Fortinet Fortigate FG-3600E/3601E
The Fortinet Enterprise Firewall Solution
The FortiGate 3600E series delivers high performance threat protection for mid-sized to large enterprises and service providers, with the flexibility to be deployed at the Internet or cloud edge, in the data center core or internal segments. The multiple high-speed interfaces, high port density, industry-leading security efficacy and high throughput of the 3600E series keeps your network connected and secure.
Security
- Protects against known exploits, malware and malicious websites using continuous threat intelligence provided by FortiGuard Labs security services
- Identify thousands of applications including cloud applications for deep inspection into network traffic
- Protects against unknown attacks using dynamic analysis and provides automated mitigation to stop targeted attacks
Performance
- Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology
- Provides industry-leading performance and protection for SSL encrypted traffic
Certification
- Independently tested and validated best security effectiveness and performance
- Received unparalleled third-party certifications from NSS Labs, ICSA, Virus Bulletin and AV Comparatives
Networking
- Delivers extensive routing, switching, wireless controller and high performance IPsec VPN capabilities to consolidate networking and security functionality
- Enables flexible deployment such as Next Generation Firewall and Secure SD-WAN
Management
- Single Pane of Glass with Network Operations Center (NOC) view provides 360° visibility to identify issues quickly and intuitively
- Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture
Security Fabric
- Enables Fortinet and Fabric-ready partners’ products to collaboratively integrate and provide end-to-end security across the entire attack surface
- Automatically builds Network Topology visualizations which discover IoT devices and provide complete visibility into Fortinet and Fabric-ready partner products
Specifications
| STT | Model | FG – 3600E/3601E |
| 1 | System Performance | |
| Firewall Throughput (1518 / 512 / 64 byte UDP packets) | 240 / 240 / 150 Gbps | |
| Firewall Latency (64 byte UDP packets) | 4 µs | |
| Firewall Throughput (Packets Per Second) | 225 Mpps | |
| Concurrent Sessions (TCP) | 50,000,000 | |
| New Sessions/Second (TCP) | 460,000 | |
| Firewall Policies | 200,000 | |
| IPsec VPN Throughput (512 byte) | 145 Gbps | |
| Gateway-to-Gateway IPsec VPN Tunnels | 40,000 | |
| Client-to-Gateway IPsec VPN Tunnels | 200,000 | |
| SSL-VPN Throughput | 12 Gbps | |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 30,000 | |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 34 Gbps | |
| SSL Inspection CPS (IPS, avg. HTTPS) | 19,000 | |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 5,200,000 | |
| Application Control Throughput (HTTP 64K) | 95 Gbps | |
| CAPWAP Throughput (HTTP 64K) | 57 Gbps | |
| Virtual Domains (Default / Maximum) | 10 / 500 | |
| Maximum Number of FortiSwitches Supported | 256 | |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 4,096 / 2,048 | |
| Maximum Number of FortiTokens | 20,000 | |
| High Availability Configurations | Active / Active, Active / Passive, Clustering | |
| 2 | System Performance — Enterprise Traffic Mix | |
| IPS Throughput | 55 Gbps | |
| NGFW Throughput | 40 Gbps | |
| Threat Protection Throughput | 30 Gbps | |
| 3 | Interfaces and Modules | |
| GE RJ45 Ports | ||
| GE SFP Slots | 2x 25 GE SFP28 / 10 GE SFP+ / GE SFP HA 30x 25 GE SFP28 / 10 GE SFP+ / GE SFP 6x 100 GE QSFP28 / 40 GE QSFP+ | |
| GE Management Ports | 2 (supports 1 GE only) | |
| USB Ports | 1 | |
| Console Port | 1 | |
| Storage | 2x 2TB SSD (FG-3601E) | |
| 4 | Dimensions and Power | |
| Height x Width x Length (inches) | 3.5 x 17.4 x 21.9 | |
| Height x Width x Length (mm) | 89 x 443 x 556 | |
| Weight | 43.1 lbs (19.6 kg) (FG-3600E) 44.5 lbs (20.2 kg) (FG-3601E) | |
| Form Factor | 2 RU | |
| AC/DC Power Supply | 100–240V AC, 50–60 Hz | |
| Power Consumption (Average / Maximum) | 672 W / 977 W | |
| Current (Maximum) | 12A@120V, 9A@240V | |
| Heat Dissipation | 3334 BTU/h | |
| Redundant Power Supplies | Yes, Hot Swappable | |
| 5 | Operating Environment and Certifications | |
| Operating Temperature | 32–104°F (0–40°C) | |
| Storage Temperature | -31–158°F (-35–70°C) | |
| Operating Altitude | Up to 7,400 ft (2,250 m) | |
| Humidity | 10–90% non-condensing | |
| Noise Level | 60 dBA | |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | |
| Certifications | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6 |
Subscriptions
| SERVICE | ADVANCED THREAT PROTECTION | UNIFIED PROTECTION | ENTERPRISE PROTECTION | 360 PROTECTION |
| FortiManager Cloud | o | |||
| FortiAnalyzer Cloud | o | |||
| SD-WAN Cloud Assist Monitoring | o | |||
| SD-WAN One Click VPN Overlay | o | |||
| FortiConverter Service | o | |||
| Industrial Security Service | o | o | ||
| Security Rating | o | o | ||
| CASB | o | o | ||
| Anti-Spam | o | o | o | |
| Web Filtering | o | o | o | |
| Advanced Malware Protection | o | o | o | o |
| IPS | o | o | o | o |
| FortiCare + Application Control | o | o | o | o |
Specs
System Performance
| Firewall throughput | 240/240/150 Gbps |
| Firewall Latency | 4 us |
| Concurrent connections | 50.000.000 |
| New connections/sec | 460.000 |
| IPS throughput | 55 Gbps |
| NGFW Throughput | 40 Gbps |
| Threat Protection Throughput | 30 Gbps |
| Firewall Policies | 200.000 |
| IPSec VPN throughput | 145 Gbps |
| Gateway-to-Gateway IPSec VPN Tunnels | 40.000 |
| Client-to-Gateway IPSec VPN Tunnels | 200.000 |
| SSL VPN Throughput | 12 Gbps |
| Concurrent SSL VPN Users | 30.000 |
| SSL Inspection Throughput | 34 Gbps |
| SSL Inspection CPS | 19.000 |
| SSL Inspection Concurrent Session | 5.200.000 |
| Application Control Throughput | 95 Gbps |
| CAPWAP Throughput | 57 Gbps |
| Virtual Domains | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 256 |
| Maximum Number of FortiAPs | 4096 / 2048 |
| Maximum Number of FortiTokens | 20.000 |
| Maximum Number of Registered FortiClients | 50.000 |
| High Availability Configurations | Active/Active, Active/Passive, Clustering |
Physical interfaces
| GE RJ45 Ports | 6 x 100 GE QSFP28/40 GE QSFP+ Slots |
| GE RJ45 WAN Ports | 2 x GE RJ45 Management Ports |
| GE SFP Slots | 32 x 25 SFP28/10 GE SFP+/GE SFP Slots |
| I/O ports | 1 USB Port, 1 Console Port |
| Storage | 2 x 2 TB SSD (for FG-3601E only) |
Dimensions & Enviroment
| Mounting | 2 RU |
| Dimensions Width x Depth x Height (inches) | 3.5 x 17.4 x 21.9 |
| Dimensions Height x Width x Length (mm) | 89 x 443 x 556 |
| Weight | 43.1 lbs (3600E) / 44.5 lbs (3601E) |
| Power supply | 100-240VAC |
| Power Consumption | 672W/977W |
| Heat Dissipation | 3334 BTU/h |
| Operating Temperature | 32-104 F |
| Storage Temperature | -31-158 F |
| Humidity | 10-90% non-condensing |
| Noise Level | 60 dBA |
| Operating Attitude | Up to 7400 ft (2250m) |
| Regulatory Compliance | FCC Part 15 Class A, C-Tick, VCCI, CE, UL/cUL, CB |
| Certifications | ICSA Labs: Firewall, IPSec, IPS, Antivirus, SSL-VPN, USGv6/IPv6 |
Wireless Specification (XG Wireless only)
Product Certifications
Documentation
Videos
