| MGMT1 | 1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 HA1 31 33 35 2. 2 x 10 GE / GE RJ45 FortiGate 3000F STATUS ALARM Management Ports POWER |
|---|
| USB | CONSOLE MGMT2 2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 HA2 32 34 36 10G SFP+/SFP28 QSFP28 3. 16 x 10 GE / 5 GE / 2.5 GE / 1 2 3 4 5 6 GE RJ45 Ports 4. 14 x 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots |
|---|
| SSD2 | CAUTION SSD1 ATTENTION SHOCK HAZARD.DISCONNECT ALL POWER SOURCES. 5. 2 x 25 GE SFP28 / 10 GE SFP+ / GE SFP HA RISQUE D’ÉLECTROCUTION. DÉBRANCHEZ TOUTES LES SOURCES D’ALIMENTATION. |
|---|
| PWR1 | PWR2 Slots 6. 6 x 100 GE QSFP28 / |
|---|
| FAN1 | FAN2 FAN3 40 GE QSFP+ Slots |
|---|
| NP7 | CP9 TPM 2RU 100/40/25/10/GE DUAL AC Hyperscale FortiCarrier 2x960GB Hyperscale Firewall License This perpetual license empowers organizations by unlocking further performance boosts. The Hyperscale Firewall License enables the hardware acceleration of CGNAT features by utilizing Fortinet’s patented SPU NP7. These features include hardware session setup, firewall session logging, and NAT. Trusted P |
|---|
| FortiGate 3000F Series | Data Sheet |
|---|
| FG-3000F | FG-3001F FG-3000F FG-3001F |
|---|
| FG-3000F-DC | FG-3001F-DC FG-3000F-DC FG-3001F-DC |
|---|
| Interfaces and Modules | Dimensions and Power |
|---|
| Hardware Accelerated 100 GE QSFP28 / | 6 Height x Width x Length (inches) 3.5 x 17.44 x 21.89 40 GE QSFP+ Slots |
|---|
| Height x Width x Length (mm) | 88.9 x 443 x 556 |
|---|
| Hardware Accelerated 25 GE SFP28 / | 16 (include 2x HA Slots) 10 GE SFP+ / GE SFP Slots Weight 37.3 lbs (16.9 kg) 38.2 lbs (17.3 kg) |
|---|
| Hardware Accelerated 10 GE / 5 GE / 2.5 | 16 Form Factor Rack Mount, 2 RU |
|---|
| GE / GE RJ45 Ports | (supports EIA/non-EIA standards) 10GE/ GE RJ45 Management Ports 2 Power Consumption 425 W / 680 W 420 W / 690 W (Average / Maximum) |
|---|
| USB Ports (Client / Server) | 1/1 |
|---|
| AC Power Supply | 100–240V AC, 50/60 Hz |
|---|
| Console Port | 1 |
|---|
| AC Current (Maximum) | 12A@100V, 9A@240V |
|---|
| Onboard Storage | — 2x 960GB SSD |
|---|
| DC Power Supply | 48-60VDC |
|---|
| Trusted Platform Module (TPM) | |
|---|
| DC Current (Maximum) | 15A@48V, 9A@240V |
|---|
| Bluetooth Low Energy (BLE) | — |
|---|
| Heat Dissipation | 2321 BTU/h 2356 BTU/h |
|---|
| Signed Firmware Hardware Switch | — |
|---|
| Redundant Power Supplies | |
|---|
| Included Transceivers | 2x SFP+ (SR 10 GE) (Hot Swappable) (Default dual AC PSU for 1+1 Redundancy) System Performance — Enterprise Traffic Mix Power Supply Efficiency Rating 80Plus Compliant |
|---|
| IPS Throughput 2 | 36 Gbps Operating Environment and Certifications |
|---|
| NGFW Throughput 2, 4 | 34 Gbps Operating Temperature 32°F to 104°F (0°C to 40°C) |
|---|
| Threat Protection Throughput 2, 5 | 33 Gbps Storage Temperature -31°F to 158°F (-35°C to 70°C) |
|---|
| System Performance and Capacity | Humidity 5% to 90% non-condensing |
|---|
| IPv4 Firewall Throughput | 397 / 389 / 221 Gbps Noise Level 69 dBA (1518 / 512 / 64 byte, UDP) |
|---|
| Forced Airflow | Front to Back |
|---|
| IPv6 Firewall Throughput | 397/ 389/ 221 Gbps (1518 / 512 / 86 byte, UDP) Operating Altitude Up to 10 000 ft (3048 m) |
|---|
| Firewall Latency (64 byte, UDP) | 3.92 μs Compliance FCC Part 15 Class A, RCM, VCCI, |
|---|
| Firewall Throughput (Packet per Second) | 331.5 Mpps CE, UL/cUL, CB |
|---|
| Concurrent Sessions (TCP) | 70 Million / 230 Million* Certifications USGv6/IPv6 |
|---|
| New Sessions/Second (TCP) | 870 000 / 3 Million* * Requires Hyperscale Firewall License |
|---|
| Firewall Policies | 200 000 |
|---|
| IPsec VPN Throughput (512 byte) 1 | 105 Gbps |
|---|
| Gateway-to-Gateway IPsec VPN Tunnels | 40 000 |
|---|
| Client-to-Gateway IPsec VPN Tunnels | 200 000 |
|---|
| SSL-VPN Throughput | 11 Gbps |
|---|
| Concurrent SSL-VPN Users | 30 000 (Recommended Maximum, Tunnel Mode) |
|---|
| SSL Inspection Throughput | 29 Gbps (IPS, avg. HTTPS) 3 |
|---|
| SSL Inspection CPS (IPS, avg. HTTPS) 3 | 29 000 |
|---|
| SSL Inspection Concurrent Session | 7.5 Million (IPS, avg. HTTPS) 3 |
|---|
| Application Control Throughput | 115 Gbps (HTTP 64K) 2 |
|---|
| CAPWAP Throughput (HTTP 64K) | 65 Gbps |
|---|
| Virtual Domains (Default / Maximum) | 10 / 500 |
|---|
| Maximum Number of FortiSwitches | 300 Supported |
|---|
| Maximum Number of FortiAPs | 4096 / 2048 (Total / Tunnel) |
|---|
| Maximum Number of FortiTokens | 20 000 |
|---|
| High Availability Configurations | Active-Active, Active-Passive, Clustering IPsec VPN performance test uses AES256-SHA256. 4 NGFW performance is measured with Firewall, IPS and Application Control enabled. IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured 5 Threat Protection performance is measured with Firewall, IPS, Application Control and |
|---|
| with Logging enabled. | Malware Protection enabled. SSL Inspection performance values use an average of HTTPS sessions of different cipher suites. |
|---|
| Service | Enterprise Unified Threat Advanced Threat |
|---|
| Category | Service Offering A-la-carte Protection Protection Protection SD-WAN |
|---|
| FortiGuard | IPS — IPS, Malicious/Botnet URLs • • • • |
|---|
| Services | Anti-Malware Protection (AMP)—AV, Botnet Domains, Mobile • • • • Malware, Virus Outbreak Protection, Content Disarm and Reconstruct1, AI‑based Heurestic AV, FortiGate Cloud Sandbox URL, DNS and Video Filtering — URL, DNS and Video1 Filtering, • • • Malicious Certificate |
|---|
| Anti-Spam | • • |
|---|
| AI-based Inline Malware Prevention | • • |
|---|
| Data Loss Prevention (DLP) 2 | • • Attack Surface Security — IoT Device Detection, IoT • • Vulnerability Correlation and Virtual Patching, Security Rating, Outbreak Check OT Security—OT Device Detection, OT Vulnerability Correlation • and Virtual Patching, OT Application Control and IPS 2 |
|---|
| Application Control | --------------included with FortiCare Subscription-------------- Inline CASB 1 --------------included with FortiCare Subscription-------------- |
|---|
| SD-WAN | SD-WAN SLA Database • |
|---|
| SD-WAN Overlay Orchestration Service | • SD-WAN Connector for FortiSASE Secure Private Access • |
|---|
| FortiSASE Starter Kit for n* Users | 3 FortiGate Cloud One Year Cloud-based Log Retention • |
|---|
| FortiTelemetry Cloud | • |
|---|
| NOC and | FortiConverter Service for One Time Configuration Conversion • • Managed FortiGate Service—Available 24x7, with Fortinet NOC • Experts Performing Device Setup, Network, And Policy Change Management FortiGate Cloud—Management, Analysis, and One Year Log • Retention |
|---|
| FortiManager Cloud | • |
|---|
| FortiAnalyzer Cloud | • FortiGuard SOCaaS—24x7 Cloud-Based Managed Log • Monitoring, Incident Triage, and SOC Escalation Service |
|---|
| Hardware | FortiCare Essentials Desktop |
|---|
| and Software | models only |
|---|
| FortiCare Premium | • • • • • |
|---|
| FortiCare Elite | • |
|---|
| Base | Device/OS Detection, GeoIPs, Trusted CA Certificates, Internet |
|---|
| Product | SKU Description |
|---|
| FortiGate 3000F | FG-3000F 6x 100GE QSFP28 slots, 16x 10GE SFP+/25GE SFP28 slots (including 14x ports, 2x HA ports), 18x 10G Base-T (including 2x MGMT ports), SPU NP7 and CP9 hardware accelerated, and 2 AC power supplies. |
|---|
| FortiGate 3000F-DC | FG-3000F-DC 6x 100GE QSFP28 slots, 16x 10GE SFP+/25GE SFP28 slots (including 14x ports, 2x HA ports), 18x 10G Base-T (including 2x MGMT ports), SPU NP7 and CP9 hardware accelerated, and 2 DC power supplies. |
|---|
| FortiGate 3001F | FG-3001F 6x 100GE QSFP28 slots, 16x 10GE SFP+/25GE SFP28 slots (including 14x ports, 2x HA ports), 18x 10G Base-T (including 2x MGMT ports), SPU NP7 and CP9 hardware accelerated, 2x 960GB SSD onboard storage, and 2 AC power supplies. |
|---|
| FortiGate 3001F-DC | FG-3001F-DC 6x 100GE QSFP28 slots, 16x 10GE SFP+/25GE SFP28 slots (including 14x ports, 2x HA ports), 18x 10G Base-T (including 2x MGMT ports), SPU NP7 and CP9 hardware accelerated, 2x 960GB SSD onboard storage, and 2 DC power supplies. |
|---|
| Optional Accessories/Spares | SKU Description |
|---|
| Rack Mount Sliding Rails | SP-FG3040B-RAIL Rack mount sliding rails for FG-1000C/-DC, FG-1200D, FG-1500D/DC, FG-3040B/-DC, FG‑3140B/‑DC, FG-3240C/-DC, FG-3000D/-DC, FG-3000/ 3001F, FG-3100D/-DC, FG-3200D/-DC, FG-3400/3401E, FG3600/3601E, FG-3700D/-DC, FG-3700DX, FG-3810D/-DC and FG-3950B/-DC. |
|---|
| Transceiver Modules | SKU Description slots (connects to FN-TRAN-SFP+BD33, ordered separately). |
|---|
| TRAN-SFP+BD27, ordered separately) | slots (connects to FN-TRAN-SFP+BD27, ordered separately). |
|---|
| Long Range | slots. |
|---|
| Extended Range | slots. |
|---|
| Cables | SKU Description www.fortinet.com |
|---|
