Skip to main content
A
Anonymous_User
New Contributor III
November 11, 2009
Question

Fortigate with gigabit ports

  • November 11, 2009
  • 4 replies
  • 5862 views
I use a fortigate 200A and the problem is there interface ports only run on 100MG. If I want a fortigate with gigabit ports , whats the next level fortigate I can get. Any advise

    4 replies

    harald21
    harald21
    New Member
    November 11, 2009
    Hi, a FG111C http://www.fortinet.com/products/fortigate/111C.html (here a 64 GB SSD is integrated too) or a FG200B http://www.fortinet.com/products/fortigate/200B.html Sincerely Harald
    abelio
    SuperUser
    abelio
    SuperUser
    November 11, 2009
    Just to complete the panorama: today (3Q 2009), the first model available with 2 gigabits ports is the FTG-80C But, as Harald pointed out, the logical next level for you is 111C and/or 200B
    ebeaudette
    ebeaudette
    New Member
    December 2, 2009
    I noticed the 111C has dual Gig WAN ports but the internal switched ports are still 10/100. If my workstations and servers support gigabit Ethernet, as well as the switches behind the FG will I still get gig Ethernet performance even though my FGs Internal port is only 10/100 (on the same subnet)? Thanks.
    g3rman
    g3rman
    New Member
    December 2, 2009
    Yes, you will get gigabit performance. It only slows down when you leave your local subnet and the router through which the traffic leaves does not have a gigabit interface. At that point the 100 MBit/s interface on the firewall would be your bottleneck. However since you probably don' t have a 100 MBit/s or higher Internet connection that' s probably ok :)
    TopJimmy
    TopJimmy
    New Member
    December 3, 2009
    ORIGINAL: g3rman Yes, you will get gigabit performance. It only slows down when you leave your local subnet and the router through which the traffic leaves does not have a gigabit interface. At that point the 100 MBit/s interface on the firewall would be your bottleneck. However since you probably don' t have a 100 MBit/s or higher Internet connection that' s probably ok :)
    Which begs to question: Why does Fortinet do that? Wouldn' t your WAN1 and WAN2 (which are the 10/100/1000 ports on the 111c) be better served by a 10/100 port and the " internal" switched ports be 10/100/1000? I' ve got a couple units that I' ve done what Eric suggests: Use the 1Gbit ports as my high-speed ports.
    FortiRack_Eric
    FortiRack_Eric
    New Member
    December 2, 2009
    It' s better to assign WAN1 to the internal network (use a zone to rename) and use wan2 as a DMZ, in this case you' ll have a better than 100 Mb perf. please note that the FG110/111C max out on 500 Mb firewall only performance.
    Terms & ConditionsAccessibility statement