| MGMT1 | WAN1 1 3 5 7 9 11 13 15 17 19 21 23 25 27 HA1 29 31 33 Port FortiGate 3000G 2. 2x 10GE/5GE/2.5GE/GE RJ45 WAN Ports STATUS |
|---|
| SIGNED | ALARM |
|---|
| FIRMWARE | HA PWR |
|---|
| USB | CONSOLE MGMT2 WAN2 2 4 6 8 10 12 14 16 18 20 22 24 26 28 HA2 30 32 34 10G SFP28 QSFP28 3. 14x 10GE/5GE/2.5GE/GE RJ45 Ports 3 4. 16x 25GE SFP28/10GE SFP+/GE SFP Slots 1 2 4 5 5. 6x 100GE QSFP28/40GE QSFP+ Slots CAUTION/ATTENTION SHOCK HAZARD. DISCONNECT ALL POWER SOURCES. RISQUE D’ELECTROCUTION DEBRANCHES TOUTES LES SOURCES D’ALIMENTATION. |
|---|
| 注意: 要斷開電源, | 請將所有電源線從本機上拔下。 100-127 Vac, 13.5A Max, 50/60 Hz EACH 200-240 Vac, 7.5A Max, 50/60 Hz EACH |
|---|
| PWR1 | PWR2 SSD1 SSD2 |
|---|
| FAN1 | FAN2 FAN3 |
|---|
| NP7 | CP10 TPM 2RU 100/GE 2x AC 2x960GB Hyperscale Firewall License This perpetual license empowers organizations by unlocking further performance boosts. The Hyperscale Firewall License enables the hardware acceleration of CGNAT features by utilizing Fortinet’s patented SPU NP7. These features include hardware session setup, firewall session logging, and NAT. Trusted Platform Module (TPM) The FortiGate |
|---|
| FortiGate 3000G Series | Data Sheet |
|---|
| FG-3000G | FG-3001G FG-3000G FG-3001G |
|---|
| Interfaces and Modules | Dimensions and Power |
|---|
| Hardware Accelerated 100 GE QSFP28 / | 6 Height x Width x Length (inches) 3.48 x 17.20 x 19.52 40 GE QSFP+ Slots |
|---|
| Height x Width x Length (mm) | 88.5 x 437 x 495.75 |
|---|
| Hardware Accelerated 25 GE SFP28 / 10 | 16 |
|---|
| GE SFP+ / GE SFP Slots | Weight 33.73 lbs (15.3 kg) 34.1 lbs (15.45 kg) |
|---|
| Hardware Accelerated 10 GE / 5 GE / 2.5 | 16 (include 2x WAN Ports) Form Factor Rack Mount, 2 RU |
|---|
| GE / GE RJ45 Ports | (supports EIA/non-EIA standards) 10GE/ GE RJ45 Management Ports 2 AC Power Supply 100-240 VAC, 60-50 Hz |
|---|
| USB Port | 1 AC Current (Maximum) 12A@100V, 9A@240V |
|---|
| Console Port | 1 Power Consumption 550 W / 808 W 560 W / 828 W (Average / Maximum) |
|---|
| Onboard Storage | 0 2x 960GB SSD |
|---|
| Heat Dissipation | 2755 BTU/h 2823 BTU/h |
|---|
| Trusted Platform Module (TPM) | |
|---|
| Redundant Power Supplies | Hot Swappable, 2+2 |
|---|
| Bluetooth Low Energy (BLE) | — |
|---|
| Power Supply Efficiency Rating | 80+ Platinum |
|---|
| Signed Firmware Hardware Switch | Operating Environment and Certifications |
|---|
| FortiSentry | |
|---|
| 工作溫度 | 32°F to 113°F (0°C to 45°C) |
|---|
| Included Transceivers | 2x SFP+ (SR 10 GE) |
|---|
| 儲存溫度 | -31°F to 158°F (-35°C to 70°C) System Performance — Enterprise Traffic Mix |
|---|
| Humidity | 5% to 90% non-condensing |
|---|
| IPS Throughput 2 | 90 Gbps |
|---|
| Noise Level | 70.4 dBA |
|---|
| NGFW Throughput 2, 4 | 85 Gbps |
|---|
| Forced Airflow | Front to Back |
|---|
| Threat Protection Throughput 2, 5 | 80 Gbps |
|---|
| Operating Altitude | Up to 10 000 ft (3048 m) System Performance and Capacity |
|---|
| Compliance | FCC Part 15 Class A, ISED, CE, VCCI, PSE, |
|---|
| IPv4 Firewall Throughput | 397 / 394 / 234 Gbps BSMI, ANATEL, UL/cUL (1518 / 512 / 64 byte, UDP) |
|---|
| Certifications | USGv6/IPv6 |
|---|
| IPv6 Firewall Throughput | 397 / 394 / 234 Gbps (1518 / 512 / 86 byte, UDP) * Requires Hyperscale Firewall License |
|---|
| Firewall Latency (64 byte, UDP) | 3.7 μs |
|---|
| Firewall Throughput (Packet per Second) | 351 Mpps |
|---|
| Concurrent Sessions (TCP) | 88 Million / 230 Million* |
|---|
| New Sessions/Second (TCP) | 1.1 Million / 3 Million* |
|---|
| Firewall Policies | 200 000 |
|---|
| IPsec VPN Throughput (512 byte) 1 | 105 Gbps |
|---|
| Gateway-to-Gateway IPsec VPN Tunnels | 40 000 |
|---|
| Client-to-Gateway IPsec VPN Tunnels | 200 000 |
|---|
| SSL-VPN Throughput | 9 Gbps |
|---|
| Concurrent SSL-VPN Users | 30 000 (Recommended Maximum, Tunnel Mode) |
|---|
| SSL Inspection Throughput | 75 Gbps (IPS, avg. HTTPS) 3 |
|---|
| SSL Inspection CPS (IPS, avg. HTTPS) 3 | 50 800 |
|---|
| SSL Inspection Concurrent Session | 9.9 Million (IPS, avg. HTTPS) 3 |
|---|
| Application Control Throughput | 159 Gbps (HTTP 64K) 2 |
|---|
| CAPWAP Throughput (HTTP 64K) | 148 Gbps |
|---|
| Virtual Domains (Default / Maximum) | 10 / 500 |
|---|
| Maximum Number of FortiSwitches | 300 Supported |
|---|
| Maximum Number of FortiAPs | 4096 / 2048 (Total / Tunnel) |
|---|
| Maximum Number of FortiTokens | 20 000 |
|---|
| Maximum Number of FortiClients | 50 000 |
|---|
| High Availability Configurations | Active-Active, Active-Passive, Clustering IPsec VPN performance test uses AES256-SHA256. 4 NGFW performance is measured with Firewall, IPS and Application Control enabled. IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured 5 Threat Protection performance is measured with Firewall, IPS, Application Control and |
|---|
| with Logging enabled. | Malware Protection enabled. SSL Inspection performance values use an average of HTTPS sessions of different cipher suites. |
|---|
| Service | Enterprise Unified Threat Advanced Threat |
|---|
| Category | Service Offering A-la-carte Protection Protection Protection SD-WAN |
|---|
| FortiGuard | IPS — IPS, Malicious/Botnet URLs • • • • |
|---|
| Services | Anti-Malware Protection (AMP)—AV, Botnet Domains, Mobile • • • • Malware, Virus Outbreak Protection, Content Disarm and Reconstruct1, AI‑based Heurestic AV, FortiGate Cloud Sandbox URL, DNS and Video Filtering — URL, DNS and Video1 Filtering, • • • Malicious Certificate |
|---|
| Anti-Spam | • • |
|---|
| AI-based Inline Malware Prevention | • • |
|---|
| Data Loss Prevention (DLP) 2 | • • Attack Surface Security — IoT Device Detection, IoT • • Vulnerability Correlation and Virtual Patching, Security Rating, Outbreak Check OT Security—OT Device Detection, OT Vulnerability Correlation • and Virtual Patching, OT Application Control and IPS 2 |
|---|
| Application Control | --------------included with FortiCare Subscription-------------- Inline CASB 1 --------------included with FortiCare Subscription-------------- |
|---|
| SD-WAN | SD-WAN SLA Database • |
|---|
| SD-WAN Overlay Orchestration Service | • SD-WAN Connector for FortiSASE Secure Private Access • |
|---|
| FortiSASE Starter Kit for n* Users | 3 FortiGate Cloud One Year Cloud-based Log Retention • |
|---|
| FortiTelemetry Cloud | • |
|---|
| NOC and | FortiConverter Service for One Time Configuration Conversion • • Managed FortiGate Service—Available 24x7, with Fortinet NOC • Experts Performing Device Setup, Network, And Policy Change Management FortiGate Cloud—Management, Analysis, and One Year Log • Retention |
|---|
| FortiManager Cloud | • |
|---|
| FortiAnalyzer Cloud | • FortiGuard SOCaaS—24x7 Cloud-Based Managed Log • Monitoring, Incident Triage, and SOC Escalation Service |
|---|
| Hardware | FortiCare Essentials Desktop |
|---|
| and Software | models only |
|---|
| FortiCare Premium | • • • • • |
|---|
| FortiCare Elite | • |
|---|
| Base | Device/OS Detection, GeoIPs, Trusted CA Certificates, Internet |
|---|
| Product | SKU Description |
|---|
| FortiGate 3000G | FG-3000G 6x 100GE QSFP28 slots, 16x 10GE SFP+/25GE SFP28 slots (including 14x ports, 2x HA ports), 18x 10G Base-T (including 2x MGMT ports), SPU NP7 and CP10 hardware accelerated, and 2 AC power supplies. |
|---|
| FortiGate 3001G | FG-3001G 6x 100GE QSFP28 slots, 16x 10GE SFP+/25GE SFP28 slots (including 14x ports, 2x HA ports), 18x 10G Base-T (including 2x MGMT ports), SPU NP7 and CP10 hardware accelerated, 2TB (2x 960 GB) SSD onboard storage, and 2 AC power supplies. |
|---|
| Hyperscale Firewall License | Coming Soon Hyperscale Firewall License for FortiGate FG-3000G/FG4201F Series for hardware session setup acceleration and logging. |
|---|
| Rack Mount Sliding Rails | SP-FG3040B-RAIL Rack mount sliding rails for FG-1000C/-DC, FG-1200D, FG-1500D/DC, FG-3040B/‑DC, FG‑3140B/‑DC, FG-3240C/-DC, FG-3000D/-DC, FG-3100D/-DC, FG-3200D/-DC, FG‑3400/3401E, FG-3600E-DC/3601E, FG-3700D/-DC, FG-3700DX, FG-3810D/-DC, FG‑3950B/‑DC, FG3000G/3001G, and FG-4000F series. slots (connects to FN-TRAN-SFP+BD33, ordered separately). |
|---|
| FN‑TRAN-SFP+BD27, ordered separately) | slots (connects to FN-TRAN-SFP+BD27, ordered separately). with QSFP28 slots. www.fortinet.com |
|---|