FortiGate 2200E Series Data Sheet

DATA SHEETNext Generation FirewallSegmentationSecure Web GatewayIPSMobile SecurityFortiGate 2200E Series FG-2200E and 2201EThe FortiGate 2200E series delivers high performance next generation firewall (NGFW) capabilitiesfor large enterprises and service providers. With multiple high-speed interfaces, high-port density, andhigh-throughput, ideal deployments are at the enterprise edge, hybrid data center core, and across internalsegments. Leverage industry-leading IPS, SSL inspection, and advanced threat protection to optimizeyour network’s performance.Fortinet’s Security-Driven Networking approach provides tight integration ofthe network to the new generation of security.Security§ Identifies thousands of applications inside network traffic fordeep inspection and granular policy enforcement§ Protects against malware, exploits, and malicious websites inboth encrypted and non-encrypted traffic§ Prevents and detects against known attacks using continuousthreat intelligence from AI-powered FortiGuard Labs securityservices§ Proactively blocks unknown sophisticated attacks in realtime with the Fortinet Security Fabric integrated AI-poweredFortiSandboxPerformance§ Engineered for Innovation using Fortinet’s purpose-built securityprocessors (SPU) to deliver the industry’s best threat protectionperformance and ultra-low latency§ Provides industry-leading performance and protection for SSLencrypted traffic including the first firewall vendor to provideTLS 1.3 deep inspectionCertification§ Independently tested and validated best security effectivenessand performance§ Received unparalleled third-party certifications from NSS Labs,ICSA, Virus Bulletin, and AV ComparativesNetworking§ Application aware routing with in-built SD-WAN capabilities toachieve consistent application performance and the best userexperience§ Built-in advanced routing capabilities to deliver highperformance with encrypted IPSEC tunnels at scaleManagement§ Includes a management console that is effective and simple touse, which provides a comprehensive network of automation &visibility§ Provides Zero Touch Provisioning leveraging Single Paneof Glass Management powered by the Fabric ManagementCenter§ Predefined compliance checklists analyze the deployment andhighlight best practices to improve the overall security postureSecurity Fabric§ Enables Fortinet and Fabric-ready partners’ products to providebroader visibility, integrated end-to-end detection, threatintelligence sharing, and automated remediation§ Automatically builds Network Topology visualizations whichdiscover IoT devices and provide complete visibility into Fortinetand Fabric-ready partner productsFirewallIPSNGFWThreat ProtectionInterfaces158 Gbps16.5 Gbps13.5 Gbps11 GbpsMultiple GE RJ45, 10 GE SFP , 25 GE SFP28, and40 GE QSFP slotsRefer to the specifications table for details

DATA SHEET FortiGate 2200E SeriesDeploymentNext Generation Firewall (NGFW)§ Reduce the complexity and maximize your ROI by integratingthreat protection security capabilities into a single highperformance network security appliance, powered by Fortinet’sSecurity Processing Unit (SPU)§ Full visibility into users, devices, applications across the entireattack surface and consistent security policy enforcementirrespective of asset location§ Protect against network exploitable vulnerabilities with Industryvalidated IPS security effectiveness, low latency and optimizednetwork performance§ Automatically block threats on decrypted traffic using theIPS§ Purpose-built security processors delivering industry validatedIPS performance with high throughput and low latency§ Deploy virtual patches at the network level to protect againstnetwork exploitable vulnerabilities and optimize networkprotection time§ Deep packet inspection at wire speeds offers unparalleled threatvisibility into network traffic including traffic encrypted with thelatest TLS 1.3§ Proactively block newly discovered sophisticated attacks in realtime with advanced threat protection provided by the intelligenceservices of the Fortinet Security FabricIndustry’s highest SSL inspection performance, includingthe latest TLS 1.3 standard with mandated ciphers§ Proactively block newly discovered sophisticated attacks inreal-time with AI-powered FortiGuard Labs and advanced threatprotection services included in the Fortinet Security FabricMobile Security for 4G, 5G, and IOT§ SPU accelerated, high performance CGNAT and IPv6 migrationoption including: NAT44, NAT444, NAT64/DNS64, NAT46 for 4GGi/sGi and 5G N6 connectivity and securitySegmentation§ Segmentation that adapts to any network topology, deliveringend-to-end security from the branch level to data centers andextending to multiple clouds§ Reduce security risks by improving network visibility from thecomponents of the Fortinet Security Fabric, which adapt access§ RAN Access Security with highly scalable and best performingIPsec aggregation and control security gateway (SecGW)§ User plane security enabled by full Threat Protection and visibilityinto GTP-U inspection§ 4G and 5G security for user and data plane traffic includingSCTP, GTP-U and SIP that provides protection against attacks§ High-speed interfaces to enable deployment flexibilitypermissions to current levels of trust and enforce access controleffectively and efficiently§ Delivers defense in depth security powered by high-performanceL7 inspection and remediation by Fortinet’s SPU, while deliveringthird party validated TCO of per protected Mbps§ Protects critical business applications and helps implement anycompliance requirements without network redesignsSecure Web Gateway (SWG)§ Secure web access from both internal and external risks, evenFortiClientVPN ClientDATACENTERFortiGateIPS, SegmentationFortiGateNGFWfor encrypted traffic at high performance§ Enhanced user experience with dynamic web and video caching§ Block and control web access based on user or user groupsacross URL’s and domains§ Prevent data loss and discover user activity to known andFortiManagerAutomation-DrivenNetwork ManagementFortiAnalyzerAnalytics-poweredSecurity & Log Managementunknown cloud applications§ Block DNS requests against malicious domains§ Multi-layered advanced protection against zero-day malwarethreats delivered over the web2FortiGate 2200E deployment in data center(NGFW, IPS, and Intent-based Segmentation)

DATA SHEET FortiGate 2200E SeriesHardwareFortiGate 18202223252729HA13124262830HA23233FortiGate 2200ESTATUSALARMHAPOWERUSBCONSOLE1 2345SFP 6QSFP 347CAUTION/ATTENTIONFAN1FAN2FAN3FAN4SHOCK HAZARD. DISCONNECTALL POWER SOURCES.RISQUE D’ÉLECTROCUTION.DÉBRANCHEZ TOUTES LESSOURCES es1.2.3.4.USB PortConsole Port2x GE RJ45 MGMT Ports12x GE RJ45 Ports5. 18x 25 GE SFP28 / 10 GE SFP Slots6. 2x 25 GE SFP28 / 10 GE SFP HA Slots7. 4x 40 GE QSFP SlotsNetwork ProcessorPowered by SPUFortinet’s new, breakthrough SPU NP6 network processor works§ Custom SPU processors deliver the§ Superior firewall performance for IPv4/IPv6, SCTP, and multicastpower you need to detect maliciouscontent at multi-Gigabit speeds§ Other security technologies cannot protect againsttoday’s wide range of content- and connection-basedthreats because they rely on general-purpose CPUs,causing a dangerous performance gap§ SPU processors provide the performance neededto block emerging threats, meet rigorous third-partycertifications, and ensure that your network securitysolution does not become a network bottleneckinline with FortiOS functions delivering:traffic with ultra-low latency down to 2 microseconds§ VPN, CAPWAP, and IP tunnel acceleration§ Anomaly-based intrusion prevention, checksum offload, andpacket defragmentation§ Traffic shaping and priority queuingContent ProcessorFortinet’s new, breakthrough SPU CP9 content processor worksoutside of the direct flow of traffic and accelerates the inspection ofcomputationally intensive security features:§ Enhanced IPS performance with the unique capability of fullsignature matching at SPU§ SSL Inspection capabilities based on the latest industrymandated cipher suites§ Encryption and decryption offloadingHigh-Speed ConnectivityHigh-speed connectivity is essential for network securitysegmentation at the core of data networks. The FortiGate 2200Eseries provides 40 GE and 25 GE interfaces, simplifying networkdesigns without relying on additional devices to bridge desiredconnectivity.3

DATA SHEET FortiGate 2200E SeriesFortinet Security FabricSecurity FabricThe Security Fabric is the cybersecurity platform that enables digitalinnovations. It delivers broad visibility of the entire attack surface tobetter manage risk. Its unified and integrated solution reduces thecomplexity of supporting multiple-point products, while automatedworkflows increase operational speeds and reduce response timesacross the Fortinet deployment ecosystem. The Fortinet SecurityFabric overs the following key areas under a single managementcenter:§ Security-Driven Networking that secures, accelerates, andunifies the network and user experience§ Zero Trust Network Access that identifies and secures usersand devices in real-time, on and off of the network§ Dynamic Cloud Security that protects and controls cloudinfrastructures and applications§ AI-Driven Security Operations that automatically prevents,detects, isolates, and responds to cyber threatsFortiOSFortiGates are the foundation of the Fortinet Security Fabric—the§ Control thousands of applications, block the latest exploits, andcore is FortiOS. All security and networking capabilities across thefilter web traffic based on millions of real-time URL ratings inentire FortiGate platform are controlled with one intuitive operatingaddition to true TLS 1.3 support.system. FortiOS reduces complexity, costs, and response times by§ Automatically prevent, detect, and mitigate advanced attackstruly consolidating next-generation security products and serviceswithin minutes with an integrated AI-driven security and advancedinto one platform.§ A truly consolidated platform with a single OS and pane-of-glassfor across the entire digital attack surface.§ Industry-leading protection: NSS Labs Recommended, VB100,AV Comparatives, and ICSA validated security and performance.§ Leverage the latest technologies such as deception-basedthreat protection.§ Improve and unify the user experience with innovative SD-WANcapabilities with the ability to detect, contain, and isolate threatswith automated segmentation.§ Utilize SPU hardware acceleration to boost network securityperformance.security.ServicesFortiGuard Security ServicesFortiCare Support ServicesFortiGuard Labs offer real-time intelligence on the threat landscape,Our FortiCare customer support team provides global technicaldelivering comprehensive security updates across the full rangesupport for all Fortinet products. With support staff in the Americas,of Fortinet’s solutions. Comprised of security threat researchers,Europe, Middle East, and Asia, FortiCare offers services to meet theengineers, and forensic specialists, the team collaborates with theneeds of enterprises of all sizes.world’s leading threat monitoring organizations and other networkand security vendors, as well as law enforcement agencies.4For more information, please refer to forti.net/fortiguardand forti.net/forticare