Fortinet FortiGate Next-Generation Firewall (NGFW)
FortiGate is the only NGFW with unified management for hybrid mesh firewall
Overview
FortiGate provides flawless convergence that can scale to any location: remote office, branch, campus, data center, and cloud. We’ve always delivered on the concept of hybrid mesh firewalls with FortiManager for unified management and consistent security across complex hybrid environments. The Fortinet FortiOS operating system provides deep visibility and security across a variety of form factors.
Where AI/ML Security and Enterprise Networking Converge
FortiGate NGFWs provide industry-leading threat protection and decryption at scale with a custom ASIC architecture. They also deliver Secure Networking with integrated features like SD-WAN, switching and wireless, and 5G. Converge your security and networking point solutions into a simple-to-use, centralized management console powered by a single operating system, FortiOS, and make IT management easy.
Industry-Leading Innovations
We’re proud to produce the only next-gen firewall with Universal ZTNA, inline sandbox, and SOC-as-a-Service. Join CMO John Maddison for a fireside chat as he and Nirav Shah, VP of Products and Solutions, discuss the latest innovations in NGFWs.
Watch the Video
Investing in Innovation
FortiGate NGFW is the world’s most deployed network firewall, delivering unparalleled AI-powered security performance and threat intelligence, along with full visibility and security and networking convergence.
Convergence
One operating system provides unified networking and security across all form factors and edges
Acceleration
Patented ASIC architecture for improved performance, greater ROI, and reduced power consumption
AL/ML Security
FortiGuard global threat intelligence delivers automated protection against known & unknown threats
FortiGate NGFW Use Cases
Branch
Protect and connect your distributed edge with AI/ML-powered security and innovative convergence that includes secure SD-WAN.
Campus
Gain unparalleled visibility and protection for enterprise sites so you can manage applications, users, devices, and access in a single dashboard.
Data Center
Deploy hyperscale security with consistent, coordinated protection, rich interfaces, and decryption that scales to any environment.
Segmentation
Protect your assets with rich macro- and micro-segmentation capabilities.
Multicloud
Integrate public and private cloud protections with easy-to-manage automation in a single pane of glass.
Remote
Extend FortiGate NGFW protection with SASE and protect users wherever they work.
Third-Party Validation
Fortinet Achieves a 99.88% Security Effectiveness Score in the CyberRatings 2023 Enterprise Firewall Report
The FortiGate 600F received the AAA rating in the following categories:
- Threat Prevention: achieved a near perfect score against a robust testing repository of 1,724 exploits and 1,482 evasions
- SSL/TLS Functionality: correctly identified all insecure cipher suites and properly decrypted and inspected traffic
- Stability & Reliability: ensured exceptional user experience while blocking exploits during a battery of stability tests across a variety of loads, traffic types, protocol mutation
- Routing & Access Control: enforced policies across various configurations—including a complex multiple-zone config that supports thousands of users, networks, policies, apps
Forrester TEI Study: Fortinet NGFW for Data Center And AI-Powered FortiGuard Security Services
Forrester Total Economic Impact™ (TEI) study reveals 318% ROI and $10.6M in cost benefits achieved with the Fortinet Data Center cybersecurity solution.
In addition to a significant ROI, key results from the 2023 commissioned study conducted by Forrester Consulting include improved networking and security performance, increased networking and security team efficiencies, end-user productivity gains, notable cost savings, and better sustainability.
FortiGuard AI-Powered Security Services
Available in all form factors including physical and virtual appliances. Flexible capacity enables the highest application experience. FortiManager can be used to monitor and manage FortiGate appliances and is also available in different form factors including hardware, virtual, and SaaS.
Content Security:
FortiGuard Antivirus Services
Protects against the latest polymorphic attacks, viruses, malware (including ransomware), and other threats.
FortiGuard Data Loss Prevention Service
Blocks intentional and accidental disclosures of sensitive data while addressing key requirements for data security associated with major frameworks.
FortiGuard AntiSpam Service
Dramatically reduces spam at the perimeter through a multi-layered approach to filtering unwanted and malicious email.
Web Security:
FortiGuard DNS Security Services
Provides full visibility into DNS traffic while blocking high-risk domains including malicious newly registered domains (NRDs) and parked domains.
FortiGuard URL Filtering Service
Uses AI-powered behavior analysis and correlation to block unknown malicious URLs almost immediately, with near-zero false negatives.
FortiGuard Anti-Bonet and C2 Service
Blocks unauthorized attempts to communicate with compromised remote servers for both receiving malicious commands and extracting information.
Device Security:
FortiGuard IPS Services
Utilizes the latest threat intelligence to perform deep packet inspection/SSL inspection of network traffic to detect and block malicious traffic and activities.
FortiGuard OT Security Service
Extends IPS protections to identify and police most of the common ICS/OT/SCADA protocols to detect and block exploits targeting OT vulnerabilities.
FortiGuard Anti-Bonet and C2 Service
Blocks unauthorized attempts to communicate with compromised remote servers for both receiving malicious commands and extracting information.
Application Security:
FortiGuard AntiSpam Service
Dramatically reduces spam at the perimeter through a multi-layered approach to filtering unwanted and malicious email.
SOC NOC Security:
FortiGuard Attack Surface Security Service
Assesses and rates your Security Fabric infrastructure and controls against best practices and major security and compliance frameworks. Includes coverage for connected IoT devices.
Models and Specifications
FortiGate NGFW is available in many different models to meet your needs ranging from entry-level hardware appliances to ultra high-end appliances to meet the most demanding threat protection performance requirements. This ensures that enterprise campus, core data-center, or internal segments, FortiGate can fit seamlessly into your environment.
| Model | Threat Protection | Data Sheet |
|---|---|---|
| FortiGate 7121F | 520 Gbps | |
| FortiGate 7081F | 312 Gbps | |
| FortiGate 6500F | 100 Gbps | |
| FortiGate 6001F | 30-100Gbps (licensable) | |
| FortiGate 6300F | 60 Gbps | |
| FortiGate 4800F | 70 Gbps | |
| FortiGate 4400F | 75 Gbps | |
| FortiGate 4200F | 45 Gbps | |
| FortiGate 3700F | 75 Gbps | |
| FortiGate 3500F | 63 Gbps | |
| FortiGate 3200F | 45 Gbps | |
| FortiGate 3000F | 33 Gbps | |
| FortiGate 2600F | 25 Gbps | |
| FortiGate 1800F | 15 Gbps | |
| FortiGate 1000F | 13 Gbps |
FortiCare Support & Professional Services
Fortinet is dedicated to helping our customers succeed, and every year FortiCare services help thousands of organizations get the most from their investments in Fortinet's products and services. To achieve this, FortiCare follows the life-cycle approach and provides unique services to help our customers in their success journeys.
Technical Support Services
Various per-device options are available for efficient operations. FortiCare Elite option provides a 15-minute response time for critical products.
Advanced Support
Various per-account white glove services are available to reduce disruption and increase productivity with operational reviews by designated experts.
Professional Services
Our multi-vendor experts can design and deploy a complete best practice-based solution to help you meet your network or security objectives and adopt new capabilities.
RMA
Priority RMA options are available across the product family for expedited replacement of defective hardware to meet your availability objectives.