Fortinet FortiGate 700G FG-700G-BDL-809-12 1U Rackmount Firewall, 1-Year Enterprise Protection

Brand:
Fortinet
Part Number:
FG-700G-BDL-809-12
Firewall, 1RU rackmount, 4x 25GE SFP28, 164 Gbps firewall, 38 Gbps IPS, including 1 Year FortiCare Premium and FortiGuard Enterprise Protection
$58,628.00 $39,868.00 Instant Savings $18,760.00

Net 30 or as low as $—/month Apply Now

Quote

Overview

The Fortinet FortiGate 700G Series is a data-centre edge appliance in 1RU, built on the SPU NP7 and CP10 processors with four 25/10GE SFP28/SFP+ uplinks. Its figures are datacentre figures: 28 million concurrent sessions, 700,000 new sessions per second and 50,000 client-to-gateway IPsec tunnels, which is what decides deployments at this tier rather than raw throughput. The gap between its 164 Gbps firewall throughput and its 26 Gbps threat protection throughput is the number to size on when inspection is enabled. Two SFP SX transceivers are included. The FG-700G-BDL-809-12 is the configuration without onboard storage, so logging goes to FortiAnalyzer, FortiGate Cloud or a syslog collector; the FG-701G is the otherwise closely matched model with two 480 GB SSDs. FortiOS forwards both IPv4 and IPv6 traffic; Fortinet does not publish a routing-protocol list for this appliance in the datasheet, which is why the specification table records the protocols as not published while stating IPv6 support. This part number is the bundled configuration: the same appliance supplied with a prepaid FortiGuard Enterprise Protection subscription and FortiCare Premium support for 1 year (12 months). The appliance itself is the FG-700G as sold on its own; what the bundle adds is the FortiGuard service entitlement and 24x7x365 support with one-hour response for critical issues.

Technical Details

The Fortinet FortiGate 700G FG-700G-BDL-809-12 is a 1U rack-mount next-generation firewall with eight 5 GE multigigabit copper ports, sixteen gigabit SFP slots, four 10 GE SFP+ slots and four 25 GE SFP28 slots, running FortiOS. Firewall throughput is 164 / 163 / 145 Gbps at 1518, 512 and 64-byte UDP, and threat protection throughput is 26 Gbps on the Enterprise Traffic Mix with logging enabled. IPsec VPN throughput is 55 Gbps at 512 bytes with AES256-SHA256, and SSL inspection throughput is 14 Gbps with IPS on average HTTPS. It holds 28 million concurrent TCP sessions and opens 700,000 new sessions per second. It operates from 0 to 45 degrees Celsius and is used at a data-centre edge for north-south inspection, DMZ segmentation and high-throughput VPN aggregation.

Best For

The FG-700G suits a data-centre edge that needs 26 Gbps of threat protection throughput with 28 million concurrent sessions behind it. Its eight 5 GE multigigabit copper ports, sixteen gigabit SFP slots, four 10 GE SFP+ slots and four 25 GE SFP28 slots cover the port requirement. Firewall throughput is 164 Gbps at 1518-byte UDP and 145 Gbps at 64 bytes, which is the headroom on uninspected traffic, while 26 Gbps is the figure to size against once inspection is on. Choose it over the FG-701G where logging already goes to FortiAnalyzer, FortiGate Cloud or a syslog collector. As a bundled part number it arrives with 1 year (12 months) of FortiGuard Enterprise Protection and FortiCare Premium support already attached, so the services do not need ordering separately.

Not suitable if:

  • you need logs and reports retained on the appliance itself, since this configuration has no onboard storage
  • you need Power over Ethernet for cameras or access points, since this appliance provides none
  • your inspected traffic exceeds 26 Gbps, since that is the published threat protection throughput
  • you need a hardened appliance for a plant floor or outdoor cabinet, since this unit is rated only from 0 to 45 degrees Celsius
  • you want a different subscription term or bundle tier, since this part number is fixed at 1 year of Enterprise Protection

FG-700G-BDL-809-12 Specifications

Ports & Uplinks
Fixed Interfaces8×5GbE RJ45, 16×1GbE SFP, 4×10GbE SFP+, 4×25GbE SFP28
Max Port Speed25 GbE
Management & Console Ports1×1GbE RJ45 management, 1×2.5GbE RJ45 HA, 1×RJ45 console, 2×USB
Performance & Scale
Firewall Throughput164 / 163 / 145 Gbps (1518 / 512 / 64-byte UDP)
Threat Prevention Throughput26 Gbps (Enterprise Traffic Mix, logging enabled)
TLS/SSL Inspection Throughput14 Gbps (IPS, average HTTPS)
IPsec VPN Throughput55 Gbps (512-byte, AES256-SHA256)
Power & Thermal
Power Supply100-240V AC input (50/60 Hz); dual non-swappable AC power supplies for 1+1 redundancy; maximum current 6A @100VAC
Redundant Power SupplyYes
Maximum Power Consumption283 W (230 W average)
CoolingForced airflow, side and front to back
Physical & Environmental
Operating SystemFortiOS
Form Factor1U Rackmount
Dimensions (H x W x D)1.75 × 17.0 × 13.5 in (4.445 × 43.2 × 34.2 cm)
Weight7.72 lb (3.5 kg)
Operating Temperature32°F to 113°F (0°C to 45°C)
Software
Central Management PlatformFortiManager, FortiGate Cloud
Routing Protocols & IPv6Routing protocols not published; IPv6 supported
Other
Maximum Concurrent Sessions28,000,000 (TCP)
New Sessions per Second700,000 (TCP)
Maximum IPsec VPN Tunnels2,000 gateway-to-gateway, 50,000 client-to-gateway
High AvailabilityActive/Active, Active/Passive, Clustering

FG-700G-BDL-809-12 Accessories

Included Accessories2x SFP SX Transceivers, Default Dual Internal Power Supplies
Optional Accessories1 GE SFP Transceivers (LX, RJ45, SX), 10 GE SFP+ Transceivers (RJ45, SR, LR, ER, ZR, BiDi), 25 GE SFP28 Transceivers (SR, LR), Direct Attach Cables (10 GE SFP+, 25 GE SFP28)

FAQ

Does the Fortinet FortiGate 700G FG-700G-BDL-809-12 support PoE?

No. The FG-700G-BDL-809-12 provides no Power over Ethernet on any port, so cameras, access points and IP phones need their own power source or a PoE switch between them and the firewall. Its interfaces are eight 5 GE multigigabit copper ports, sixteen gigabit SFP slots, four 10 GE SFP+ slots and four 25 GE SFP28 slots, all data-only. Within the FortiGate G series PoE appears on separate part numbers, not on this one.

What transceivers do the SFP slots on the FG-700G-BDL-809-12 use?

The appliance has sixteen 1GE SFP slots, four 10GE SFP+/GE SFP slots, and four separate 25/10GE SFP28/SFP+ slots. Fortinet lists the compatible transceiver modules in the ordering information. Two SFP SX transceivers are included. Other transceivers are sold separately.

How does high availability work on the Fortinet FortiGate 700G FG-700G-BDL-809-12?

The FG-700G-BDL-809-12 supports Active-Active, Active-Passive and Clustering high-availability modes. An HA pair should be two identical models running the same FortiOS build, and the units synchronise configuration and session state over the HA link. This model has a dedicated HA port.

How much traffic can the FG-700G-BDL-809-12 handle?

Fortinet publishes no user count for the FG-700G-BDL-809-12, so size it on the capacity figures. Firewall throughput is 164 / 163 / 145 Gbps at 1518, 512 and 64-byte UDP. Small packets cost throughput. Threat protection throughput is 26 Gbps once IPS, application control and malware protection are enabled, and SSL inspection throughput is 14 Gbps; size against those. It holds 28 million concurrent TCP sessions and opens 700,000 new sessions per second. All values are stated as up to.

What is the difference between the FG-700G-BDL-809-12 and the FG-701G?

Their interface layout and published performance specifications are the same: the FG-701G is the otherwise closely matched model with two 480 GB SSDs. Power consumption differs between the two models while the published weight is the same, so read each model's own row in the specification table. Both run the same FortiOS build and take the same FortiGuard subscriptions.

What is included in the FG-700G-BDL-809-12 bundle?

The FG-700G-BDL-809-12 is the appliance plus a prepaid FortiGuard Enterprise Protection subscription and FortiCare Premium support, both for a term of 1 year (12 months). Enterprise Protection covers IPS, anti-malware, URL, DNS and video filtering, anti-spam, AI-based inline malware prevention, data loss prevention (full features when running FortiOS 7.4.1, per Fortinet) and Attack Surface Security, along with the FortiConverter configuration-conversion service. OT Security and the SD-WAN and SASE services are not part of this bundle. FortiCare Premium provides 24x7x365 availability with one-hour response for critical issues and next-business-day response for everything else.

Does the FG-700G-BDL-809-12 require a subscription to operate?

No. Core firewall, routing and networking functions can continue to operate without an active FortiGuard subscription, while subscription-based security intelligence, updates and services require an active subscription. The FG-700G-BDL-809-12 ships with a prepaid FortiGuard Enterprise Protection subscription and FortiCare Premium support for 1 year (12 months); when that term ends, the FortiGuard intelligence and the support entitlement lapse and can be renewed.

What condition is the FG-700G-BDL-809-12 sold in, and what warranty applies?

Network Devices Inc. supplies the FG-700G-BDL-809-12 new and factory sealed, in original Fortinet packaging with the standard accessories. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Because the unit is new rather than renewed, it is eligible for Fortinet registration and for FortiCare and FortiGuard entitlements ordered against it, which is not always the case with refurbished stock. Orders ship from our New Jersey and Texas warehouses.

Reviews