Fortinet FortiGate 140E
Enterprise-Grade Protection for Smaller Networks

Overview:

The Fortinet Enterprise Firewall Solution

The FortiGate 100E series delivers next generation firewall capabilities for mid-sized to large enterprises, with the flexibility to be deployed at the campus or enterprise branch. Protect against cyber threats with security processor powered high performance, security efficacy and deep visibility.

Security

• Protects against known exploits, malware and malicious websites using continuous threat intelligence provided by FortiGuard Labs security services
• Identify thousands of applications including cloud applications for deep inspection into network traffic
• Detects unknown attacks using dynamic analysis and provides automated mitigation to stop targeted attacks

Performance

• Delivers industry’s best threat protection performance and ultra-low latency using purpose built-security processor (SPU) technology
• Provides industry-leading performance and protection for SSL encrypted traffic

Certification

• Independently tested and validated best security effectiveness and performance
• Received unparalleled third-party certifications from NSS Labs, ICSA, Virus Bulletin and AV Comparatives

Networking

• Delivers an extensive routing, switching, wireless controller and high performance IPsec VPN capabilities to consolidate networking and security functionality
• Enables flexible deployment such as Next Generation Firewall and Secure SD-WAN

Management

• Single Pane of Glass with Network Operations Center (NOC) view provides 360° visibility to identify issues quickly and intuitively
• Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture

Security Fabric

• Enables Fortinet and Fabric-ready partners’ products to collaboratively integrate and provide end-to-end security across the entire attack surface
• Automatically builds Network Topology visualizations which discover IoT devices and provide complete visibility into Fortinet and Fabric-ready partner products

Next Generation Firewall (NGFW)

• Combines threat prevention security capabilities into single high performance network security appliance
• Reduces complexity by creating campus topology view and providing granular visibility of devices, users and threat information
• Identify and stop threats with powerful intrusion prevention beyond port and protocol that examines the actual content of your network traffic
• Delivers industry’s highest SSL inspection performance using industry-mandated ciphers
• Proactively detect malicious unknown threats using integrated cloud-based sandbox service

Secure SD-WAN

• Secure direct Internet access for Cloud applications for improved latency and reduce WAN cost spending
• Effective, cost-efficient and high performance threat prevention capabilities
• WAN Path Controller and Link Health Monitoring for better application performance
• Security Processor powered industry’s best IPsec VPN and SSL Inspection performance
• Centralized Management and Zero-Touch deployment

Hardware:

FortiGate 140E

Interfaces

1. USB Port
2. Console Port
3. 2x GE RJ45 MGMT/HA Ports
4. 2x GE RJ45 WAN Ports
5. 38x GE RJ45 Ports
6. 2x GE SFP DMZ Slots

Powered by SPU SoC3

• Combines a RISC-based CPU with Fortinet’s proprietary Security Processing Unit (SPU) content and network processors for unmatched performance
• Simplifies appliance design and enables breakthrough performance for smaller networks
• Supports firewall acceleration across all packet sizes for maximum throughput
• Delivers accelerated UTM content processing for superior performance and protection
• Accelerates VPN performance for high speed, secure remote access

Redundant Power Supply

Power supply redundancy is essential in the operation of missioncritical networks. The FortiGate 100E Series offers option to connect to an external redundant power supply appliance — The FortiRPS 100, designed to increase network availability and uptime.

Software:

FortiOS

Control all the security and networking capabilities across the entire FortiGate platform with one intuitive operating system. Reduce operating expenses and save time with a truly consolidated next generation security platform.

• A truly consolidated platform with one OS for all security and networking services for all FortiGate platforms.
• Industry-leading protection: NSS Labs Recommended, VB100, AV Comparatives and ICSA validated security and performance.
• Control thousands of applications, block the latest exploits, and filter web traffic based on millions of real-time URL ratings.
• Detect, contain and block advanced attacks automatically in minutes with integrated advanced threat protection framework.
• Solve your networking needs with extensive routing, switching, WiFi, LAN and WAN capabilities.
• Activate all the ASIC-boosted capabilities you need on the fastest firewall platform available.

Services:

FortiGuard Security Services

FortiGuard Labs offers real-time intelligence on the threat landscape, delivering comprehensive security updates across the full range of Fortinet's solutions. Comprised of security threat researchers, engineers, and forensic specialists, the team collaborates with the world's leading threat monitoring organizations, other network and security vendors, as well as law enforcement agencies:

• Real-time Updates — 24x7x365 Global Operations research security intelligence, distributed via Fortinet Distributed Network to all Fortinet platforms.
• Security Research — FortiGuard Labs have discovered over 170 unique zero-day vulnerabilities to date, totaling millions of automated signature updates monthly
• Validated Security Intelligence — Based on FortiGuard intelligence, Fortinet's network security platform is tested and validated by the world's leading third-party testing labs and customers globally.

FortiCare Support Services

Our FortiCare customer support team provides global technical support for all Fortinet products. With support staff in the Americas, Europe, Middle East and Asia, FortiCare offers services to meet the needs of enterprises of all sizes:

• Enhanced Support — For customers who need support during local business hours only.
• Comprehensive Support — For customers who need around- the-clock mission critical support, including advanced exchange hardware replacement.
• Advanced Services — For global or regional customers who need an assigned Technical Account Manager, enhanced service level agreements, extended software support, priority escalation, on-site visits and more.
• Professional Services — For customers with more complex security implementations that require architecture and design services, implementation and deployment services, operational services and more.

Enterprise Bundle

FortiGuard Labs delivers a number of security intelligence services to augment the FortiGate firewall platform. You can easily optimize the protection capabilities of your FortiGate with the FortiGuard Enterprise Bundle. This bundle contains the full set of FortiGuard security services plus FortiCare service and support offering the most flexibility and broadest range of protection all in one package.

Specifications:

	FortiGate 100E	FortiGate 101E	FortiGate 100EF	FortiGate 140E	FortiGate 140E-POE
Hardware Specifications
GE RJ45 Ports	14	14	8	38	14
GE RJ45 Management/DMZ Ports	1 / 2 / 1	1 / 2 / 1	1 / 2 / 1	1 / 1 / -	1 / 1 / -
GE SFP Slots	-	-	8	2	2
GE RJ45 PoE/+ Ports	-	-	-	-	24
GE RJ45 WAN Ports	2	2	2	2	2
GE RJ45 or SFP Shared Ports	2	2	-	-	-
USB Ports	1	1	1	1	1
Console Port	1	1	1	1	1
Internal Storage	-	1x 480 GB SSD	-	-	-
Included Transceivers	0	0	0	0	0
System Performance — Enterprise Traffic Mix
IPS Throughput2	500 Mbps
NGFW Throughput2, 4	360 Mbps
Threat Protection Throughput2, 5	250 Mbps
System Performance — Enterprise Traffic Mix
Firewall Latency (64 byte UDP packets)	3 μs
Firewall Throughput (Packets Per Second)	6.6 Mpps
Concurrent Sessions (TCP)	2 Million
New Sessions/Second (TCP)	30,000
Firewall Policies	10,000
IPsec VPN Throughput (512 byte)1	4 Gbps
Gateway-to-Gateway IPsec VPN Tunnels	2,000
Client-to-Gateway IPsec VPN Tunnels	10,000
SSL-VPN Throughput	250 Mbps
Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode)	300
SSL Inspection Throughput (IPS, avg. HTTPS)3	130 Mbps
SSL Inspection CPS (IPS, avg. HTTPS)3	130
SSL Inspection Concurrent Session (IPS, avg. HTTPS)3	125,000
Application Control Throughput (HTTP 64K)2	1 Gbps
CAPWAP Throughput (1444 byte, UDP)	1.5 Gbps
Virtual Domains (Default / Maximum)	10 / 10
Maximum Number of Switches Supported	24
Maximum Number of FortiAPs (Total / Tunnel Mode)	64 / 32
Maximum Number of FortiTokens	1,000
Maximum Number of Registered FortiClients	600
High Availability Configurations	Active / Active, Active / Passive, Clustering
Dimensions
Height x Width x Length (inches)	1.75 x 17 x 10	1.75 x 17 x 10	1.75 x 17 x 10	1.75 x 17 x 15.5	1.75 x 17 x 15.5
Height x Width x Length (mm)	44.45 x 432 x 254	44.45 x 432 x 254	44.45 x 432 x 254	44.45 x 432 x 394	44.45 x 432 x 394
Form Factor	Rack Mount, 1 RU	Rack Mount, 1 RU	Rack Mount, 1 RU	Rack Mount, 1 RU	Rack Mount, 1 RU
Weight	7.28 lbs (3.3 kg)	7.28 lbs (3.3 kg)	7.28 lbs (3.3 kg)	12.4 lbs (5.6 kg)	12.4 lbs (5.6 kg)
Environment
Power Required	100–240V AC, 60–50 Hz
Maximum Current	100V / 1A, 240V / 0.5A	100V / 1A, 240V / 0.5A	100V / 1A, 240V / 0.5A	100V / 0.4A	100V / 5A
Total Available PoE Power Budget*	-	-	-	-	400 W
Power Consumption (Average / Maximum)	23.0 W / 25.5 W	24.8 W / 27.5 W	24.4 W / 26.9 W	34.4 W / 40.0 W	477.1 W / 500.0 W
Heat Dissipation	87.0 BTU/h	93.8 BTU/h	91.8 BTU/h	136.48 BTU/h	1706.07 BTU/h
Operating Temperature	32–104°F (0–40°C)
Storage Temperature	-31–158°F (-35–70°C)
Humidity	10–90% non-condensing
Noise Level	40.4 dBA	40.4 dBA	40.4 dBA	40.4 dBA	57 dBA
Compliance	FCC Part 15B, Class A, CE, RCM, VCCI, UL/cUL, CB, BSMI
Certifications	ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; IPv6

Note: All performance values are “up to” and vary depending on system configuration.
1. IPsec VPN performance test uses AES256-SHA256.
2. IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured with Logging enabled.
3. SSL Inspection performance values use an average of HTTPS sessions of different cipher suites.
4. NGFW performance is measured with Firewall, IPS and Application Control enabled.
5. Threat Protection performance is measured with Firewall, IPS, Application Control and Malware Protection enabled.
* Maximum loading on each PoE/+ port is 30 W (802.3at).

Documentation:

Download the Fortinet FortiGate 100E Series Data Sheet (PDF).