Description
Fortinet FortiGate 2500E (FG-2500E)
High-throughput core firewall with heaps of copper + 10G, plus built-in 10G bypass for fail-open designs.
This is a really practical pick for data centre edge / core refreshes where you need lots of 1G RJ45, some 10G SFP+, and bypass ports for resiliency.
At-a-glance performance (Enterprise Traffic Mix)
-
IPS: 11.5 Gbps
-
NGFW: 9.0 Gbps
-
Threat Protection: 5.4 Gbps
-
SSL Inspection (IPS avg HTTPS): 9.4 Gbps
-
IPsec VPN (512B): 95 Gbps huge
-
SSL-VPN throughput: 6 Gbps
-
Recommended concurrent SSL-VPN users: 30,000 very high
What that means: strong VPN scale, good SSL inspection, but Threat Protection throughput is the main limiter if youre planning everything on + malware at high sustained throughput.
Ports & interfaces (the big selling point)
-
32 x GE RJ45 ports (plus 2 x GE RJ45 MGMT/HA) 34 total RJ45 physical
-
10 x 10GE SFP+ slots
-
2 x 10GE SFP+ bypass ports (SR optics, LC connector)
-
Console + USB
-
Internal storage: 1 x 480GB SSD
-
Form factor: 2RU, dual AC hot-swappable PSU
What 10G bypass is (simple explanation)
Those 2x 10G bypass SFP+ ports are designed so that if the firewall loses power or fails, traffic can physically pass through the bypass pair (fail-open), which is handy in designs where keeping a critical link up matters more than blocking during an outage.
Scale & capacity (enterprise)
-
IPv4 firewall throughput (1518/512/64 UDP): 150 / 150 / 95 Gbps
-
Latency (64B UDP): 2.00 ¼s (very low)
-
Firewall throughput: 145.5 Mpps
-
Concurrent sessions (TCP): 20 million
-
New sessions/sec: 500,000
-
Firewall policies: 100,000
-
VDOMs: 10 default / 500 max
-
SSL inspection concurrent sessions: 2 million
-
FortiAPs: 4096 total / 2048 tunnel
-
FortiSwitch: 196
-
FortiTokens: 20,000
View data sheet: FortiGate 2500E Series Datasheet