Fortinet FortiGate 4201F-DC
Secure SD-WAN Unified Threat Management

Click here to jump to more pricing!

Overview:

The FortiGate 4200F series delivers high performance next generation firewall (NGFW) capabilities for large enterprises and service providers. With multiple high-speed interfaces, high-port density, and highthroughput, ideal deployments are at the enterprise edge, hybrid data center core, and across internal segments. Leverage industry-leading IPS, SSL inspection, and advanced threat protection to optimize your network performance. Fortinet’s Security-Driven Networking approach provides tight integration of the network to the new generation of security.

Security

• Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement
• Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic
• Prevents and detects against known attacks using continuous threat intelligence from AI-powered FortiGuard Labs security services
• Proactively blocks unknown sophisticated attacks in realtime with the Fortinet Security Fabric integrated AI-powered FortiSandbox

Performance

• Engineered for Innovation using Fortinet’s purpose-built security processors (SPU) to deliver the industry’s best threat protection performance and ultra-low latency
• Provides industry-leading performance and protection for SSL encrypted traffic including the first firewall vendor to provide TLS 1.3 deep inspection

Certification

• Independently tested and validated best security effectiveness and performance
• Received unparalleled third-party certifications from NSS Labs, ICSA, Virus Bulletin, and AV Comparatives

Networking

• Application aware routing with built-in SD-WAN capabilities to achieve consistent application performance and the best user experience
• Built-in advanced routing capabilities to deliver high performance with encrypted IPSEC tunnels at scale

Management

• Includes a management console that is effective and simple to use, which provides a comprehensive network of automation and visibility
• Provides Zero Touch Provisioning leveraging Single Pane of Glass Management powered by the Fabric Management Center
• Predefined compliance checklists analyze the deployment and highlight best practices to improve the overall security posture

Security Fabric

• Enables Fortinet and Fabric-ready partners’ products to provide broader visibility, integrated end-to-end detection, threat intelligence sharing, and automated remediation
• Automatically builds Network Topology visualizations which discover IoT devices and provide complete visibility into Fortinet and Fabric-ready partner products

Firewall	IPS	NGFW	Threat Protection	Interfaces
800 Gbps	52 Gbps	47 Gbps	45 Gbps	Multiple GE RJ45, 25 GE SFP28 / 10 GE SFP+ / GE SFP and 100 GE QSFP28 / 40 GE QSFP+ slots | DC Variants

Specifications:

	FG-4200F/-DC	FG-4201F/-DC
Interfaces and Modules
100 GE QSFP28 / 40 GE QSFP+ Slots	8
25 GE SFP28 / 10 GE SFP+ / GE SFP Slots	16
25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots	2
25 GE SFP28 / 10 GE SFP+ / GE SFP AUX Slots	2
GE RJ45 Management Ports	2
USB Ports	1
Console Port	1
Internal Storage	-	2x 2TB SSD
Included Transceivers	2x SFP+ (SR 10GE)
System Performance — Enterprise Traffic Mix
IPS Throughput	52 Gbps
NGFW Throughput	47 Gbps
Threat Protection Throughput	45 Gbps
System Performance and Capacity
Firewall Throughput (1518 / 512 / 64 byte, UDP)	800 / 788 / 400 Gbps
IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP)	800 / 788 / 400 Gbps
Firewall Latency (64 byte, UDP)	3.02 µs
Firewall Throughput (Packet per Second)	600 Mpps
Concurrent Sessions (TCP)	210 Million / 450 Million
New Sessions/Second (TCP)	1 Million / 7 Million
Firewall Policies	200,000
IPsec VPN Throughput (512 byte)	210 Gbps
Gateway-to-Gateway IPsec VPN Tunnels	40,000
Client-to-Gateway IPsec VPN Tunnels	200,000
SSL-VPN Throughput	16 Gbps
Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode)	30,000
SSL Inspection Throughput (IPS, avg. HTTPS)	50 Gbps
SSL Inspection CPS (IPS, avg. HTTPS)	23,000
SSL Inspection Concurrent Session (IPS, avg. HTTPS)	9 Million
Application Control Throughput (HTTP 64K)	135 Gbps
CAPWAP Throughput (HTTP 64K)	47 Gbps
Virtual Domains (Default / Maximum)	10 / 500
Maximum Number of FortiSwitches Supported	300
Maximum Number of FortiAPs (Total / Tunnel Mode)	8,192 / 4,096
Maximum Number of FortiTokens	20,000
Maximum Number of Registered FortiClients	50,000
High Availability Configurations	Active / Active, Active / Passive, Clustering
Dimensions and Power
Height x Width x Length (inches)	5.22 x 17.20 x 26.17
Height x Width x Length (mm)	132.5 x 437 x 664.8
Weight	59.75 lbs (27.10 kg)	61.07 lbs (27.7 kg)
Form Factor (supports EIA / non-EIA standards)	Rack Mount, 3 RU
AC Power Input	100–240V AC, 50/60 Hz
AC Current (Maximum)	13.5A@120V, 5.5A@240V
Power Consumption (Average/ Maximum)	931 W / 1291 W	940 W / 1306 W
Heat Dissipation	4405 BTU/h	4456 BTU/h
DC Power Supply	-48V to -60V DC
DC Current (Maximum Rated)	25A to 32A per PSU
Redundant Power Supplies	Default 1+1 Redundant, Hot Swappable
Operating Environment and Certifications
Operating Temperature	32–104°F (0–40°C)
Storage Temperature	-31–158°F (-35–70°C)
Humidity	20–90% non-condensing
Noise Level	57 dBA
Operating Altitude	Up to 7,400 ft (2,250 m)
Compliance	FCC Part 15 Class A, RCM, VCCI, CE, UL/ cUL, CB
Certifications	ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSLVPN; USGv6/IPv6

Documentation:

Download the Fortinet FortiGate 4200F Series Data Sheet (PDF).

Pricing Notes:

• Hardware plus ASE FortiCare and FortiGuard 360 Protection
  Hardware unit, 24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, 360 Services Bundle (SD-WAN Orchestrator, SD-WAN Cloud Assisted Monitoring, SD-WAN Overlay Controller VPN, FortiManager Cloud, FortiAnalyzer Cloud, Fortinet SOCaaS, IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security and FortiConverter Service) plus term of contract
• Hardware plus 24x7 FortiCare and FortiGuard Enterprise Protection
  Hardware Unit, 24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) plus term of contract
• Hardware plus 24x7 FortiCare and FortiGuard Unified Threat Protection (UTP)
  Hardware Unit, 24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) plus term of contract
• 360 Protection (SD-WAN Orchestrator, SD-WAN Cloud Monitoring, FMG/FAZ Cloud, IPAM, IPS, AMP, App Ctrl, Web & Video Filtering, AS, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and ASE FortiCare)
  24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, 360 Services Bundle (SD-WAN Orchestrator, SD-WAN Cloud Assisted Monitoring, SD-WAN Overlay Controller VPN, FortiManager Cloud, FortiAnalyzer Cloud, Fortinet SOCaaS, IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security and FortiConverter Service)
• Enterprise Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and 24x7 FortiCare)
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service)
• Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam Service, and 24x7 FortiCare)
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service)
• Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and 24x7 FortiCare)
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control)
• 24x7 FortiCare Contract
  24x7 Comprehensive Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control
• ASE FortiCare (24x7 plus Advanced Services Ticket Handling)
  24x7 Comprehensive Support, Advanced Services Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control.
• Prices are for one year of Premium RMA support. Usual discounts can be applied.
• Annual contracts only. No multi-year SKUs are available for these services.
• Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
• Pricing and product availability subject to change without notice.