60D vs 70D vs 80D vs 90D

[Lucascat]

I have to replace an old 80c unit.

I need full UTM for about 50/60 users + VPN + Wireless Controller (6 AP) for about 50/60 users

Which is the best units from the above?

What are the main differences?

Best regards

[pcraponi]

70D and 90D have better firewall (only) performance

80D and 92D are for UTM performance...

If you have until 500Mbps of Link (Internet and Internal/DMZ) passing through Fortigate and only 60 users, Fortigate 80D are the better option to you for AV, WebFilter and App.Control.

Regards,

Paulo Raponi 

[tuumke]

While searching for a similair situation, i noticed that:

90D is better in IPSec VPN throughput.

100D is better in AV/new firewall sessions/second

There is also an 92D out there, but i cant seem to find if it has SoC or CPU...

[ede_pfau]

Generally, IPsec throughput depends on offloading onto the NPx ASIC whereas AV and esp. 'New sessions per second' rating depends on the power of the CPU.

OTOH content inspection is highly accelerated if the FGT contains a CPx ASIC.

See the excellent blog article by Glen Kemp https://blog.fortinet.com/post/optimizing-your-network-design-with-the-np6-platform for an overlook and the implications.

Comparing CPUs, the 90D has a less powerful model but a CP8 ASIC. Looking at the datasheets you can see that the 100D is a (mainly) CPU based model by the value of the FW latency: NPs have like less than 5 microseconds, CPU's more like 30-50 microseconds.

Reference: https://forum.fortinet.com/tm.aspx?m=100451 for "FGT platforms with CPU, memory and supported firmware".