Overview:
The Fortinet Enterprise Firewall Solution
The Fortinet Enterprise Firewall Solution delivers end-to-end network security with one platform, one network security operating system and unified policy management with a single pane of glass — for the industry’s best protection against the most advanced security threats and targeted attacks.
One Enterprise Firewall Solution across the Extended Enterprise
The FortiGate family of network appliances represents the industry’s broadest range of enterprise firewall platforms. FortiGate is based on FortiASIC, a purpose-built integrated architecture that provides extremely high throughput and exceptionally low latency, while delivering industry-leading security effectiveness and consolidation which is routinely validated by independent real-world tests. Targeted for distributed enterprises, the FortiGate 60E series contains consolidated security and networking functionality, various connectivity options along with Industry’s best performance in a compact form factor.
Highlights
FG/FWF-60E |
3 Gbps |
350 Mbps |
250 Mbps |
180 Mbps |
Multiple GE RJ45 |
Hardware:
FortiGate/FortiWiFi 60E
Interfaces
- Console Port
- 2x GE RJ45 WAN Ports
- 1x GE RJ45 DMZ Ports
- 7x GE RJ45 Internal Ports
Powered by FortiASIC SoC3
- Combines a RISC-based CPU with Fortinet’s proprietary FortiASIC™ content and network processors for unmatched performance
- Simplifies appliance design and enables breakthrough performance for smaller networks
- Supports firewall acceleration across all packet sizes for maximum throughput
- Delivers accelerated UTM content processing for superior performance and protection §§ Accelerates VPN performance for high speed, secure remote access
3G/4G WAN Extensions
The FortiGate/FortiWiFi 60E Series includes a USB port that allows you to plug in a compatible third-party 3G/4G USB modem, providing additional WAN connectivity or a redundant link for maximum reliability.
Compact and Reliable Form Factor
Designed for small environments, you can simply place the FortiGate/FortiWiFi 30E on a desktop. It is small, lightweight yet highly reliable with superior MTBF (Mean Time Between Failure), minimizing the chance of a network disruption.
Superior Wireless Coverage
A built-in dual-band, dual-stream access point with internal antennas is integrated on the FortiWiFi 30E and provides speedy 802.11n coverage on both 2.4 GHz and 5 GHz bands. The dual- band chipset addresses the PCI-DSS compliance requirement for rogue AP wireless scanning, providing maximum protection for regulated environments.
Services:
FortiGuard Security Services
FortiGuard Labs offers real-time intelligence on the threat landscape, delivering comprehensive security updates across the full range of Fortinet’s solutions. Comprised of security threat researchers, engineers, and forensic specialists, the team collaborates with the world’s leading threat monitoring organizations, other network and security vendors, as well as law enforcement agencies:
- Real-time Updates — 24x7x365 Global Operations research security intelligence, distributed via Fortinet Distributed Network to all Fortinet platforms.
- Security Research — FortiGuard Labs have discovered over 170 unique zero-day vulnerabilities to date, totaling millions of automated signature updates monthly
- Validated Security Intelligence — Based on FortiGuard intelligence, Fortinet’s network security platform is tested and validated by the world’s leading third-party testing labs and customers globally.
FortiCare Support Services
Our FortiCare customer support team provides global technical support for all Fortinet products. With support staff in the Americas, Europe, Middle East and Asia, FortiCare offers services to meet the needs of enterprises of all sizes:
- Enhanced Support — For customers who need support during local business hours only.
- Comprehensive Support — For customers who need around- the-clock mission critical support, including advanced exchange hardware replacement.
- Advanced Services — For global or regional customers who need an assigned Technical Account Manager, enhanced service level agreements, extended software support, priority escalation, on-site visits and more.
- Professional Services — For customers with more complex security implementations that require architecture and design services, implementation and deployment services, operational services and more.
Enterprise Bundle
FortiGuard Labs delivers a number of security intelligence services to augment the FortiGate firewall platform. You can easily optimize the protection capabilities of your FortiGate with the FortiGuard Enterprise Bundle. This bundle contains the full set of FortiGuard security services plus FortiCare service and support offering the most flexibility and broadest range of protection all in one package.
Software:
FortiOS
Control all the security and networking capabilities across the entire FortiGate platform with one intuitive operating system. Reduce operating expenses and save time with a truly consolidated next generation security platform.
- A truly consolidated platform with one OS for all security and networking services for all FortiGate platforms.
- Industry-leading protection: NSS Labs Recommended, VB100, AV Comparatives and ICSA validated security and performance.
- Control thousands of applications, block the latest exploits, and filter web traffic based on millions of real-time URL ratings.
- Detect, contain and block advanced attacks automatically in minutes with integrated advanced threat protection framework.
- Solve your networking needs with extensive routing, switching, WiFi, LAN and WAN capabilities.
- Activate all the ASIC-boosted capabilities you need on the fastest firewall platform available.
Specifications:
|
FortiGate 60E |
FortiWiFi 60E |
FortiGate 61E |
FortiWiFi 61E |
GE RJ45 WAN Ports |
2 |
2 |
2 |
2 |
GE RJ45 Internal Ports |
7 |
7 |
7 |
7 |
GE RJ45 PoE Ports |
– |
– |
– |
– |
GE RJ45 DMZ Ports |
1 |
1 |
1 |
1 |
Wireless Interface |
– |
802.11 a/b/g/n/ac |
– |
802.11 a/b/g/n/ac |
USB Ports |
1 |
1 |
1 |
1 |
Console (RJ45) |
1 |
1 |
1 |
1 |
Internal Storage |
– |
– |
128 GB |
128 GB |
Firewall Throughput (1518 / 512 / 64 byte UDP packets) |
3 / 3 / 3 Gbps |
Firewall Latency (64 byte UDP packets) |
3 μs |
Firewall Throughput (Packets Per Second) |
4.5 Mpps |
Concurrent Sessions (TCP) |
1.3 Million |
New Sessions/Second (TCP) |
30,000 |
Firewall Policies |
5,000 |
IPsec VPN Throughput (512 byte packets) |
2 Gbps |
Gateway-to-Gateway IPsec VPN Tunnels |
200 |
Client-to-Gateway IPsec VPN Tunnels |
500 |
SSL-VPN Throughput |
150 Mbps |
Concurrent SSL-VPN Users (Recommended Maximum) |
100 |
IPS Throughput (HTTP / Enterprise Mix) 1 |
1,400 / 350 Mbps |
SSL Inspection Throughput 2 |
340 Mbps |
Application Control Throughput 3 |
550 Mbps |
NGFW Throughput 4 |
250 Mbps |
Threat Protection Throughput 5 |
180 Mbps |
CAPWAP Throughput 6 |
1.5 Gbps |
Virtual Domains (Default / Maximum) |
10 / 10 |
Maximum Number of FortiAPs (Total / Tunnel Mode) |
10 / 5 |
Maximum Number of FortiTokens |
100 |
Maximum Number of Registered FortiClients |
200 |
High Availability Configurations |
Active / Active, Active / Passive, Clustering |
Height x Width x Length (inches) |
1.5 x 8.5 x 6.3 |
Height x Width x Length (mm) |
38 x 216 x 160 |
Weight |
1.9 lbs (0.9 kg) |
Form Factor |
Desktop |
Power Required |
100–240V AC, 50–60 Hz |
Maximum Current |
110 V / 1.5 A, 220 V / 0.75 A |
110 V / 1.5 A, 220 V / 0.75 A |
115V AC / 0.9A, 230V AC / 0.6A |
115V AC / 0.9A, 230V AC / 0.6A |
Power Consumption (Average / Maximum) |
11.7 / 14 W |
12.6 / 15.2 W |
11.9 / 14.3 W |
13 / 16 W |
Heat Dissipation |
40 BTU/h |
52 BTU/h |
49 BTU/h |
55 BTU/h |
Operating Temperature |
32–104°F (0–40°C) |
Storage Temperature |
-31–158°F (-35–70°C) |
Humidity |
20–90% non-condensing |
Operating Altitude |
Up to 7,400 ft (2,250 m) |
|
FCC Part 15 Class B, C-Tick, VCCI, CE, UL/cUL, CB |
|
ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN |
Note: All performance values are “up to” and vary depending on system configuration. IPsec VPN performance is based on 512 byte UDP packets using AES-256+SHA1.
1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix.
2. SSL Inspection is measured with IPS enabled and HTTP traffic, using TLS v1.2 with AES256-SHA.
3. Application Control performance is measured with 64 Kbytes HTTP traffic.
4. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix.
5. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.
6. CAPWAP performance is based on 1444 byte UDP packets.
* Maximum loading on each PoE/+ port is 30 W (802.3at).