Fortinet with IPSEC FG/FWF-60F
Converged Next-Generation Firewall (NGFW) and SD-WAN
The FortiGate Next-Generation Firewall 60F series is ideal for building security-driven networks at distributed enterprise sites and transforming WAN architecture at any scale.
With a rich set of AI/ML-based FortiGuard security services and our integrated Security Fabric platform, the FortiGate FortiWiFi 60F series delivers coordinated, automated, end-to-end threat protection across all use cases.
FortiGate has the industry’s first integrated SD-WAN and zero-trust network access (ZTNA)
enforcement within an NGFW solution and is powered by one OS. FortiGate FortiWiFi 60F
automatically controls, verifies, and facilitates user access to applications, delivering
consistency with a seamless and optimized user experience.
Highlights
Gartner Magic Quadrant Leader for both Network Firewalls and SD-WAN.
Security-Driven Networking with FortiOS delivers converged networking and security.
Unparalleled Performance with Fortinet’s patented SoC processors.
Enterprise Security with consolidated AI / ML-powered FortiGuard Services.
Simplified Operations
with centralized
management for
networking and security,
automation, deep analytics,
and self-healing
| Hardware Specifications | FORTIGATE 60F | FORTIGATE 61F | FORTIWIFI 60F | FORTIWIFI 61F |
| GE RJ45 WAN / DMZ Ports | 2/1 | 2/1 | 2/1 | 2/1 |
| GE RJ45 Internal Ports | 5 | |||
| GE RJ45 FortiLink Ports (Default) | 2 | |||
| Wireless Interface | - | |||
| USB Ports | 1 | |||
| Console (RJ45) | 1 | |||
| Internal Storage | - | |||
| Radio Specifications | ||||
| Multiple User (MU) MIMO | - | - | 3 x 3 | 3 x 3 |
| Maximum Wi-Fi Speeds | - | - | 1300 Mbps @ 5 GHz, 450 Mbps @ 2.4 GHz | 1300 Mbps @ 5 GHz, 450 Mbps @ 2.4 GHz |
| Maximum Tx Power | - | - | 20 dBm | 20 dBm |
| Antenna Gain | - | - | 3.5 dBi @ 5 GHz, 5 dBi @ 2.4 GHz | 3.5 dBi @ 5 GHz, 5 dBi @ 2.4 GHz |
| Operating Environment and Certifications | ||||
| Power Rating | 12Vdc, 3A | 12Vdc, 3A | 12Vdc, 3A | 12Vdc, 3A |
| Power Required | Powered by External DC Power Adapter, 100–240V AC, 50/60 Hz | Powered by External DC Power Adapter, 100–240V AC, 50/60 Hz | Powered by External DC Power Adapter, 100–240V AC, 50/60 Hz | Powered by External DC Power Adapter, 100–240V AC, 50/60 Hz |
| Maximum Current | 100Vac/1.0A, 240Vac/0.6A | 100Vac/1.0A, 240Vac/0.6A | 100Vac/1.0A, 240Vac/0.6A | 100Vac/1.0A, 240Vac/0.6A |
| Power Consumption (Average / Maximum) | 10.17 W / 12.43 W | 17.2 W / 18.7 W | 17.2 W / 18.7 W | 17.5 W / 19.0 W |
| Heat Dissipation | 42.4 BTU/hr | 42.4 BTU/hr | 63.8 BTU/hr | 64.8 BTU/hr |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) | 32°F to 104°F (0°C to 40°C) | 32°F to 104°F (0°C to 40°C) | 32°F to 104°F (0°C to 40°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) | -31°F to 158°F (-35°C to 70°C) | -31°F to 158°F (-35°C to 70°C) | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 10% to 90% non-condensing | 10% to 90% non-condensing | 10% to 90% non-condensing | 10% to 90% non-condensing |
| Noise Level | Fanless 0 dBA | Fanless 0 dBA | Fanless 0 dBA | Fanless 0 dBA |
| Operating Altitude | Up to 7400 ft (2250 m) | Up to 7400 ft (2250 m) | Up to 7400 ft (2250 m) | Up to 7400 ft (2250 m) |
| Compliance | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB |
| Certifications | USGv6/IPv6 | USGv6/IPv6 | USGv6/IPv6 | USGv6/IPv6 |
| System Performance — Enterprise Traffic Mix | |
| IPS Throughput | 1.4 Gbps |
| NGFW Throughput | 1 Gbps |
| Threat Protection Throughput | 700 Mbps |
| System Performance | |
| Firewall Throughput (1518 / 512 / 64 byte UDP packets) | 10/10/6 Gbps |
| Firewall Latency (64 byte UDP packets) | 3.3 μs |
| Firewall Throughput (Packets Per Second) | 9 Mpps |
| Concurrent Sessions (TCP) | 700 000 |
| New Sessions/Second (TCP) | 35 000 |
| Firewall Policies | 5000 |
| IPsec VPN Throughput (512 byte) | 6.5 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 200 |
| Client-to-Gateway IPsec VPN Tunnels | 500 |
| SSL-VPN Throughput | 900 Mbps |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 200 |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 630 Mbps |
| SSL Inspection CPS (IPS, avg. HTTPS) | 400 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 55 000 |
| Application Control Throughput (HTTP 64K) | 1.8 Gbps |
| CAPWAP Throughput (HTTP 64K) | 8 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 10 |
| Maximum Number of FortiSwitches Supported | 24 |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 64 / 32 |
| Maximum Number of FortiTokens | 500 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
| Dimensions | |
| Height x Width x Length (inches) | 1.5 x 8.5 x 6.3 |
| Height x Width x Length (mm) | 38.5 x 216 x 160 mm |
| Weight | 2.23 lbs (1.01 kg) |
| Form Factor | Desktop |
Use Cases
Next Generation Firewall (NGFW)
• FortiGuard Labs’ suite of AI-powered Security Services—natively integrated with your NGFW—secures web, content, and devices and protects networks from ransomware and sophisticated cyberattacks
• Real-time SSL inspection (including TLS 1.3) provides full visibility into users, devices, and applications across the attack surface
• Fortinet’s patented SPU (Security Processing Unit) technology provides industry-leading high-performance protection
Secure SD-WAN
• FortiGate WAN Edge powered by one OS and unified security and management framework and systems transforms and secures WANs
• Delivers superior quality of experience and effective security posture for work-from-any where models, SD-Branch, and cloud-first WAN use cases
• Achieve operational efficiencies at any scale through automation, deep analytics, and self-healing
Universal ZTNA
• Control access to applications no matter where the user is and no matter where the application is hosted for universal application of access policies
• Provide extensive authentications, checks, and enforce policy prior to granting application access - every time
• Agent-based access with FortiClient or agentless access via proxy portal for guest or BYOD