Fortinet Fortigate FG-3600E/3601E
Fortinet Fortigate FG-3600E/3601E
The Fortinet Enterprise Firewall Solution
The FortiGate 3600E series delivers high performance threat protection for mid-sized to large enterprises and service providers, with the flexibility to be deployed at the Internet or cloud edge, in the data center core or internal segments. The multiple high-speed interfaces, high port density, industry-leading security efficacy and high throughput of the 3600E series keeps your network connected and secure.
Security
- Protects against known exploits, malware and malicious websites using continuous threat intelligence provided by FortiGuard Labs security services
- Identify thousands of applications including cloud applications for deep inspection into network traffic
- Protects against unknown attacks using dynamic analysis and provides automated mitigation to stop targeted attacks
Performance
- Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology
- Provides industry-leading performance and protection for SSL encrypted traffic
Certification
- Independently tested and validated best security effectiveness and performance
- Received unparalleled third-party certifications from NSS Labs, ICSA, Virus Bulletin and AV Comparatives
Networking
- Delivers extensive routing, switching, wireless controller and high performance IPsec VPN capabilities to consolidate networking and security functionality
- Enables flexible deployment such as Next Generation Firewall and Secure SD-WAN
Management
- Single Pane of Glass with Network Operations Center (NOC) view provides 360° visibility to identify issues quickly and intuitively
- Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture
Security Fabric
- Enables Fortinet and Fabric-ready partners’ products to collaboratively integrate and provide end-to-end security across the entire attack surface
- Automatically builds Network Topology visualizations which discover IoT devices and provide complete visibility into Fortinet and Fabric-ready partner products
Specifications
STT | Model | FG – 3600E/3601E |
1 | System Performance | |
Firewall Throughput (1518 / 512 / 64 byte UDP packets) | 240 / 240 / 150 Gbps | |
Firewall Latency (64 byte UDP packets) | 4 µs | |
Firewall Throughput (Packets Per Second) | 225 Mpps | |
Concurrent Sessions (TCP) | 50,000,000 | |
New Sessions/Second (TCP) | 460,000 | |
Firewall Policies | 200,000 | |
IPsec VPN Throughput (512 byte) | 145 Gbps | |
Gateway-to-Gateway IPsec VPN Tunnels | 40,000 | |
Client-to-Gateway IPsec VPN Tunnels | 200,000 | |
SSL-VPN Throughput | 12 Gbps | |
Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 30,000 | |
SSL Inspection Throughput (IPS, avg. HTTPS) | 34 Gbps | |
SSL Inspection CPS (IPS, avg. HTTPS) | 19,000 | |
SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 5,200,000 | |
Application Control Throughput (HTTP 64K) | 95 Gbps | |
CAPWAP Throughput (HTTP 64K) | 57 Gbps | |
Virtual Domains (Default / Maximum) | 10 / 500 | |
Maximum Number of FortiSwitches Supported | 256 | |
Maximum Number of FortiAPs (Total / Tunnel Mode) | 4,096 / 2,048 | |
Maximum Number of FortiTokens | 20,000 | |
High Availability Configurations | Active / Active, Active / Passive, Clustering | |
2 | System Performance — Enterprise Traffic Mix | |
IPS Throughput | 55 Gbps | |
NGFW Throughput | 40 Gbps | |
Threat Protection Throughput | 30 Gbps | |
3 | Interfaces and Modules | |
GE RJ45 Ports | ||
GE SFP Slots | 2x 25 GE SFP28 / 10 GE SFP+ / GE SFP HA 30x 25 GE SFP28 / 10 GE SFP+ / GE SFP 6x 100 GE QSFP28 / 40 GE QSFP+ | |
GE Management Ports | 2 (supports 1 GE only) | |
USB Ports | 1 | |
Console Port | 1 | |
Storage | 2x 2TB SSD (FG-3601E) | |
4 | Dimensions and Power | |
Height x Width x Length (inches) | 3.5 x 17.4 x 21.9 | |
Height x Width x Length (mm) | 89 x 443 x 556 | |
Weight | 43.1 lbs (19.6 kg) (FG-3600E) 44.5 lbs (20.2 kg) (FG-3601E) | |
Form Factor | 2 RU | |
AC/DC Power Supply | 100–240V AC, 50–60 Hz | |
Power Consumption (Average / Maximum) | 672 W / 977 W | |
Current (Maximum) | 12A@120V, 9A@240V | |
Heat Dissipation | 3334 BTU/h | |
Redundant Power Supplies | Yes, Hot Swappable | |
5 | Operating Environment and Certifications | |
Operating Temperature | 32–104°F (0–40°C) | |
Storage Temperature | -31–158°F (-35–70°C) | |
Operating Altitude | Up to 7,400 ft (2,250 m) | |
Humidity | 10–90% non-condensing | |
Noise Level | 60 dBA | |
Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | |
Certifications | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6 |
Subscriptions
SERVICE | ADVANCED THREAT PROTECTION | UNIFIED PROTECTION | ENTERPRISE PROTECTION | 360 PROTECTION |
FortiManager Cloud | o | |||
FortiAnalyzer Cloud | o | |||
SD-WAN Cloud Assist Monitoring | o | |||
SD-WAN One Click VPN Overlay | o | |||
FortiConverter Service | o | |||
Industrial Security Service | o | o | ||
Security Rating | o | o | ||
CASB | o | o | ||
Anti-Spam | o | o | o | |
Web Filtering | o | o | o | |
Advanced Malware Protection | o | o | o | o |
IPS | o | o | o | o |
FortiCare + Application Control | o | o | o | o |
Specs
System Performance
Firewall throughput | 240/240/150 Gbps |
Firewall Latency | 4 us |
Concurrent connections | 50.000.000 |
New connections/sec | 460.000 |
IPS throughput | 55 Gbps |
NGFW Throughput | 40 Gbps |
Threat Protection Throughput | 30 Gbps |
Firewall Policies | 200.000 |
IPSec VPN throughput | 145 Gbps |
Gateway-to-Gateway IPSec VPN Tunnels | 40.000 |
Client-to-Gateway IPSec VPN Tunnels | 200.000 |
SSL VPN Throughput | 12 Gbps |
Concurrent SSL VPN Users | 30.000 |
SSL Inspection Throughput | 34 Gbps |
SSL Inspection CPS | 19.000 |
SSL Inspection Concurrent Session | 5.200.000 |
Application Control Throughput | 95 Gbps |
CAPWAP Throughput | 57 Gbps |
Virtual Domains | 10 / 500 |
Maximum Number of FortiSwitches Supported | 256 |
Maximum Number of FortiAPs | 4096 / 2048 |
Maximum Number of FortiTokens | 20.000 |
Maximum Number of Registered FortiClients | 50.000 |
High Availability Configurations | Active/Active, Active/Passive, Clustering |
Physical interfaces
GE RJ45 Ports | 6 x 100 GE QSFP28/40 GE QSFP+ Slots |
GE RJ45 WAN Ports | 2 x GE RJ45 Management Ports |
GE SFP Slots | 32 x 25 SFP28/10 GE SFP+/GE SFP Slots |
I/O ports | 1 USB Port, 1 Console Port |
Storage | 2 x 2 TB SSD (for FG-3601E only) |
Dimensions & Enviroment
Mounting | 2 RU |
Dimensions Width x Depth x Height (inches) | 3.5 x 17.4 x 21.9 |
Dimensions Height x Width x Length (mm) | 89 x 443 x 556 |
Weight | 43.1 lbs (3600E) / 44.5 lbs (3601E) |
Power supply | 100-240VAC |
Power Consumption | 672W/977W |
Heat Dissipation | 3334 BTU/h |
Operating Temperature | 32-104 F |
Storage Temperature | -31-158 F |
Humidity | 10-90% non-condensing |
Noise Level | 60 dBA |
Operating Attitude | Up to 7400 ft (2250m) |
Regulatory Compliance | FCC Part 15 Class A, C-Tick, VCCI, CE, UL/cUL, CB |
Certifications | ICSA Labs: Firewall, IPSec, IPS, Antivirus, SSL-VPN, USGv6/IPv6 |