First time buying Fortinet

[rolo]

Hi there. First time posting there, so I've not much experience with fortinet i mean its first time I'm planning to use fortinet because of my work.I want to know which model will be better to use in this situation. So as you can see on attached picture it's the diagram of network. right now there is only a mikrotik router. Main thing for this diagram is i use linux server for DB and on windows server there is class 5 softswitch for VOIP. right now on mikrotik there are just several ports opened UDP ports 50000-60000 and also a few SIP ports 5060,5061 and a few more also I've 1 IPsec VPN on it. As i've said i want to add fortinet and looking for a hardware model which can i use. also about router should i keep that mikrotik or can i just put it in trash and leave only fortinet ? also do i need any license for that firewall? I've 2 uplinks both 100/100MB bandwidth.

[Viknesh_Muniyandi]

May I ask, if it's a part of office setup or you have this in home ? 

[rolo]

It's for testing for a few month after all the setups i will build on server for VOIP this thing will move to datacenter. But still I'll need a firewall

[maick78]

Hi Rolo, 

Yes!, you can use the FortiGate as a router

The license defines the characteristics you are going to use, see https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/FortiGuard_Security_Services.pdf

In addition to the physical characteristics (see https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/Fortinet_Product_Matrix.pdf ), it is advisable to size the FGT based on the number of users you have and the feautures you want.

-dwb

[rolo]

As I've said this server will be for just VOIP so there will be only a 2 VM and i will need 1 VPN i guess it will be a IP Sec. 

[Yurisk]

On a surface the setup is not very demanding, assuming you looked at the datasheet https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/Fortinet_Product_Matrix.pdf 

I'd say FGT 60E or 80E would be enough for 200 Mb of NATed traffic, few IPSec VPNs, no URL/AV/IPS filtering ...

And yes, Fortigate is very capable as a router, no need to keep the mikrotik.

[sw2090]

Since you are already runnig virtualization there: there is also a FortiGate as VM for various Virtualizers available...

Just wanted to add that.