FortiGate-600F-BDL-950-12

FG-600F-BDL-950-12 Fortinet FortiGate FG-600F Network Security/Firewall Appliance

Description

Model / SKU: FG‑600F‑BDL‑950‑12 it’s a bundle that includes the FortiGate 600F hardware plus a 1‑year subscription to FortiCare Premium (support, warranty, etc.) and FortiGuard UTP (Unified Threat Protection) services. The UTP services generally include security features such as IPS, antivirus / anti-malware, application control, web filtering, etc

Features & Advantages

Security

• Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement
• Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic
• Prevent and detect against known and unknown attacks using continuous threat intelligence from AI-powered FortiGuard Labs security services

Performance

Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology. Provides industry-leading performance and protection for SSL encrypted traffic

High Performance & Hardware Acceleration features

• The unit is built around Fortinet’s ASIC / SPU (Security Processing Unit) architecture (NP7 / CP9) to offload security processing and maintain high throughput.
• Firewall throughput (IPv4 / large packets) of ~ 139 Gbps
• IPS throughput ~14 Gbps
• NGFW / Threat Protection throughput (with UTP services) ~10.5 Gbps
• SSL inspection throughput ~9 Gbps
• Very high session capacity: up to ~ 8 million concurrent sessions
• High new session rate: ~ 550,000 new TCP sessions per second

Certification

• Independently tested and validated best security effectiveness and performance
• Received unparalleled third-party certifications from NSS Labs

High VPN / Secure Connectivity

• IPsec VPN throughput ~ 55 Gbps
• Supports large numbers of VPN tunnels: e.g. client-to-gateway, gateway-to-gateway, SSL‑VPN users.
• SSL VPN capabilities for remote user access.

Networking

• Delivers advanced networking capabilities that seamlessly integrate with advanced layer 7 security and virtual domains (VDOMs) allows segmentation of the device into multiple logical firewalls for multi-tenant or departmental use.
• Delivers high-density, flexible combination of various high-speed interfaces to enable best TCO for customers for data center and WAN deployments
• Supports HA modes: Active‑Active, Active‑Passive, clustering to provide redundancy and scale.

Management

• Includes a management console that is effective, simple to use, and provides comprehensive network automation and visibility
• Provides Zero Touch Integration with Security Fabric’s Single Pane of Glass Management
• Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture

Security Fabric & Ecosystem Integration

• Integration with Fortinet Security Fabric: allows sharing of threat intelligence, coordinated security across network, endpoints, cloud.
• Centralized management via FortiManager / FortiAnalyzer / FortiCloud and seamless orchestration across multiple devices.
• Zero‑touch deployment / automation & compliance check features to help with scaling and consistent policy enforcement.

Form Factor, Reliability & Operating Conditions

• 1U rackmount form factor (compact for data centers).
• Weight ~7.1 kg
• Operating range in typical environments: 0–40 °C, humidity non-condensing, airflow design, etc.
• Redundant power supplies, efficient cooling, design for enterprise-grade reliability.

Strengths

• High throughput & hardware acceleration — Useful when traffic volumes are large, especially with encrypted traffic.
• Rich interface mix — SFP / SFP+ / SFP28 ports give flexibility for fiber, 10G, 25G, etc.
• Scalable and feature rich — Supports UTP features (IPS, AV, web filtering, etc.), multiple VPNs, lots of sessions, HA modes.
• Good for enterprise / campus / data center edge — It is overkill for small offices, but well suited for larger deployments.

Use Cases

• WAN / Internet edge for large enterprise or data center
• Branch aggregation / campus perimeter security
• High throughput encrypted traffic inspection
• Deployments where you expect growth in bandwidth, users, or services