Dimensioning Fortigates

[#1]

Does someone have any documentation about the dimensions (number of users, servers, etc.) that are supported by each type of fortigate (especially concerning the models of Fortigate 60 / 100 /200 /300 /400 /800) I would like to have the dimensions in (almost) worst case scenerio, so AV, IDS (may decrease highly the performances) and other possibilities activated After calculation, stress and load tests and ponderation i have found next scales: FG 60 : <15 machines (machines = PCs, workstations and servers) FG 100 : 50 machines FG 200 : 60 machines FG 300 : 135 machines FG 400 : 150 machines FG 500 : 130 machines FG 800 : <1000 machines Does any one has more experiences with this kind of calculations or in practic Thanks in advance, Bart - Ipelium

[#2]

[Deleted by Admins]

[#3]

Has anyone ever tried opening their Fortigate to see if you could simply add a larger memory module? I have seen inside an FG-300. It has a DIMM that looks very replaceable. Of course, it may void any warranty that' s on the box. I wonder if the FortiOS for each model would address more memory or whether the memory amount is hardcoded into it.

[#4]

Jbult, good to hear that someone actually has opened this black box. Come on thy a bigger DIMM and tell as if it worked. By the way... are any shields (marked tape or something) that can brake if you try to open the box? If not what is the risk to try it… And something more. We have installed FGT50A and 60 on some companies and they do well for quite many users (more than 50). for web use and couple of servers (mail web) fgt 50A is OK.

[willem]

Until FortiOS 4 came out I had a FGT-60 running with 1 GB RAM and a log disk :-) These old devices had indeed replaceble RAM and even the connectors (P-ATA) for a disk. Of course there was no room for a disk in the device, but I drilled a small hole in the housing to get the cables in. It recognized the disk without any issue. Too bad OS 4 is not supported on the old stuff anymore, because with the new devices this " tuning" became impossible :(

[#6]

There were no shields or stickers that will break when opening the box. However, there was a sticker placed across the DIMM and slot so that if you tried to remove the DIMM from the slot, the sticker would break. Otherwise, the DIMM was just a regular Kingston brand DIMM, if I remember correctly.

[noiz]

my fortigate 100A running with 250node behind. no issue so far as the policy were setup accordingly...

[emnoc]

Numbers and size of FGT is not something that you can place on a scale. You have to factor in what your doing; any dynamic routing involved any advance security profiles in use ipsec traffic consideration sslvpn access number of interfaces in use etc... To say a FGT60 only can support 15 or less machines, would not be correct in all cases.

[veechee]

I just looked at the memory on a FGT-60C and FGT-80C using ' get memory hardware' . The 60C has 440MB of RAM, and the 80C has 503 MB. There was also some mention on here about memory leaks. One thing I' ve noticed on my FGT-60C' s that I' m using Application Control on, is that memory tends to creep up and up slowly and not come back down. I' ve been tweaking the App Control every week or so, and it seems that when I make a change to an App Control profile, the memory falls back down to warm boot levels - say 6-12% drop from where it' s typically at when I make the change. Could this be a case of a memory leak and it being reset when the module is reloaded after a change?