FortiGate-600F-BDL-950-12
About the Product
-
Model / SKU: FG‑600F‑BDL‑950‑12 — this is a bundled SKU that includes:
1. The FortiGate 600F firewall appliance (hardware)
2. FortiCare Premium support for 1 year
3. FortiGuard UTP (Unified Threat Protection) services for 1 year (IPS, anti-malware, web filtering, application control, etc.)
-
The FortiGate 600F is part of Fortinet’s mid‑to‑high throughput NGFW (Next‑Generation Firewall) line, intended for medium to large enterprises, data centers, or high‑demand campus/WAN edges.
-
The “BDL‑950‑12” suffix indicates the bundle of 1 year of UTP services and FortiCare support.
FG-600F-BDL-950-12 Fortinet FortiGate FG-600F Network Security/Firewall Appliance
Description
Model / SKU: FG‑600F‑BDL‑950‑12 it’s a bundle that includes the FortiGate 600F hardware plus a 1‑year subscription to FortiCare Premium (support, warranty, etc.) and FortiGuard UTP (Unified Threat Protection) services. The UTP services generally include security features such as IPS, antivirus / anti-malware, application control, web filtering, etc
Features & Advantages
Security
- Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement
- Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic
- Prevent and detect against known and unknown attacks using continuous threat intelligence from AI-powered FortiGuard Labs security services
Performance
Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology. Provides industry-leading performance and protection for SSL encrypted traffic
High Performance & Hardware Acceleration features
- The unit is built around Fortinet’s ASIC / SPU (Security Processing Unit) architecture (NP7 / CP9) to offload security processing and maintain high throughput.
- Firewall throughput (IPv4 / large packets) of ~ 139 Gbps
- IPS throughput ~14 Gbps
- NGFW / Threat Protection throughput (with UTP services) ~10.5 Gbps
- SSL inspection throughput ~9 Gbps
- Very high session capacity: up to ~ 8 million concurrent sessions
- High new session rate: ~ 550,000 new TCP sessions per second
Certification
- Independently tested and validated best security effectiveness and performance
- Received unparalleled third-party certifications from NSS Labs
High VPN / Secure Connectivity
- IPsec VPN throughput ~ 55 Gbps
- Supports large numbers of VPN tunnels: e.g. client-to-gateway, gateway-to-gateway, SSL‑VPN users.
- SSL VPN capabilities for remote user access.
Networking
- Delivers advanced networking capabilities that seamlessly integrate with advanced layer 7 security and virtual domains (VDOMs) allows segmentation of the device into multiple logical firewalls for multi-tenant or departmental use.
- Delivers high-density, flexible combination of various high-speed interfaces to enable best TCO for customers for data center and WAN deployments
- Supports HA modes: Active‑Active, Active‑Passive, clustering to provide redundancy and scale.
Management
- Includes a management console that is effective, simple to use, and provides comprehensive network automation and visibility
- Provides Zero Touch Integration with Security Fabric’s Single Pane of Glass Management
- Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture
Security Fabric & Ecosystem Integration
- Integration with Fortinet Security Fabric: allows sharing of threat intelligence, coordinated security across network, endpoints, cloud.
- Centralized management via FortiManager / FortiAnalyzer / FortiCloud and seamless orchestration across multiple devices.
- Zero‑touch deployment / automation & compliance check features to help with scaling and consistent policy enforcement.
Form Factor, Reliability & Operating Conditions
- 1U rackmount form factor (compact for data centers).
- Weight ~7.1 kg
- Operating range in typical environments: 0–40 °C, humidity non-condensing, airflow design, etc.
- Redundant power supplies, efficient cooling, design for enterprise-grade reliability.
Strengths
- High throughput & hardware acceleration — Useful when traffic volumes are large, especially with encrypted traffic.
- Rich interface mix — SFP / SFP+ / SFP28 ports give flexibility for fiber, 10G, 25G, etc.
- Scalable and feature rich — Supports UTP features (IPS, AV, web filtering, etc.), multiple VPNs, lots of sessions, HA modes.
- Good for enterprise / campus / data center edge — It is overkill for small offices, but well suited for larger deployments.
Use Cases
- WAN / Internet edge for large enterprise or data center
- Branch aggregation / campus perimeter security
- High throughput encrypted traffic inspection
- Deployments where you expect growth in bandwidth, users, or services
