Fortinet FortiGate-60F Network Security Appliance (Hardware Only)

The Fortinet FortiGate-60F is a next-generation firewall (NGFW) appliance that delivers enterprise-class security and SD-WAN capabilities in a compact, affordable package designed specifically for small to medium-sized businesses, branch offices, and distributed enterprises. Powered by Fortinet’s purpose-built security processors and FortiOS operating system, the FortiGate-60F provides comprehensive threat protection without compromising network performance.

High-Performance Security

The FortiGate-60F leverages Fortinet’s Security Processing Units (SPUs) to deliver exceptional performance with firewall throughput of 10 Gbps and threat protection throughput of 600 Mbps. This hardware acceleration ensures that advanced security features like IPS (900 Mbps), application control, web filtering, and antivirus inspection operate at wire speed without creating network bottlenecks. The appliance handles up to 200,000 concurrent sessions with 10,000 new sessions per second, providing ample capacity for demanding business environments.

Comprehensive Threat Protection

As a next-generation firewall, the FortiGate-60F goes far beyond traditional stateful packet inspection. It provides deep packet inspection to identify and block sophisticated threats including malware, ransomware, botnets, and zero-day exploits. The integrated Intrusion Prevention System (IPS) uses signature-based and behavioral detection to stop network attacks in real-time. Application control allows granular visibility and policy enforcement based on applications rather than just ports and protocols, while advanced web filtering protects users from malicious websites and enforces acceptable use policies.

Integrated SD-WAN

The FortiGate-60F includes native SD-WAN functionality, enabling intelligent WAN optimization and application steering across multiple internet connections. Define application-aware routing policies to automatically steer critical traffic over the best available path based on performance, cost, or security requirements. Seamlessly failover between connections when link quality degrades or outages occur. The SD-WAN capabilities extend to IPsec VPN overlays, creating secure, resilient connections between sites while optimizing application performance across the WAN.

Flexible Connectivity

With 10 Gigabit Ethernet ports including 2 dedicated WAN ports, 5 internal switch ports, and 2 DMZ ports, the FortiGate-60F provides exceptional deployment flexibility. The dual WAN ports support multiple ISP connections for load balancing, failover, or SD-WAN deployments. The 5-port internal switch simplifies small office deployments by eliminating the need for a separate LAN switch, while the DMZ ports enable secure placement of public-facing servers. All ports support auto-negotiation and auto-MDI/MDIX for plug-and-play connectivity.

Robust VPN Capabilities

Support for up to 500 IPsec VPN tunnels enables secure site-to-site connectivity across distributed locations, while SSL VPN provides secure remote access for up to 200 users (60 included, expandable with license). The FortiClient VPN client offers endpoint security integration, ensuring remote users maintain security compliance before accessing corporate resources. High Availability (HA) configurations in active-passive or active-active modes provide business continuity and eliminate single points of failure.

Multi-Tenant & Segmentation

Virtual Domains (VDOMs) allow the FortiGate-60F to function as multiple independent firewall instances within a single physical appliance, perfect for managed service providers, multi-tenant environments, or enterprises requiring strict network segmentation. Support for up to 10 VDOMs enables logical separation of networks, policies, and management while maximizing hardware utilization.

Centralized Management & Visibility

The FortiGate-60F integrates seamlessly with Fortinet’s Security Fabric ecosystem. FortiManager enables centralized configuration, policy management, and firmware updates across distributed FortiGate deployments. FortiAnalyzer provides comprehensive logging, reporting, and security analytics with customizable dashboards. FortiCloud offers cloud-based management and monitoring for simplified deployment. The REST API enables automation and integration with third-party tools and orchestration platforms.

User-Friendly Interface

Choose between the intuitive web-based GUI for point-and-click configuration or the powerful CLI for advanced scripting and automation. The dashboard provides at-a-glance visibility into security events, traffic patterns, and system health. Built-in wizards simplify common tasks like VPN setup, policy creation, and SD-WAN configuration, reducing deployment time and complexity.

Silent, Energy-Efficient Design

The fanless design ensures completely silent operation, making the FortiGate-60F ideal for office environments, retail locations, or anywhere noise would be disruptive. The compact desktop form factor can also be rack-mounted using optional accessories. Low power consumption reduces operating costs and environmental impact while maintaining reliable 24/7 operation.

FortiGuard Security Services

While the FortiGate-60F hardware provides the foundation for comprehensive security, subscription-based FortiGuard services deliver continuously updated threat intelligence. The UTM bundle includes IPS, Application Control, Web Filtering, Antivirus, and Anti-Spam signatures. The Enterprise bundle adds advanced features like FortiSandbox Cloud for zero-day protection, Security Rating, and Industrial Security signatures. Regular signature updates ensure protection against emerging threats.

Ideal Applications

Perfect for small to medium businesses requiring enterprise-grade security, branch offices needing secure SD-WAN connectivity, retail locations with PCI compliance requirements, healthcare facilities protecting patient data, schools and universities managing student internet access, managed service providers supporting multiple customers, and any organization requiring high-performance threat protection with VPN and SD-WAN capabilities.

Backed by Fortinet’s global support infrastructure and extensive partner ecosystem, the FortiGate-60F delivers enterprise-class security that scales with your business.

—

Technical Specifications

Performance (with services enabled)

• Firewall Throughput: 10 Gbps (1518 / 512 / 64 byte UDP packets)
• Firewall Latency: 5 µs (64 byte UDP packets)
• Firewall Throughput (Packets Per Second): 6 Mpps
• Concurrent Sessions: 200,000
• New Sessions/Second: 10,000
• Firewall Policies: 5,000
• IPsec VPN Throughput: 1.8 Gbps
• Gateway-to-Gateway IPsec VPN Throughput: 750 Mbps
• SSL VPN Throughput: 250 Mbps
• Threat Protection Throughput: 600 Mbps
• NGFW Throughput: 500 Mbps
• IPS Throughput: 900 Mbps
• Application Control Throughput: 700 Mbps
• Anti-Malware Throughput: 500 Mbps
• CAPWAP Throughput: 700 Mbps

Interfaces

• GE RJ45 Ports: 10x 10/100/1000 Mbps (auto-sensing, auto-MDI/MDIX)
• 2x WAN ports
• 5x Internal switch ports
• 2x DMZ ports
• 1x Management port
• USB Port: 1x USB 3.0 Type A
• Console Port: 1x RJ45 console port
• Interface Modes: NAT/Route, Transparent, Switch
• Link Aggregation: 802.3ad (LACP)

VPN

• IPsec VPN:
• Max tunnels: 500
• Encryption: DES, 3DES, AES (128/192/256-bit), AES-GCM
• Authentication: SHA-1, SHA-2 (256/384/512), MD5
• IKEv1 and IKEv2 support
• Dead Peer Detection (DPD)
• NAT-Traversal (NAT-T)
• Perfect Forward Secrecy (PFS)
• Hub-and-spoke, mesh, and redundant topologies
• SSL VPN:
• Concurrent users: 60 (200 maximum with license)
• Web mode and tunnel mode
• FortiClient integration
• Two-factor authentication support
• Single Sign-On (SSO)
• Dialup VPN: PPTP, L2TP
• VPN Monitoring: Real-time tunnel monitoring and diagnostics

Routing

• Static Routing: IPv4/IPv6
• Policy-based Routing: Source and destination-based
• Dynamic Routing:
• RIP v1/v2
• OSPF v2/v3
• BGP v4
• IS-IS
• Multicast Routing: PIM-SM, PIM-DM, IGMP v1/v2/v3
• Virtual Routing: Multiple routing tables (VRF)
• SD-WAN: Application steering, link load balancing, SLA-based routing

Security Features

• Firewall:
• Stateful inspection
• DoS/DDoS protection
• IPv4/IPv6 firewall
• Virtual IP (VIP), IP pools
• Protocol inspection (HTTP, FTP, SMTP, etc.)
• Intrusion Prevention (IPS):
• Signature-based and anomaly-based detection
• Protocol decoders
• Custom signatures
• Vulnerability scanning integration
• Application Control:
• 5,500+ application signatures
• Application category and risk-based policies
• Custom application definitions
• Deep packet inspection
• Web Filtering:
• 80+ categories
• URL filtering
• FortiGuard web filter
• YouTube education filter
• Safe Search enforcement
• Antivirus/Anti-Malware:
• Virus scanning (HTTP, FTP, SMTP, POP3, IMAP, NNTP)
• Inline and flow-based inspection
• Grayware detection
• Botnet C&C blocking
• Anti-Spam: Email filtering (requires subscription)
• Data Loss Prevention (DLP):
• File type filtering
• Pattern matching
• Fingerprinting
• Watermarking
• SSL Inspection:
• Deep SSL inspection
• Certificate inspection
• Full SSL decryption/re-encryption
• Advanced Threat Protection:
• FortiSandbox integration (cloud)
• Threat intelligence feeds
• Security rating
• Industrial security (OT/ICS)

High Availability & Reliability

• HA Modes: Active-Passive (A-P), Active-Active (A-A)
• HA Heartbeat: Dedicated HA ports, in-band HA over data ports
• Session Synchronization: Session pickup, connection failover
• Configuration Sync: Automatic config synchronization
• Link Monitoring: Interface, gateway, and route monitoring
• Clustering: Virtual clustering support

Virtual Domains (VDOMs)

• Maximum VDOMs: 10
• Per-VDOM Features: Independent routing, policies, VPN, HA
• VDOM Types: NAT mode, transparent mode, mixed mode
• Inter-VDOM Links: VDOM connectivity and routing

User Authentication

• Local Database: Users and groups
• RADIUS: Authentication and accounting
• LDAP: Active Directory, OpenLDAP integration
• TACACS+: Authentication, authorization, accounting
• SAML: Single Sign-On integration
• FSSO (Fortinet Single Sign-On): Transparent user identification
• Two-Factor Authentication: FortiToken, SMS, email
• Certificate-based Authentication: PKI integration

Logging & Reporting

• Local Logging: Built-in storage (limited)
• Remote Logging: Syslog, FortiAnalyzer, FortiCloud
• Log Types: Traffic, event, virus, attack, web filter, DLP, spam
• Reports: Pre-defined and custom reports
• Alerts: Email, SNMP trap, syslog alerts
• Traffic Analysis: Real-time and historical traffic analysis

Management

• Web GUI: HTTPS browser-based interface
• CLI: SSH, Telnet, console access
• SNMP: v1/v2c/v3
• REST API: Full API for automation and integration
• FortiManager: Centralized management platform
• FortiAnalyzer: Centralized logging and reporting
• FortiCloud: Cloud-based management and monitoring
• Zero-Touch Provisioning: Automatic configuration deployment
• Firmware Management: Scheduled upgrades, automatic rollback
• Discovery Protocols: LLDP, CDP
• Configuration Backup/Restore: Local and cloud backup

SD-WAN Features

• WAN Interfaces: Up to 10 WAN links
• Link Monitoring: Latency, jitter, packet loss detection
• Application Steering: Application-based routing policies
• SLA Monitoring: Real-time SLA measurement and enforcement
• Load Balancing: Session-based, spillover, volume-based
• Link Cost: Billing cycle and overage cost management
• VPN Overlay: SD-WAN over IPsec VPN
• Templates: Centralized SD-WAN template management

Wireless Controller (integrated)

• Managed FortiAPs: Up to 10 (expandable with license)
• WTP Tunnels: CAPWAP tunnel support
• Wireless Standards: 802.11a/b/g/n/ac/ax (AP dependent)
• WLAN Management: SSID, security, guest access
• Rogue AP Detection: Wireless intrusion prevention

Physical Specifications

• Form Factor: Desktop / 1U rackmountable
• Dimensions (W x D x H): 200 x 130 x 31 mm (7.9 x 5.1 x 1.2 in)
• Weight: 0.9 kg (2.0 lbs)
• Housing: Metal chassis
• Cooling: Fanless (silent operation)
• Mounting: Desktop, optional rack-mount kit
• LED Indicators:
• Power, HA, Alarm
• Per-port: Link/Activity, Speed

Power

• Input: 100-240V AC, 50-60Hz (external power adapter)
• DC Input: 12V / 3A
• Power Consumption:
• Idle: 11W
• Average: 13W
• Maximum: 36W
• Power Supply: External AC/DC adapter included
• Redundant Power: Optional (requires compatible power supply)

Environmental

• Operating Temperature: 0°C to 40°C (32°F to 104°F)
• Storage Temperature: -30°C to 70°C (-22°F to 158°F)
• Operating Humidity: 10% to 90% non-condensing
• Storage Humidity: 5% to 95% non-condensing
• Operating Altitude: Up to 3,000m (9,843 ft)
• MTBF: 467,279 hours (53.3 years)

Certifications & Compliance

• Safety: UL/cUL, CB, CE, FCC
• EMC: FCC Part 15 Class A, CE, VCCI, C-Tick
• Security: Common Criteria EAL4+, FIPS 140-2, ICSA Labs
• Environmental: RoHS, WEEE, REACH
• IPv6: IPv6 Ready Logo Phase 2
• Government: TAA compliant options available
• PCI DSS: Payment Card Industry compliance

Operating System

• FortiOS Version: 7.x (check current version)
• Features:
• Unified threat management
• SD-WAN orchestration
• Security Fabric integration
• AI-powered threat detection
• Automated response and remediation

FortiGuard Security Services (Subscriptions Required)

• UTM Bundle:
• IPS signatures
• Application Control
• Web Filtering
• Antivirus
• Anti-Spam (email)
• Enterprise Bundle:
• All UTM features
• FortiSandbox Cloud
• Security Rating
• Industrial Security (OT/ICS)
• Advanced Malware Protection
• Additional Services:
• Cloud Sandbox (file analysis)
• Mobile Security
• Video Filtering
• DNS Filtering
• IoT Detection Service
• Support Services:
• 8×5 or 24×7 FortiCare support
• Hardware replacement
• Firmware updates
• FortiGuard threat intelligence

Package Contents

• 1x FortiGate-60F appliance
• 1x External power adapter (12V/3A)
• 1x Power cord (region-specific)
• 1x Console cable (RJ45 to DB9)
• 1x Rubber feet (4 pieces)
• 1x Quick Start Guide
• 1x Warranty/Registration card

Warranty & Support

• Hardware Warranty: 1 year (included)
• Extended Warranty: Available with FortiCare subscriptions
• Replacement: Advance replacement (with valid support)
• Software Updates: FortiOS updates (with valid support)
• Technical Support: Email, phone, web portal (8×5 or 24×7)
• RMA Process: Streamlined hardware replacement

Optional Accessories

• Rack-mount kit
• Redundant power supply
• Extended FortiCare support (3/5 year)
• FortiToken (two-factor authentication)
• Additional FortiAP licenses
• Additional SSL VPN user licenses

Comparison & Scalability

• Smaller Model: FortiGate-40F (fewer ports, lower throughput)
• Larger Model: FortiGate-80F (more ports, higher throughput)
• Similar Model: FortiGate-60E (previous generation)
• Cloud Option: FortiGate-VM (virtual appliance)