FORTIGATE 100F FORTIGATE 101FHardware Specifications:GE RJ45 Ports : 12GE RJ45 Management/HA/DMZ Ports : 1 / 2 / 1GE SFP Slots : 410 GE SFP+ Slots : 2GE RJ45 WAN Ports : 2GE RJ45 or SFP Shared Ports : 4USB Port : 1Console Port : 1Internal Storage : 1x 480 GB SSDIncluded Transceivers : 0System Performance — Enterprise Traffic Mix:IPS Throughput : 2.6 GbpsNGFW Throughput : 1.6 GbpsThreat Protection Throughput : 1 GbpsSystem Performance:Firewall Throughput(1518 / 512 / 64 byte UDP packets) : 20 / 18 / 10 GbpsFirewall Latency (64 byte UDP packets) : 5 ?sFirewall Throughput (Packets Per Second) : 15 MppsConcurrent Sessions (TCP) : 1.5 MillionNew Sessions/Second (TCP) : 56,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 11.5 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,500Client-to-Gateway IPsec VPN Tunnels : 16,000SSL-VPN Throughput  : 1 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 500SSL Inspection Throughput (IPS, avg. HTTPS) : 1 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 1,800SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 135,000Application Control Throughput (HTTP 64K) : 2.2 GbpsCAPWAP Throughput (HTTP 64K) : 15 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 24Maximum Number of FortiAPs(Total / Tunnel Mode) : 128 / 64Maximum Number of FortiTokens : 5,000High Availability Configurations : Active / Active, Active / Passive, ClusteringDimensions:Height x Width x Length (inches) : 1.73 x 17 x 10Height x Width x Length (mm) : 44 x 432 x 254Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUWeight : 7.25 lbs (3.29 kg) 7.56 lbs (3.43 kg)Environment:Power Required : 100–240V AC, 50-60Maximum Current : 100V / 1A, 240V / 0.5APower Consumption (Average / Maximum) : 35.1 W / 38.7 W 35.3 W / 39.1 WHeat Dissipation : 119.77 BTU/h 121.13 BTU/hRedundant Power Supplies : YesEnvironment:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Operating Altitude Up to : 7,400 ft (2,250 m)Humidity : 10–90% non-condensingNoise Level : 40.4 dBACompliance : FCC Part 15B, Class A, CE, RCM, VCCI, UL/cUL, CB, BSMICertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; IPv6

Interfaces and Modules :Hardware Accelerated : 10 GE SFP+ Slots 2Hardware Accelerated GE SFP Slots : 16Hardware Accelerated GE RJ45 Ports : 16GE RJ45 Management / HA Ports : 2USB Ports (Client / Server) : 1 / 2Console Port : 1Onboard Storage : 1x 256 GB SSDIncluded Transceivers : 0System Performance — Enterprise Traffic Mix:IPS Throughput : 4.2 GbpsNGFW Throughput : 4 GbpsThreat Protection Throughput : 3 GbpsSystem Performance and Capacity:IPv4 Firewall Throughput(1518 / 512 / 64 byte, UDP) : 52 / 52 / 33 GbpsIPv6 Firewall Throughput(1518 / 512 / 86 byte, UDP) : 52 / 52 / 33 GbpsFirewall Latency (64 byte, UDP) : 3 ?sFirewall Throughput (Packet per Second) : 49.5 MppsConcurrent Sessions (TCP) : 11 MillionNew Sessions/Second (TCP) : 280,000Firewall Policies : 10,000IPsec VPN Throughput (512 byte) : 25 GbpsGateway-to-Gateway IPsec VPN Tunnels : 2,000Client-to-Gateway IPsec VPN Tunnels : 50,000SSL-VPN Throughput : 3.6 GbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode) : 10,000SSL Inspection Throughput (IPS, avg. HTTPS) : 3.9 GbpsSSL Inspection CPS (IPS, avg. HTTPS) : 2,400SSL Inspection Concurrent Session(IPS, avg. HTTPS) : 800,000Application Control Throughput (HTTP 64K) : 10 GbpsCAPWAP Throughput (1444 byte, UDP) : 11 GbpsVirtual Domains (Default / Maximum) : 10 / 10Maximum Number of FortiSwitches Supported : 64Maximum Number of FortiAPs (Total / Tunnel) : 1024 / 512Maximum Number of FortiTokens : 5,000High Availability Configurations : Active-Active, Active-Passive, ClusteringDimensions and Power:Height x Width x Length (inches): 1.75 x 17.22 x 18.24Height x Width x Length (mm) : 44.45 x 437.5 x 463.2Weight : 20.24 lbs (9.18 kg)Form Factor (supports EIA / non-EIA standards) : Rack Mount, 1 RUPower Input : 100–240V AC, 50–60 Hz, 300 W RedundantPower Consumption (Average / Maximum): 135 W / 187.2 WCurrent (Maximum): 100V/5A, 240V/3AHeat Dissipation:638.75 BTU/hRedundant Power Supplies: Yes (Hot Swappable)Operating Environment and Certifications:Operating Temperature : 32–104°F (0–40°C)Storage Temperature : -31–158°F (-35–70°C)Humidity : 10–90% non-condensingNoise Level : 49.9 dBAOperating Altitude Up to : 7,400 ft (2,250 m)Compliance : FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CBCertifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6

Overview:With network bandwidth requirements doubling every 18 months and increases in sophisticated cyber threats, enterprise organizations with large branch offices know they need high-speed network security that also delivers highly effective next generation security.5 Times Next Generation Firewall Performance :The FortiGate 900D appliance delivers superior performance through a combination of purpose-built FortiASIC™ processors, high port density with 10 GE ports and consolidated security features from the FortiOS™ operating system. It delivers 5 times better next generation firewall performance compared to alternate products and provides the best price/performance in the industry.Deeper Visibility and Top-rated Security :This breakthrough threat prevention performance allows organizations to run NSS Labs Recommended intrusion prevention and application control and VB100 certified antimalware capabilities for deeper inspection. Rich console views and reports together with a flexible policy engine provide the visibility and control to empower employees yet secure your enterprise.Finally, these features of the FortiGate FortiOS Network Security Platform are routinely validated by independent real-world tests and are consistently getting superior ratings in security effectiveness. Features & Benefits :5 times faster hardware accelerated next generation firewall offers best-in-class price/performance ratioIntegrated high port density delivers maximum flexibility and scalabilityNSS Labs Recommended NGFW and NGIPS with consolidated security delivers top-rated protectionApplication control plus identity and device-based policy enforcement provides more granular protectionIntuitive management interface enables broad and deep visibility that scales from a single FortiGate to thousands

Overview :With network bandwidth requirements doubling every 18 months and increases in sophisticated cyber threats, enterprise organizations with large branch offices know they need high-speed network security that also delivers highly effective next generation security.Superior Next Generation Firewall Performance :The FortiGate 800D appliance delivers superior performance through a combination of purpose-built FortiASIC processors, high port density with 10 GE ports and consolidated security features from the FortiOS operating system. It delivers better next generation firewall performance compared to alternate products and provides the best price/performance in the industry.Deeper Visibility and Top-rated Security :This breakthrough threat prevention performance allows organizations to run NSS Labs Recommended intrusion prevention and application control and VB100 certified antimalware capabilities for deeper inspection. Rich console views and reports together with a flexible policy engine provide the visibility and control to empower employees yet secure your enterprise.Finally, these features of the FortiGate FortiOS Network Security Platform are routinely validated by independent real-world tests and are consistently getting superior ratings in security effectiveness.

Overview :With network bandwidth requirements doubling every 18 months and increases in sophisticated cyber threats, enterprise organizations with large branch offices know they need high-speed network security that also delivers highly effective next generation security.Superior Next Generation Firewall Performance :The FortiGate 800D appliance delivers superior performance through a combination of purpose-built FortiASIC processors, high port density with 10 GE ports and consolidated security features from the FortiOS operating system. It delivers better next generation firewall performance compared to alternate products and provides the best price/performance in the industry.Deeper Visibility and Top-rated Security :This breakthrough threat prevention performance allows organizations to run NSS Labs Recommended intrusion prevention and application control and VB100 certified antimalware capabilities for deeper inspection. Rich console views and reports together with a flexible policy engine provide the visibility and control to empower employees yet secure your enterprise.Finally, these features of the FortiGate FortiOS Network Security Platform are routinely validated by independent real-world tests and are consistently getting superior ratings in security effectiveness.

Security :Protects against known exploits, malware and malicious websites using continuous threat intelligence provided by FortiGuard Labs security servicesIdentify thousands of applications including cloud applications for deep inspection into network trafficProtects against unknown attacks using dynamic analysis and provides automated mitigation to stop targeted attacksPerformance :Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technologyProvides industry-leading performance and protection for SSL encrypted trafficNetworking :Delivers extensive routing, switching, wireless controller and high performance IPsec VPN capabilities to consolidate networking and security functionalityEnables flexible deployment such as Next Generation Firewall and Secure SD-WANManagement :Single Pane of Glass with Network Operations Center (NOC) view provides 360° visibility to identify issues quickly and intuitivelyPredefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture

Security :Protects against known exploits, malware and malicious websites using continuous threat intelligence provided by FortiGuard Labs security servicesIdentify thousands of applications including cloud applications for deep inspection into network trafficProtects against unknown attacks using dynamic analysis and provides automated mitigation to stop targeted attacksPerformance :Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technologyProvides industry-leading performance and protection for SSL encrypted traffic Networking :Delivers extensive routing, switching, wireless controller and high performance IPsec VPN capabilities to consolidate networking and security functionalityEnables flexible deployment such as Next Generation Firewall and Secure SD-WANManagement :Single Pane of Glass with Network Operations Center (NOC) view provides 360° visibility to identify issues quickly and intuitivelyPredefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture

Overview:The Fortinet Enterprise Firewall SolutionThe FortiGate 100E series delivers next generation firewall capabilities for mid-sized to large enterprises, with the flexibility to be deployed at the campus or enterprise branch. Protect against cyber threats with security processor powered high performance, security efficacy and deep visibility.Security :Protects against known exploits, malware and malicious websites using continuous threat intelligence provided by FortiGuard Labs security servicesIdentify thousands of applications including cloud applications for deep inspection into network trafficDetects unknown attacks using dynamic analysis and provides automated mitigation to stop targeted attacksPerformance :Delivers industry’s best threat protection performance and ultra-low latency using purpose built-security processor (SPU) technologyProvides industry-leading performance and protection for SSL encrypted trafficNetworking :Delivers an extensive routing, switching, wireless controller and high performance IPsec VPN capabilities to consolidate networking and security functionalityEnables flexible deployment such as Next Generation Firewall and Secure SD-WAN

Overview:The SonicWall Network Security services platform (NSsp) High-End Firewall series takes an innovative approach to threat detection and prevention by combining appliance-based protection with cloud intelligence in a reliable, high-performance platform. Designed for large distributed enterprises, data centers and service providers, the NSsp High-End series consolidates advanced security technologies that deliver proven, scalable protection for millions of connections from the most advanced threats without slowing performance.SUPERIOR THREAT PREVENTION AND PERFORMANCE :Block more attacks with patent-pending Real-Time Deep Memory Inspection (RTDMITM) & Patented Real-Free Deep Packet Inspection (RFDPI®) technologyCombine cloud-based and on-box threat prevention featuring multi-engine sandboxingindustry-validated high security effectivenessGet high-speed performance with 40-Gigabit Ethernet portsSecurity that scales to protect millions of encrypted connectionsDecrypt and inspect TLS/SSL and SSH traffic in real timeNETWORK CONTROL AND FLEXIBILITY :Leverage powerful SonicOS operating systemGain application intelligence and controlSegment your network into zonesDeploy at the network edge or data center core

Overview:The SonicWall Network Security services platform (NSsp) High-End Firewall series takes an innovative approach to threat detection and prevention by combining appliance-based protection with cloud intelligence in a reliable, high-performance platform. Designed for large distributed enterprises, data centers and service providers, the NSsp High-End series consolidates advanced security technologies that deliver proven, scalable protection for millions of connections from the most advanced threats without slowing performance.SUPERIOR THREAT PREVENTION AND PERFORMANCE :Block more attacks with patent-pending Real-Time Deep Memory Inspection (RTDMITM) & Patented Real-Free Deep Packet Inspection (RFDPI®) technologyCombine cloud-based and on-box threat prevention featuring multi-engine sandboxingIndustry-validated high security effectivenessGet high-speed performance with 40-Gigabit Ethernet portsSecurity that scales to protect millions of encrypted connectionsDecrypt and inspect TLS/SSL and SSH traffic in real timeNETWORK CONTROL AND FLEXIBILITY :Leverage powerful SonicOS operating systemGain application intelligence and controlSegment your network into zonesDeploy at the network edge or data center core

Overview:The SonicWall Network Security appliance (NSa) series provides organizations that range in scale from mid-sized networks to distributed enterprises and data centers with advanced threat prevention in a highperformance security platform. Utilizing innovative deep learning technologies in the SonicWall Capture Cloud Platform, the NSa series delivers the automated real-time breach detection and prevention organizations need. Network control and flexibility :At the core of the NSa series is SonicOS, SonicWall’s feature-rich operating system. SonicOS provides organizations with the network control and flexibility they require through application intelligence and control, real-time visualization, an intrusion prevention system (IPS) featuring sophisticated anti-evasion technology, high-speed virtual private networking (VPN) and other robust security features. Using application intelligence and control, network administrators can identify and categorize productive applications from those that are unproductive or potentially dangerous, and control that traffic through powerful applicationlevel policies on both a per-user and a per-group basis (along with schedules and exception lists). Business-critical applications can be prioritized and allocated more bandwidth while non essential applications are bandwidthlimited. Real-time monitoring and visualization provides a graphical representation of applications, users and bandwidth usage for granular insight into traffic across the network. Secure, High-speed Wireless :Combine an NSa series next-generation firewall with a SonicWall SonicWave 802.11ac Wave 2 wireless access point to create a highspeed wireless network security solution. NSa series firewalls and SonicWave access points both feature 2.5 GbE ports that enable multi-gigabit wireless throughput offered in Wave 2 wireless technology. The firewall scans all wireless traffic coming into and going out of the network using deep packet inspection technology and then removes harmful threats such as malware and intrusions, even over encrypted connections. Additional security and control capabilities such as content filtering, application control and intelligence and Capture Advanced Threat Protection can be run on the wireless network to provide added layers of protection.

Overview:The SonicWall Network Security appliance (NSa) series provides organizations that range in scale from mid-sized networks to distributed enterprises and data centers with advanced threat prevention in a highperformance security platform. Utilizing innovative deep learning technologies in the SonicWall Capture Cloud Platform, the NSa series delivers the automated real-time breach detection and prevention organizations need. Network control and flexibility :At the core of the NSa series is SonicOS, SonicWall’s feature-rich operating system. SonicOS provides organizations with the network control and flexibility they require through application intelligence and control, real-time visualization, an intrusion prevention system (IPS) featuring sophisticated anti-evasion technology, high-speed virtual private networking (VPN) and other robust security features. Using application intelligence and control, network administrators can identify and categorize productive applications from those that are unproductive or potentially dangerous, and control that traffic through powerful applicationlevel policies on both a per-user and a per-group basis (along with schedules and exception lists). Business-critical applications can be prioritized and allocated more bandwidth while non essential applications are bandwidthlimited. Real-time monitoring and visualization provides a graphical representation of applications, users and bandwidth usage for granular insight into traffic across the network. Secure, High-speed Wireless :Combine an NSa series next-generation firewall with a SonicWall SonicWave 802.11ac Wave 2 wireless access point to create a highspeed wireless network security solution. NSa series firewalls and SonicWave access points both feature 2.5 GbE ports that enable multi-gigabit wireless throughput offered in Wave 2 wireless technology. The firewall scans all wireless traffic coming into and going out of the network using deep packet inspection technology and then removes harmful threats such as malware and intrusions, even over encrypted connections. Additional security and control capabilities such as content filtering, application control and intelligence and Capture Advanced Threat Protection can be run on the wireless network to provide added layers of protection.

Overview:The SonicWall Network Security appliance (NSa) series provides organizations that range in scale from mid-sized networks to distributed enterprises and data centers with advanced threat prevention in a highperformance security platform. Utilizing innovative deep learning technologies in the SonicWall Capture Cloud Platform, the NSa series delivers the automated real-time breach detection and prevention organizations need. Network control and flexibility :At the core of the NSa series is SonicOS, SonicWall’s feature-rich operating system. SonicOS provides organizations with the network control and flexibility they require through application intelligence and control, real-time visualization, an intrusion prevention system (IPS) featuring sophisticated anti-evasion technology, high-speed virtual private networking (VPN) and other robust security features. Using application intelligence and control, network administrators can identify and categorize productive applications from those that are unproductive or potentially dangerous, and control that traffic through powerful applicationlevel policies on both a per-user and a per-group basis (along with schedules and exception lists). Business-critical applications can be prioritized and allocated more bandwidth while non essential applications are bandwidthlimited. Real-time monitoring and visualization provides a graphical representation of applications, users and bandwidth usage for granular insight into traffic across the network. Secure, High-speed Wireless :Combine an NSa series next-generation firewall with a SonicWall SonicWave 802.11ac Wave 2 wireless access point to create a highspeed wireless network security solution. NSa series firewalls and SonicWave access points both feature 2.5 GbE ports that enable multi-gigabit wireless throughput offered in Wave 2 wireless technology. The firewall scans all wireless traffic coming into and going out of the network using deep packet inspection technology and then removes harmful threats such as malware and intrusions, even over encrypted connections. Additional security and control capabilities such as content filtering, application control and intelligence and Capture Advanced Threat Protection can be run on the wireless network to provide added layers of protection.

Overview:The SonicWall Network Security appliance (NSa) series provides organizations that range in scale from mid-sized networks to distributed enterprises and data centers with advanced threat prevention in a highperformance security platform. Utilizing innovative deep learning technologies in the SonicWall Capture Cloud Platform, the NSa series delivers the automated real-time breach detection and prevention organizations need. Network control and flexibility :At the core of the NSa series is SonicOS, SonicWall’s feature-rich operating system. SonicOS provides organizations with the network control and flexibility they require through application intelligence and control, real-time visualization, an intrusion prevention system (IPS) featuring sophisticated anti-evasion technology, high-speed virtual private networking (VPN) and other robust security features. Using application intelligence and control, network administrators can identify and categorize productive applications from those that are unproductive or potentially dangerous, and control that traffic through powerful applicationlevel policies on both a per-user and a per-group basis (along with schedules and exception lists). Business-critical applications can be prioritized and allocated more bandwidth while non essential applications are bandwidthlimited. Real-time monitoring and visualization provides a graphical representation of applications, users and bandwidth usage for granular insight into traffic across the network. Secure, High-speed Wireless :Combine an NSa series next-generation firewall with a SonicWall SonicWave 802.11ac Wave 2 wireless access point to create a highspeed wireless network security solution. NSa series firewalls and SonicWave access points both feature 2.5 GbE ports that enable multi-gigabit wireless throughput offered in Wave 2 wireless technology. The firewall scans all wireless traffic coming into and going out of the network using deep packet inspection technology and then removes harmful threats such as malware and intrusions, even over encrypted connections. Additional security and control capabilities such as content filtering, application control and intelligence and Capture Advanced Threat Protection can be run on the wireless network to provide added layers of protection.