Fortinet FortiGate 4201F
Secure SD-WAN Unified Threat Management

Click here to jump to more pricing!

Overview:

The FortiGate 4200F series NGFW delivers high speed networking, increased scalability, and optimized performance features. Enterprises and service providers using the FortiGate NGFW can manage all of their security risks with the industry’s best-of-breed IPS, SSL inspection, and threat protection. The FortiGate 4200F series can be deployed at the enterprise edge, the hybrid and hyperscale data center core, and across internal segments. The multiple high-speed interfaces, high port density, superior security efficacy, and high throughput of this series keeps your network connected and secure.

Security

• Prevents volumetric attacks with HW accelerated DDoS and Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement
• Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic environments
• Prevents and detects against known and unknown attacks using continuous threat intelligence supplied by AI powered FortiGuard Labs security services

Performance

• Provides security for very high throughput flows known as Elephant flows
• Delivers the industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology
• Provides industry-leading performance and protection for SSL encrypted traffic
• Handles large amount of event-based connections burst

Certification

• Independently tested and validated for industry-best security effectiveness and performance
• Received unparalleled third-party certifications from NSS Labs

Networking

• Enables scalable segmentation powered by HW accelerated VXLAN technologies
• Delivers advanced networking capabilities that seamlessly integrate with advanced layer 7 security and virtual domains (VDOMs) to offer extensive deployment flexibility, multi-tenancy and effective utilization of resources
• Delivers high-density, flexible combinations of various highspeed interfaces to enable the best TCO for customers at data centers and WAN deployments

Management

• Includes a management console that is effective, simple to use, and provides comprehensive network automation & visibility.
• Provides Zero Touch Integration with the Security Fabric’s Single Pane of Glass Management
• Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture

Security Fabric

• Enables Fortinet and Fabric-ready partners’ products to provide broader visibility, integrated end-to-end detection, threat intelligence sharing and automated remediation

Highlights

• Delivers the industry’s first compact hyperscale firewall that provides HW accelerated VXLAN and DDoS protection
• Provides security for very high throughput flows known as Elephant flows
• Delivers the industry’s highest speed NGFW with unprecedented Threat Protection and SSL inspection performance in a compact 3U appliance.
• With uplinks in typical datacenter designs moving to the 40 Gbps and 100 Gbps combination provides superior flexibility and reduction in port and cable costs.
• Management interface redundancy and hot swappable/redundant power supplies.

Specifications:

	FG-4200F/-DC	FG-4201F/-DC
Interfaces and Modules
100 GE QSFP28 / 40 GE QSFP+ Slots	8
25 GE SFP28 / 10 GE SFP+ / GE SFP Slots	16
25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots	2
25 GE SFP28 / 10 GE SFP+ / GE SFP AUX Slots	2
GE RJ45 Management Ports	2
USB Ports	1
Console Port	1
Internal Storage	-	2x 2TB SSD
Included Transceivers	2x SFP+ (SR 10GE)
System Performance — Enterprise Traffic Mix
IPS Throughput	52 Gbps
NGFW Throughput	47 Gbps
Threat Protection Throughput	45 Gbps
System Performance and Capacity
Firewall Throughput (1518 / 512 / 64 byte, UDP)	800 / 788 / 400 Gbps
IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP)	800 / 788 / 400 Gbps
Firewall Latency (64 byte, UDP)	3.02 µs
Firewall Throughput (Packet per Second)	600 Mpps
Concurrent Sessions (TCP)	210 Million / 450 Million
New Sessions/Second (TCP)	1 Million / 7 Million
Firewall Policies	200,000
IPsec VPN Throughput (512 byte)	210 Gbps
Gateway-to-Gateway IPsec VPN Tunnels	40,000
Client-to-Gateway IPsec VPN Tunnels	200,000
SSL-VPN Throughput	16 Gbps
Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode)	30,000
SSL Inspection Throughput (IPS, avg. HTTPS)	50 Gbps
SSL Inspection CPS (IPS, avg. HTTPS)	23,000
SSL Inspection Concurrent Session (IPS, avg. HTTPS)	9 Million
Application Control Throughput (HTTP 64K)	135 Gbps
CAPWAP Throughput (HTTP 64K)	47 Gbps
Virtual Domains (Default / Maximum)	10 / 500
Maximum Number of FortiSwitches Supported	300
Maximum Number of FortiAPs (Total / Tunnel Mode)	8,192 / 4,096
Maximum Number of FortiTokens	20,000
Maximum Number of Registered FortiClients	50,000
High Availability Configurations	Active / Active, Active / Passive, Clustering
Dimensions and Power
Height x Width x Length (inches)	5.22 x 17.20 x 26.17
Height x Width x Length (mm)	132.5 x 437 x 664.8
Weight	59.75 lbs (27.10 kg)	61.07 lbs (27.7 kg)
Form Factor (supports EIA / non-EIA standards)	Rack Mount, 3 RU
AC Power Input	100–240V AC, 50/60 Hz
AC Current (Maximum)	13.5A@120V, 5.5A@240V
Power Consumption (Average/ Maximum)	931 W / 1291 W	940 W / 1306 W
Heat Dissipation	4405 BTU/h	4456 BTU/h
DC Power Supply	-48V to -60V DC
DC Current (Maximum Rated)	25A to 32A per PSU
Redundant Power Supplies	Default 1+1 Redundant, Hot Swappable
Operating Environment and Certifications
Operating Temperature	32–104°F (0–40°C)
Storage Temperature	-31–158°F (-35–70°C)
Humidity	20–90% non-condensing
Noise Level	57 dBA
Operating Altitude	Up to 7,400 ft (2,250 m)
Compliance	FCC Part 15 Class A, RCM, VCCI, CE, UL/ cUL, CB
Certifications	ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSLVPN; USGv6/IPv6

Documentation:

Download the Fortinet FortiGate 4200F Series Data Sheet (PDF).

Pricing Notes:

• All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
• Hardware plus ASE FortiCare and FortiGuard 360 Protection
  Hardware unit, 24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, 360 Services Bundle (SD-WAN Orchestrator, SD-WAN Cloud Assisted Monitoring, SD-WAN Overlay Controller VPN, FortiManager Cloud, FortiAnalyzer Cloud, Fortinet SOCaaS, IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security and FortiConverter Service) plus term of contract
• Hardware plus 24x7 FortiCare and FortiGuard Enterprise Protection
  Hardware Unit, 24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) plus term of contract
• Hardware plus 24x7 FortiCare and FortiGuard Unified Threat Protection (UTP)
  Hardware Unit, 24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) plus term of contract
• 360 Protection (SD-WAN Orchestrator, SD-WAN Cloud Monitoring, FMG/FAZ Cloud, IPAM, IPS, AMP, App Ctrl, Web & Video Filtering, AS, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and ASE FortiCare)
  24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, 360 Services Bundle (SD-WAN Orchestrator, SD-WAN Cloud Assisted Monitoring, SD-WAN Overlay Controller VPN, FortiManager Cloud, FortiAnalyzer Cloud, Fortinet SOCaaS, IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security and FortiConverter Service)
• Enterprise Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and 24x7 FortiCare)
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service)
• Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam Service, and 24x7 FortiCare)
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service)
• Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and 24x7 FortiCare)
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control)
• 24x7 FortiCare Contract
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control
• ASE FortiCare (24x7 plus Advanced Services Ticket Handling)
  24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control.
• Prices are for one year of Premium RMA support. Usual discounts can be applied.
• Annual contracts only. No multi-year SKUs are available for these services.
• Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
• Pricing and product availability subject to change without notice.