FortiGate 400G
164 Gbps of firewall throughput, 28 million concurrent sessions and 25 GE SFP28 uplinks - a data centre core in 1 RU.
Full specs and SKUsFortinet · FortiGate Mid-Range
FortiGate 400G vs FortiGate 600E
Of the 63 specifications Fortinet publishes across these two models, 53 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 600E
36 Gbps of firewall throughput and 8 million sessions on NP6 and CP9 - the previous-generation 600-class box.
Full specs and SKUsKey differences
The rows most buyers check first. All 53 differences are in the full table below.
-
IPS Throughput
FortiGate 400G25 Gbps
FortiGate 600E10 Gbps
-
NGFW Throughput
FortiGate 400G14 Gbps
FortiGate 600E9.5 Gbps
-
Threat Protection Throughput
FortiGate 400G13 Gbps
FortiGate 600E7 Gbps
-
IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP)
FortiGate 400G164 / 164 / 145 Gbps
FortiGate 600E36 / 36 / 27 Gbps
-
IPv6 Firewall Throughput
FortiGate 400G164 / 164 / 145 Gbps 1518 / 512 / 86 byte UDP
FortiGate 600E36 / 36 / 27 Gbps 1518 / 512 / 64 byte UDP
-
Firewall Latency (64 byte UDP)
FortiGate 400G2.51 microseconds
FortiGate 600E2 microseconds
Which one fits
The FortiGate 600E is not a straight step up from the FortiGate 400G: it publishes less threat-protection throughput (7 Gbps against 13 Gbps) and IPS throughput (10 Gbps against 25 Gbps). On the headline figures it gains nothing. Neither choice moves the site-to-site tunnel count (both 2,000) or the client tunnel count (both 50,000), so a site held back by how many branches terminate on it gains nothing from the FG-600E.
Choose the FortiGate 400G if
- SSL-VPN throughput is already enough at 6.1 Gbps: the FG-600E adds +15% you will not use.
- The FG-400G is ahead on threat-protection throughput: 13 Gbps against 7 Gbps.
- The FG-400G is ahead on IPS throughput: 25 Gbps against 10 Gbps.
- Your limit is how many branches terminate on it, which the step up does not move: 2,000 against 2,000.
Choose the FortiGate 600E if
- SSL-VPN throughput has to go past 6.1 Gbps: the FG-600E publishes 7 Gbps.
- The FortiAP limit has to go past 512 / 256: the FG-600E publishes 1,024 / 512.
- Firewall latency has to go past 2.51 microseconds: the FG-600E publishes 2 microseconds.
- Form Factor: Rack mount, 1 RU, where the FG-400G is Rack mount, 1 RU.
10 of the 63 published rows are identical — Firewall Policies at 10,000, Gateway-to-Gateway IPsec VPN Tunnels at 2,000, Client-to-Gateway IPsec VPN Tunnels at 50,000 and Concurrent SSL-VPN Users at 5,000 among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 400G | FortiGate 600E |
|---|---|---|
| Hardware | ||
| Hardware Accelerated 25/10 GE SFP28/SFP+ Slots | 4 | Not published |
| Hardware Accelerated 10/1 GE SFP+/SFP FortiLink Slots | 4 | Not published |
| GE SFP Slots | 16 | 8 |
| 5/2.5/1 GE RJ45 Ports | 8 | Not published |
| Hardware Accelerated 2.5/1 GE RJ45 HA Port | 1 | Not published |
| Hardware Accelerated GE RJ45 Management Port | 1 | Not published |
| USB Ports | 2 client / server | 2 |
| Console Port (RJ45) | 1 | 1 |
| Onboard Storage | Not fitted - see the FortiGate 401G for the model with two 480 GB SSDs | Not fitted - see the FortiGate 601E for the model with two 240 GB SSDs |
| Trusted Platform Module (TPM) | Yes | Not published |
| Bluetooth Low Energy (BLE) | Not fitted | Not published |
| Signed Firmware Hardware Switch | Yes | Not published |
| FortiSentry | Yes | Not published |
| Included Transceivers | 2 x SFP SX | 2 x SFP (SX, 1 GE) |
| Hardware Acceleration | NP7 and CP10 security processors | NP6 and CP9 security processors |
| Hardware Accelerated 10 GE SFP+ Slots | Not published | 2 |
| Hardware Accelerated GE RJ45 Interfaces | Not published | 8 |
| GE RJ45 Management Ports | Not published | 2 |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 25 Gbps | 10 Gbps |
| NGFW Throughput | 14 Gbps | 9.5 Gbps |
| Threat Protection Throughput | 13 Gbps | 7 Gbps |
| System Performance | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP) | 164 / 164 / 145 Gbps | 36 / 36 / 27 Gbps |
| IPv6 Firewall Throughput | 164 / 164 / 145 Gbps 1518 / 512 / 86 byte UDP | 36 / 36 / 27 Gbps 1518 / 512 / 64 byte UDP |
| Firewall Latency (64 byte UDP) | 2.51 microseconds | 2 microseconds |
| Firewall Throughput (packets per second) | 217.5 Mpps | 40.5 Mpps |
| Concurrent Sessions (TCP) | 28 million | 8 million |
| New Sessions per Second (TCP) | 580,000 | 450,000 |
| Firewall Policies | 10,000 | 10,000 |
| IPsec VPN Throughput (512 byte) | 55 Gbps | 20 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 2,000 | 2,000 |
| Client-to-Gateway IPsec VPN Tunnels | 50,000 | 50,000 |
| SSL-VPN Throughput | 6.1 Gbps | 7 Gbps |
| Concurrent SSL-VPN Users (recommended maximum, tunnel mode) | 5,000 | 5,000 |
| SSL Inspection Throughput (IPS, average HTTPS) | 11.5 Gbps | 8 Gbps |
| SSL Inspection Connections per Second (IPS, average HTTPS) | 9,700 | 5,500 |
| SSL Inspection Concurrent Sessions (IPS, average HTTPS) | 3 million | 800,000 |
| Application Control Throughput (HTTP 64K) | 50 Gbps | 15 Gbps |
| CAPWAP Throughput (HTTP 64K) | 131 Gbps | 18 Gbps |
| Virtual Domains (VDOMs) | 10 default / 50 maximum | 10 default / 10 maximum |
| Maximum Number of FortiSwitches Supported | 96 | 64 |
| Maximum Number of FortiAPs (total / tunnel mode) | 512 / 256 | 1,024 / 512 |
| Maximum Number of FortiTokens | 5,000 | 1,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| Maximum Number of Registered Endpoints | Not published | 2,000 |
| Dimensions | ||
| Height x Width x Length | 1.75 x 17.0 x 13.5 in (44.45 x 432 x 342 mm) | 1.75 x 17.0 x 15.0 in (44.45 x 432 x 380 mm) |
| Weight | 7.72 lbs (3.5 kg) | 16.1 lbs (7.3 kg) |
| Form Factor | Rack mount, 1 RU (supports EIA / non-EIA standards) | Rack mount, 1 RU |
| Rack Mount Type | 1 RU | 1 RU |
| Power and Environment | ||
| AC Power Supply | 100-240 V AC, 50/60 Hz | Not published |
| AC Current (maximum) | 6 A @ 100 V AC | Not published |
| Redundant Power Supplies | Yes - dual non-swappable AC PSUs fitted by default for 1+1 redundancy | Optional, hot swappable - not fitted by default |
| Power Consumption | 230 W / 283 W average / maximum | 129 W / 244 W average / maximum |
| Heat Dissipation | 965 BTU/hr | 832 BTU/hr |
| Operating Temperature | 32-113 F (0-45 C) | 32-104 F (0-40 C) |
| Storage Temperature | -31-158 F (-35-70 C) | -31-158 F (-35-70 C) |
| Humidity | 10% to 90% non-condensing | 10% to 90% non-condensing |
| Noise Level | 59 dBA | 59 dBA |
| Forced Airflow | Side and front to back | Not published |
| Operating Altitude | Up to 10,000 ft (3,048 m) | Up to 7,400 ft (2,250 m) |
| Power Source | Not published | 100-240 V AC, 50/60 Hz |
| Current (maximum) | Not published | 6 A @ 100 V |
| Compliance and Certifications | ||
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | FCC Part 15 Class A, C-Tick, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6 / IPv6 | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN. USGv6 / IPv6 |
Other comparisons in this range
Each step of the FortiGate Mid-Range ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote