FortiGate 60F: Data Sheet

The FortiGate 60F is Fortinet's entry-level NGFW (Next-Generation Firewall) and the successor to the FortiGate 60E. It is designed for SMBs with 20-100 users, remote workers, and small branch offices. Its SoC4 processor (4th-generation System-on-Chip) delivers SSL inspection performance previously unseen in this product range. Complete data sheet.

Market positioning

• Target: SMBs with 20-100 users, bank branches, medical practices, and notary offices
• Use cases: Internet firewall, site-to-site IPsec VPN, entry-level SD-WAN, and web filtering
• Replacement for: End-of-life FortiGate 60E, 50E, and 30E models
• Not suitable for: Data centers and sites with >100 users (choose the 80F/100F/200F instead)

Performance: Key figures

• Firewall throughput: 10 Gbps (with all SoC4 acceleration features enabled)
• IPsec VPN throughput: 6.5 Gbps (AES-256-GCM)
• SSL/TLS inspection: 1.0 Gbps (with IPS enabled)
• Threat Protection (FW + IPS + AV + AppCtrl): 700 Mbps
• Concurrent sessions: 700,000
• New sessions/sec: 35,000
• IPsec VPN tunnels: 200 site-to-site + 500 SSL-VPN

Physical interfaces

• 10× GbE RJ45 ports (including 2 WAN + 7 LAN + 1 configurable DMZ)
• 1× USB port for a backup 4G/5G modem
• 1× RJ45 console port
• 1× internal SSD drive bay (drive not included)
• No SFP ports: If you require fiber connectivity, choose the FortiGate 80F or 100F
• Built-in managed LAN switch (no PoE expansion)

Hardware specifications

• Dimensions: 1RU half-width (213 × 43 × 162 mm)
• Weight: 1.2 kg
• Power supply: External 12V DC (adapter included), maximum power consumption 17W
• Cooling: Passive (fanless and silent)
• Operating temperature: 0-40°C
• MTBF: 16 years (very high, with no moving parts)

Required Fortinet licenses

Without a license, the FortiGate 60F remains operational but does not provide IPS, AV, URL filtering, or updates. It becomes a basic L4 firewall. Three-year prices excluding tax:

• FortiCare 24x7 + FortiGuard UTM Bundle: €990 excluding tax/3 years
• Includes: IPS, AV, Web Filtering, App Control, AntiSpam, Mobile Security, and FortiCloud logging
• FortiGuard Enterprise Bundle: €1,590 excluding tax/3 years (adds FortiSandbox Cloud and Zero-Day Protection)
• FortiGuard 360 Protection: €1,990 excluding tax/3 years (adds Security Rating and IoT Detection)
• Renewal after 3 years: ~85% of the initial price (e.g., €850 for the UTM Bundle)

SD-WAN: Native features

Since FortiOS 6.4, the FortiGate 60F has supported SD-WAN as standard with no additional license:

• Up to 4 simultaneous WAN links (WAN1, WAN2, WAN3, WAN4 via USB 4G)
• Application-based path selection (SLA-based routing)
• FEC (Forward Error Correction) and Packet Duplication for VoIP
• Health checks using HTTP, ICMP, and DNS against external destinations
• Zero-Touch Provisioning (ZTP) via FortiDeploy or FortiManager

FortiGate 60F competitor comparison

• Cisco Meraki MX68: More expensive (~€1,500 excluding tax + Advanced Security license at €450/year), simpler cloud management but less flexibility
• Palo Alto PA-415: Significantly more expensive (~€3,200 excluding tax + Threat Prevention at €1,200/year), with superior detection quality
• Check Point 1570: Similar pricing, better compliance reporting, but more complex
• Sophos XGS 107: 20% less expensive, with lower SSL inspection performance

Sizing by use case

Medical practice (10-20 workstations)

1× FortiGate 60F + UTM Bundle + 2× FortiAP-23JF (WiFi 6). Total budget: €1,290 excluding tax (FortiGate) + €990 (UTM for 3 years) + 2×€450 (AP) = €3,180 excluding tax over 3 years.

SMB with 50-80 workstations

2× FortiGate 60F in active-passive HA (High Availability) + UTM Bundle + FortiSwitch-148F for the LAN + 4× FortiAP. Budget: ~€5,500 excluding tax for hardware + €2,000 for 3-year licenses.

Bank branch (5-15 workstations)

1× FortiGate 60F + Enterprise Bundle (FortiSandbox to detect banking phishing attacks) + backup 4G WAN link. Budget: €2,890 excluding tax over 3 years.

High availability (HA)

The FortiGate 60F supports active-passive and active-active FGCP HA. Recommendations:

• HA link via dedicated ports (e.g., ports 9 and 10 for the HA heartbeat)
• Enable session pickup to preserve connections during failover
• Identical licenses are required on both firewalls
• Failover time: <1 second
• Cost: 2× FortiGate 60F + 2× licenses = 2× the budget

Alternatives in the Fortinet product range

• FortiGate 40F: ~40% less expensive, 5 Gbps FW, suitable for very small businesses with <10 users
• FortiGate 70F: Positioned between the 60F and 80F, with 10 Gbps FW + SFP ports
• FortiGate 80F: 12 Gbps FW, 2× SFP+, recommended when scaling to 100 users
• FortiGate 100F: 24 Gbps FW, 4× SFP+, 200+ users

Order from OPTINOC

OPTINOC supplies brand-new, genuine Fortinet FortiGate 60F appliances with pre-activated UTM/Enterprise licenses and complimentary initial configuration (VPN, SD-WAN, and baseline rules). Available from stock in France, with delivery in 24-48h. Receive a quote for a hardware + licenses + FortiAP bundle within 2h.