Fortinet FortiGate 3001F-DC
High Performance with Flexibility

Overview:

The FortiGate 3000F Series enables organizations to build security-driven networks that can weave security deep into their datacenter and across their hybrid IT architecture to protect any edge at any scale.

Powered by a rich set of AI/ML-based FortiGuard Services and an integrated security fabric platform, the FortiGate 3000F Series delivers coordinated, automated, end-to-end threat protection across all use cases.

The industry’s first integrated Zero Trust Network Access (ZTNA) enforcement within an NGFW solution, FortiGate 3000F automatically controls, verifies, and facilitates user access to applications delivering consistent convergence with a seamless user experience.

Use Cases

Next Generation Firewall (NGFW)

• FortiGuard Labs’ suite of AI-powered Security Services—natively integrated with your NGFW—secures web, content, and devices and protects networks from ransomware and sophisticated cyberattacks
• Real-time SSL inspection (including TLS 1.3) provides full visibility into users, devices, and applications across the attack surface
• Fortinet’s patented SPU (Security Processing Unit) technology provides industry-leading high-performance protection

Segmentation

• Dynamic segmentation adapts to any network topology to deliver true end-to-end security—from the branch to the datacenter and across multi-cloud environments
• Ultra-scalable, low latency, VXLAN segmentation bridges physical and virtual domains with Layer 4 firewall rules
• Prevents lateral movement across the network with advanced, coordinated protection from FortiGuard Security Services detects and prevents known, zero-day, and unknown attacks

Secure SD-WAN

• FortiGate WAN Edge powered by one OS and unified security and management framework and systems transforms and secures WANs
• Delivers superior quality of experience and effective security posture for work-from-any where models, SD-Branch, and cloud-first WAN use cases
• Achieve operational efficiencies at any scale through automation, deep analytics, and self-healing

HyperScale

• Purpose-built SPUs power FortiOS to consolidate networking and security and deliver ultra-scalable Security-Driven Networks
• Unparalleled ultra-high performance offers the industry’s highest number of connections and connections per second performance combined with security-enabled performance to safeguard business-critical applications
• Hardware assisted anti-DDoS prevents volumetric attacks and delivers strong security posture

Mobile Security for 4G, 5G, and IoT

• SPU-accelerated, high performance CGNAT and IPv6 migration options, including: NAT44, NAT444, NAT64/ DNS64, NAT46 for 4G Gi/sGi, and 5G N6 connectivity and security
• RAN Access Security with highly scalable and highest-performing IPsec aggregation and control Security Gateway (SecGW)
• User plane security enabled by full threat protection and visibility into GTP-U inspection

Datacenter Deployment (NGFW, IPS, Segmentation)

Hyperscale Firewall License

This perpetual license empowers organizations by unlocking further performance boosts. The Hyperscale Firewall License enables the hardware acceleration of CGNAT features by utilizing Fortinet’s patented SPU NP7. These features include hardware session setup, firewall session logging, and NAT.

Trusted Platform Module (TPM)

The FortiGate 3000F Series features a dedicated module that hardens physical networking appliances by generating, storing, and authenticating cryptographic keys. Hardware-based security mechanisms protect against malicious software and phishing attacks.

100 GE Connectivity for Network

High-speed connectivity is essential for network security segmentation at the core of data networks. The FortiGate 3000F series provides multiple 100 GE QSFP28 slots, simplifying network designs without relying on additional devices to bridge desired connectivity.

Specifications:

Note: All performance values are “up to” and vary depending on system configuration.
* Requires Hyperscale Firewall License
¹ IPsec VPN performance test uses AES256-SHA256.
² IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured with Logging enabled.
³ SSL Inspection performance values use an average of HTTPS sessions of different cipher suites.
⁴ NGFW performance is measured with Firewall, IPS and Application Control enabled.
⁵ Threat Protection performance is measured with Firewall, IPS, Application Control and Malware Protection enabled
⁶ Uses RSA-2048 Certificate

Documentation:

Download the Fortinet FortiGate 3000F Series Data Sheet (PDF).