FortiGate 60F
Ten gigabit ports, 10 Gbps of firewall throughput and 1.4 Gbps of IPS from a fanless desktop box - the workhorse of the small-branch range.
Full specs and SKUsFortinet · FortiGate Entry Level
FortiGate 60F vs FortiGate 70G
Of the 53 specifications Fortinet publishes across these two models, 36 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 70G
The largest of the desktop platforms: 2.5 Gbps IPS, 10 Gbps firewall throughput and 1.4 million concurrent sessions, still fanless.
Full specs and SKUsKey differences
The rows most buyers check first. All 36 differences are in the full table below.
-
IPS Throughput
FortiGate 60F1.4 Gbps
FortiGate 70G2.5 Gbps
-
NGFW Throughput
FortiGate 60F1 Gbps
FortiGate 70G1.5 Gbps
-
Threat Protection Throughput
FortiGate 60F700 Mbps
FortiGate 70G1.3 Gbps
-
IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP)
FortiGate 60F10 / 10 / 6 Gbps
FortiGate 70G10 / 10 / 10 Gbps
-
Firewall Latency (64 byte UDP)
FortiGate 60F3.3 microseconds
FortiGate 70G2.46 microseconds
-
Firewall Throughput (packets per second)
FortiGate 60F9 Mpps
FortiGate 70G15 Mpps
Which one fits
Stepping up from the FortiGate 60F to the FortiGate 70G moves threat-protection throughput from 700 Mbps to 1.3 Gbps (1.9×), IPS throughput from 1.4 Gbps to 2.5 Gbps (1.8×) and NGFW throughput from 1 Gbps to 1.5 Gbps (1.5×). Neither choice moves IPsec VPN throughput (6.5 Gbps against 7.1 Gbps) or raw firewall throughput (10 / 10 / 6 Gbps against 10 / 10 / 10 Gbps), so a site held back by site-to-site tunnel capacity gains nothing from the FG-70G. The FortiGate 60F is in fact ahead on power draw: 10.17 W / 12.43 W against 12.3 W / 12.8 W.
Choose the FortiGate 60F if
- Threat-protection throughput is already enough at 700 Mbps: the FG-70G adds 1.9× you will not use.
- The FG-60F is ahead on power draw: 10.17 W / 12.43 W against 12.3 W / 12.8 W.
- Your limit is site-to-site tunnel capacity, which the step up does not move: 6.5 Gbps against 7.1 Gbps.
- Only the FG-60F has SSL-VPN Throughput (900 Mbps).
Choose the FortiGate 70G if
- Threat-protection throughput has to go past 700 Mbps: the FG-70G publishes 1.3 Gbps.
- IPS throughput has to go past 1.4 Gbps: the FG-70G publishes 2.5 Gbps.
- NGFW throughput has to go past 1 Gbps: the FG-70G publishes 1.5 Gbps.
- The FG-70G has 6 × GE RJ45 Internal Ports against 5.
17 of the 53 published rows are identical — Firewall Policies at 5,000, Gateway-to-Gateway IPsec VPN Tunnels at 200, Client-to-Gateway IPsec VPN Tunnels at 500 and Virtual Domains at 10 default / 10 maximum among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 60F | FortiGate 70G |
|---|---|---|
| Hardware | ||
| GE RJ45 WAN Ports | 2 WAN / 1 DMZ | 2 |
| GE RJ45 Internal Ports | 5 | 6 |
| GE RJ45 FortiLink Ports (default) | 2 | 2 |
| USB Ports | 1 | 1 |
| Console Port (RJ45) | 1 | 1 |
| Onboard Storage | Not fitted | Not fitted - see the FortiGate 71G for the model with a 64 GB SSD |
| Wireless Interface | Not fitted - see the FortiWiFi 60F for the wireless variant | Not published |
| GE RJ45 PoE/PoE+ Ports | Not published | Not fitted |
| Trusted Platform Module (TPM) | Not published | Yes |
| Bluetooth Low Energy (BLE) | Not published | Yes |
| Signed Firmware Hardware Switch | Not published | Yes |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 1.4 Gbps | 2.5 Gbps |
| NGFW Throughput | 1 Gbps | 1.5 Gbps |
| Threat Protection Throughput | 700 Mbps | 1.3 Gbps |
| System Performance | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP) | 10 / 10 / 6 Gbps | 10 / 10 / 10 Gbps |
| Firewall Latency (64 byte UDP) | 3.3 microseconds | 2.46 microseconds |
| Firewall Throughput (packets per second) | 9 Mpps | 15 Mpps |
| Concurrent Sessions (TCP) | 700,000 | 1.4 million |
| New Sessions per Second (TCP) | 35,000 | 100,000 |
| Firewall Policies | 5,000 | 5,000 |
| IPsec VPN Throughput (512 byte) | 6.5 Gbps | 7.1 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 200 | 200 |
| Client-to-Gateway IPsec VPN Tunnels | 500 | 500 |
| SSL-VPN Throughput | 900 Mbps | Not supported |
| Concurrent SSL-VPN Users (recommended maximum, tunnel mode) | 200 | Not supported |
| SSL Inspection Throughput (IPS, average HTTPS) | 630 Mbps | 1.4 Gbps |
| SSL Inspection Connections per Second (IPS, average HTTPS) | 400 | 715 |
| SSL Inspection Concurrent Sessions (IPS, average HTTPS) | 55,000 | 140,000 |
| Application Control Throughput (HTTP 64K) | 1.8 Gbps | 3.6 Gbps |
| CAPWAP Throughput (HTTP 64K) | 8 Gbps | 6.8 Gbps |
| Virtual Domains (VDOMs) | 10 default / 10 maximum | 10 default / 10 maximum |
| Maximum Number of FortiSwitches Supported | 16 | 24 |
| Maximum Number of FortiAPs (total / tunnel mode) | 64 / 32 | 96 / 48 |
| Maximum Number of FortiTokens | 500 | 500 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| Dimensions | ||
| Height x Width x Length | 1.5 x 8.5 x 6.3 in (38.5 x 216 x 160 mm) | 1.6 x 8.5 x 6.3 in (40.5 x 216 x 160 mm) |
| Weight | 2.23 lbs (1.01 kg) | 2.01 lbs (0.91 kg) |
| Form Factor | Desktop | Desktop |
| Rack Mount Type | Not applicable - optional rack tray, SP-RACKTRAY-02 | Not applicable - optional rack tray, SP-RACKTRAY-02 |
| Power and Environment | ||
| Power Consumption | 10.17 W / 12.43 W average / maximum | 12.3 W / 12.8 W average / maximum |
| Heat Dissipation | 63.1 BTU/hr | 43.65 BTU/hr |
| Power Rating | 12 VDC, 3 A | 12 VDC, 3 A |
| Power Source | 100-240 V AC, 50/60 Hz via external DC adapter | 100-240 V AC, 50/60 Hz via external DC adapter |
| Maximum Current | 100 V / 1.0 A, 240 V / 0.6 A | 100 V / 0.4 A, 240 V / 0.2 A |
| Operating Temperature | 32-104 F (0-40 C) | 32-104 F (0-40 C) |
| Storage Temperature | -31-158 F (-35-70 C) | -31-158 F (-35-70 C) |
| Humidity | 10% to 90% non-condensing | 10% to 90% non-condensing |
| Operating Altitude | Up to 7,400 ft (2,250 m) | Up to 10,000 ft (3,048 m) |
| Noise Level | Fanless, 0 dBA | Fanless |
| Total Available PoE Power Budget | Not published | Not applicable |
| Power Supply Efficiency Rating | Not published | 80 Plus compliant |
| Compliance and Certifications | ||
| Compliance | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB |
| Certifications | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN | USGv6 / IPv6 |
Other comparisons in this range
Each step of the FortiGate Entry Level ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote