FortiGate 60F (New Open Box Licensed) vs. 301E (Used, Unlicensed)

[fgrep2seed]

hello,

A modern, fully-licensed, entry-level firewall and an older, powerful, but unsupported enterprise firewall. FortiGate 60F (New Open Box Licensed) vs. 301E (Used, Unlicensed) as shown below:

• Fortinet FG-60F FortiGate 60F Firewall Security Appliance FG-60G-BDL-950-36 
• used unlicesbed Fortinet Fortigate 301E NGFW Firewall Network Security SFP FortiOS

Which should  i purchase and what the cheapest cost to license the 301E?

Also, can I manually update the 301E without / bypassing FORTINET server ?

During login dol i need to access the FORTINET server first before accessing the unit ?

Thanks, David

[sw2090]

The 301E is out of support indeed. 

You could still upgrade it 7.4.x or 7.6.x manually but you need to have access to the download area in support portal to get firmware images. For this you need an account and at least one registered device with valid FortiCare license.

Also without support/licenses you cannot use the UTM/Fortiguard features of the FGT.

You cannot purchase anymore licenses for a 301E (Last date to purchase licenes was july 15 2021 and LSED (Last Service Extension Date)was july 15 2025).

[sw2090]

and no you do not need access  to fortinet servers to login to the unit.

[fgrep2seed]

Hello,

I have serveral licence pkg files e.g. vsigupdate-OS7.6.0_93.04479.MMDB.pkg for 7.6.x - can i manually update the 301e without Fortinet servers and use ?

[sw2090]

that would at least require upgrading it to 7.6 and without access to support portal AND download section you will not be able to get the firmware images you need to offline upgrade it.

I cannot say about your license pkg files as we only buy bundles which our boxes get from Fortinet servers once they are registered or only require a key.

[ede_pfau]

As the question is about directions or recommendation, I will add my advice:

- forget the 301E

- get a modern, fully licensed entry level firewall like a 70G or 90G.

There are so many reasons for this that it's hard to name them all.

In 2 generations Fortigates have evolved so far in terms of performance and throughput that you can replace a mid-level 300E easily with an up-to-date G model.

Without license, you cannot do anything with the hardware except power up and run the OS that is installed, for basic firewalling. The main advantage of Fortigates is hardware-based acceleration, a high performance/cost ratio, a decent and quick to comprehend OS and it's ability to scan all network traffic. The first 3 features are for free, the latter costs a subscription.

Just my HO.