Description
The FortiGate FG-3960E series delivers high performance threat protection for mid-sized to large enterprises and service providers, with the flexibility to be deployed at the internet or cloud edge, in the data center core or internal segments. The multiple high-speed interfaces, high port density, industry-leading security efficacy and high throughput of the 3900E series keeps your network connected and secure.
6x 100GE QSFP28 Slots and 16x 10GE SFP+ Slots, 2x GE RJ45management Ports, SPU NP6 and CP9 Hardware Accelerated, and 3 AC Power Supplies
Specifications
FG-3960E
Device Type
Security appliance
Height (Rack Units)
5U
Width
17.2 in
Depth
27.4 in
Height
8.7 in
Weight
100.97 lbs
Processors Installed
Fortinet FortiASIC CP9/NP6
Form Factor
Rack-mountable
Connectivity Technology
Wired
Data Link Protocol
Gigabit Ethernet, 10 Gigabit Ethernet, 40 Gigabit Ethernet, 100 Gigabit Ethernet
Network / Transport Protocol
TCP/IP, UDP/IP, IPSec, SCTP
Remote Management Protocol
HTTP
Performance
IPS throughput (optimal traffic mix): 80 Gbps ¦ IPS throughput (enterprise traffic mix): 30 Gbps ¦ VPN throughput (512-bit IPSec): 280 Gbps ¦ Firewall latency (64-byte UDP): 3 µs ¦ Firewall throughput: 555 Mpps ¦ SSL inspection throughput: 30 Gbps ¦ Firewall throughput (1518-byte UDP): 620 Gbps ¦ Firewall throughput (512-byte UDP): 610 Gbps ¦ Firewall throughput (64-byte UDP): 370 Gbps ¦ Application control (AVC) throughput: 40 Gbps ¦ CAPWAP throughput: 13.5 Gbps ¦ VPN throughput (SSL): 9 Gbps ¦ NGFW throughput: 22 Gbps ¦ Threat protection throughput: 13.5 Gbps
Capacity
Client to gateway IPSec VPN tunnels: 200000 ¦ Gateway to gateway IPSec VPN Tunnels: 40000 ¦ Concurrent TCP sessions: 160000000 ¦ New TCP sessions per second: 550000 ¦ Firewall policies: 200000 ¦ Virtual domains: 10 (maximum 500) ¦ Number of FortiClient devices: 100000 ¦ Number of FortiToken devices: 5000 ¦ Concurrent SSL VPN users: 30000 ¦ Number of FortiAP devices: 4096
Status Indicators
Power, status, alarm, link/activity, HA
Features
Firewall protection, VPN support, traffic shaping, manageable, IPv6 support, High Availability, Intrusion Prevention System (IPS), IPSec Virtual Private Network (VPN), IPv4 support, web threat protection, CAPWAP support, application filtering, SSL inspection, Data Center Firewall (DCFW), Carrier-Class Firewall (CCFW)
Encryption Algorithm
SSL, 128-bit AES, 256-bit AES, 256-bit SHA, TLS 1.2
Interfaces
6 x 40Gb Ethernet/100Gb Ethernet – QSFP+/QSFP28 ¦ 16 x 10Gb Ethernet – SFP+ ¦ 1 x console – RJ-45 ¦ 2 x 1000Base-T (management) – RJ-45 ¦ 1 x USB – Type A
