New Sessions/sec: 35,000 new TCP sessions per second
Interfaces: 10 x GE RJ45 ports (2 x WAN, 1 x DMZ, 7 x internal; port roles vary by listing); no SFP ports on base model; 1 x USB; 1 x console
Form Factor: Desktop
Curation Review
✔ Pros:Strong firewall and IPsec VPN throughput for its class (10 Gbps firewall, 6.5 Gbps IPsec); Dense 10-port GE RJ45 layout suits small and branch offices; Full FortiOS feature set with NGFW, IPS, SD-WAN and FortiGuard security services; High session capacity (700,000 concurrent, 35,000 new per second); Competitive hardware-only pricing (roughly $491 to $566) compared with many enterprise-grade firewalls; Simple desktop form factor that needs no rack
✘ Cons:Threat protection throughput (700 Mbps in Fortinet's datasheet) is far below the headline firewall figure, so full inspection is a bottleneck; Subscription licensing (UTP/ATP/Enterprise bundles) is required for full security features and raises total cost substantially (about $900 to $2,600 for bundles); SSL VPN capacity is modest (about 900 Mbps and 200 concurrent users) and not suited to large remote-access deployments; Only 10 copper GE ports and no SFP uplinks limit fiber and high-speed uplink options; No built-in Wi-Fi on the base model (FortiWiFi-60F variant required)
✔ Pros:25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
✘ Cons:IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers