | |
1 ano – FortiGate-3960E 1 Year Upgrade FortiCare Premium to Elite (Require FortiCare Premium) | #FC-10-03961-204-02-12 |
3 anos – FortiGate-3960E 3 Year Upgrade FortiCare Premium to Elite (Require FortiCare Premium) | #FC-10-03961-204-02-36 |
5 anos – FortiGate-3960E 5 Year Upgrade FortiCare Premium to Elite (Require FortiCare Premium) | #FC-10-03961-204-02-60 |
Licença | FortiGate 3960E Advanced Threat Protection | |
1 ano – FortiGate-3960E 1 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | #FC-10-03961-928-02-12 |
3 anos – FortiGate-3960E 3 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | #FC-10-03961-928-02-36 |
5 anos – FortiGate-3960E 5 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | #FC-10-03961-928-02-60 |
Licença | FortiGate 3960E Services | |
1 ano – FortiGate-3960E 1 Year Advanced Malware Protection (AMP) including Antivirus, Mobile Malware and FortiGate Cloud Sandbox Service | #FC-10-03961-100-02-12 |
1 ano – FortiGate-3960E 1 Year FortiGuard IPS Service | #FC-10-03961-108-02-12 |
1 ano – FortiGate-3960E 1 Year FortiGuard URL, DNS & Video Filtering Service | #FC-10-03961-112-02-12 |
1 ano – FortiGate-3960E 1 Year FortiGuard Industrial Security Service | #FC-10-03961-159-02-12 |
1 ano – FortiGate-3960E 1 Year FortiGuard Security Rating Service | #FC-10-03961-175-02-12 |
1 ano – FortiGate-3960E 1 Year FortiGuard IoT Detection Service | #FC-10-03961-231-02-12 |
1 ano – FortiGate-3960E 1 Year FortiGuard SD-WAN Underlay Bandwidth and Quality Monitoring Service | #FC-10-03961-288-02-12 |
1 ano – FortiGate-3960E 1 Year FortiAnalyzer Cloud with SOCaaS: cloud-based central logging & analytics. Include all FortiGate log types, IOC Service, Security Automation Service, FortiGuard Outbreak Detection Service and SOCaaS | #FC-10-03961-464-02-12 |
1 ano – FortiGate-3960E 1 Year FortiConverter Service for one time configuration conversion service | #FC-10-03961-189-02-12 |
1 ano – FortiGate-3960E 1 Year FortiGuard AI-based Inline Sandbox Service | #FC-10-03961-577-02-12 |
1 ano – FortiGate-3960E 1 Year FortiAnalyzer Cloud: cloud-Based central logging & analytics. Include All FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service. | #FC-10-03961-585-02-12 |
Licença | FortiGate Cloud | |
1 ano – FortiGate-3960E 1 Year FortiGate Cloud Management, Analysis and 1 Year Log Retention | #FC-10-03961-131-02-12 |
3 anos – FortiGate-3960E 3 Year FortiGate Cloud Management, Analysis and 1 Year Log Retention | #FC-10-03961-131-02-36 |
5 anos – FortiGate-3960E 5 Year FortiGate Cloud Management, Analysis and 1 Year Log Retention | #FC-10-03961-131-02-60 |
1 ano – FortiGate Cloud / FortiLAN Cloud – 1 Year MultiTenancy Account | #FCLE-10-FCLD0-161-02-12 |
1 ano – Enables zero touch bulk provisioning for your FortiGate, FortiWifi, or FortiAP products. | #FDP-SINGLE-USE |
Licença | FortiGate-3960E Managed FortiGate service, available 24×7, with Fortinet NOC experts performing device setup, network, and policy change management | |
FortiGate-3960E 1 Year Managed FortiGate service, available 24×7, with Fortinet NOC experts performing device setup, network, and policy change management | #FC-10-03961-660-02-12 |