DATA SHEET

FortiGate® 2600F Series Next Generation Firewall

Segmentation
Secure Web Gateway
FG-2600F/-DC and FG-2601F/-DC IPS
Mobile Security

The FortiGate 2600F series delivers high-performance threat protection and SSL inspection
for large enterprises and service providers, with the flexibility to be deployed at the enterprise/
cloud edge, in the data center core or internal segments. The multiple high-speed interfaces,
high port density, superior security efficacy and high throughput of the 2600F series keep your
network connected and secure.

Security Networking
n Identifies thousands of applications inside network traffic n Delivers advanced networking capabilities that seamlessly
for deep inspection and granular policy enforcement integrate with advanced layer 7 security and virtual
n Protects against malware, exploits, and malicious domains (VDOMs) to offer extensive deployment
websites in both encrypted and non-encrypted traffic flexibility, multi-tenancy and effective utilization of
resources
n Prevent and detect against known and unknown attacks
n Delivers high-density, flexible combination of various
using continuous threat intelligence from AI-powered
FortiGuard Labs security services high-speed interfaces to enable best TCO for customers
for data center and WAN deployments
Performance
n Delivers industry’s best threat protection performance and Management
n Includes a management console that is effective, simple
ultra-low latency using purpose-built security processor
(SPU) technology to use, and provides comprehensive network automation
and visibility
n Provides industry-leading performance and protection for
n Provides Zero Touch Integration with Security Fabric’s
SSL encrypted traffic
Single Pane of Glass Management
Certification n Predefined compliance checklist analyzes the deployment
n Independently tested and validated best security
and highlights best practices to improve overall security
effectiveness and performance posture
n Received unparalleled third-party certifications from NSS Security Fabric
Labs n Enables Fortinet and Fabric-ready partners’ products
to provide broader visibility, integrated end-to-end
detection, threat intelligence sharing, and automated
remediation

Firewall IPS NGFW Threat Protection Interfaces

Multiple GE RJ45, 25 GE SFP28 / 10 GE SFP+ / GE SFP
198 Gbps 24 Gbps 19 Gbps 17 Gbps
and 100GE QSFP28 / 40 GE QSFP+ slots

Refer to specification table for details

1
DATA SHEET | FortiGate® 2600F Series

DEPLOYMENT

N
 ext Generation I PS
Firewall (NGFW)
§ Reduce the complexity and maximize your ROI by § Purpose-built security processors delivering industry
integrating threat protection security capabilities into validated IPS performance with high throughput and low
a single high-performance network security appliance, latency
powered by Fortinet’s Security Processing Unit (SPU)
§ Deploy virtual patches at the network level to protect
§ Full visibility into users, devices, applications across against network exploitable vulnerabilities and optimize
the entire attack surface and consistent security policy network protection time
enforcement irrespective of asset location
§ Deep packet inspection at wire speeds offers unparalleled
§ Protect against network exploitable vulnerabilities with threat visibility into network traffic including traffic
Industry-validated IPS security effectiveness, low latency encrypted with the latest TLS 1.3
and optimized network performance
§ Proactively block newly discovered sophisticated attacks
§ Automatically block threats on decrypted traffic using the in real-time with advanced threat protection provided by
Industry’s highest SSL inspection performance, including the intelligence services of the Fortinet Security Fabric
the latest TLS 1.3 standard with mandated ciphers
§ Proactively block newly discovered sophisticated
attacks in real-time with AI-powered FortiGuard Labs
and advanced threat protection services included in the  Mobile Security
Fortinet Security Fabric
for 4G, 5G, and IOT
§ SPU accelerated, high performance CGNAT and IPv6
migration option including: NAT44, NAT444, NAT64/
Segmentation DNS64, NAT46 for 4G Gi/sGi and 5G N6 connectivity and
security
§ RAN Access Security with highly scalable and best
§ Segmentation that adapts to any network topology,
performing IPsec aggregation and control security gateway
delivering end-to-end security from the branch level to
(SecGW)
data centers and extending to multiple clouds
§ User plane security enabled by full Threat Protection and
§ Reduce security risks by improving network visibility from
visibility into GTP-U inspection
the components of the Fortinet Security Fabric, which
adapt access permissions to current levels of trust and § 4G and 5G security for user and data plane traffic including
enforce access control effectively and efficiently SCTP, GTP-U, and SIP that provides protection against
attacks
§ Delivers defense in depth security powered by high-
performance L7 inspection and remediation by Fortinet’s § High-speed interfaces to enable deployment flexibility
SPU, while delivering third party validated TCO of per
protected Mbps
§ Protects critical business applications and helps implement
any compliance requirements without network redesigns

FortiClient
VPN Client

 Secure Web
Gateway(SWG) DATA
CENTER FortiGate
§ Secure web access from both internal and external risks, FortiGate
Segmentation
NGFW
IPS
even for encrypted traffic at high performance
§ Enhanced user experience with dynamic web and video FortiManager
Single Pane-of-Glass
caching  Management

§ Block and control web access based on user or user

groups across URL’s and domains
FortiAnalyzer
§ Prevent data loss and discover user activity to known and Analytics-powered

unknown cloud applications 

Security & Log Management

§ Block DNS requests against malicious domains 

Data Center Deployment
§ Multi-layered advanced protection against zero-day (IPS/NGFW, Intent-based Segmentation)
malware threats delivered over the web

2
 DATA SHEET | FortiGate® 2600F Series

HARDWARE

FortiGate 2600F/2601F

FortiGate 2600F

10Base-T SFP 28 QSFP28+

MGMT1 HA1 1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35

CONSOLE

STATUS
ALARM
HA
POWER
USB MGMT2 HA2 2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36

1 2 3 4 5

CAUTION/ATTENTION
SHOCK HAZARD. DISCONNECT ALL POWER SOURCES.
RISQUE D’ÉLECTROCUTION. DÉBRANCHEZ TOUTES LES
SOURCES D’ALIMENTATION.

PSU2 PSU1

Interfaces Hardware Features

1. 2x GE RJ45 MGMT Ports
2.
3.
4.
2x 10 GE SFP+ / GE SFP HA Slots
16x 10 GE / GE RJ45 Ports
16x 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots
NP7 CP9 2U TPM 100GE 25GE AC
DUAL
/ 2TB

5. 4x 100 GE QSFP28 / 40 GE QSFP+ Slots

Hyperscale Firewall License Network Processor

Empower organizations by unlocking further performance Fortinet’s new, breakthrough SPU NP7 network processor
boosts with this perpetual license. The Hyperscale Firewall works inline with FortiOS functions delivering:
License will enable the hardware acceleration of CGNAT
§ Superior firewall performance for IPv4/IPv6, SCTP and
features by utilizing the latest SPU NP7. These features multicast traffic with ultra-low latency
include hardware session setup, firewall session logging, and
§ VPN, CAPWAP, and IP tunnel acceleration
NAT.
§ Anomaly-based intrusion prevention, checksum offload,
and packet defragmentation
§ Traffic shaping and priority queuing

Powered by SPU Content Processor

n Fortinet’s custom SPU processors Fortinet’s ninth generation custom SPU CP9 content
deliver the power you need to detect processor works outside of the direct flow of traffic and
malicious content at multi-Gigabit
accelerates the inspection.
speeds
n Other security technologies cannot protect against
today’s wide range of content- and connection- Trusted Platform Module (TPM)
based threats because they rely on general-purpose
The FortiGate 2600F Series features a dedicated module
CPUs, causing a dangerous performance gap
that hardens physical networking appliances by generating,
n SPU processors provide the performance needed
to block emerging threats, meet rigorous third-party storing, and authenticating cryptographic keys. Hardware-
certifications, and ensure that your network security based security mechanisms protect against malicious
solution does not become a network bottleneck software and phishing attacks.

3
DATA SHEET | FortiGate® 2600F Series

FORTINET SECURITY FABRIC

Security Fabric
The industry’s highest-performing cybersecurity platform,
powered by FortiOS, with a rich ecosystem designed to Fabric Management Fabric Security
Center Operations
span the extended digital attack surface, delivering fully
automated, self-healing network security. NOC SOC

§ Broad: Coordinated detection and enforcement across the

entire digital attack surface and lifecycle with converged
networking and security across edges, clouds, endpoints,
Adaptive Cloud
and users  Security

§ Integrated: Integrated and unified security, operation,

and performance across different technologies, location,
Zero Trust
Access

deployment options, and the richest ecosystem

FORTI OS
§ Automated: Context aware, self-healing network and
security posture leveraging cloud-scale and advanced AI
to automatically deliver near-real-time, user-to-application
coordinated protection across the Fabric 
Security-Driven Open
The Fabric empowers organizations of any size to secure and Networking Ecosystem

simplify their hybrid infrastructure on the journey to digital FortiGuard

Threat Intelligence
innovation.

FortiOS™
Operating System
FortiOS, Fortinet’s leading operating system enable the The release of FortiOS 7 dramatically expands the Fortinet
convergence of high performing networking and security Security Fabric’s ability to deliver consistent security across
across the Fortinet Security Fabric delivering consistent and hybrid deployment models of Hardware, Software, and
context-aware security posture across network endpoint, and Software As-a-Service with SASE and ZTNA, among others.
clouds. The organically built best of breed capabilities and
unified approach allows organizations to run their businesses
without compromising performance or protection, supports
seamless scalability, and simplifies innovation consumption.

SERVICES

FortiGuard™ FortiCare™
Security Services Services
FortiGuard Labs offer real-time intelligence on the threat Fortinet is dedicated to helping our customers succeed, and
landscape, delivering comprehensive security updates across every year FortiCare services help thousands of organizations
the full range of Fortinet’s solutions. Comprised of security get the most from their Fortinet Security Fabric solution. We
threat researchers, engineers, and forensic specialists, the have more than 1,000 experts to help accelerate technology
team collaborates with the world’s leading threat monitoring implementation, provide reliable assistance through advanced
organizations and other network and security vendors, as well support, and offer proactive care to maximize security and
as law enforcement agencies. performance of Fortinet deployments.

4
 DATA SHEET | FortiGate® 2600F Series

SPECIFICATIONS
FORTIGATE 2600F FORTIGATE 2601F FORTIGATE 2600F FORTIGATE 2601F

Interfaces and Modules Dimensions and Power

Hardware Accelerated 10 GE / GE RJ45 16 Height x Width x Length (inches) 3.5 x 17.25 x 21.1
Ports
Height x Width x Length (mm) 88.4 x 438 x 536
Hardware Accelerated 25 GE SFP28 / 16
10 GE SFP+ / GE SFP Slots Weight 30.6 lbs (13.9 kg) 30.9 lbs (14.0 kg)

Hardware Accelerated 100 GE QSFP28 / 4 Form Factor Rack Mount, 2 RU

40 GE QSFP+ Slots (supports EIA/non-EIA standards)

Hardware Accelerated 10 GE SFP+ / GE 2 AC Power Supply 100–240VAC, 47/63 Hz

SFP HA Slots Power Consumption 416 W / 510 W 420 W / 514 W
GE RJ45 Management Ports 2 (Average / Maximum)

USB 3.0 Port 1 Current (Maximum) 6A

Console RJ45 Port 1 Heat Dissipation 1,740 BTU/h 1,754 BTU/h

Onboard Storage ­– 2x 1 TB NVME SSD Redundant Power Supplies Yes, Hot Swappable

Trusted Platform Module (TPM) Yes Operating Environment and Certifications

Included Transceivers 2x SFP+ (SR 10 GE) Operating Temperature 32–104°F (0–40°C)

Storage Temperature -31–158°F (-35–70°C)
System Performance — Enterprise Traffic Mix
Humidity 10–90% non-condensing
IPS Throughput 2 24 Gbps
Noise Level 71.72 dBA
NGFW Throughput 2, 4
19 Gbps
Forced Airflow Side and Front to Back
Threat Protection Throughput 2, 5
17 Gbps
Operating Altitude Up to 7,400 ft (2,250 m)
System Performance and Capacity
Compliance FCC Part 15 Class A, RCM, VCCI,
IPv4 Firewall Throughput 198 / 196 / 120 Gbps CE, UL/cUL, CB
(1518 / 512 / 64 byte, UDP)
Certifications ICSA Labs: Firewall, IPsec, IPS, Antivirus,
IPv6 Firewall Throughput 198 / 196 / 120 Gbps SSL-VPN, USGv6/IPv6
(1518 / 512 / 86 byte, UDP)
Firewall Latency (64 byte, UDP) 3.41 μs
Firewall Throughput (Packet per Second) 180 Mpps
Concurrent Sessions (TCP) 24 Million / 40 Million* * Requires Hyperscale Firewall License
New Sessions/Second (TCP) 1 Million / 2 Million*
Firewall Policies 100,000
IPsec VPN Throughput (512 byte) 1 55 Gbps
Gateway-to-Gateway IPsec VPN Tunnels 20,000
Client-to-Gateway IPsec VPN Tunnels 100,000
SSL-VPN Throughput 16 Gbps
Concurrent SSL-VPN Users 30,000
(Recommended Maximum, Tunnel Mode)
SSL Inspection Throughput (IPS, avg. 20 Gbps
HTTPS) 3
SSL Inspection CPS (IPS, avg. HTTPS) 3 16,000
SSL Inspection Concurrent Session 2.7 Million
(IPS, avg. HTTPS) 3
Application Control Throughput 64 Gbps
(HTTP 64K) 2
CAPWAP Throughput (HTTP 64K) 62.5 Gbps
Virtual Domains (Default / Maximum) 10 / 500
Maximum Number of FortiSwitches 196
Supported
Maximum Number of FortiAPs (Total / 4,096 / 2,048
Tunnel)
Maximum Number of FortiTokens 20,000
Maximum Number of Registered 20,000
FortiClients
High Availability Configurations Active-Active, Active-Passive, Clustering

Note: All performance values are “up to” and vary depending on system configuration.
1. IPsec VPN performance test uses AES256-SHA256. 4. NGFW performance is measured with Firewall, IPS and Application Control enabled.
2. IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured with 5. Threat Protection performance is measured with Firewall, IPS, Application Control and
Logging enabled. Malware Protection enabled.
3. SSL Inspection performance values use an average of HTTPS sessions of different cipher
suites.

5
DATA SHEET | FortiGate® 2600F Series

ORDERING INFORMATION
Product SKU Description
FortiGate 2600F FG-2600F 4 x 100GE/40GE QSFP28 slots, 16 x 25GE/10GE SFP28 slots, 16 x 10GE RJ45 ports, 2x 10G SFP+
HA slots, 2x 1G MGMT ports, SPU NP7 and CP9 hardware accelerated, and dual AC power supplies.
FortiGate 2601F FG-2601F 4 x 100GE/40GE QSFP28 slots, 16 x 25GE/10GE SFP28 slots, 16 x 10GE RJ45 ports, 2x 10G SFP+
HA slots, 2x 1G MGMT ports, SPU NP7 and CP9 hardware accelerated, and dual AC power supplies
with 2TB onboard storage.

Hyperscale Firewall License FG1KF2KF LIC-FGT-HYPSC-1K2K Hyperscale Firewall License for FortiGate FG1800F/FG1801F/ FG2600F/ FG2601F Series for
hardware acceleration

Optional Accessories SKU Description

1 GE SFP LX Transceiver Module FN-TRAN-LX 1 GE SFP LX transceiver module for all systems with SFP and SFP/SFP+ slots.
1 GE SFP RJ45 Transceiver Module FN-TRAN-GC 1 GE SFP RJ45 transceiver module for all systems with SFP and SFP/SFP+slots.
1 GE SFP SX Transceiver Module FN-TRAN-SX 1 GE SFP SX transceiver module for all systems with SFP and SFP/SFP+ slots.
10 GE SFP+ RJ45 Transceiver Module FN-TRAN-SFP+GC 10 GE SFP+ RJ45 transceiver module for systems with SFP+ slots.
10 GE SFP+ Transceiver Module, Short Range FN-TRAN-SFP+SR 10 GE SFP+ transceiver module, short range for all systems with SFP+ and SFP/SFP+ slots.
10 GE SFP+ Transceiver Module, Long Range FN-TRAN-SFP+LR 10 GE SFP+ transceiver module, long range for all systems with SFP+ and SFP/SFP+ slots.
10 GE SFP+ Transceiver Module, Extended Range FN-TRAN-SFP+ER 10 GE SFP+ transceiver module, extended range for all systems with SFP+ and SFP/SFP+ slots.
10 GE SFP+ Active Direct Attach Cable, 10m / 32.8 ft SP-CABLE-ADASFP+ 10 GE SFP+ active direct attach cable, 10m / 32.8 ft for all systems with SFP+ and SFP/SFP+ slots.
25 GE SFP28 Transceiver Module, Short Range FN-TRAN-SFP28-SR 25 GE SFP28 transceiver module, short range for all systems with SFP28 slots.
25 GE SFP28 Transceiver Module, Long Range FN-TRAN-SFP28-LR 25 GE SFP28 transceiver module, long range for all systems with SFP28 slots.
40 GE QSFP+ Transceiver Module, Short Range FN-TRAN-QSFP+SR 40 GE QSFP+ transceivers, short range for all systems with QSFP+ slots.
40 GE QSFP+ Transceiver Module, Short Range, BiDi FN-TRAN-QSFP+SR-BIDI 40 GE QSFP+ transceivers, short range BiDi for systems with QSFP+ slots.
40 GE QSFP+ Transceiver Module, Long Range FN-TRAN-QSFP+LR 40 GE QSFP+ transceivers, long range for all systems with QSFP+ slots.
40 GE QSFP+ to 4x 10 GE SFP+ optical breakout, FG-TRAN-QSFP-4XSFP 40 GE QSFP+ parallel breakout MPO to 4x LC connectors, 1 m reach, transceivers not included
1 meter
100 GE QSFP28 Transceivers, Short Range FN-TRAN-QSFP28-SR 100 GE QSFP28 transceivers, 4 channel parallel fiber, short range for all systems with QSFP28 slots.
100 GE QSFP28 Transceivers, Long Range FN-TRAN-QSFP28-LR 100 GE QSFP28 transceivers, 4 channel parallel fiber, long range for all systems with QSFP28 slots.
100 GE QSFP28 Transceivers, CWDM4 FN-TRAN-QSFP28-CWDM4 100 GE QSFP28 transceivers, LC connectors, 2KM for all systems with QSFP28 slots.
Rack Mount Sliding Rails SP-FG3040B-RAIL Rack mount sliding rails for FG-1000C/-DC, FG-1100/1101E, FG-1200D, FG-1500D/-DC, FG-1800F,
FG-2000E, FG-2500E, FG-3040B/-DC, FG-3140B/-DC, FG-3240C/-DC, FG-3000D/-DC, FG-3100D/-
DC, FG-3200D/-DC, FG-3400/3401E, FG-3600/3601E, FG-3700D/-DC, FG-3700DX, FG-3810D/-DC
and FG-3950B/-DC.
AC Power Supply SP-FG1800F-PS AC power supply for FG-1800/1801F and FG-2600/2601F.

BUNDLES
Advanced Threat
Bundles Enterprise Protection Unified Threat Protection
Protection

FortiGuard FortiCare 24x7 24x7 24x7

FortiGuard App Control Service • • •
Bundle
FortiGuard IPS Service • • •
FortiGuard Labs delivers FortiGuard Advanced Malware Protection (AMP) — Antivirus, • • •
a number of security Mobile Malware, Botnet, CDR, Virus Outbreak Protection and
intelligence services to FortiSandbox Cloud Service
augment the FortiGate FortiGuard Web and Video1 Filtering Service • •
firewall platform. You
FortiGuard Antispam Service • •
can easily optimize the
protection capabilities of FortiGuard Security Rating Service •
your FortiGate with one of FortiGuard IoT Detection Service •
these FortiGuard Bundles.
FortiGuard Industrial Service •
FortiConverter Service •

1. Available when running FortiOS 7.0

www.fortinet.com

Copyright © 2021 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product
or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser
that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any
such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise
revise this publication without notice, and the most current version of the publication shall be applicable.

FG-2600F-DAT-R12-20211228