FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
pjang
Staff
Staff
Article Id 339155
Description

This article describes how to check the list of certified transceivers tested by Fortinet and supported by FortiGate.

More specifically, the method covered in this article allows administrators to check the part number and manufacturer of these certified transceivers.

Scope FortiGate, SFP/SFP+/SFP28/etc. transceivers.
Solution

On the FortiGate, there is a REST API endpoint that contains a list of Fortinet-certified transceivers. It is possible to access that list using a Web Browser or via a REST API GET request to the following URL:

https://<FortiGate IP or FQDN>/api/v2/static/fortinet_certified_transceivers.json

 

Example Output:

 

API Example Output.png

 

Additional notes:

  • The list is in a human-readable JSON format and is embedded in the FortiOS firmware (i.e. it is not dynamically updated via FortiGuard).
    • Furthermore, this is the full list of certified transceivers and is not narrowed down based on the model of FortiGate. Check that the FortiGate model is physically compatible before using a transceiver found on the list.
    • For example, the FortiGate-100F has SFP and SFP+ interfaces onboard, but there are certified QSFP+ and SFP28 transceivers on the list that would not be physically compatible.
  • When accessing via a web browser, treat the above URL as if it is part of the administrative web GUI. This means that it is possible to access FortiGate's admin web GUI over the network, and that is necessary to be authenticated before accessing this URL (i.e. it is not accessible to non-authenticated users).
  • The same general rules regarding authenticated access apply when accessing the endpoint via REST API. For more information on REST API access on FortiOS, see the following KB article: Technical Tip: About REST API.
  • When it comes to ordering Fortinet-certified transceivers, refer to the Ordering Information section of FortiGate's Datasheet to see the list of supported transceiver SKUs (e.g. FN-TRAN-SX, FN-TRAN-SFP+SR, etc.).
  • As a reminder, certified transceivers are tested and confirmed to work with a given model of FortiGate. Non-certified transceivers may work correctly, but there are no guarantees or expectations for correct operation (i.e. if an issue arises with a non-certified transceiver, it may ask to replace it and re-test with a certified transceiver).