Need advise about fortigate platform upgrade (FG 100F or 200E?)

Forum|Forum|6 years ago
November 29, 2019
6 replies
13481 views

Dear Brothers

My company currently use several fortigate 100D firewall UTM devices

I need to upgrade to new model because atm the CPU of FGT always reachs high usage, and found that Fortigate 100F and Fortigate 200E meet requiments. Any body can give me that which model between them should be compatible for fortigate 100D replacement?

Our company has 1000 CCU, fortigate device run webfilter, dlp, app control, Explicit proxy. We also have some ipsec vpn channel and web ssl vpn for 50 vpn clients.

Thanks very much with best regards

Best answer by James_G

Bit of a sideways thought, have you ever considered IPsec VPN rather then SSL VPN for some of your remote users, with the new models you are looking at, IPsec is totally offloaded to hardware and uses zero CPU.

Dave_Hall

New Member

From the spec sheets for both 200E and100F, it's hard to say how either model will perform using real numbers - also factoring in how you are crafting the UTM/firewall policies (amount of packet inspection going on), etc.

On paper, I would have to personally go with the 200E. But I would analyze where most of your current CPU usable (on the 200D) is being used ((ipsengine, scanunitd, etc) then determine whether you need to retweak any policy/utm settings. Even a low-end fgt device can "out perform" a higher-end model if properly configured. IMO.

200E vs 100F.JPG

James_G

New Member

I don't think you can make a wrong choice here, they are so similar in spec that if one is ok, the other will be also I expect. On the same line of thought, if one has performance issues, the other would probably also. To me it's down to cost.

Sign up

Login with SSO

Login to the community

Login with SSO