FortiGate FortiWiFi 60E Series Data Sheet

DATA SHEETFortiGate/FortiWiFi 60E SeriesFG-60E, FG-60E-POE, and FWF-60ENext Generation FirewallSecure SD-WANThe FortiGate/FortiWiFi 60E series provides an application-centric, scalable and secure SD-WANsolution in a compact fanless desktop form factor for enterprise branch offices and mid-sizedbusinesses. Protects against cyber threats with system-on-a-chip acceleration and industryleading secure SD-WAN in a simple, affordable, and easy to deploy solution. Fortinet’s SecurityDriven Networking approach provides tight integration of the network to the new generation ofsecurity.Securityn Identifies thousands of applications inside network trafficfor deep inspection and granular policy enforcementnnProtects against malware, exploits, and maliciouswebsites in both encrypted and non-encrypted trafficPrevent and detect against known and unknown attacksusing continuous threat intelligence from AI-poweredFortiGuard Labs security servicesPerformancen Delivers industry’s best threat protection performance andultra-low latency using purpose-built security processor(SPU) technologynProvides industry-leading performance and protection forSSL encrypted trafficCertificationn Independently tested and validated for best-in-classsecurity effectiveness and performancenReceived unparalleled third-party certifications from NSSLabsNetworkingn Delivers advanced networking capabilities that seamlesslyintegrate with advanced layer 7 security and virtualdomains (VDOMs) to offer extensive deploymentflexibility, multi-tenancy and effective utilization ofresourcesnDelivers high-density, flexible combination of varioushigh-speed interfaces to enable best TCO for customersfor data center and WAN deploymentsManagementn Includes a management console that is effective, simpleto use, and provides comprehensive network automationand visibilitynnProvides Zero Touch Integration with Fortinet’s SecurityFabric’s Single Pane of Glass ManagementPredefined compliance checklist analyzes the deploymentand highlights best practices to improve overall securitypostureSecurity Fabricn Enables Fortinet and Fabric-ready partners’ productsto provide broader visibility, integrated end-to-enddetection, threat intelligence sharing, and automatedremediationFirewallIPSNGFWThreat Protection3 Gbps400 Mbps250 Mbps200 MbpsInterfacesMultiple GE RJ45 WiFi variants Variants with internal storage Variants with PoE/ interfaces1

DATA SHEET FortiGate/FortiWiFi 60E SeriesDEPLOYMENTNext Generation Firewall (NGFW)§ Reduce the complexity and maximize your ROI byintegrating threat protection security capabilities intoa single high-performance network security appliance,powered by Fortinet’s Security Processing Unit (SPU)§ Full visibility into users, devices, applications acrossthe entire attack surface and consistent security policyenforcement irrespective of asset location§ Protect against network exploitable vulnerabilitieswith industry-validated IPS that offers low latency andoptimized network performance§ Automatically block threats on decrypted traffic using theIndustry’s highest SSL inspection performance, includingthe latest TLS 1.3 standard with mandated ciphers§ Proactively block newly discovered sophisticatedattacks in real-time with AI-powered FortiGuard Labsand advanced threat protection services included in theFortinet Security FabricSecure SD-WAN§ Consistent business application performance withaccurate detection, dynamic WAN path steering on anybest-performing WAN transport§ Accelerated Multi-cloud access for faster SaaS adoptionwith cloud-on-ramp§ Self-healing networks with WAN edge high availability,sub-second traffic switchover-based and real-timebandwidth compute-based traffic steering§ Automated Overlay tunnels provides encryption andabstracts physical hybrid WAN making it simple to manage.§ Simplified and intuitive workflow with SD-WANOrchestrator for management and zero touch deployment§ Enhanced analytics both real-time and historical providesvisibility into network performance and identify anomalies§ Strong security posture with next generation firewall andreal- time threat protectionSD-WAN OrchestratorCentralized Provisioning &Automated Overlay ManagementFortiGate Cloud Cloud Device Management Cloud Analytics-poweredSecurity and Log Management Cloud SandboxingFortiSwitchSecure AccessSwitchFortiAnalyzerAnalytics-poweredSecurity & LogManagementFortiAPSecure AccessPoint FortiGateNGFWIPcSelsnenTuENTERPRISEBRANCH LSMP FortiGateSecure SD-WANSMALLOFFICEFortiClientEndpoint ProtectionNext Generation Firewall Small Office DeploymentSecure SD-WAN Enterprise Branch Deployment2

DATA SHEET FortiGate/FortiWiFi 60E SeriesHARDWAREFortiGate/FortiWiFi 60E1234FortiGate 60E-POE5Hardware FeaturesSOC3Desktop/ /a/b/g/n/ac234Hardware Features128GBInterfaces1.2.3.4.5.1USB PortConsole Port2x GE RJ45 WAN Ports1x GE RJ45 DMZ Port7x GE RJ45 Internal PortsSOC3DesktopPOE/ Interfaces1.2.3.4.USB PortConsole Port8x GE RJ45 PoE/ Ports2x GE RJ45 WAN Ports3G/4G WAN ConnectivityPowered by SPU SoC3§ Combines a RISC-based CPU withFortinet’s proprietary SPU content andnetwork processors for unmatchedperformance§ Simplifies appliance design and enablesbreakthrough performance for smaller networks§ Supports firewall acceleration across all packetsizes for maximum throughput§ Delivers accelerated UTM content processing forsuperior performance and protection§ Accelerates VPN performance for high speed andsecure remote access3The FortiGate/FortiWiFi 60E Series includes a USB port thatallows you to plug in a compatible third-party 3G/4G USBmodem, providing additional WAN connectivity or a redundantlink for maximum reliability.Compact and Reliable Form FactorDesigned for small environments, you can place it on adesktop or wall-mount it. It is small, lightweight yet highlyreliable with superior MTBF (Mean Time Between Failure),minimizing the chance of a network disruption.Superior Wireless CoverageA built-in dual-band, dual-stream access point with internalantennas is integrated on the FortiWiFi 60E and providesspeedy 802.11ac wireless access. The dual-band chipsetaddresses the PCI-DSS compliance requirement for rogueAP wireless scanning, providing maximum protection forregulated environments.

DATA SHEET FortiGate/FortiWiFi 60E SeriesFORTINET SECURITY FABRICSecurity FabricThe industry’s highest-performing cybersecurity platform,powered by FortiOS, with a rich ecosystem designed tospan the extended digital attack surface, delivering fullyautomated, self-healing network security.Fabric ManagementCenterFabric SecurityOperationsNOCSOC§ Broad: Coordinated detection and enforcement across theentire digital attack surface and lifecycle with convergednetworking and security across edges, clouds, endpointsand usersAdaptive CloudSecurity§ Integrated: Integrated and unified security, operation,and performance across different technologies, location,deployment options, and the richest EcosystemZero TrustAccessFORTI OS§ Automated: Context aware, self-healing network &security posture leveraging cloud-scale and advanced AIto automatically deliver near-real-time, user-to-applicationcoordinated protection across the FabricThe Fabric empowers organizations of any size to secure andsimplify their hybrid infrastructure on the journey to systemFortiGuardThreat IntelligenceFortiOS Operating SystemFortiOS, Fortinet’s leading operating system enable theconvergence of high performing networking and securityacross the Fortinet Security Fabric delivering consistent andcontext-aware security posture across network endpoint, andclouds. The organically built best of breed capabilities andunified approach allows organizations to run their businesseswithout compromising performance or protection, supportsseamless scalability, and simplifies innovation consumption.The release of FortiOS 7 dramatically expands the FortinetSecurity Fabric’s ability to deliver consistent security acrosshybrid deployment models consisting on appliances, softwareand As-a-Service with SASE, ZTNA and other emergingcybersecurity solutions.SERVICESFortiGuard Security ServicesFortiGuard Labs offers real-time intelligence on the threatlandscape, delivering comprehensive security updates acrossthe full range of Fortinet’s solutions. Comprised of securitythreat researchers, engineers, and forensic specialists, theteam collaborates with the world’s leading threat monitoringorganizations and other network and security vendors, as wellas law enforcement agencies.FortiCare ServicesFortinet is dedicated to helping our customers succeed, andevery year FortiCare services help thousands of organizationsget the most from their Fortinet Security Fabric solution. Wehave more than 1,000 experts to help accelerate technologyimplementation, provide reliable assistance through advancedsupport, and offer proactive care to maximize security andperformance of Fortinet deployments.4

DATA SHEET FortiGate/FortiWiFi 60E SeriesSPECIFICATIONSFORTIGATE 60EFORTIGATE 60E-POEFORTIWIFI 60EHardware SpecificationsGE RJ45 WAN / DMZ Ports2/122/1GE RJ45 Internal Ports7–7GE RJ45 PoE/ Ports–8–Wireless Interface––Single Radio (2.4GHz/5GHz), 802.11a/b/g/n/acUSB Ports111Console (RJ45)111Internal Storage–––System Performance — Enterprise Traffic MixIPS Throughput 2400 MbpsNGFW Throughput 2, 4250 MbpsThreat Protection Throughput 2, 5200 MbpsSystem PerformanceFirewall Throughput (1518 / 512 / 64 byte UDP packets)3 / 3 / 3 GbpsFirewall Latency (64 byte UDP packets)3 μsFirewall Throughput (Packets Per Second)4.5 MppsConcurrent Sessions (TCP)1.3 MillionNew Sessions/Second (TCP)30,000Firewall Policies5,000IPsec VPN Throughput (512 byte) 12 GbpsGateway-to-Gateway IPsec VPN Tunnels200Client-to-Gateway IPsec VPN Tunnels500SSL-VPN Throughput150 MbpsConcurrent SSL-VPN Users(Recommended Maximum, Tunnel Mode)200SSL Inspection Throughput (IPS, avg. HTTPS) 3135 MbpsSSL Inspection CPS (IPS, avg. HTTPS) 3135SSL Inspection Concurrent Session (IPS, avg. HTTPS) 375,000Application Control Throughput (HTTP 64K) 2650 MbpsCAPWAP Throughput (HTTP 64K)890 MbpsVirtual Domains (Default / Maximum)10 / 10Maximum Number of FortiSwitches Supported16Maximum Number of FortiAPs (Total / Tunnel Mode)30 / 10Maximum Number of FortiTokens500High Availability ConfigurationsActive / Active, Active / Passive, ClusteringDimensionsHeight x Width x Length (inches)1.5 x 8.5 x 6.3Height x Width x Length (mm)38 x 216 x 160Weight1.9 lbs (0.9 kg)Form Factor2.2 lbs (1.0 kg)1.9 lbs (0.9 kg)DesktopRadio SpecificationsMultiple User (MU) MIMO––2x2876 Mbps @ 5GHz, 300 Mbps @2.4GHzMaximum Wi-Fi Speeds––Maximum Tx Power––21 dBm–6 dBi @ 5 GHz,3 dBi @ 2.4 GHzAntenna Gain–Note: All performance values are “up to” and vary depending on system configuration.1. IPsec VPN performance test uses AES256-SHA256.2. IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured withLogging enabled.3. SSL Inspection performance values use an average of HTTPS sessions of different ciphersuites.54. NGFW performance is measured with Firewall, IPS and Application Control enabled.5. Threat Protection performance is measured with Firewall, IPS, Application Control andMalware Protection enabled.