Skip to main content
SecurityPlus
Explorer III
August 24, 2018
Solved

FortiGate Sizing - Church

  • August 24, 2018
  • 1 reply
  • 11834 views
How does one go about selecting a FortiGate model for use in a church. Through most of the week there are only 8 users on the network. For a few hours on Sunday there may be 100 users. The use case on Sunday is fairly basic using the common UTM feature to keep guest users safe on the web. Traffic shaping will be used for video streaming from one computer. Third party wireless access points will be used. In one installation an SD-WAN with a 100 Mb / 12 Mb connections will be in use. In another installation a single 25 Mb fiber connection will be used. Cost needs to be a careful consideration. Would a 60E be appropriate?
    Best answer by ede_pfau

    Second thought: why not arrange for a test FGT and let it run for 2 weeks? That would totally ensure the FGT is fit for the job, and it doesn't cost anything (or better, much).

    1 reply

    ede_pfau
    SuperUser
    SuperUser
    August 24, 2018

    IMHO, the only feature that might surpass the 60E's capabilities is serving the 100 users on Sunday.

     

    I assume: 100 people surfing, each opening 100 connections via HTTP, that is 10.000 sessions.

    The 60E can sustain 1.3 million sessions, and can open sessions at a rate of 30.000 sessions per second.

    So, letting 100 users loose would take the 60E like 1/3rd of a second.

     

    All figures from the current datasheet.

     

    I wouldn't necessarily trust my calculations but I do trust the 60E to handle that kind of load.

    Where it could pinch would be using web filter (to protect the innocent) but that is not hardware limited but 'cloud' limited - as fast as FTNT can return ratings.

    ede_pfau
    SuperUser
    ede_pfauAnswer
    SuperUser
    August 24, 2018

    Second thought: why not arrange for a test FGT and let it run for 2 weeks? That would totally ensure the FGT is fit for the job, and it doesn't cost anything (or better, much).

    SecurityPlus
    Explorer III
    August 24, 2018

    One challenge. My estimate concerning the number of users includes room for growth so that we don't put a solution in then overwhelm its capacity in the next few years. The two week trial that you mentioned would not experience this larger quantity of users. Otherwise it seems to be a good solution.