| MGMT1 | HA1 WAN1 1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 FortiGate 3500G |
|---|
| STATUS | 31 32 |
|---|
| SIGNED | ALARM |
|---|
| FIRMWARE | HA 3. 2x 25GE SFP28/10GE SFP+ WAN Slots PWR |
|---|
| USB | CONSOLE MGMT2 HA2 WAN2 2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 |
|---|
| SFP28 | QSFP28 QSFP-DD 4. 26x 25GE SFP28/10GE SFP+ Slots 1 2 3 4 5 6 5. 4x 100GE QSFP28/40GE QSFP+ Slots 6. 2x 400GE QSFP-DD/ 200GE QSFP56/ 100GE QSFP28/ 40GE QSFP+ Slots CAUTION/ATTENTION SHOCK HAZARD. DISCONNECT ALL POWER SOURCES. RISQUE D’ELECTROCUTION DEBRANCHES TOUTES LES SOURCES D’ALIMENTATION. |
|---|
| 注意: 要斷開電源, | 請將所有電源線從本機上拔下。 100-127 Vac, 13.5A Max, 50/60 Hz EACH 200-240 Vac, 7.5A Max, 50/60 Hz EACH |
|---|
| PWR1 | PWR2 SSD1 SSD2 |
|---|
| FAN1 | FAN2 FAN3 |
|---|
| NP7 | CP10 TPM 2RU 400/GE 2x AC 2x1.92TB Trusted Platform Module (TPM) The FortiGate 3500G Series features a dedicated module that hardens physical networking appliances by generating, storing, and authenticating cryptographic keys. Hardware-based security mechanisms protect against malicious software and phishing attacks. FortiSentry FortiSentry is an innovative out-of-band hardware module designed to |
|---|
| FortiGate 3500G Series | Data Sheet |
|---|
| FG-3500G | FG-3501G FG-3500G FG-3501G |
|---|
| Interfaces and Modules | Dimensions and Power |
|---|
| Hardware Accelerated 400GE QSFP-DD/ | 2 Height x Width x Length (inches) 3.5 x 17.4 x 20.8 200GE QSFP56/100GE QSFP28/ 40GE |
|---|
| QSFP+ Ports | Height x Width x Length (mm) 88.5 x 442.5 x 529.3 |
|---|
| Hardware Accelerated 100 GE QSFP28/ | 4 Weight 36.7 lbs (16.65 kg) 37 lbs (16.8 kg) 40 GE QSFP+ Slots |
|---|
| Form Factor | Rack Mount, 2 RU |
|---|
| Hardware Accelerated 25 GE SFP28/ | 30 (supports EIA/non-EIA standards) 10 GE SFP+ / GE SFP Slots |
|---|
| AC Power Supply | 100-240 VAC, 60-50 Hz 10GE/ GE RJ45 Management Ports 2 |
|---|
| AC Current (Maximum) | 12A@100V, 9A@240V |
|---|
| USB Ports (Client / Server) | 1 |
|---|
| 功耗 | 678 W / 973 W 688 W / 993 W |
|---|
| Console Port | 1 (Average / Maximum) |
|---|
| Onboard Storage | — 2x 1.92TB SSD Heat Dissipation 3318 BTU/h 3386 BTU/h |
|---|
| Trusted Platform Module (TPM) | Redundant Power Supplies Hot Swappable |
|---|
| Bluetooth Low Energy (BLE) | — Default dual AC PSU for 1+1 Redundancy |
|---|
| Signed Firmware Hardware Switch | Power Supply Efficiency Rating 80+ Compliant |
|---|
| FortiSentry | Operating Environment and Certifications |
|---|
| Included Transceivers | 2x SFP+ (SR 10 GE) Operating Temperature 32°F to 113°F (0°C to 45°C) System Performance — Enterprise Traffic Mix Storage Temperature -31°F to 158°F (-35°C to 70°C) |
|---|
| IPS Throughput 2 | 125 Gbps Humidity 5% to 90% non-condensing |
|---|
| NGFW Throughput | 2, 4 115 Gbps Noise Level 70.4 dBA |
|---|
| Threat Protection Throughput | 2, 5 105 Gbps Forced Airflow Front to Back |
|---|
| System Performance and Capacity | Operating Altitude Up to 10 000 ft (3048 m) |
|---|
| IPv4 Firewall Throughput | 595 / 590 / 420 Gbps Compliance FCC Part 15 Class A, ISED, CE, VCCI, PSE, (1518 / 512 / 64 byte, UDP) BSMI, ANATEL, UL/cUL |
|---|
| IPv6 Firewall Throughput | 595 / 590 / 420 Gbps Certifications USGv6/IPv6 (1518 / 512 / 86 byte, UDP) |
|---|
| Firewall Latency (64 byte, UDP) | 2.96 μs |
|---|
| Firewall Throughput (Packet per Second) | 630 Mpps |
|---|
| Concurrent Sessions (TCP) | 179 Million |
|---|
| New Sessions/Second (TCP) | 1.1 Million |
|---|
| Firewall Policies | 200 000 |
|---|
| IPsec VPN Throughput (512 byte) 1 | 163 Gbps |
|---|
| Gateway-to-Gateway IPsec VPN Tunnels | 40 000 |
|---|
| Client-to-Gateway IPsec VPN Tunnels | 200 000 |
|---|
| SSL-VPN Throughput | 9.8 Gbps |
|---|
| Concurrent SSL-VPN Users | 30 000 (Recommended Maximum, Tunnel Mode) |
|---|
| SSL Inspection Throughput | 112 Gbps (IPS, avg. HTTPS) 3 |
|---|
| SSL Inspection CPS (IPS, avg. HTTPS) 3 | 112 345 |
|---|
| SSL Inspection Concurrent Session | 18 Million (IPS, avg. HTTPS) 3 |
|---|
| Application Control Throughput | 197 Gbps (HTTP 64K) 2 |
|---|
| CAPWAP Throughput (HTTP 64K) | TBA |
|---|
| Virtual Domains (Default / Maximum) | 10 / 500 |
|---|
| Maximum Number of FortiSwitches | 300 Supported |
|---|
| Maximum Number of FortiAPs | 4096 / 2048 (Total / Tunnel) |
|---|
| Maximum Number of FortiTokens | 20 000 |
|---|
| Maximum Number of FortiClients | 50 000 |
|---|
| High Availability Configurations | Active-Active, Active-Passive, Clustering IPsec VPN performance test uses AES256-SHA256. 4 NGFW performance is measured with Firewall, IPS and Application Control enabled. IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured 5 Threat Protection performance is measured with Firewall, IPS, Application Control and |
|---|
| with Logging enabled. | Malware Protection enabled. SSL Inspection performance values use an average of HTTPS sessions of different cipher suites |
|---|
| Service | Enterprise Unified Threat Advanced Threat |
|---|
| Category | Service Offering A-la-carte Protection Protection Protection SD-WAN |
|---|
| FortiGuard | IPS — IPS, Malicious/Botnet URLs • • • • |
|---|
| Services | Anti-Malware Protection (AMP)—AV, Botnet Domains, Mobile • • • • Malware, Virus Outbreak Protection, Content Disarm and Reconstruct1, AI‑based Heurestic AV, FortiGate Cloud Sandbox URL, DNS and Video Filtering — URL, DNS and Video1 Filtering, • • • Malicious Certificate |
|---|
| Anti-Spam | • • |
|---|
| AI-based Inline Malware Prevention | • • |
|---|
| Data Loss Prevention (DLP) 2 | • • Attack Surface Security — IoT Device Detection, IoT • • Vulnerability Correlation and Virtual Patching, Security Rating, Outbreak Check OT Security—OT Device Detection, OT Vulnerability Correlation • and Virtual Patching, OT Application Control and IPS 2 |
|---|
| Application Control | --------------included with FortiCare Subscription-------------- Inline CASB 1 --------------included with FortiCare Subscription-------------- |
|---|
| SD-WAN | SD-WAN SLA Database • |
|---|
| SD-WAN Overlay Orchestration Service | • SD-WAN Connector for FortiSASE Secure Private Access • |
|---|
| FortiSASE Starter Kit for n* Users | 3 FortiGate Cloud One Year Cloud-based Log Retention • |
|---|
| FortiTelemetry Cloud | • |
|---|
| NOC and SOC | FortiConverter Service for One Time Configuration Conversion • • Managed FortiGate Service—Available 24x7, with Fortinet NOC • Experts Performing Device Setup, Network, And Policy Change Management FortiGate Cloud—Management, Analysis, and One Year Log • Retention |
|---|
| FortiManager Cloud | • |
|---|
| FortiAnalyzer Cloud | • FortiGuard SOCaaS—24x7 Cloud-Based Managed Log • Monitoring, Incident Triage, and SOC Escalation Service |
|---|
| Hardware | FortiCare Essentials Desktop |
|---|
| and Software | models only |
|---|
| FortiCare Premium | • • • • • |
|---|
| FortiCare Elite | • |
|---|
| Base | Device/OS Detection, GeoIPs, Trusted CA Certificates, Internet |
|---|
| Product | SKU Description |
|---|
| FortiGate 3500G | FG-3500G 2x 400 GE QSFP-DD slots, 4x 100 GE QSFP28 ports, and 30x 25 GE SFP28 slots (including 28x ports, 2x HA ports), 2x 10GE RJ45 Management Ports, SPU NP7 and CP10 hardware accelerated, and 2 AC power supplies. |
|---|
| FortiGate 3501G | FG-3501G 2x 400 GE QSFP-DD slots, 4x 100 GE QSFP28 ports, and 30x 25 GE SFP28 slots (including 28x ports, 2x HA ports), 2x 10GE RJ45 Management Ports, SPU NP7 and CP10 hardware accelerated, 2x 1.92TB SSD onboard storage, and 2 AC power supplies. |
|---|
| Rack Mount Sliding Rails | SP-FG3040B-RAIL Rack mount sliding rails for FG-1000C/-DC, FG-1200D, FG-1500D/DC, FG-3040B/‑DC, FG‑3140B/‑DC, FG-3240C/-DC, FG-3000D/-DC, FG-3100D/-DC, FG-3200D/-DC, FG‑3400/3401E, FG-3600E-DC/3601E, FG-3700D/-DC, FG-3700DX, FG-3810D/-DC, FG‑3950B/‑DC, FG3500G/3501G, and FG-4000F series. slots (connects to FN-TRAN-SFP+BD33, ordered separately). |
|---|
| FN‑TRAN-SFP+BD27, ordered separately) | slots (connects to FN-TRAN-SFP+BD27, ordered separately). with QSFP28 slots. www.fortinet.com |
|---|