Fortinet FortiGate 3001F-DC
High Performance with Flexibility
Click here to jump to more pricing!
Overview:
The FortiGate 3000F Series enables organizations to build security-driven networks that can weave security deep into their datacenter and across their hybrid IT architecture to protect any edge at any scale.
Powered by a rich set of AI/ML-based FortiGuard Services and an integrated security fabric platform, the FortiGate 3000F Series delivers coordinated, automated, end-to-end threat protection across all use cases.
The industry’s first integrated Zero Trust Network Access (ZTNA) enforcement within an NGFW solution, FortiGate 3000F automatically controls, verifies, and facilitates user access to applications delivering consistent convergence with a seamless user experience.
IPS | NGFW | Threat Protection | Interfaces |
36 Gbps | 34 Gbps | 33 Gbps | Multiple 10/1 GE RJ45, 100 GE QSFP28, 40 GE QSFP+, 25 GE SFP28, 10 GE SFP+ slots |
Highlights
- Gartner Magic Quadrant Leader for both Network Firewalls and SD-WAN.
- Security-Driven Networking FortiOS delivers converged networking and security.
- Unparalleled Performance with Fortinet’s patented / SPU / vSPU processors.
- Enterprise Security with consolidated AI / ML-powered FortiGuard Services.
- Hyperscale Security to secure any edge at any scale.
Hardware:
Hyperscale Firewall License
This perpetual license empowers organizations by unlocking further performance boosts. The Hyperscale Firewall License enables the hardware acceleration of CGNAT features by utilizing Fortinet’s patented SPU NP7. These features include hardware session setup, firewall session logging, and NAT.
Trusted Platform Module (TPM)
The FortiGate 3000F Series features a dedicated module that hardens physical networking appliances by generating, storing, and authenticating cryptographic keys. Hardware-based security mechanisms protect against malicious software and phishing attacks.
100 GE Connectivity for Network
High-speed connectivity is essential for network security segmentation at the core of data networks. The FortiGate 3000F series provides multiple 100 GE QSFP28 slots, simplifying network designs without relying on additional devices to bridge desired connectivity.
Specifications:
FG-3000F/FG-3000F-DC | FG-3001F/FG-3001F-DC | |
Interface and Modules | ||
Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 6 | |
Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 (include 2x HA Slots) | |
Hardware Accelerated 10 GE / 5 GE / 2.5 GE / GE RJ45 Ports | 16 | |
10GE/ GE RJ45 Management Ports | 2 | |
USB Ports (Client / Server) | 1/1 | |
Console Port | 1 | |
Onboard Storage | - | 2x 1TB SSD |
Trusted Platform Module (TPM) | Yes | |
Included Transceivers | 2x SFP+ (SR 10 GE) | |
System Performance — Enterprise Traffic Mix | ||
IPS Throughput | 36 Gbps | |
NGFW Throughput | 34 Gbps | |
Threat Protection Throughput | 33 Gbps | |
System Performance and Capacity | ||
IPv4 Firewall Throughput (1518 / 512 / 64 byte, UDP) | 397 / 389 / 221 Gbps | |
IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) | 397/ 389/ 221 Gbps | |
Firewall Latency (64 byte, UDP) | 3.92 μs | |
Firewall Throughput (Packet per Second) | 331.5 Mpps | |
Concurrent Sessions (TCP) | 70 Million / 230 Million | |
New Sessions/Second (TCP) | 870 000 / 3 Million | |
Firewall Policies | 200 000 | |
IPsec VPN Throughput (512 byte) | 105 Gbps | |
Gateway-to-Gateway IPsec VPN Tunnels | 40 000 | |
Client-to-Gateway IPsec VPN Tunnels | 200 000 | |
SSL-VPN Throughput | 11 Gbps | |
Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 30 000 | |
SSL Inspection Throughput (IPS, avg. HTTPS) | 29 Gbps | |
SSL Inspection CPS (IPS, avg. HTTPS) | 29 000 | |
SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 7.5 Million | |
Application Control Throughput (HTTP 64K) | 115 Gbps | |
CAPWAP Throughput (HTTP 64K) | 65 Gbps | |
Virtual Domains (Default / Maximum) | 10 / 500 | |
Maximum Number of FortiSwitches Supported | 300 | |
Maximum Number of FortiAPs (Total / Tunnel) | 4096 / 2048 | |
Maximum Number of FortiTokens | 20 000 | |
High Availability Configurations | Active-Active, Active-Passive, Clustering | |
Dimensions and Power | ||
Height x Width x Length (inches) | 3.5 x 17.44 x 21.89 | |
Height x Width x Length (mm) | 88.9 x 443 x 556 | |
Weight | 37.3 lbs (16.9 kg) | 38.2 lbs (17.3 kg) |
Form Factor (supports EIA/non-EIA standards) | Rack Mount, 2 RU | |
Power Consumption (Average / Maximum) | 425 W / 680 W | 420 W / 690 W |
AC Power Supply | 100–240V AC, 50/60 Hz | |
AC Current (Maximum) | 12A@100V, 9A@240V | |
DC Power Supply | 48-60VDC | |
DC Current (Maximum) | 12A@100V, 9A@240V | |
Heat Dissipation | 2321 BTU/h | 2356 BTU/h |
Redundant Power Supplies (Hot Swappable) | Yes (Default dual AC PSU for 1+1 Redundancy) |
|
Power Supply Efficiency Rating | 80Plus Compliant | |
Operating Environment and Certifications | ||
Operating Temperature | 32°–104°F (0°–40°C) | |
Storage Temperature | -31°–158°F (-35°–70°C) | |
Humidity | 5% to 90% non-condensing | |
Noise Level | 69 dBA | |
Forced Airflow | Front to Back | |
Operating Altitude | Up to 10 000 ft (3048 m) | |
Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | |
Certifications | USGv6/IPv6 |
Documentation:
Download the FortiGate 3000F Series Data Sheet (PDF).
Pricing Notes:
- All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
- Hardware plus ASE FortiCare and FortiGuard 360 Protection
Hardware unit, 24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, 360 Services Bundle (SD-WAN Orchestrator, SD-WAN Cloud Assisted Monitoring, SD-WAN Overlay Controller VPN, FortiManager Cloud, FortiAnalyzer Cloud, Fortinet SOCaaS, IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security and FortiConverter Service) plus term of contract - Hardware plus 24x7 FortiCare and FortiGuard Enterprise Protection
Hardware Unit, 24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) plus term of contract - Hardware plus 24x7 FortiCare and FortiGuard Unified Threat Protection (UTP)
Hardware Unit, 24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) plus term of contract - 360 Protection (SD-WAN Orchestrator, SD-WAN Cloud Monitoring, FMG/FAZ Cloud, IPAM, IPS, AMP, App Ctrl, Web & Video Filtering, AS, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and ASE FortiCare)
24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, 360 Services Bundle (SD-WAN Orchestrator, SD-WAN Cloud Assisted Monitoring, SD-WAN Overlay Controller VPN, FortiManager Cloud, FortiAnalyzer Cloud, Fortinet SOCaaS, IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security and FortiConverter Service) - Enterprise Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and 24x7 FortiCare)
24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) - Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam Service, and 24x7 FortiCare)
24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) - Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and 24x7 FortiCare)
24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control) - 24x7 FortiCare Contract
24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control - ASE FortiCare (24x7 plus Advanced Services Ticket Handling)
24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control. - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.