[shortdesc] Firewall, 1RU, 8x 10GE SFP+, 10 Gbps NGFW, 960GB SSD, including 5 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) [/shortdesc]
[properties]
| Model / SKU | FG-401F-BDL-950-60 |
| Bundle / Subscription | BDL-950 (5 Year): Hardware + FortiCare Premium + FortiGuard Unified Threat Protection (UTP) |
| Form Factor | Rack Mount, 1 RU |
| Firewall Throughput | IPv4: 79.5 / 78.5 / 70 Gbps (1518/512/64 byte, UDP); IPv6: 79.5 / 78.5 / 70 Gbps (1518/512/64 byte, UDP) |
| NGFW Throughput | 10 Gbps |
| Interfaces | 18x GE RJ45 ports (including 1x MGMT port, 1x HA port, 16x switch ports), 8x GE SFP slots, 8x 10GE SFP+ slots |
| Internal Storage | 2x 480 GB SSD |
| Power Input | 100-240V AC, 50/60Hz |
| Dimensions (H x W x L) | 1.75 x 17.0 x 15.0 inches (44.45 x 432 x 380 mm) |
| Weight | 14.33 lbs (6.5 kg) |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Certifications | Compliance: FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB; Certifications: USGv6/IPv6 |
[/properties]
[specifications]
| System Performance |
| IPS Throughput | 12 Gbps |
| Threat Protection Throughput | 9 Gbps |
| Firewall Latency (64 byte, UDP) | 4.19 μs / 2.5 μs (Ultra Low Latency ports) |
| Firewall Throughput (Packet per Second) | 105 Mpps |
| IPsec VPN Throughput (512 byte) | 55 Gbps |
| SSL-VPN Throughput | 3.6 Gbps |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 8 Gbps |
| Application Control Throughput (HTTP 64K) | 28 Gbps |
| CAPWAP Throughput (HTTP 64K) | 65 Gbps |
| System Capacity |
| Concurrent Sessions (TCP) | 7.8 Million |
| New Sessions/Second (TCP) | 500,000 |
| Firewall Policies | 10,000 |
| Gateway-to-Gateway IPsec VPN Tunnels | 2,000 |
| Client-to-Gateway IPsec VPN Tunnels | 50,000 |
| Concurrent SSL-VPN Users (Recommended Max) | 5,000 |
| Virtual Domains (Default/Maximum) | 10 / 25 |
| Maximum Number of FortiSwitches Supported | 96 (FortiOS 7.6.1+; prior releases support up to 72) |
| Maximum Number of FortiAPs (Total/Tunnel) | 512 / 256 |
| Maximum Number of FortiTokens | 5,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
| Hardware & Interfaces |
| Hardware Accelerated GE RJ45 Interfaces | 16 |
| GE RJ45 Management Ports | 2 |
| Hardware Accelerated GE SFP Slots | 8 |
| Hardware Accelerated 10GE SFP+ Slots | 4 |
| Hardware Accelerated 10GE SFP+ Ultra Low Latency Slots | 4 |
| USB Ports | 1 |
| RJ45 Console Port | 1 |
| Trusted Platform Module (TPM) | Yes |
| Dimensions & Environment |
| Power Supply | Dual hot swappable AC PSU |
| AC Current (Maximum) | 6A |
| Power Consumption (Average / Maximum) | 161.1 W / 196.9 W |
| Heat Dissipation | 671.85 BTU/h |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 5% to 90% non-condensing |
| Noise Level | LPA 48 dBA / LWA 55 dBA |
| Forced Airflow | Side and Front to Back |
| Operating Altitude | Up to 10,000 ft (3048 m) |
[/specifications]
[accesories]
| Included Accessories |
| Included Transceivers | 2x SFP (SX 1 GE) |
| Optional Accessories (Sold Separately) |
| AC Power Supply | SP-FG400F-PS |
| DC Power Supply | SP-FG400F-DC-PS (for FG-400/401F-DC models) |
| Transceivers | FN-TRAN-LX (1 GE SFP LX), FN-TRAN-GC (1 GE SFP RJ45), FN-TRAN-SX (1 GE SFP SX); FN-TRAN-SFP+GC (10 GE SFP+ RJ45), FN-TRAN-SFP+SR (10 GE SFP+ SR), FN-TRAN-SFP+LR (10 GE SFP+ LR), FN-TRAN-SFP+ER (10 GE SFP+ ER), FN-TRAN-SFP+ZR (10 GE SFP+ ZR, 80KM) |
| Cables | FN-CABLE-SFP+1 (10 GE SFP+ DAC, 1m), FN-CABLE-SFP+3 (10 GE SFP+ DAC, 3m), FN-CABLE-SFP+5 (10 GE SFP+ DAC, 5m) |
[/accesories]
The Fortinet FortiGate 401F Series Next-Generation Firewall (NGFW) combines AI-powered security and machine learning to deliver threat protection at any scale. This model is distinguished by its 2x 480GB onboard SSDs (960GB total), providing 960GB onboard SSD storage on the appliance. Powered by Fortinet's patented NP7 and CP9 SPUs, it provides 10 Gbps of NGFW throughput and ultra-low latency, making it ideal for enterprise deployments. The solution integrates seamlessly into the Fortinet Security Fabric, offering deep visibility into applications, users, and devices beyond traditional firewall techniques.
This bundle includes Hardware + FortiCare Premium + FortiGuard Unified Threat Protection (UTP) for 5 Year.
This rackmount appliance is designed to reduce complexity in hybrid IT networks through secure SD-WAN and network segmentation. With universal ZTNA, the FortiGate 401F automatically controls, verifies, and facilitates user access to applications, reducing lateral threats by providing access only to validated users. The device supports dual hot-swappable power supplies for mission-critical reliability and includes specialized ultra-low latency ports for demanding environments.
