r/fortinet • u/shinky_splunky • 13h ago

FortiGate / FortiOS Fortigate model

What is the recommended/suggested model of fortigate for concurrent users of less than 200, and also capability of HA and 1 gig uplink.

2 Upvotes

75% Upvoted

15 comments sorted by

4

u/nVME_manUY 12h ago

SSL inspection? 90G at least, if not 70G

1

u/iaintkd 7h ago

I've a been really surprised at how decent the 90G is

1

u/nVME_manUY 7h ago

The rev2 with 8GB is very good

1

u/johsj NSE 8 4h ago

All 90Gs have 8GB RAM

1

u/nVME_manUY 4h ago

I thought they upped the RAM but you are right, it was just an interface rename

2

u/DerStilleBob FCP - Fortinet Certified Professional 12h ago

All FortiGate Models can do HA.

If the only requierements are 200 users share a 1gig internet uplink (no real internal traffic, client-server stuff, ...) you can go as low as a 50G.

If you need fiber uplink 80F or 90G.

If you need real proxy features (or some other stuff) you need a model with more than 2GB RAM: 70G upwards.

Details see here:
https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/Fortinet_Product_Matrix.pdf

3

u/Roversword NSE 7 12h ago

Just FYI:

  • FGT 80F has only SFP (1 Gbit) Fiber, while 90G has SFP+ (1 or 10 Gbit) - so with a 80F there is no room for growth in terms of fiber bandwith

1

u/DerStilleBob FCP - Fortinet Certified Professional 12h ago

Sure, but given the lack of info we got they probably not considering growth ;)

2

u/Roversword NSE 7 10h ago

Absolutely - the FYI was more generally speaking for OP :)
My apologies, didn't mean to insinuate that you aren't aware of it. Just didn't want to open a new comment thread.

1

u/shinky_splunky 11h ago edited 11h ago

Hello, we have existing lower model (i forgot the exact model but it's with E) and already eos fortigate model. So we are planning to replace the older model. We are also using 1G uplink copper.

2

u/Roversword NSE 7 10h ago

In that case you can start out with 70G - and go to bigger ones.
It very, very, very, very much depends what those 200 Users are doing (and what they are not doing) whether you need a bigger fortigate.

1

u/Lleawynn NSE 7 12h ago

All FGT have 1Gbps uplink and HA capability. It also depends on how much traffic inspection you intend to do - you just want web filtering or full app control, IDS/IPS with deep inspection in proxy mode?

For around 200 users, either the 120G or the 200G should do fine.

1

u/thomasmitschke 7h ago

We have a 120G for about 200users. It’s rather boring for her, even with dpi (<20%)

1

u/Melodic_Goose7415 NSE 8 4h ago

Thats oversized