Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
RolandBaumgaertner72
New Contributor II

Trade UP Fortigate 300D

hello,

 

we have 2x FG300D in a active-passive cluster in our data center. Since the FG300D is end of life we have to start thinking about changing the FGs and what models would be best to substitute. 

 

I think that the options are a FG200F or a FG400F cluster. We have 600-700 users and all the offices are connected via MPLS (so just one VPN site to site). Traffic from the MPLS site is like 600/600mb and for internet 2x 600/600.

 

We were checking the data sheets of each model. Technically I would say that 2 FG200F should be more than capable to manage everything. Is there something else we should consider?

 

Thanks!!

1 REPLY 1
fredery
Staff
Staff

Hello RolandBaumgaertner72,

 

I like using the Product Matrix when comparing models (this one is February 2023):

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/Fortinet_Product_Matrix.pdf

 

Both options looks good based on your numbers. As typical ratio of traffic (which may differ in your case) is around 80% is SSL type. This may be a determining factor, if you want now or eventually to inspect this encrypted traffic with security policies, to select a more powerful model.

 

Correct sizing is also a prediction about the next few years as these devices will probably be there for a long time (5-7 years) and traffic always increase.

 

Start a discussion with your Fortinet reseller/Fortinet account team on the subject, they probably have good insight on the subject.

Top Kudoed Authors