FortiGate® Multi-Threat Security

Firewall • VPN • Antivirus • Intrusion Prevention • Antispam • Web Filtering • Traffic Shaping
MSSP AND LARGE ENTERPRISE SYSTEMS
Product (Chassis) Firewall IPSec VPN Concurrent Sessions Antivirus Intrusion Prevention Number of Network Interfaces Chassis Slots / Power Recommended Max Fabric
Throughput Throughput Sessions Per Sec Throughput Throughput VDOMs Max # of Secu- Source # of Security Blades
(512 Byte) rity Blades Blades

FortiGate-5140 Chassis Up to 182 Gbps Up to 98 Gbps Up to 28 M Up to 700 K Up to 7 Gbps Up to 56 Gbps Up to 3500 See modules below 14 / 14 DC / AC 12 2
FortiGate-5060 Chassis Up to 78 Gbps Up to 42 Gbps Up to 12 M Up to 300 K Up to 3 Gbps Up to 24 Gbps Up to 1500 See modules below 6/6 DC / AC 5 2
FortiGate-5050 Chassis Up to 65 Gbps Up to 35 Gbps Up to 10 M Up to 250 K Up to 2.5 Gbps Up to 20 Gbps Up to 1250 See modules below 5/5 DC / AC 4 2

FortiGate-5020 Chassis Up to 26 Gbps Up to 14 Gbps Up to 4 M Up to 100 K Up to 1 Gbps Up to 8 Gbps Up to 500 See modules below 2/2 AC 2 0

FortiGate-5001A-SW / -DW 2 Gbps 800 Mbps 2M 50 K 500 Mbps 2 Gbps (4 Gbps) Up to 250 2 GbE 10/100/1000 port and Double- or Single-Width AMC slot. Supports 10GbE mod-
Blade (with AMC) (6-13 Gbps) (4-7 Gbps) ules.
FortiGate-5005FA2 5 Gbps 800 Mbps 1.2 M 30 K 300 Mbps 3 Gbps Up to 250 6 GbE SFP ports and 2 FortiASIC-accelerated SFP ports
FortiGate-5001SX and 4 Gbps 600 Mbps 1.2 M 20 K 250 Mbps 2 Gbps Up to 250 5001SX: 4-GbE SFP, 4-GbE 10/100/1000
FortiGate-5001FA2 5001FA2: 2 GbE SFP, 4 GbE 10/100/1000, and 2 FortiASIC-accelerated SFP ports
FortiSwitch-5003A FortiSwtich-5003A delivers high availability 10GbE switching for FortiGate-5140 and -5050 chassis. Each FortiGate-5001A FortiSwitch-5003A : 9-10GbE SFP+, 2-GbE 10/100/100 (Mgmt)
FortiSwitch-5003 requires a 10GbE Rear Transition Module (RTM) for switching across the backplane fabric. FortiSwitch-5003 delivers high FortiSwitch-5003 : 3-GbE 10/100/1000, 1-GbE 10/100/1000 (Mgmt)
Switch Fabric Blades availability switching across the high-speed chassis backplane fabric. RTM-XB2 or RTM-XD2: 10 GbE Rear Transition Module for FG-5000 Series
FortiController-5208 Load Delivers high-bandwidth load balancing for antivirus and intrusion prevention applications. 2-10GbE XFP, 8-GbE SFP, 1-GbE 10/100/1000 (Mgmt)
Balancing Fabric
ENTERPRISE APPLIANCES
Product Firewall IPSec VPN Concurrent Sessions Antivirus Intrusion 10/100 GbE SFP SFP+ Modular Expan- Base Sys- Hot-Swappable VDOMs
Throughput Throughput Sessions Per Sec Throughput Prevention Interface Interface Interface (10GbE) sion Slots tem Storage Power (Max)
(512 Byte) Throughput Interface Supplies
FortiGate-3950B / 3951B 20 Gbps 8 Gbps 10 M 175 K 1.5 Gbps (12.5/10 0 2 4 2 5 / 4 FMC, 0 / 64 GB Yes Up to 250
(with FMC) (120/100 Gbps) (48/40 Gbps) Gbps) (12/10) 0 / 4 FSM
FortiGate-3810A 7 Gbps 1 Gbps 2M 40 K 500 Mbps 4 Gbps 0 8 2 0 2 SW and 2 DW 0 Yes Up to 250
(with AMC) (55 Gbps) (23 Gbps) AMC
FortiGate-3600A 6 Gbps 800 Mbps 1.1 M 40 K 400 Mbps 3 Gbps 0 8 2 0 1 SW AMC 0 Yes Up to 250
(with AMC) (10 Gbps) (3.8 Gbps)
FortiGate-3040B 40 Gbps 16 Gbps 4M 100 K 1.2 Gbps 5 Gbps 0 2 10 8 4 FSM 64 GB Yes Up to 250

FortiGate-3016B 16 Gbps 12 Gbps 1.1 M 25K 300 Mbps 2 Gbps 0 2 16 0 1 SW AMC 0 Yes Up to 250
(with AMC) (20 Gbps) (15 Gbps)
FortiGate-1240B 40 Gbps 16 Gbps 2M 100 K 900 Mbps 1.5 Gbps 0 16 24 0 1 SW AMC and 64 GB Yes Up to 25
(with AMC) (44 Gbps) (18.5 Gbps) 6 FSM
FortiGate-800 / -800F 1 Gbps 200 Mbps 800 K 10 K 150 Mbps 600 Mbps 4 4/0- 0/4- 0 No 0 No 10
800F 800F
FortiGate-620B /-620B-DC 16 Gbps 12 Gbps 1M 25 K 350 Mbps 1 Gbps 0 20 0 0 1 SW AMC 0 Opt. Ext. Red. 10
(with AMC) (20 Gbps) (15 Gbps) AC Power
FortiGate-310B/-310B-DC 8 Gbps 6 Gbps 600 K 20 K 160 Mbps 800 Mbps 0 10 0 0 1 SW AMC 64 GB Yes Opt. (310B) 10
FortiGate-311B (with AMC) (12 Gbps) (9 Gbps) 1 FSM (311B) (311B) Yes (311B)
FortiGate-300A 400 Mbps 120 Mbps 400 K 10 K 70 Mbps 200 Mbps 4 2 0 0 No 0 No 10
FortiGate-200B / 200B-POE 5 Gbps 2.5 Gbps 500 K 15 K 95 Mbps 500 Mbps 8 8 0 0 1 FSM 0 No 10

FortiGate-224B / -200A 150 Mbps 70 Mbps 400 K 4K 30 Mbps 100 Mbps 26 / 8 0/2 0 0 No 0 No 10

SMB/ROBO/SOHO APPLIANCES
Product Firewall IPSec VPN Concurrent Sessions Antivirus Intrusion Switch/ WAN Wireless Other Interfaces VDOMs
Throughput Throughput Sessions Per Sec Throughput Prevention LAN Inter- Interfaces Interfaces (Max)
(512 Byte) Throughput faces

FortiGate-110C / -111C 500 Mbps 100 Mbps 400 K 10 K 65 Mbps 200 Mbps 8 FE 2 GbE No USB, COM, 32 GB SSD (111C) 10
FortiGate Voice-80C 500 Mbps 100 Mbps 400 K 10 K 65 Mbps 200 Mbps 8 FE 2 GbE No 4 FXO, Concurrent Calls: 20 10
FortiWiFi Voice-80CS 500 Mbps 100 Mbps 400 K 10 K 65 Mbps 200 Mbps 6 / 1 FE 2 GbE 802.11 a/b/g/n Concurrent Calls: 20 10
DMZ
FortiGate-82C 350 Mbps 80 Mbps 100 K 5K 50 Mbps 100 Mbps 0 4 GbE No 1TB Storage & 3 open slots 10
FortiGate-80C / -80CM 350 Mbps 80 Mbps 100 K 5K 50 Mbps 100 Mbps 6 / 1 FE 2 GbE FW-80CM/ 81CM ExpressCard Slot, Modem (80/81CM), 32 GB SSD 10
FortiWiFi-80CM / -81CM DMZ WiFi a/b/g/n (81CM)
FortiGate-60C 1 Gbps 70 Mbps 80 K 3K 20 Mbps 60 Mbps 5 GbE / 1 2 FE FW-60C a/b/g/n ExpressCard Slot, 4 GB storage, 1 USB-A and 1 10
FortiWiFi-60C FE DMZ USB-B port, POE-Powered (FW-60C)
FortiGate-50B / -51B 50 Mbps 48 Mbps 25 K 2K 19 Mbps 30 Mbps 3 FE 2 FE FW-50B WiFi b/g POE-Powered (FortiWiFi), USB, COM, 32GB SSD 10
FortiWiFi-50B (51B)
FortiGate/WiFi-30B 30 Mbps 5 Mbps 5K 1K 5 Mbps 10 Mbps 3 / 4 FE 1 FE FW-30B WiFi b/g USB, COM 0
Expansion Modules
Advanced Mezzanine Card (AMC) Modules [Double-Width (DW) Modules:] • ADM-XD4: 4-port 10GbE FortiASIC Module • ADM-XB2: 2-port 10GbE FortiASIC Module  • ADM-XE2: 2-port 10GbE Security Processing Module   • ADM-FB8: 8-port GbE FortiASIC Module
• ADM-FE8: 8-port GbE Security Processing Module 
[Single-Width (SW) Modules:] • ASM-FB4: 4-port GbE FortiASIC Module  • ASM-CE4: 4-port GbE Security Processing Module  • ASM-S08: 80 GB Hard Disk Storage Module  • ASM-CX4: 4-port GbE TX By-Pass Module 
• ASM-FX2: 2-port GbE SX By-Pass Module  • ASM-ET4: 4-port T1/E1 WAN Module

Fortinet Mezzanine Card (FMC) Modules • FMC-XD2: 2 10GbE port 20GbE SFP Firewall Acceleration Module • FMC-XG2: 2 10GbE port IPS Acceleration Module
• FSM-064: 64 GB SSD Module, requires FSM slot

This document is provided as a convenient comparison of Fortinet products and services. The datasheet for any product or service can be Antivirus performance is measured based on HTTP traffic with 32Kbyte file attachments. FW &IPS performance is measured base on UDP traffic with 512 byte packet size. Actual
found on www.fortinet.com should be consulted for the most updated specifications. performance may vary depends on network traffic and environment.
Managing & Analyzing • Secure Messaging • Database & Web Security
• Endpoint Security Software • Security and Support Services
MANAGEMENT, ANALYSIS, & REPORTING APPLIANCES
PRODUCT 10/100/1000 10/100 Base System Administration Administrative Web Portal Local Hosted Hardware Form Network FortiClient Model Redundant
Ethernet Ethernet Storage Capacity Domain Web Portals Users (Max) Security Content Factor Devices (Max) Devices Restrictions Power
FortiManager-5001A 2 0 80 GB 100 100 4,000 AV, IPS, VM, WF, AS ATCA Blade 4,000 100,000 None Yes
FortiManager-3000C 4 and 2 SFP 0 2 TB 200 100 4,000 AV, IPS, VM, WF, AS Rack Mount (2-RU) 5,000 120,000 None Yes
FortiManager-1000C 4 0 1 TB 50 50 500 AV, IPS, VM, WF, AS Rack Mount (1-RU) 800 25,000 FG-5000 Series No
FortiManager-400B 4 0 500 GB 10 10 200 AV, IPS, VM Rack Mount (1-RU) 200 10,000 FG-5000 Series No
FortiManager-100C 2 1 1 TB 10 10 200 AV, IPS, VM Desktop 20 2,500 FG-5000 Series No

PRODUCT 10/100/1000 10/100 Base System Network De- FortiClient Centralized Number of Hard RAID Storage Data Receive Log Perf. Recommended Redundant
Ethernet Ethernet Storage Capacity vices (Max) Agents (Max) Quarantine Drives Management Rate (Logs / Sec) Device Power
FortiAnalyzer-4000B 2 and 2 SFP 0 6 TB 2,000 No Restriction Yes 6 (Plus 18 Optional) 0, 1, 5, 6, 10, 50, 60 24 Mbps Up to 6,000 All Models Yes
FortiAnalyzer-2000B 6 0 2 TB 2,000 No Restriction Yes 2 (Plus 4 Optional) 0, 1, 5, 10, 50 12 Mbps Up to 3,000 All Models Yes
FortiAnalyzer-1000C 4 0 1 TB 2,000 No Restriction Yes 1 (Plus 3 Optional) Opt - 0, 1, 10 4 Mbps Up to 1,000 All Models No
FortiAnalyzer-400B 4 0 500 GB 200 2000 Yes 1 (Plus 1 Optional) Opt - 0, 1 2 Mbps Up to 500 All Models No
FortiAnalyzer-100C 2 1 1 TB 100 100 Yes 1 N/A 800 Kbps Up to 200 All Models No
SECURE MESSAGING APPLIANCES
PRODUCT 10/100/1000 10/100 Base System RAID Storage Email Domains Policies (Do- Server Mode Hardware Form Profiles (Do- Email Routing Antispam Redundant
Ethernet Ethernet Storage Capacity Management main/Sys) Mailboxes Factor main / Sys) (Mgs / Hr) (Mgs / Hr) Power
FortiMail-5001A 2 0 80 GB N/A 10,000 1,500 / 7,000 3000 ATCA Blade 50 / 600 1.4 Million 1.3 Million Yes
FortiMail-2000B 6 0 1 TB 0, 1, 5, 10, 50 5,000 1,500 / 7,000 3000 Rack Mount (2-RU) 50 / 600 1.1 Million 1.1 Million Yes
FortiMail-400B 4 0 500 GB Opt - 0,1 500 600 / 3,000 1000 Rack Mount (1-RU) 50 / 200 264,600 234,000 No
FortiMail-100C 2 1 1 TB N/A 50 60 / 300 200 Desktop 50 / 60 90,000 85,000 No
DATABASE, VULNERABILITY MANAGEMENT and WEB SECURITY APPLIANCES
PRODUCT 10/100/1000 # Database Base System Total Storage Redundant Database Support / Asset Agent Licenses Repository Database
Ethernet Instances Storage Capacity Capacity Power Support
FortiDB-2000B 4 60 1 TB 6 TB (Opt) Yes
DB2 UDB V8, DB2 UDB V9; Microsoft SQL Server 2000, Microsoft SQL Server 2005; Apache Derby 10.x, DB2 UDB
FortiDB-1000B 4 30 1 TB 2 TB (Opt) No Oracle 8.1.6, Oracle 8.1.7.4, Oracle 9.2.0.x, Oracle 10.2.0.x, Oracle 11.1.0.x; Sybase v9, Microsoft SQL Server 2005,
ASE 12.5.4, Sybase ASE 15.0.2 Oracle 10gR2, PostgreSQL 8.3
FortiDB-400B 4 10 500 GB 1 TB (Opt) No

FortiScan-1000B 4 NA 2 TB 2 TB No Asset Agent Licences - 2,000 NA

PRODUCT 10/100/1000 Throughput Base System Total Storage Redundant Max HTTP Comprehensive WAF and Other
Ethernet (HTTP) Storage Capacity Capacity Power Trans / sec XML Security Features Features
FortiWeb-3000C 6 1 Gbps 2 TB 6 TB (Opt) Yes 40,000
XML schema validation and expression limiting, WSDL Vertifca- SSL and XML ecnryption and co-processing,
FortiWeb-1000C 4 500 Mbps 1 TB 2 TB (Opt) No 27,000
tion, Form Field Tampering Validation and others Content base Routing.
FortiWeb-400B 4 100 Mbps 500 GB 1 TB (Opt) No 10,000
SWITCHING PLATFORMS
PRODUCT 10 GbE Ports Throughput Latency (Port-to- MAC Address VLAN Sup- Total Link Agg Link Agg Group Size Total Active Flows Line Cards Fabric Cards Management Redundant
(Max) (Max) Port) Storage ported Groups Mged (Max) (Max) Cards (Max) Power
FortiSwitch-1000 144 2.9 Tbps 1.6 us 16,000 4,000 72 Up to 6 144,000 12 6 2 Yes
FortiSwitch-500 24 480 Gbps 2.4 us 32,000 4,000 12 Up to 8 24,000 N/A N/A N/A Yes
FortiSwitch-100 4/ 176 Gbps N/A 8,000 512 6 Up to 8 N/A N/A N/A N/A No
48 GbE Ports
ENDPOINT SECURITY SOFTWARE
PRODUCT Personal IPSec VPN Antivirus & WAN Intrusion Email FortiManager Web Content Filtering Address Book SMS Filtering Supported
Firewall AntiSpyware Optimization Prevention Antispam Management Protection & Antispam Platforms
FortiClient - Windows Yes Yes Yes Yes Yes Yes Yes Yes No No Window 7, Vista, XP, 2000,
Server 08, 03, 64 and 32 bit
FortiMobile - Symbian Yes No Yes No No No Yes No No Yes SymbianOS S60 7/8/9
FortiMobile - WinMobile No Yes Yes No No No Yes No Yes Yes Windows Mobile 2003/SE, 5, 6
FORTIGUARD SECURITY SUBSCRIPTION SERVICES INTEGRATED WIRELESS SECURITY AND ACCESS SOLUTIONS
Product AV IPS AS WF VM AC DB AV = Antivirus Product Freq - Radio 1 Freq - Radio 2 Ethernet Port # of SSIDs POE
IPS = Intrusion Preven-
FortiGate Yes Yes Yes Yes Yes Yes No tion FortiAP-210B 802.11 b/g/n or a/n - 1x 7 - client, 1 - Yes
AS = Antispam (Selectable) 10/100/100 monitoring (802.3 af)
FortiAnalyzer No No No No Yes No No WF = Web Filtering FortiAP-220A 802.11 b/g/n 802.11 a/n 5 x 10/100 14 - client, 2 - No
VM = Vulnerability monitoring
Management (including
FortiClient Yes No Yes Yes No Yes No FortiAP-220B 802.11 b/g/n or a/n 802.11 b/g/n 1x 14 - client, 2 - Yes
Compliance Benchmark-
(Selectable) 10/100/1000 monitoring (802.3 af)
ing)
FortiDB No No No No No No Yes AC = Application control FORTIGUARD ANALYSIS AND MANAGEMENT SERVICE
DB = Database Security
FortiMail Yes No Yes No No No No FortiGuard Analysis and Management Service is licensed per device. All FortiGate systems are supported.

FortiScan No No No No Yes No No Monthly or Yearly Plan 10 GB Storage Quota per license. Multple licenses can be combined to increase storage.
available
Copyright© 2010 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal
lab tests under ideal conditions. Network variables, different network environments and other conditions may affect performance results, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding contract with a purchaser that expressly warrants that the identified product will perform according to the
performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication
shall be applicable. Certain Fortinet products are licensed under U.S. Patent No. 5,623,600. BRO103-R25-201010
 Product Matrix

Security • Performance • Cost • Flexibility The FortiGate® family of multi-threat security appliances range in performance FortiOS™ Operating System: Developed for Security
and physical features to meet network requirements of all sizes and topologies. Fortinet’s FortiOS was developed with security and performance as top priorities.
Fortinet® is the pioneer and leading provider of integrated network security
Additionally, Fortinet delivers a complete line of product extensions that enable FortiOS features full routing (BGP, OSPF, RIP), complete logging and auditing
solutions that protect your network against today’s constantly changing
threats. Fortinet provides solutions for the world's largest organizations, like network managers to control, monitor, and operate networks simply and capabilities for forensic analysis, granular Virtual Security Domain (VDOM)
large enterprises and service providers, to small offices with 25 users—and powerfully: support, and a complete command line interface (CLI). No third party software
every size in between. Unlike providers of point products, Fortinet offers applications are included that could lead to a vulnerability. It is Common Criteria
• FortiAnalyzer™ Appliances—Centralized logging and reporting Certified EAL 4+ and Federal Information Processing Standard (FIPS) 140-2
an innovative security platform that incorporates the essential security
applications and services required to enable a safe and clean communications that securely aggregates and analyzes log data from multiple validated.
environment regardless of size. Fortinet delivers Fortinet products
• FortiManager™ Appliances—Centralized command and control,
FortiGuard® Security Services
• Better security by providing a comprehensive multi-threat The FortiGuard Network is a combination of people and technology which
configuration management and monitoring solution
security solution enhance the value of Fortinet solutions. Over 100 members strong, the FortiGuard
• FortiMail™ Appliances—An enterprise-class family of
• Higher performance through ASIC-acceleration Global Threat Research Team ensure that FortiGuard Security Subscription
specialized email security solutions providing antispam and Services are always up-to-date and providing protection from the latest threats.
• Lower total cost of ownership (OpEx and CapEx) by
integrating best-of-breed security applications into a single antivirus protection Delivering the latest security content is the FortiGuard Distribution Network,
device which is comprised of geographically dispersed systems which can optionally
push updates to Fortinet devices anywhere in the world within minutes.
Fortinet protection solutions include a range of high-end chassis based
systems, appliance-based solutions, and management and reporting tools.
These capabilities allow our customers to cost-effectively protect their critical
assets while delivering unparalleled flexibility in deployment.
Fortinet is the only unified security solutions provider that owns all of its
technology. Fortinet solutions were built from the ground up by Fortinet to
integrate multiple levels of security protection—including firewall, antivirus,
intrusion prevention, VPN, spyware prevention, Web filtering, antispam and
traffic shaping—providing customers a way to protect against multiple
threats today and into the future.
The FortiASIC™ Advantage
The FortiASIC processor is the foundation of Fortinet’s unique technology.
Contact your Authorized FortiPartner or visit www.fortinet.com/partners to FortiASICs use an intelligent, proprietary content scanning engine that accelerates
find a FortiPartner near you. compute-intensive actions. They also contain acceleration algorithms for
encryption so that FortiGate security devices can perform antivirus scanning
on VPN tunnels, ensuring clean and controlled communications. Coupling our
Fortinet Incorporated | 1090 Kifer Road, Sunnyvale, CA 94086 USA
Tel +1-408-235-7700 Fax +1-408-235-7737 | www.fortinet.com/sales custom ASIC with proprietary network processor acceleration, Fortinet’s security
systems deliver improved security, extreme performance, and a compelling total
cost of ownership.