FortiSwitch Secure Access switches deliver a Secure, Simple, Scalable Ethernet solution with outstanding security, performance and manageability for threat conscious small to mid-sized businesses, distributed enterprises and branch offices. Tightly integrated into the FortiGate® Network Security Platform, the FortiSwitch Secure Access switches can be managed directly from the familiar FortiGate interface. This single pane of glass management provides complete visibility and control of all users and devices on the network, regardless of how they connect.
Reduces complexity and decreases management cost with network security functions managed through a single console via FortiGate. This integration allows all users to be authenticated against the same user database, regardless of whether they connect to the wired or wireless network, including temporary guest users.
In addition, same security policy can apply to a user or device regardless of how or where they connect to the network.
The Power over Ethernet (PoE) capability in some models, enables simple installation of wireless Access Points and IP phones in the network.
The FortiSwitch Secure Access Switch series integrates directly into the FortiGate* Connected UTM, with switch administration and access port security managed from the familiar FortiGate interface. Regardless of how users and devices connect to the network, you have complete visibility and control over your network security and access through this single pane of glass, perfectly suited to threatconscious organizations of any size.
Virtualization and cloud computing have created dense high-bandwidth Ethernet networking requirements in the data center, pushing the limits of existing data center switching. FortiSwitch Data Center switches meet these challenges by providing a high performance 10 or 40 GE capable switching platform, with a low Total Cost of Ownership. Ideal for Top of Rack server or firewall aggregation applications, as well as enterprise network core or distribution deployments, these switches are purpose-built to meet the needs of today’s bandwidth intensive environments.
| FortiSwitch FortiLink Mode (With FortiGate) | |
|---|---|
| Management and Configuration | |
| Auto Discovery of Multiple Switches | Yes |
| Number of Managed Switches per FortiGate | 8 to 256 Depending on FortiGate Model (Please refer to admin guide) |
| FortiLink Stacking (Auto Inter-Switch Links) | Yes |
| Software Upgrade of Switches | Yes |
| Centralized VLAN Configuration | Yes |
| Switch POE Control | Yes |
| Link Aggregation Configuration | Yes |
| Spanning Tree | Yes |
| LLDP/MED | Yes |
| IGMP Snooping | Yes (not supported on 1xxE-Series) |
| L3 Routing and Services | Yes (FortiGate) |
| Policy-Based Routing | Yes (FortiGate) |
| Virtual Domain | Yes (FortiGate) |
| Security and Visibility | |
| 802.1x Authentication (Port-based, MAC-based, MAB) | Yes |
| Syslog Collection | Yes |
| DHCP Snooping | Yes |
| Device Detection | Yes |
| MAC Black/While Listing | Yes (FortiGate) |
| Policy Control of Users and Devices | Yes (FortiGate) |
| UTM Features | |
| Firewall | Yes (FortiGate) |
| IPC, AV, Application Control, Botnet | Yes (FortiGate) |
| High Availability | |
| Support FortiLink FortiGate in HA Cluster | Yes |
| LAG support for FortiLink Connection | Yes |
| Active-Active Split LAG from FortiGate to FortiSwitches for Advanced Redundancy | Yes (with FS-2xx, 4xx, 5xx) |
| FortiSwitch Standalone Mode |
FortiSwitch 2XXE Series |
FortiSwitch 1XXE Series |
|
|---|---|---|---|
| Layer 2 | |||
| Jumbo Frames | Yes | Yes | Yes |
| Auto-negotiation for Port Speed and Duplex | Yes | Yes | Yes |
| IEEE 802.1D MAC Bridging/STP | Yes | Yes | Yes |
| IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) | Yes | Yes | Yes |
| IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) | Yes | Yes | Yes |
| STP Root Guard | Yes | Yes | Yes |
| STP BPDU Guard | Yes | Yes | Yes |
| Edge Port / Port Fast | Yes | Yes | Yes |
| IEEE 802.1Q VLAN Tagging | Yes | Yes | Yes |
| Private VLAN | Yes | Yes | No |
| IEEE 802.3ad Link Aggregation with LACP | Yes | Yes | Yes |
| Unicast/Multicast traffic balance over trunking port (dst-ip, dst-mac, src-dst-ip, src-dst-mac, src-ip, src-mac) | Yes | Yes | Yes |
| IEEE 802.1AX Link Aggregation | Yes | Yes | Yes |
| Spanning Tree Instances (MSTP/CST) | 15/1 | 15/1 | 15/1 |
| IEEE 802.3x Flow Control and Back-pressure | Yes | Yes | Yes |
| IEEE 802.3 10Base-T | Yes | Yes | Yes |
| IEEE 802.3u 100Base-TX | Yes | Yes | Yes |
| IEEE 802.3z 1000Base-SX/LX | Yes | Yes | Yes |
| IEEE 802.3ab 1000Base-T | Yes | Yes | Yes |
| IEEE 802.3ae 10 Gigabit Ethernet | 4xx and 5xx Family | FS-5xx Family | N/A |
| IEEE 802.3 CSMA/CD Access Method and Physical Layer Specifications | Yes | Yes | Yes |
| Storm Control | Yes | Yes | Yes |
| MAC, IP, Ethertype-based VLANs | Yes | Yes | Yes |
| Virtual-Wire | Yes | Yes | No |
| Split Port (QSFP+ breakout to 4xSFP+) | FS-5xx Family | N/A | N/A |
| Time-Domain Reflectcometry (TDR) Support | Yes | Yes | No |
| Layer 3* | |||
| Static Routing (Hardware-based) | Yes | Yes | N/A |
| Routing Entries | 64 on FS-2xx, 4xx Family; 16K on FS-5xx Family | 64 | N/A |
| Host Entries | 4K on FS-2xx, 4xx Family; 24K on FS-5xx Family | 4K | N/A |
| Dynamic Routing Protocols** | OSPFv2, RIPv2, VRRP; BGP, ISIS on FS-5xx |
OSPFv2, RIPv2, VRRP | N/A |
| Multicast Protocols | PIM-SSM on FS-5xx | N/A | N/A |
| ECMP | FS-5xx Family | No | N/A |
| Bidirectional Forwarding Detection (BFD) | Yes | Yes | N/A |
| DHCP Relay | Yes | Yes | N/A |
| Services | |||
| IGMP Snooping | Yes | Yes | No |
| Security and Visibility | |||
| Port Mirroring | Yes | Yes | Yes |
| Admin Authentication Via RFC 2865 RADIUS | Yes | Yes | Yes |
| IEEE 802.1x authentication Port-based | Yes | Yes | Yes |
| IEEE 802.1x Authentication MAC-based | Yes | Yes | Yes |
| IEEE 802.1x Guest and Fallback VLAN | Yes | Yes | Yes |
| IEEE 802.1x MAC Access Bypass (MAB) | Yes | Yes | Yes |
| IEEE 802.1x Dynamic VLAN Assignment | Yes | Yes | Yes |
| Radius CoA (Change of Authority) | Yes | Yes | No |
| Radius Accounting | Yes | Yes | No |
| MAC-IP Binding | 5xx only | No | No |
| sFlow | Yes | Yes | No |
| ACL | 1K entries on FS-5xx Family; 512 on FS-1xx, 2xx, 4xx Families |
512 Entries | No |
| IEEE 802.1ab Link Layer Discovery Protocol (LLDP) | Yes | Yes | Yes |
| IEEE 802.1ab LLDP-MED | Yes | Yes | Yes |
| DHCP-Snooping | Yes | Yes | Yes |
| Dynamic ARP Inspection | Yes | Yes | No |
| Sticky MAC and MAC Limit | Yes (2xx, 4xx and 5xx) | Yes | Yes |
| High Availability | |||
| Multi-Chassis Link Aggregation (MCLAG) | Yes (2xx, 4xx and 5xx) | Yes | N/A |
| Quality of Service | |||
| IEEE 802.1p Based Priority Queuing | Yes (2xx, 4xx and 5xx) | Yes | No |
| IP TOS/DSCP Based Priority Queuing | Yes (2xx, 4xx and 5xx) | Yes | No |
| Management | |||
| IPv4 and IPv6 Management | Yes | Yes | Yes |
| Telnet / SSH | Yes | Yes | Yes |
| HTTP / HTTPS | Yes | Yes | Yes |
| SNMP v1/v2c/v3 | Yes | Yes | Yes |
| SNTP | Yes | Yes | Yes |
| Standard CLI and Web GUI Interface | Yes | Yes | Yes |
| Software download/upload: TFTP/FTP/GUI | Yes | Yes | Yes |
| Managed from FortiGate | Yes | Yes | Yes |
| Support for HTTP REST APIs for Configuration and Monitoring | Yes | Yes | Yes |
| Additional RFC and MIB Support | |||
| RFC 2571 Architecture for Describing SNMP | Yes | Yes | Yes |
| DHCP Client | Yes | Yes | Yes |
| RFC 854 Telnet Server | Yes | Yes | Yes |
| RFC 2865 RADIUS | Yes | Yes | Yes |
| RFC 1643 Ethernet-like Interface MIB | Yes | Yes | Yes |
| RFC 1213 MIB-II | Yes | Yes | Yes |
| RFC 1354 IP Forwarding Table MIB | Yes | Yes | Yes |
| RFC 2572 SNMP Message Processing and Dispatching | Yes | Yes | Yes |
| RFC 1573 SNMP MIB II | Yes | Yes | Yes |
| RFC 1157 SNMPv1/v2c | Yes | Yes | Yes |
| RFC 2030 SNTP | Yes | Yes | Yes |
* Supported on 2xx, 4xx and 5xx.
** Requires ‘Advanced Features’ License.
| FortiSwitch 448D | FortiSwitch 448D-POE | FortiSwitch 448D-FPOE | |
|---|---|---|---|
| Hardware Specifications | |||
| Total Network Interfaces | 48x GE RJ45 and 4×10 GE SFP+ ports Note: SFP+ ports are compatlble with 1 GE SFP |
48x GE RJ45 and 4×10 GE SFP+ ports Note: SFP+ ports are compatlble with 1 GE SFP |
48x GE RJ45 and 4×10 GE SFP+ ports Note: SFP+ ports are compatlble with 1 GE SFP |
| Dedicated Management 10/100/1000 Ports | 1 | 1 | 1 |
| RJ-45 Serial Console Port | 1 | 1 | 1 |
| Form Factor | 1 RU Rack Mount | 1 RU Rack Mount | 1 RU Rack Mount |
| Power over Ethernet (PoE) Ports | — | 48 (802.3af/at) | 48 (802.3af/at) |
| PoE Power Budget | N/A | 370 W | 740 W |
| Mean Time Between Failures | > 10 years | > 10 years | > 10 years |
| System Specifications | |||
| Switching Capacity (Duplex) | 176 Gbps | 176 Gbps | 176 Gbps |
| Packets Per Second (Duplex) | 262 Mpps | 262 Mpps | 262 Mpps |
| MAC Address Storage | 16K | 16K | 16K |
| Network Latency | < 1µs | < 1µs | < 1µs |
| VLANs Supported | 4K | 4K | 4K |
| Link Aggregation Group Size | 8 | 8 | 8 |
| Total Link Aggregation Groups | Up to number of ports | Up to number of ports | Up to number of ports |
| Packet Buffers | 1.5 MB | 1.5 MB | 1.5 MB |
| DRAM | 1 GB | 1 GB | 1 GB |
| FLASH | 128 MB | 128 MB | 128 MB |
| Dimensions | |||
| Height x Width x Length (inches) | 1.75 x 12.2 x 17.3 | 1.73 x 16.1 x 17.3 | 1.73 x 16.1 x 17.3 |
| Height x Width x Length (mm) | 44 x 310 x 440 | 44 x 410 x 440 | 44 x 410 x 440 |
| Weight | 9.15 lbs (4.15 kg) | 13.44 lbs (6.1 kg) | 15.45 lbs (7.01 kg) |
| Environment | |||
| Power Required | 100–240V AC, 50–60 Hz | 100–240V AC, 50–60 Hz | 100–240V AC, 50–60 Hz |
| Power Supply | AC built in + RPS option | AC built in + RPS option | AC built in + RPS option |
| Redundant Power | Dual power supplies | Optional FRPS-740 | Dual power supplies |
| Power Consumption (Average / Maximum) | 38 W / 38 W | 417 W / 419 W | 790 W / 792 W |
| Heat Dissipation | 147 BTU/h | 177 BTU/h | 193 BTU/h |
| Operating Temperature | 32–122°F (0–50°C) | 32–122°F (0–50°C) | 32–122°F (0–50°C) |
| Storage Temperature | -4–158°F (-20–70°C) | -4–158°F (-20–70°C) | -4–158°F (-20–70°C) |
| Humidity | 10–90% non-condensing | 10–90% non-condensing | 10–90% non-condensing |
| Certification and Compliance | |||
| FCC, CE, RCM, VCCI, BSMI, UL, CB, RoHS2 | |||
| Warranty | |||
| Fortinet Warranty | Limited lifetime warranty on all models | ||
