Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

Direct connect servers to FG



I have a small network. 2 dell hosts with 500gb ram each, one disk shelf connected in DAC 25gb/s mode to the servers. Servers connected 2x10Gb/s. Max 20 VMs
1x FG 100F 3-4x NAS each 1GB/s and about 80 users per LAN. 2-3 VLANS.

Currently, servers and all other network devices, as well as other switches in the company, are connected to two main switches (HA), which are further connected to the FG.
Soon I have to replace the above-mentioned main switches and I wonder if with such a small network and number of devices, I could connect most of the critical devices, e.g. servers and NAS directly to FG. Buy one instead of 2 switches.

What could be the disadvantages of such a solution, not counting a single point of failure, which is present in the current situation anyway. (I have insurance for FG and SLA unavailability time which I am able to accept)
Won't the FG be too heavy in such an environment?

My current switches are Dell 5548.

FG 100F has more then 12x 1GB and few 10GB ports...



  1. Simplified Network: Fewer devices make network management easier.

  2. Visibility and Control: Better control and security monitoring.

  3. Cost Savings: Fewer switches can save money.


  1. Single Point of Failure: A failure in the FG can disrupt all connected devices.

  2. Performance Impact: FG may become a bottleneck with heavy traffic.

  3. Complexity: Increased configuration complexity.

  4. Security Risk: Single firewall for all devices increases risk.

  5. Performance Isolation: Devices' performance may not be fully isolated.


  1. Consider Redundancy: Plan for redundancy, possibly with a secondary FG.

  2. Evaluate FG Performance: Ensure FG can handle traffic without issues.

  3. Segmentation: Use VLANs for traffic isolation and security.

  4. Regular Backups: Back up FG configurations regularly.

  5. Monitoring and Alerting: Implement robust monitoring.

  6. Consult Professionals: Seek expert advice for network design.

Siddhanth Poojary
Top Kudoed Authors