Description
Fortinet FortiGate 3200F Series
Overview
The FortiGate 3200F Series is a hyperscale next-generation firewall built for high-speed data centre cores, internet edge protection, and large enterprise networks requiring ultra-high throughput with full security services enabled. It forms the foundation of a security-driven Hybrid Mesh Firewall architecture, delivering coordinated, automated protection across hybrid IT environments. With integrated Zero Trust Network Access (ZTNA) enforcement, the 3200F Series helps reduce lateral movement by ensuring access is granted only to validated users and devices—without compromising user experience.
Enterprise Traffic Mix Performance
-
IPS Throughput: 63 Gbps
-
NGFW Throughput: 47 Gbps
-
Threat Protection Throughput: 45 Gbps
-
SSL Inspection Throughput (IPS avg HTTPS): 29 Gbps
-
SSL Inspection CPS: 30,000
-
IPsec VPN Throughput: 105 Gbps
-
SSL-VPN Throughput: 11 Gbps
-
Recommended Concurrent SSL-VPN Users: 30,000
These results reflect high-performance operation with inspection services enabled, supporting “security-on” deployments at scale.
Interfaces & High-Speed Connectivity
Designed for modern high-speed switching and segmentation, including 400G uplinks:
-
4 × 400GE QSFP-DD (also supports 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+)
-
10 × 50GE SFP56 (also supports 25GE SFP28 / 10GE SFP+ / GE SFP)
-
4 × Ultra Low Latency (ULL) SFP28 ports (25GE SFP28 / 10GE SFP+ / GE SFP)
-
2 × HA SFP56 ports (50GE / 25GE / 10GE) for HA1/HA2
-
2 × 10GE / GE RJ45 Management Ports
-
USB 3.0 + RJ45 Console Port
This mix enables flexible architectures across 400G, 200G, 100G, 50G, 25G, 10G, and 1G—without extra bridging hardware.
System Performance & Scalability
-
Firewall Throughput (IPv4 1518 / 512 / 64 byte): 387 / 385 / 178.5 Gbps
-
Firewall Latency (64 byte UDP): 3.42 μs (or 1.45 μs using ULL ports)
-
Firewall Throughput: 267.75 Mpps
-
Concurrent Sessions: 70 Million
-
New Sessions per Second: 800,000
-
Firewall Policies: 200,000
-
SSL Inspection Concurrent Sessions: 7.4 Million
-
Virtual Domains (VDOMs): 10 Default / 500 Maximum
Built for large-scale environments with high connection rates and consistent low latency.
Security & Threat Protection Capabilities
-
Integrated ZTNA enforcement within the NGFW
-
AI/ML-powered FortiGuard Security Services for advanced threat coverage
-
Real-time SSL inspection (including TLS 1.3) for full traffic visibility
-
Advanced IPS with deep packet inspection and virtual patching
-
Anti-malware protection combining antivirus and sandboxing
-
Web/DNS security including DNS filtering, URL filtering, IP reputation, and anti-botnet
-
SaaS and data security including DLP and inline CASB support
-
Zero-day threat prevention with AI-powered inline malware detection
-
OT security with protocol inspection and vulnerability correlation
Everything is managed through FortiOS for unified policy enforcement and consistent protection across hybrid environments.
VPN & Remote Access
-
Gateway-to-Gateway IPsec VPN Tunnels: 40,000
-
Client-to-Gateway IPsec VPN Tunnels: 200,000
-
SSL-VPN Throughput: 11 Gbps
-
Recommended SSL-VPN Users (Tunnel Mode): 30,000
Optimised for high-throughput encrypted connectivity and large remote-access deployments.
Hardware & Platform Features
-
Processors: NP7 Network Processor + CP9 Content Processor
-
Trusted Platform Module (TPM): hardware-based cryptographic key protection
-
Form Factor: 2RU rack mount
-
Redundant Hot-Swappable Dual AC Power Supplies
-
Optional Onboard Storage: 2 × 960GB SSD (3201F model)
-
Bluetooth Low Energy (BLE): supported
-
Ultra Low Latency (ULL) ports: available for latency-sensitive traffic flows
Model Variants
-
FG-3200F – no onboard storage
-
FG-3201F – includes 2 × 960GB SSD onboard storage
Both models provide the same core performance and interface architecture.
Ideal Use Cases
-
400G/200G/100G data centre core segmentation
-
Hyperscale internet edge NGFW deployments
-
High-speed east-west traffic inspection with low latency
-
Large enterprise and service-provider-grade security architectures
-
High-capacity VPN aggregation and secure remote access
-
Security-driven Hybrid Mesh Firewall designs across hybrid IT environments
The FortiGate 3200F Series is built for organisations that need next-generation firewalling at hyperscale—combining 400G-ready connectivity, high throughput under full inspection, and FortiOS-driven unified security for modern enterprise networks.
View data sheet: FortiGate 3200F Series Datasheet
form