| MGMT1 | HA1 1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 FortiGate 3500F STATUS 2. 2 x 25 GE SFP28 / ALARM POWER |
|---|
| USB | CONSOLE MGMT2 HA2 2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 10 GE SFP+ HA Slots |
|---|
| SFP+/SFP28 | QSFP28 3. 30 x 25 GE SFP28 / 1 2 3 4 10 GE SFP+ / GE SFP Slots 4. 6 x 100 GE QSFP28 / 40 GE QSFP+ Slots |
|---|
| POWER1 | POWER2 100-240 VAC 7-3A 50/60 Hz CAUTION/ATTENTION SHOCK HAZARD. DISCONNECT ALL POWER SOURCES. RISQUE D’ÉLECTROCUTION. DÉBRANCHEZ TOUTES LES |
|---|
| FAN1 | FAN2 FAN3 FAN4 SOURCES D’ALIMENTATION. |
|---|
| NP7 | CP9 TPM 2RU 100/40/25/10/GE DUAL AC Hyperscale FortiCarrier 2x1.92TB Hyperscale Firewall License This perpetual license empowers organizations by unlocking further performance boosts. The Hyperscale Firewall License enables the hardware acceleration of CGNAT features by utilizing Fortinet’s patented SPU NP7. These features include hardware session setup, firewall session logging, and NAT. Trusted |
|---|
| FortiGate 3500F Series | Data Sheet |
|---|
| FG-3500F | FG-3501F FG-3500F FG-3501F |
|---|
| Interfaces and Modules | Dimensions and Power |
|---|
| Hardware Accelerated 100 GE QSFP28 / | 6 Height x Width x Length (inches) 3.5 x 17.4 x 21.9 40 GE QSFP+ Slots |
|---|
| Height x Width x Length (mm) | 89 x 443 x 556 |
|---|
| Hardware Accelerated 25 GE SFP28 / | 32 10 GE SFP+ / GE SFP Slots Weight 43.8 lbs (19.9 kg) 45.3 lbs (20.6 kg) 10GE/ GE RJ45 Management Ports 2 Form Factor Rack Mount, 2 RU (supports EIA/non-EIA standards) |
|---|
| USB Ports (Client / Server) | 1/1 |
|---|
| AC Power Supply | 100–240V AC, 50/60 Hz |
|---|
| Console Port | 1 |
|---|
| 功耗 | 760 W / 1174 W 765 W / 1181 W |
|---|
| Onboard Storage | — 2x 1.92TB SSD (Average / Maximum) |
|---|
| Trusted Platform Module (TPM) | AC Current (Maximum) 12A@120V, 9A@240V |
|---|
| Bluetooth Low Energy (BLE) | — Heat Dissipation 4006 BTU/h 4030 BTU/h |
|---|
| Signed Firmware Hardware Switch | — Redundant Power Supplies (Hot Swappable) (Default dual AC PSU for 1+1 Redundancy) |
|---|
| Included Transceivers | 2x SFP+ (SR 10 GE) |
|---|
| Power Supply Efficiency Rating | 80Plus Compliant System Performance — Enterprise Traffic Mix |
|---|
| IPS Throughput | 2 72 Gbps Operating Environment and Certifications |
|---|
| NGFW Throughput 2, 4 | 65 Gbps Operating Temperature 32°F to 104°F (0°C to 40°C) |
|---|
| Threat Protection Throughput 2, 5 | 63 Gbps Storage Temperature -31°F to 158°F (-35°C to 70°C) |
|---|
| Humidity | 20% to 90% non-condensing System Performance and Capacity |
|---|
| Noise Level | 53.5 dBA |
|---|
| IPv4 Firewall Throughput | 595 / 590 / 420 Gbps (1518 / 512 / 64 byte, UDP) Forced Airflow Front to Back |
|---|
| IPv6 Firewall Throughput | 595 / 590 / 420 Gbps Operating Altitude Up to 10 000 ft (3048 m) (1518 / 512 / 86 byte, UDP) |
|---|
| Compliance | FCC Part 15 Class A, RCM, VCCI, |
|---|
| Firewall Latency (64 byte, UDP) | 2.98 μs CE, UL/cUL, CB |
|---|
| Firewall Throughput (Packet per Second) | 630 Mpps Certifications USGv6/IPv6 |
|---|
| Concurrent Sessions (TCP) | 140 Million / 348 Million* |
|---|
| New Sessions/Second (TCP) | 1 Million / 5 Million* *Requires Hyperscale Firewall License |
|---|
| Firewall Policies | 200 000 |
|---|
| IPsec VPN Throughput (512 byte) 1 | 165 Gbps |
|---|
| Gateway-to-Gateway IPsec VPN Tunnels | 40 000 |
|---|
| Client-to-Gateway IPsec VPN Tunnels | 200 000 |
|---|
| SSL-VPN Throughput | 16 Gbps |
|---|
| Concurrent SSL-VPN Users | 30 000 (Recommended Maximum, Tunnel Mode) |
|---|
| SSL Inspection Throughput | 63 Gbps (IPS, avg. HTTPS) 3 |
|---|
| SSL Inspection CPS (IPS, avg. HTTPS) 3 | 60 000 |
|---|
| SSL Inspection Concurrent Session | 15 Million (IPS, avg. HTTPS) 3 |
|---|
| Application Control Throughput | 135 Gbps (HTTP 64K) 2 |
|---|
| CAPWAP Throughput (HTTP 64K) | 65 Gbps |
|---|
| Virtual Domains (Default / Maximum) | 10 / 500 |
|---|
| Maximum Number of FortiSwitches | 300 Supported |
|---|
| Maximum Number of FortiAPs | 4096 / 2048 (Total / Tunnel) |
|---|
| Maximum Number of FortiTokens | 20 000 |
|---|
| High Availability Configurations | Active-Active, Active-Passive, Clustering IPsec VPN performance test uses AES256-SHA256. 4 NGFW performance is measured with Firewall, IPS and Application Control enabled. IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured 5 Threat Protection performance is measured with Firewall, IPS, Application Control and |
|---|
| with Logging enabled. | Malware Protection enabled. SSL Inspection performance values use an average of HTTPS sessions of different cipher suites. |
|---|
| Service | Enterprise Unified Threat Advanced Threat |
|---|
| Category | Service Offering A-la-carte Protection Protection Protection SD-WAN |
|---|
| FortiGuard | IPS — IPS, Malicious/Botnet URLs • • • • |
|---|
| Services | Anti-Malware Protection (AMP)—AV, Botnet Domains, Mobile • • • • Malware, Virus Outbreak Protection, Content Disarm and Reconstruct1, AI‑based Heurestic AV, FortiGate Cloud Sandbox URL, DNS and Video Filtering — URL, DNS and Video1 Filtering, • • • Malicious Certificate |
|---|
| Anti-Spam | • • |
|---|
| AI-based Inline Malware Prevention | • • |
|---|
| Data Loss Prevention (DLP) 2 | • • Attack Surface Security — IoT Device Detection, IoT • • Vulnerability Correlation and Virtual Patching, Security Rating, Outbreak Check OT Security—OT Device Detection, OT Vulnerability Correlation • and Virtual Patching, OT Application Control and IPS 2 |
|---|
| Application Control | --------------included with FortiCare Subscription-------------- Inline CASB 1 --------------included with FortiCare Subscription-------------- |
|---|
| SD-WAN | SD-WAN SLA Database • |
|---|
| SD-WAN Overlay Orchestration Service | • SD-WAN Connector for FortiSASE Secure Private Access • |
|---|
| FortiSASE Starter Kit for n* Users | 3 FortiGate Cloud One Year Cloud-based Log Retention • |
|---|
| FortiTelemetry Cloud | • |
|---|
| NOC and | FortiConverter Service for One Time Configuration Conversion • • Managed FortiGate Service—Available 24x7, with Fortinet NOC • Experts Performing Device Setup, Network, And Policy Change Management FortiGate Cloud—Management, Analysis, and One Year Log • Retention |
|---|
| FortiManager Cloud | • |
|---|
| FortiAnalyzer Cloud | • FortiGuard SOCaaS—24x7 Cloud-Based Managed Log • Monitoring, Incident Triage, and SOC Escalation Service |
|---|
| Hardware | FortiCare Essentials Desktop |
|---|
| and Software | models only |
|---|
| FortiCare Premium | • • • • • |
|---|
| FortiCare Elite | • |
|---|
| Base | Device/OS Detection, GeoIPs, Trusted CA Certificates, Internet |
|---|
| Product | SKU Description |
|---|
| FortiGate 3500F | FG-3500F 6x 100GE/ 40GE QSFP28 slots and 32x 25GE/ 10GE SFP28 slots, 2x 10GE RJ45 Management Ports, SPU NP7 and CP9 hardware accelerated, and 2 AC power supplies. |
|---|
| FortiGate 3501F | FG-3501F 6x 100GE/ 40GE QSFP28 slots and 32x 25GE/ 10GE SFP28 slots, 2x 10GE RJ45 Management Ports, SPU NP7 and CP9 hardware accelerated, 2x 1.92TB TB SSD onboard storage, and 2 AC power supplies. |
|---|
| Optional Accessories/Spares | SKU Description |
|---|
| Rack Mount Sliding Rails | SP-FG3040B-RAIL Rack mount sliding rails for FG-1000C/-DC, FG-1200D, FG-1500D/DC, FG-3040B/‑DC, FG‑3140B/-DC, FG-3240C/-DC, FG-3000D/-DC, FG-3100D/-DC, FG-3200D/-DC, FG‑3400/3401E, FG-3600/3601E, FG-3700D/-DC, FG-3700DX, FG-3810D/-DC and FG‑3950B/‑DC. |
|---|
| Transceiver Modules | SKU Description Slots. |
|---|
| Range | slots. with QSFP28 slots. |
|---|
| Cables | SKU Description www.fortinet.com |
|---|
