FortiGate-600E-BDL-950-12

Fortinet FortiGate FG-600E-BDL-950-12 – security appliance Plus 1 year FortiCare 24X7 Service + 1 year FortiGuard

The “EU” in FG‑600E‑BDL‑950‑12‑EU indicates the version / region (Europe) of the hardware + license bundle. “BDL‑950” denotes a bundle including FortiGuard / UTP (Unified Threat Protection) services and FortiCare support (24×7) for 1 year (in this variant). The bundle gives you a fully supported, licensed unit out‑of‑box (hardware + 1 year of services).

The FortiGate 600E series provides an application-centric, scalable, and secure SD-WAN solution with Next Generation Firewall (NGFW) capabilities for mid-sized to large enterprises deployed at the campus or branch level. Protects against cyber threats with system-on-a-chip acceleration and industry-leading secure SD-WAN in a simple, affordable, and easy to deploy solution. Fortinet’s Security-Driven Networking approach provides tight integration of the network to the new generation of security.

Key Specs & Performance (Same as non‑EU variant)

These are typically identical across region variants (unless there are slight regulatory or connector differences):

• Firewall throughput (IPv4 / UDP / 1518-byte): ~ 36 Gbps
• NGFW / threat protection throughput: ~ 9.5 Gbps (NGFW) / ~ 7 Gbps (Threat)
• IPS throughput: ~ 10 Gbps
• Concurrent TCP sessions: ~ 8,000,000
• New sessions per second: ~ 450,000
• IPsec VPN throughput: ~ 20 Gbps
• SSL-VPN / SSL inspection: ~ 7‑8 Gbps (for SSL / HTTPS inspection)
• Ports / Interfaces:
   • 2 × 10 GE SFP+
   • 8 × GE SFP
   • 8 × GE RJ‑45 (some used as switch / HA / management)
   • 2 × RJ‑45 management (in many diagrams)
• Power / thermal / form factor: average ~ 129 W, max ~ 244 W, 1U rack mount, dimensions ~ 432 × 380 mm, weight ~ 7.3 kg

Security

• Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement
• Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic
• Prevent and detect against known and unknown attacks using continuous threat intelligence from AI-powered FortiGuard Labs security services

Performance

• Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology
• Provides industry-leading performance and protection for SSL encrypted traffic

Certification

• Independently tested and validated best security effectiveness and performance
• Received unparalleled third-party certifications from NSS Labs

Networking

• Delivers advanced networking capabilities that seamlessly integrate with advanced layer 7 security and virtual domains (VDOMs) to offer extensive deployment flexibility, multi-tenancy and effective utilization of resources
• Delivers high-density, flexible combination of various high-speed interfaces to enable best TCO for customers for data center and WAN deployments

Management

• Includes a management console that is effective, simple to use, and provides comprehensive network automation and visibility
• Provides Zero Touch Integration with Security Fabric’s Single Pane of Glass Management
• Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture

Security Fabric

• Enables Fortinet and Fabric-ready partners’ products to provide broader visibility, integrated end-to-end detection, threat intelligence sharing, and automated remediation

Deployment & Operational Tips

• Use redundant power (if supported) and proper cooling, since it can draw substantial power under load.
• Be mindful of licensing transition: at end of 1 year, ensure you renew so threat services don’t lapse.
• Plan capacity with margin: traffic may grow, and enabling SSL inspection or heavy IPS rules can reduce effective throughput.
• Use high quality SFP / SFP+ transceivers and cabling when leveraging 10G interfaces.
• Monitor CPU, memory, and session usage over time to catch bottlenecks early.
• If you will run high VPN, SSL decryption, or many users, test in a lab or pilot first to ensure performance is adequate.

Use Cases & Suitability

Given its specifications, here’s where this appliance is well suited:

• Mid to large enterprise deployments — enough throughput and capacity to serve high traffic, campus backbone or data center perimeters.

• High VPN / SSL usage — the strong IPsec and SSL‑VPN throughput makes it suited for remote worker access or interbranch tunnels.

• Full UTM / threat protection — with the included bundle, you can deploy it with full security features (IPS, AV, web filtering, sandboxing) and expect credible performance.

• Scalable environments — because of its high session capacity and multiple ports, it can grow with network usage.