Fortinet FortiGate 4200F

Description

The FortiGate 4200F series NGFW delivers high speed networking, increased scalability, and optimized performance features. Enterprises and service providers using the FortiGate NGFW can manage all of their security risks with the industry’s best-of-breed IPS, SSL inspection, and threat protection. The FortiGate 4200F series can be deployed at the enterprise edge, the hybrid and hyperscale data center core, and across internal segments. The multiple high-speed interfaces, high port density, superior security efficacy, and high throughput of this series keeps your network connected and secure.

Security

• Prevents volumetric attacks with HW accelerated DDoS and Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement
• Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic environments
• Prevents and detects against known and unknown attacks using continuous threat intelligence supplied by AI powered FortiGuard Labs security services

Performance

• Provides security for very high throughput flows known as Elephant flows
• Delivers the industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology
• Provides industry-leading performance and protection for SSL encrypted traffic
• Handles large amount of event-based connections burst

Certification

• Independently tested and validated for industry-best security effectiveness and performance
• Received unparalleled third-party certifications from NSS Labs

Networking

• Enables scalable segmentation powered by HW accelerated VXLAN technologies
• Delivers advanced networking capabilities that seamlessly integrate with advanced layer 7 security and virtual domains (VDOMs) to offer extensive deployment flexibility, multi-tenancy and effective utilization of resources
• Delivers high-density, flexible combinations of various highspeed interfaces to enable the best TCO for customers at data centers and WAN deployments

Management

• Includes a management console that is effective, simple to use, and provides comprehensive network automation & visibility.
• Provides Zero Touch Integration with the Security Fabric’s Single Pane of Glass Management
• Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture

Security Fabric

• Enables Fortinet and Fabric-ready partners’ products to provide broader visibility, integrated end-to-end detection, threat intelligence sharing and automated remediation

Highlights

• Delivers the industry’s first compact hyperscale firewall that provides HW accelerated VXLAN and DDoS protection
• Provides security for very high throughput flows known as Elephant flows
• Delivers the industry’s highest speed NGFW with unprecedented Threat Protection and SSL inspection performance in a compact 3U appliance.
• With uplinks in typical datacenter designs moving to the 40 Gbps and 100 Gbps combination provides superior flexibility and reduction in port and cable costs.
• Management interface redundancy and hot swappable/redundant power supplies.

Specifications:

	FG-4200F/-DC	FG-4201F/-DC
Interfaces and Modules
100 GE QSFP28 / 40 GE QSFP+ Slots	8
25 GE SFP28 / 10 GE SFP+ / GE SFP Slots	16
25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots	2
25 GE SFP28 / 10 GE SFP+ / GE SFP AUX Slots	2
GE RJ45 Management Ports	2
USB Ports	1
Console Port	1
Internal Storage	–	2x 2TB SSD
Included Transceivers	2x SFP+ (SR 10GE)
System Performance — Enterprise Traffic Mix
IPS Throughput	52 Gbps
NGFW Throughput	47 Gbps
Threat Protection Throughput	45 Gbps
System Performance and Capacity
Firewall Throughput (1518 / 512 / 64 byte, UDP)	800 / 788 / 400 Gbps
IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP)	800 / 788 / 400 Gbps
Firewall Latency (64 byte, UDP)	3.02 µs
Firewall Throughput (Packet per Second)	600 Mpps
Concurrent Sessions (TCP)	210 Million / 450 Million
New Sessions/Second (TCP)	1 Million / 7 Million
Firewall Policies	200,000
IPsec VPN Throughput (512 byte)	210 Gbps
Gateway-to-Gateway IPsec VPN Tunnels	40,000
Client-to-Gateway IPsec VPN Tunnels	200,000
SSL-VPN Throughput	16 Gbps
Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode)	30,000
SSL Inspection Throughput (IPS, avg. HTTPS)	50 Gbps
SSL Inspection CPS (IPS, avg. HTTPS)	23,000
SSL Inspection Concurrent Session (IPS, avg. HTTPS)	9 Million
Application Control Throughput (HTTP 64K)	135 Gbps
CAPWAP Throughput (HTTP 64K)	47 Gbps
Virtual Domains (Default / Maximum)	10 / 500
Maximum Number of FortiSwitches Supported	300
Maximum Number of FortiAPs (Total / Tunnel Mode)	8,192 / 4,096
Maximum Number of FortiTokens	20,000
Maximum Number of Registered FortiClients	50,000
High Availability Configurations	Active / Active, Active / Passive, Clustering
Dimensions and Power
Height x Width x Length (inches)	5.22 x 17.20 x 26.17
Height x Width x Length (mm)	132.5 x 437 x 664.8
Weight	59.75 lbs (27.10 kg)	61.07 lbs (27.7 kg)
Form Factor (supports EIA / non-EIA standards)	Rack Mount, 3 RU
AC Power Input	100–240V AC, 50/60 Hz
AC Current (Maximum)	13.5A@120V, 5.5A@240V
Power Consumption (Average/ Maximum)	931 W / 1291 W	940 W / 1306 W
Heat Dissipation	4405 BTU/h	4456 BTU/h
DC Power Supply	-48V to -60V DC
DC Current (Maximum Rated)	25A to 32A per PSU
Redundant Power Supplies	Default 1+1 Redundant, Hot Swappable
Operating Environment and Certifications
Operating Temperature	32–104°F (0–40°C)
Storage Temperature	-31–158°F (-35–70°C)
Humidity	20–90% non-condensing
Noise Level	57 dBA
Operating Altitude	Up to 7,400 ft (2,250 m)
Compliance	FCC Part 15 Class A, RCM, VCCI, CE, UL/ cUL, CB
Certifications	ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSLVPN; USGv6/IPv6