FortiGate 900D

With network bandwidth requirements doubling every 18 months and increases in sophisticated cyber threats, enterprise organizations with large branch offices know they need high-speed network security that also delivers highly effective next generation security.

• 5 times faster hardware accelerated next generation firewall offers best-in-class price/performance ratio
• Integrated high port density delivers maximum flexibility and scalability
• NSS Labs Recommended NGFW and NGIPS with consolidated security delivers top-rated protection
• Application control plus identity and device-based policy enforcement provides more granular protection
• Intuitive management interface enables broad and deep visibility that scales from a single FortiGate to thousands

FortiGuard Labs offers real-time intelligence on the threat landscape, delivering comprehensive security updates across the full range of Fortinet’s solutions. Comprised of security threat researchers, engineers, and forensic specialists, the team collaborates with the world’s leading threat monitoring organizations, other network and security vendors, as well as law enforcement agencies:

• Real-time Updates — 24x7x365 Global Operations research security intelligence, distributed via Fortinet Distributed Network to all Fortinet platforms
• Security Research — FortiGuard Labs have discovered over 170 unique zero-day vulnerabilities to date, totaling millions of automated signature updates monthly
• Validated Security Intelligence — Based on FortiGuard intelligence, Fortinet’s network security platform is tested and validated by the world’s leading third-party testing labs and customers globally

Interfaces and Modules

• Hardware Accelerated 10 GE SFP+ Slots 2
• Hardware Accelerated GE SFP Slots 16
• Hardware Accelerated GE RJ45 Ports 16
• GE RJ45 Management / HA Ports 2
• USB Ports (Client / Server) 1 / 2
• Console Port 1
• Onboard Storage 256 GB
• Included Transceivers 0

System Performance and Capacity

• IPv4 Firewall Throughput (1518 / 512 / 64 byte, UDP) 52 / 52 / 33 Gbps
• IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) 52 / 52 / 33 Gbps
• Firewall Latency (64 byte, UDP) 3 μs
• Firewall Throughput (Packet per Second)
• 49.5 Mpps Concurrent Sessions (TCP) 11 Million
• New Sessions/Second (TCP) 280,000
• Firewall Policies 100,000
• IPsec VPN Throughput (512 byte) 25 Gbps
• Gateway-to-Gateway IPsec VPN Tunnels 2,000
• Client-to-Gateway IPsec VPN Tunnels 10,000
• SSL-VPN Throughput 3.6 Gbps
• Concurrent SSL-VPN Users (Recommended Maximum) 10,000
• IPS Throughput (HTTP / Enterprise Mix) 8 / 4.2 Gbps
• SSL Inspection Throughput 4 Gbps
• NGFW Throughput 2.4 Gbps
• CAPWAP Throughput 11 Gbps
• Virtual Domains (Default / Maximum) 10 / 10
• Maximum Number of FortiAPs (Total / Tunnel) 1024 / 512
• Maximum Number of FortiTokens 1,000
• Maximum Number of Registered Endpoints 2,000
• High Availability Configurations Active-Active, Active-Passive, Clustering

Dimensions and Power

• Height x Width x Length (mm) 44.2 x 437.5 x 463.2
• Weight 9.18 kg
• Form Factor 1 RU
• AC Power Supply 100–240V AC, 60–50 Hz, 300 W
• Redundant Power Consumption (Average / Maximum) 135 W / 187.2 W
• Current (Maximum) 100V/5A, 240V/3A
• Heat Dissipation 638.75 BTU/h
• Redundant Power Supplies Yes (Hot Swappable)

Operating Environment and Certifications

• Operating Temperature 32–104°F (0–40°C)
• Storage Temperature -31–158°F (-35–70°C)
• Humidity 20–90% non-condensing
• Operating Altitude Up to 7,400 ft (2,250 m)
• Compliance FCC Part 15 Class A, C-Tick, VCCI, CE, UL/cUL, CB Certifications ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN

Optional Accessories/Spares

• 1 GE SFP LX Transceiver Module FG-TRAN-LX 1 GE SFP LX transceiver module for all systems with SFP and SFP/SFP+ slots
• 1 GE SFP RJ45 Transceiver Module FG-TRAN-GC 1 GE SFP RJ45 transceiver module for all systems with SFP and SFP/SFP+slots
• 1 GE SFP SX Transceiver Module FG-TRAN-SX 1 GE SFP SX transceiver module for all systems with SFP and SFP/SFP+ slots
• 10 GE SFP+ Transceiver Module, Short Range FG-TRAN-SFP+SR 10 GE SFP+ transceiver module, long range for all systems with SFP+ and SFP/SFP+ slots
• 10 GE SFP+ Transceiver Module, Long Range FG-TRAN-SFP+LR 10 GE SFP+ transceiver module, long range for all systems with SFP+ and SFP/SFP+ slots
• 10 GE SFP+ Active Direct Attach Cable, 10m / 32.8 ft SP-CABLE-ADASFP+ 10 GE SFP+ active direct attach cable, 10m / 32.8 ft for all systems with SFP+ and SFP/SFP+ slots
• AC Power Supply SP-FXX1000D AC power supply for FG-900D, FG-1000D and FXX-1000D