Max Sessions: 1,400,000 concurrent TCP sessions; 5,000 firewall policies; 200 gateway-to-gateway and 500 client-to-gateway IPsec VPN tunnels
New Sessions/sec: 85,000 new TCP sessions per second
Interfaces: 6x GE RJ45 (4 LAN and 2 WAN per product description); 1 GE RJ45 bypass pair (PORT1/PORT2); 2x GE SFP slots; 1x RJ45 serial (data); 1x RJ45 console; 1x USB 2.0; 1x microSD slot; digital I/O module. No cellular or Wi-Fi.
Form Factor: Ruggedized fanless desktop, DIN-rail, or wall mount; 42.7 x 216 x 159 mm (1.68 x 8.50 x 6.26 in); 1.24 kg (2.74 lb); IP40
Processor: FortiSP5 with TPM
Power Input: Redundant 12-125 VDC dual inputs (DC cables not included); 15.2 W average / 18.7 W max; 12 V DC / 1.67 A max; 64 BTU/h max heat dissipation
Operating Temperature: -40u00b0C to 75u00b0C (-40u00b0F to 167u00b0F); storage -40u00b0C to 85u00b0C; 5-95% non-condensing humidity; up to 3,048 m (10,000 ft) altitude
PoE: Not listed (no PoE)
Curation Review
✔ Pros:Ruggedized, fanless design rated for -40°C to 75°C operation, suited to harsh industrial and OT sites; Redundant 12-125 VDC dual power inputs improve availability in substations, vehicles and industrial plants; Strong throughput for an industrial unit at 8 Gbps firewall and 7.1 Gbps IPsec VPN; Built-in SD-WAN and FortiOS with FortiGuard security services and OT-focused IPS; Two SFP slots plus a bypass port pair and a digital I/O module support fiber uplinks and fail-safe deployment; Supports DIN-rail, desktop and wall mounting; TPM and FortiSP5 hardware for security
✘ Cons:Only 1.1 Gbps threat protection and 1.25 Gbps NGFW throughput, well below the headline firewall figure once security services are enabled; No PoE, cellular or Wi-Fi built in, so separate hardware is needed for those; IP40 rating is weaker than IP67-class enclosures for washdown or dusty environments; Bundled security subscriptions (UTP, FortiCare) are a recurring cost and add significantly to the total price; DC power cables are not included and must be sourced separately; Public spec sources conflict on IP rating (IP30 vs IP40), and some spec tables come from resellers rather than Fortinet
✔ Pros:25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
✘ Cons:IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers