Fortinet FortiGate 2601F Next-Generation Firewall
[shortdesc]2RU rack-mount firewall, 4x 100GE QSFP28, 16x 25GE SFP28, 25 Gbps threat protection, 2x 960GB NVMe SSD[/shortdesc]
[properties]
| SKU | FG-2601F |
| Form Factor | Rack Mount, 2RU |
| Threat Protection Throughput | 25 Gbps |
| Interfaces | 4x 100 GE QSFP28 / 40 GE QSFP+, 16x 25 GE SFP28 / 10 GE SFP+ / GE SFP, 16x 10 GE RJ45, 2x 10 GE SFP+ HA, 2x GE RJ45 MGMT |
| Onboard Storage | 2x 960GB NVMe SSD |
| Dimensions (H x W x L) | 3.5 x 17.25 x 21.1 in (88.4 x 438 x 536 mm) |
| Weight | 30.9 lbs (14.0 kg) |
[/properties]
[specifications]
| System Performance - Enterprise Traffic Mix | |
| IPS Throughput | 31 Gbps |
| NGFW Throughput | 27 Gbps |
| System Performance & Capacity | |
| IPv4 Firewall Throughput (1518/512/64 byte, UDP) | 198 / 196 / 140 Gbps |
| IPv6 Firewall Throughput (1518/512/86 byte, UDP) | 198 / 196 / 140 Gbps |
| Firewall Latency (64 byte, UDP) | 3.41 μs |
| Firewall Throughput (Packet per Second) | 210 Mpps |
| Concurrent Sessions (TCP) | 24 Million / 40 Million* (40 Million requires Hyperscale Firewall License) |
| New Sessions/Second (TCP) | 1 Million |
| Firewall Policies | 100,000 |
| IPsec VPN Throughput (512 byte) | 55 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 20,000 |
| Client-to-Gateway IPsec VPN Tunnels | 100,000 |
| SSL-VPN Throughput | 16 Gbps |
| Concurrent SSL-VPN Users (Recommended Max, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 20 Gbps |
| SSL Inspection CPS (IPS, avg. HTTPS) | 16,000 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 2.7 Million |
| Application Control Throughput (HTTP 64K) | 64 Gbps |
| CAPWAP Throughput (HTTP 64K) | 62.5 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 196 |
| Maximum Number of FortiAPs (Total / Tunnel) | 4096 / 2048 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of Registered FortiClients | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
| Hardware & Interfaces | |
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 4 |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 |
| Hardware Accelerated 10 GE / GE RJ45 Ports | 16 |
| Hardware Accelerated 10 GE SFP+ / GE SFP HA Slots | 2 |
| GE RJ45 Management Ports | 2 |
| USB 3.0 Port | 1 |
| Console RJ45 Port | 1 |
| Trusted Platform Module (TPM) | Included |
| Dimensions & Power | |
| AC Power Supply | 100–240VAC, 47/63 Hz |
| Power Consumption (Average / Maximum) | 420.3 W / 513.7 W |
| Heat Dissipation | 1754 BTU/h |
| Redundant Power Supplies | Default dual AC PSU for 1+1 Redundancy (Hot Swappable) |
| Operating Environment & Certifications | |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 10% to 90% non-condensing |
| Noise Level | 71.72 dBA |
| Forced Airflow | Side and Front to Back |
| Operating Altitude | Up to 10,000 ft (3048 m) |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 |
[/specifications]
[accesories]
| Included Transceivers | 2x SFP+ (SR 10 GE) |
| Optional Accessories | Rack Mount Sliding Rails, AC Power Supply, DC Power Supply, Various Transceiver Modules (1 GE SFP, 10 GE SFP+, 25 GE SFP28, 40 GE QSFP+, 100 GE QSFP28), Direct Attach Cables |
[/accesories]
The FortiGate 2601F Series empowers organizations to build security-driven networks, forming the foundation of a robust Hybrid Mesh Firewall architecture. By weaving security deep into the data center and across hybrid IT environments, it protects any edge at any scale. This model is powered by Fortinet's patented Security Processing Unit (SPU) technology, specifically the NP7 Network Processor and CP9 Content Processor, to deliver unparalleled performance and ultra-low latency.
With integrated 2x 960GB NVMe SSD storage, the FG-2601F allows for local logging and reporting without relying solely on external devices. It supports industry-first integrated Zero Trust Network Access (ZTNA) enforcement within an NGFW solution, automatically controlling and verifying user access to applications. The comprehensive interface options, including high-speed 100 GE and 25 GE slots, ensure that security never becomes a performance bottleneck in high-bandwidth environments.
Hyperscale Security and Performance for the Enterprise Edge
- Unparalleled Performance: Patented SPU NP7 and CP9 processors deliver up to 198 Gbps firewall throughput and 25 Gbps threat protection throughput to handle massive traffic volumes.
- Local Storage Included: Equipped with dual 960GB NVMe SSDs to support on-device logging and reporting.
- High-Speed Connectivity: Features multiple 100 GE QSFP28 and 25 GE SFP28 slots to simplify network design and eliminate the need for additional bridging devices.
- Integrated ZTNA: Delivers the industry's first integrated Zero Trust Network Access enforcement, providing consistent convergence and seamless user experience.
- Operational Efficiency: Consolidates networking and security into a single platform powered by FortiOS, reducing complexity and lowering Total Cost of Ownership (TCO).
- Hardware-Assisted Security: Includes a Trusted Platform Module (TPM) to harden physical networking appliances and integrated hardware acceleration for VXLAN and IPsec.
- Enterprise Data Centers: Ideal for securing high-speed core networks with 100 GE connectivity and hyperscale inspection capabilities.
- Hybrid Cloud Environments: Provides dynamic segmentation and secure connectivity across on-premise and multi-cloud architectures.
- Internal Segmentation: Adapts to network topology to deliver end-to-end security and prevent lateral movement of threats using advanced VXLAN segmentation.
- Remote Workforce Security: Facilitates secure user access to applications through integrated ZTNA and high-performance IPsec VPN capabilities.
- IPS Throughput: 31 Gbps
- NGFW Throughput: 27 Gbps
- Threat Protection Throughput: 25 Gbps
- IPv4 Firewall Throughput (1518/512/64 byte, UDP): 198 / 196 / 140 Gbps
- IPsec VPN Throughput (512 byte): 55 Gbps
- SSL-VPN Throughput: 16 Gbps
- Firewall Latency (64 byte, UDP): 3.41 μs
- Onboard Storage: 2x 960GB NVMe SSD
- Network Interfaces: 4x 100 GE QSFP28 / 40 GE QSFP+, 16x 25 GE SFP28 / 10 GE SFP+ / GE SFP, 16x 10 GE RJ45, 2x 10 GE SFP+ HA, 2x GE RJ45 MGMT
- Power Consumption (Average / Maximum): 420.3 W / 513.7 W
- Operating Temperature: 32°F to 104°F (0°C to 40°C)
Upgrade Your Network Security
Deploy the FortiGate 2601F today for uncompromising performance, integrated storage, and advanced threat protection at the enterprise edge.
Product Information
Product Information
Shipping & Returns
Shipping & Returns



Fortinet FortiGate 2601F Next-Generation Firewall
Fortinet FortiGate 2601F Next-Generation Firewall
[shortdesc]2RU rack-mount firewall, 4x 100GE QSFP28, 16x 25GE SFP28, 25 Gbps threat protection, 2x 960GB NVMe SSD[/shortdesc]
[properties]
| SKU | FG-2601F |
| Form Factor | Rack Mount, 2RU |
| Threat Protection Throughput | 25 Gbps |
| Interfaces | 4x 100 GE QSFP28 / 40 GE QSFP+, 16x 25 GE SFP28 / 10 GE SFP+ / GE SFP, 16x 10 GE RJ45, 2x 10 GE SFP+ HA, 2x GE RJ45 MGMT |
| Onboard Storage | 2x 960GB NVMe SSD |
| Dimensions (H x W x L) | 3.5 x 17.25 x 21.1 in (88.4 x 438 x 536 mm) |
| Weight | 30.9 lbs (14.0 kg) |
[/properties]
[specifications]
| System Performance - Enterprise Traffic Mix | |
| IPS Throughput | 31 Gbps |
| NGFW Throughput | 27 Gbps |
| System Performance & Capacity | |
| IPv4 Firewall Throughput (1518/512/64 byte, UDP) | 198 / 196 / 140 Gbps |
| IPv6 Firewall Throughput (1518/512/86 byte, UDP) | 198 / 196 / 140 Gbps |
| Firewall Latency (64 byte, UDP) | 3.41 μs |
| Firewall Throughput (Packet per Second) | 210 Mpps |
| Concurrent Sessions (TCP) | 24 Million / 40 Million* (40 Million requires Hyperscale Firewall License) |
| New Sessions/Second (TCP) | 1 Million |
| Firewall Policies | 100,000 |
| IPsec VPN Throughput (512 byte) | 55 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 20,000 |
| Client-to-Gateway IPsec VPN Tunnels | 100,000 |
| SSL-VPN Throughput | 16 Gbps |
| Concurrent SSL-VPN Users (Recommended Max, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 20 Gbps |
| SSL Inspection CPS (IPS, avg. HTTPS) | 16,000 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 2.7 Million |
| Application Control Throughput (HTTP 64K) | 64 Gbps |
| CAPWAP Throughput (HTTP 64K) | 62.5 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 196 |
| Maximum Number of FortiAPs (Total / Tunnel) | 4096 / 2048 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of Registered FortiClients | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
| Hardware & Interfaces | |
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 4 |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 |
| Hardware Accelerated 10 GE / GE RJ45 Ports | 16 |
| Hardware Accelerated 10 GE SFP+ / GE SFP HA Slots | 2 |
| GE RJ45 Management Ports | 2 |
| USB 3.0 Port | 1 |
| Console RJ45 Port | 1 |
| Trusted Platform Module (TPM) | Included |
| Dimensions & Power | |
| AC Power Supply | 100–240VAC, 47/63 Hz |
| Power Consumption (Average / Maximum) | 420.3 W / 513.7 W |
| Heat Dissipation | 1754 BTU/h |
| Redundant Power Supplies | Default dual AC PSU for 1+1 Redundancy (Hot Swappable) |
| Operating Environment & Certifications | |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 10% to 90% non-condensing |
| Noise Level | 71.72 dBA |
| Forced Airflow | Side and Front to Back |
| Operating Altitude | Up to 10,000 ft (3048 m) |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 |
[/specifications]
[accesories]
| Included Transceivers | 2x SFP+ (SR 10 GE) |
| Optional Accessories | Rack Mount Sliding Rails, AC Power Supply, DC Power Supply, Various Transceiver Modules (1 GE SFP, 10 GE SFP+, 25 GE SFP28, 40 GE QSFP+, 100 GE QSFP28), Direct Attach Cables |
[/accesories]
The FortiGate 2601F Series empowers organizations to build security-driven networks, forming the foundation of a robust Hybrid Mesh Firewall architecture. By weaving security deep into the data center and across hybrid IT environments, it protects any edge at any scale. This model is powered by Fortinet's patented Security Processing Unit (SPU) technology, specifically the NP7 Network Processor and CP9 Content Processor, to deliver unparalleled performance and ultra-low latency.
With integrated 2x 960GB NVMe SSD storage, the FG-2601F allows for local logging and reporting without relying solely on external devices. It supports industry-first integrated Zero Trust Network Access (ZTNA) enforcement within an NGFW solution, automatically controlling and verifying user access to applications. The comprehensive interface options, including high-speed 100 GE and 25 GE slots, ensure that security never becomes a performance bottleneck in high-bandwidth environments.
Hyperscale Security and Performance for the Enterprise Edge
- Unparalleled Performance: Patented SPU NP7 and CP9 processors deliver up to 198 Gbps firewall throughput and 25 Gbps threat protection throughput to handle massive traffic volumes.
- Local Storage Included: Equipped with dual 960GB NVMe SSDs to support on-device logging and reporting.
- High-Speed Connectivity: Features multiple 100 GE QSFP28 and 25 GE SFP28 slots to simplify network design and eliminate the need for additional bridging devices.
- Integrated ZTNA: Delivers the industry's first integrated Zero Trust Network Access enforcement, providing consistent convergence and seamless user experience.
- Operational Efficiency: Consolidates networking and security into a single platform powered by FortiOS, reducing complexity and lowering Total Cost of Ownership (TCO).
- Hardware-Assisted Security: Includes a Trusted Platform Module (TPM) to harden physical networking appliances and integrated hardware acceleration for VXLAN and IPsec.
- Enterprise Data Centers: Ideal for securing high-speed core networks with 100 GE connectivity and hyperscale inspection capabilities.
- Hybrid Cloud Environments: Provides dynamic segmentation and secure connectivity across on-premise and multi-cloud architectures.
- Internal Segmentation: Adapts to network topology to deliver end-to-end security and prevent lateral movement of threats using advanced VXLAN segmentation.
- Remote Workforce Security: Facilitates secure user access to applications through integrated ZTNA and high-performance IPsec VPN capabilities.
- IPS Throughput: 31 Gbps
- NGFW Throughput: 27 Gbps
- Threat Protection Throughput: 25 Gbps
- IPv4 Firewall Throughput (1518/512/64 byte, UDP): 198 / 196 / 140 Gbps
- IPsec VPN Throughput (512 byte): 55 Gbps
- SSL-VPN Throughput: 16 Gbps
- Firewall Latency (64 byte, UDP): 3.41 μs
- Onboard Storage: 2x 960GB NVMe SSD
- Network Interfaces: 4x 100 GE QSFP28 / 40 GE QSFP+, 16x 25 GE SFP28 / 10 GE SFP+ / GE SFP, 16x 10 GE RJ45, 2x 10 GE SFP+ HA, 2x GE RJ45 MGMT
- Power Consumption (Average / Maximum): 420.3 W / 513.7 W
- Operating Temperature: 32°F to 104°F (0°C to 40°C)
Upgrade Your Network Security
Deploy the FortiGate 2601F today for uncompromising performance, integrated storage, and advanced threat protection at the enterprise edge.
Original: $53,706.00
-65%$53,706.00
$18,797.10Product Information
Product Information
Shipping & Returns
Shipping & Returns
Description
[shortdesc]2RU rack-mount firewall, 4x 100GE QSFP28, 16x 25GE SFP28, 25 Gbps threat protection, 2x 960GB NVMe SSD[/shortdesc]
[properties]
| SKU | FG-2601F |
| Form Factor | Rack Mount, 2RU |
| Threat Protection Throughput | 25 Gbps |
| Interfaces | 4x 100 GE QSFP28 / 40 GE QSFP+, 16x 25 GE SFP28 / 10 GE SFP+ / GE SFP, 16x 10 GE RJ45, 2x 10 GE SFP+ HA, 2x GE RJ45 MGMT |
| Onboard Storage | 2x 960GB NVMe SSD |
| Dimensions (H x W x L) | 3.5 x 17.25 x 21.1 in (88.4 x 438 x 536 mm) |
| Weight | 30.9 lbs (14.0 kg) |
[/properties]
[specifications]
| System Performance - Enterprise Traffic Mix | |
| IPS Throughput | 31 Gbps |
| NGFW Throughput | 27 Gbps |
| System Performance & Capacity | |
| IPv4 Firewall Throughput (1518/512/64 byte, UDP) | 198 / 196 / 140 Gbps |
| IPv6 Firewall Throughput (1518/512/86 byte, UDP) | 198 / 196 / 140 Gbps |
| Firewall Latency (64 byte, UDP) | 3.41 μs |
| Firewall Throughput (Packet per Second) | 210 Mpps |
| Concurrent Sessions (TCP) | 24 Million / 40 Million* (40 Million requires Hyperscale Firewall License) |
| New Sessions/Second (TCP) | 1 Million |
| Firewall Policies | 100,000 |
| IPsec VPN Throughput (512 byte) | 55 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 20,000 |
| Client-to-Gateway IPsec VPN Tunnels | 100,000 |
| SSL-VPN Throughput | 16 Gbps |
| Concurrent SSL-VPN Users (Recommended Max, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 20 Gbps |
| SSL Inspection CPS (IPS, avg. HTTPS) | 16,000 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 2.7 Million |
| Application Control Throughput (HTTP 64K) | 64 Gbps |
| CAPWAP Throughput (HTTP 64K) | 62.5 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 196 |
| Maximum Number of FortiAPs (Total / Tunnel) | 4096 / 2048 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of Registered FortiClients | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
| Hardware & Interfaces | |
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 4 |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 |
| Hardware Accelerated 10 GE / GE RJ45 Ports | 16 |
| Hardware Accelerated 10 GE SFP+ / GE SFP HA Slots | 2 |
| GE RJ45 Management Ports | 2 |
| USB 3.0 Port | 1 |
| Console RJ45 Port | 1 |
| Trusted Platform Module (TPM) | Included |
| Dimensions & Power | |
| AC Power Supply | 100–240VAC, 47/63 Hz |
| Power Consumption (Average / Maximum) | 420.3 W / 513.7 W |
| Heat Dissipation | 1754 BTU/h |
| Redundant Power Supplies | Default dual AC PSU for 1+1 Redundancy (Hot Swappable) |
| Operating Environment & Certifications | |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 10% to 90% non-condensing |
| Noise Level | 71.72 dBA |
| Forced Airflow | Side and Front to Back |
| Operating Altitude | Up to 10,000 ft (3048 m) |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 |
[/specifications]
[accesories]
| Included Transceivers | 2x SFP+ (SR 10 GE) |
| Optional Accessories | Rack Mount Sliding Rails, AC Power Supply, DC Power Supply, Various Transceiver Modules (1 GE SFP, 10 GE SFP+, 25 GE SFP28, 40 GE QSFP+, 100 GE QSFP28), Direct Attach Cables |
[/accesories]
The FortiGate 2601F Series empowers organizations to build security-driven networks, forming the foundation of a robust Hybrid Mesh Firewall architecture. By weaving security deep into the data center and across hybrid IT environments, it protects any edge at any scale. This model is powered by Fortinet's patented Security Processing Unit (SPU) technology, specifically the NP7 Network Processor and CP9 Content Processor, to deliver unparalleled performance and ultra-low latency.
With integrated 2x 960GB NVMe SSD storage, the FG-2601F allows for local logging and reporting without relying solely on external devices. It supports industry-first integrated Zero Trust Network Access (ZTNA) enforcement within an NGFW solution, automatically controlling and verifying user access to applications. The comprehensive interface options, including high-speed 100 GE and 25 GE slots, ensure that security never becomes a performance bottleneck in high-bandwidth environments.
Hyperscale Security and Performance for the Enterprise Edge
- Unparalleled Performance: Patented SPU NP7 and CP9 processors deliver up to 198 Gbps firewall throughput and 25 Gbps threat protection throughput to handle massive traffic volumes.
- Local Storage Included: Equipped with dual 960GB NVMe SSDs to support on-device logging and reporting.
- High-Speed Connectivity: Features multiple 100 GE QSFP28 and 25 GE SFP28 slots to simplify network design and eliminate the need for additional bridging devices.
- Integrated ZTNA: Delivers the industry's first integrated Zero Trust Network Access enforcement, providing consistent convergence and seamless user experience.
- Operational Efficiency: Consolidates networking and security into a single platform powered by FortiOS, reducing complexity and lowering Total Cost of Ownership (TCO).
- Hardware-Assisted Security: Includes a Trusted Platform Module (TPM) to harden physical networking appliances and integrated hardware acceleration for VXLAN and IPsec.
- Enterprise Data Centers: Ideal for securing high-speed core networks with 100 GE connectivity and hyperscale inspection capabilities.
- Hybrid Cloud Environments: Provides dynamic segmentation and secure connectivity across on-premise and multi-cloud architectures.
- Internal Segmentation: Adapts to network topology to deliver end-to-end security and prevent lateral movement of threats using advanced VXLAN segmentation.
- Remote Workforce Security: Facilitates secure user access to applications through integrated ZTNA and high-performance IPsec VPN capabilities.
- IPS Throughput: 31 Gbps
- NGFW Throughput: 27 Gbps
- Threat Protection Throughput: 25 Gbps
- IPv4 Firewall Throughput (1518/512/64 byte, UDP): 198 / 196 / 140 Gbps
- IPsec VPN Throughput (512 byte): 55 Gbps
- SSL-VPN Throughput: 16 Gbps
- Firewall Latency (64 byte, UDP): 3.41 μs
- Onboard Storage: 2x 960GB NVMe SSD
- Network Interfaces: 4x 100 GE QSFP28 / 40 GE QSFP+, 16x 25 GE SFP28 / 10 GE SFP+ / GE SFP, 16x 10 GE RJ45, 2x 10 GE SFP+ HA, 2x GE RJ45 MGMT
- Power Consumption (Average / Maximum): 420.3 W / 513.7 W
- Operating Temperature: 32°F to 104°F (0°C to 40°C)
Upgrade Your Network Security
Deploy the FortiGate 2601F today for uncompromising performance, integrated storage, and advanced threat protection at the enterprise edge.














