Skip to main content
Lucascat
New Member
October 19, 2015
Question

60D vs 70D vs 80D vs 90D

  • October 19, 2015
  • 2 replies
  • 11883 views

I have to replace an old 80c unit.

I need full UTM for about 50/60 users + VPN + Wireless Controller (6 AP) for about 50/60 users

Which is the best units from the above?

What are the main differences?

 

Best regards

    2 replies

    pcraponi
    New Member
    October 19, 2015

    70D and 90D have better firewall (only) performance

    80D and 92D are for UTM performance...

     

    If you have until 500Mbps of Link (Internet and Internal/DMZ) passing through Fortigate and only 60 users, Fortigate 80D are the better option to you for AV, WebFilter and App.Control.

     

     

    Regards,

    Paulo Raponi 

     

     

    tuumke
    New Member
    October 30, 2015

    While searching for a similair situation, i noticed that:

    90D is better in IPSec VPN throughput.

    100D is better in AV/new firewall sessions/second

     

    There is also an 92D out there, but i cant seem to find if it has SoC or CPU...

    ede_pfau
    SuperUser
    SuperUser
    October 30, 2015

    Generally, IPsec throughput depends on offloading onto the NPx ASIC whereas AV and esp. 'New sessions per second' rating depends on the power of the CPU.

    OTOH content inspection is highly accelerated if the FGT contains a CPx ASIC.

     

    See the excellent blog article by Glen Kemp https://blog.fortinet.com/post/optimizing-your-network-design-with-the-np6-platform for an overlook and the implications.

     

    Comparing CPUs, the 90D has a less powerful model but a CP8 ASIC. Looking at the datasheets you can see that the 100D is a (mainly) CPU based model by the value of the FW latency: NPs have like less than 5 microseconds, CPU's more like 30-50 microseconds.

    Reference: https://forum.fortinet.com/tm.aspx?m=100451 for "FGT platforms with CPU, memory and supported firmware".