Fortigate with gigabit ports

[#1]

I use a fortigate 200A and the problem is there interface ports only run on 100MG. If I want a fortigate with gigabit ports , whats the next level fortigate I can get. Any advise

[harald21]

Hi, a FG111C http://www.fortinet.com/products/fortigate/111C.html (here a 64 GB SSD is integrated too) or a FG200B http://www.fortinet.com/products/fortigate/200B.html Sincerely Harald

[abelio]

Just to complete the panorama: today (3Q 2009), the first model available with 2 gigabits ports is the FTG-80C But, as Harald pointed out, the logical next level for you is 111C and/or 200B

[ebeaudette]

I noticed the 111C has dual Gig WAN ports but the internal switched ports are still 10/100. If my workstations and servers support gigabit Ethernet, as well as the switches behind the FG will I still get gig Ethernet performance even though my FGs Internal port is only 10/100 (on the same subnet)? Thanks.

[g3rman]

Yes, you will get gigabit performance. It only slows down when you leave your local subnet and the router through which the traffic leaves does not have a gigabit interface. At that point the 100 MBit/s interface on the firewall would be your bottleneck. However since you probably don' t have a 100 MBit/s or higher Internet connection that' s probably ok :)

[TopJimmy]

ORIGINAL: g3rman Yes, you will get gigabit performance. It only slows down when you leave your local subnet and the router through which the traffic leaves does not have a gigabit interface. At that point the 100 MBit/s interface on the firewall would be your bottleneck. However since you probably don' t have a 100 MBit/s or higher Internet connection that' s probably ok :)

Which begs to question: Why does Fortinet do that? Wouldn' t your WAN1 and WAN2 (which are the 10/100/1000 ports on the 111c) be better served by a 10/100 port and the " internal" switched ports be 10/100/1000? I' ve got a couple units that I' ve done what Eric suggests: Use the 1Gbit ports as my high-speed ports.

[FortiRack_Eric]

It' s better to assign WAN1 to the internal network (use a zone to rename) and use wan2 as a DMZ, in this case you' ll have a better than 100 Mb perf. please note that the FG110/111C max out on 500 Mb firewall only performance.