Fortinet FG-2601F-BDL-809-60 Next-Generation Firewall (NGFW)
[shortdesc]Firewall, 100GE/25GE/10GE interfaces, NP7/CP9 SPU acceleration, 2x960GB NVMe SSD, including 5 Year FortiCare Premium and FortiGuard Enterprise Protection[/shortdesc]
[properties]
| SKU | FG-2601F-BDL-809-60 |
| Bundle / Subscription | Firewall appliance + FortiCare Premium + FortiGuard Enterprise Protection (5 Year) |
| Form Factor | Rack Mount, 2RU |
| Threat Protection Throughput | 25 Gbps |
| Interfaces | 4x 100 GE QSFP28 / 40 GE QSFP+, 16x 25 GE SFP28 / 10 GE SFP+ / GE SFP, 16x 10 GE RJ45, 2x 10 GE SFP+ HA, 2x GE RJ45 MGMT |
| Onboard Storage | 2x 960GB NVMe SSD |
| Dimensions (H x W x L) | 3.5 x 17.25 x 21.1 in (88.4 x 438 x 536 mm) |
| Weight | 30.9 lbs (14.0 kg) |
[/properties]
[specifications]
| System Performance - Enterprise Traffic Mix | |
| IPS Throughput | 31 Gbps |
| NGFW Throughput | 27 Gbps |
| System Performance & Capacity | |
| IPv4 Firewall Throughput (1518/512/64 byte, UDP) | 198 / 196 / 140 Gbps |
| IPv6 Firewall Throughput (1518/512/86 byte, UDP) | 198 / 196 / 140 Gbps |
| Firewall Latency (64 byte, UDP) | 3.41 μs |
| Firewall Throughput (Packet per Second) | 210 Mpps |
| Concurrent Sessions (TCP) | 24 Million / 40 Million* |
| New Sessions/Second (TCP) | 1 Million / 2 Million* |
| Firewall Policies | 100,000 |
| IPsec VPN Throughput (512 byte) | 55 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 20,000 |
| Client-to-Gateway IPsec VPN Tunnels | 100,000 |
| SSL-VPN Throughput | 16 Gbps |
| Concurrent SSL-VPN Users (Recommended Max, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 20 Gbps |
| SSL Inspection CPS (IPS, avg. HTTPS) | 16,000 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 2.7 Million |
| Application Control Throughput (HTTP 64K) | 64 Gbps |
| CAPWAP Throughput (HTTP 64K) | 62.5 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 196 |
| Maximum Number of FortiAPs (Total / Tunnel) | 4096 / 2048 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of Registered FortiClients | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
| Hardware & Interfaces | |
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 4 |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 |
| Hardware Accelerated 10 GE / GE RJ45 Ports | 16 |
| Hardware Accelerated 10 GE SFP+ / GE SFP HA Slots | 2 |
| GE RJ45 Management Ports | 2 |
| USB 3.0 Port | 1 |
| Console RJ45 Port | 1 |
| Trusted Platform Module (TPM) | Included |
| Dimensions & Power | |
| AC Power Supply | 100–240VAC, 47/63 Hz |
| Power Consumption (Average / Maximum) | 420.3 W / 513.7 W |
| Heat Dissipation | 1754 BTU/h |
| Redundant Power Supplies | Default dual AC PSU for 1+1 Redundancy (Hot Swappable) |
| Operating Environment & Certifications | |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 10% to 90% non-condensing |
| Noise Level | 71.72 dBA |
| Forced Airflow | Side and Front to Back |
| Operating Altitude | Up to 10,000 ft (3048 m) |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 |
[/specifications]
[accesories]
| Included Transceivers | 2x SFP+ (SR 10 GE) |
| Optional Accessories | Rack Mount Sliding Rails, AC Power Supply, DC Power Supply, Various Transceiver Modules (1 GE SFP, 10 GE SFP+, 25 GE SFP28, 40 GE QSFP+, 100 GE QSFP28), Direct Attach Cables |
[/accesories]
The FortiGate 2601F Series empowers organizations to build security-driven networks, forming the foundation of a robust Hybrid Mesh Firewall architecture. By weaving security deep into the data center and across hybrid IT environments, it protects any edge at any scale. This FG-2601F-BDL-809-60 bundle includes the FortiGate 2601F firewall appliance with FortiCare Premium and FortiGuard Enterprise Protection for a 5 Year term.
With integrated 2x 960GB NVMe SSD storage, the FG-2601F allows for local logging and reporting without relying solely on external devices. It supports industry-first integrated Zero Trust Network Access (ZTNA) enforcement within an NGFW solution, automatically controlling and verifying user access to applications. The comprehensive interface options, including high-speed 100 GE and 25 GE slots, ensure that security never becomes a performance bottleneck in high-bandwidth environments.
Hyperscale Security and Performance for the Enterprise Edge
- Unparalleled Performance: Patented SPU NP7 and CP9 processors deliver up to 198 / 196 / 140 Gbps IPv4 firewall throughput and 25 Gbps threat protection throughput to handle massive traffic volumes.
- Local Storage Included: Equipped with dual 960GB NVMe SSDs to support on-device logging and reporting.
- High-Speed Connectivity: Features multiple 100 GE QSFP28 and 25 GE SFP28 slots to simplify network design and eliminate the need for additional bridging devices.
- Integrated ZTNA: Delivers the industry's first integrated Zero Trust Network Access enforcement, providing consistent convergence and seamless user experience.
- Operational Efficiency: Consolidates networking and security into a single platform powered by FortiOS, reducing complexity and lowering Total Cost of Ownership (TCO).
- Hardware-Assisted Security: Includes a Trusted Platform Module (TPM) to harden physical networking appliances and hardware acceleration for key security functions, including VPN and VXLAN.
- Enterprise Data Centers: Ideal for securing high-speed core networks with 100 GE connectivity and hyperscale inspection capabilities.
- Hybrid Cloud Environments: Provides dynamic segmentation and secure connectivity across on-premise and multi-cloud architectures.
- Internal Segmentation: Adapts to network topology to deliver end-to-end security and prevent lateral movement of threats using advanced VXLAN segmentation.
- Remote Workforce Security: Facilitates secure user access to applications through integrated ZTNA and high-performance IPsec VPN capabilities.
- IPS Throughput: 31 Gbps
- NGFW Throughput: 27 Gbps
- Threat Protection Throughput: 25 Gbps
- IPv4 Firewall Throughput (1518/512/64 byte, UDP): 198 / 196 / 140 Gbps
- IPsec VPN Throughput (512 byte): 55 Gbps
- Power Consumption (Average / Maximum): 420.3 W / 513.7 W
- Operating Temperature: 32°F to 104°F (0°C to 40°C)
- Onboard Storage: 2x 960GB NVMe SSD
- Form Factor: 2RU Rack Mount
Upgrade Your Network Security
Deploy the FortiGate 2601F-BDL-809-60 today for uncompromising performance, integrated storage, and Enterprise Protection backed by FortiCare Premium for a 5 Year term.
Product Information
Product Information
Shipping & Returns
Shipping & Returns



Fortinet FG-2601F-BDL-809-60 Next-Generation Firewall (NGFW)
Fortinet FG-2601F-BDL-809-60 Next-Generation Firewall (NGFW)
[shortdesc]Firewall, 100GE/25GE/10GE interfaces, NP7/CP9 SPU acceleration, 2x960GB NVMe SSD, including 5 Year FortiCare Premium and FortiGuard Enterprise Protection[/shortdesc]
[properties]
| SKU | FG-2601F-BDL-809-60 |
| Bundle / Subscription | Firewall appliance + FortiCare Premium + FortiGuard Enterprise Protection (5 Year) |
| Form Factor | Rack Mount, 2RU |
| Threat Protection Throughput | 25 Gbps |
| Interfaces | 4x 100 GE QSFP28 / 40 GE QSFP+, 16x 25 GE SFP28 / 10 GE SFP+ / GE SFP, 16x 10 GE RJ45, 2x 10 GE SFP+ HA, 2x GE RJ45 MGMT |
| Onboard Storage | 2x 960GB NVMe SSD |
| Dimensions (H x W x L) | 3.5 x 17.25 x 21.1 in (88.4 x 438 x 536 mm) |
| Weight | 30.9 lbs (14.0 kg) |
[/properties]
[specifications]
| System Performance - Enterprise Traffic Mix | |
| IPS Throughput | 31 Gbps |
| NGFW Throughput | 27 Gbps |
| System Performance & Capacity | |
| IPv4 Firewall Throughput (1518/512/64 byte, UDP) | 198 / 196 / 140 Gbps |
| IPv6 Firewall Throughput (1518/512/86 byte, UDP) | 198 / 196 / 140 Gbps |
| Firewall Latency (64 byte, UDP) | 3.41 μs |
| Firewall Throughput (Packet per Second) | 210 Mpps |
| Concurrent Sessions (TCP) | 24 Million / 40 Million* |
| New Sessions/Second (TCP) | 1 Million / 2 Million* |
| Firewall Policies | 100,000 |
| IPsec VPN Throughput (512 byte) | 55 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 20,000 |
| Client-to-Gateway IPsec VPN Tunnels | 100,000 |
| SSL-VPN Throughput | 16 Gbps |
| Concurrent SSL-VPN Users (Recommended Max, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 20 Gbps |
| SSL Inspection CPS (IPS, avg. HTTPS) | 16,000 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 2.7 Million |
| Application Control Throughput (HTTP 64K) | 64 Gbps |
| CAPWAP Throughput (HTTP 64K) | 62.5 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 196 |
| Maximum Number of FortiAPs (Total / Tunnel) | 4096 / 2048 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of Registered FortiClients | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
| Hardware & Interfaces | |
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 4 |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 |
| Hardware Accelerated 10 GE / GE RJ45 Ports | 16 |
| Hardware Accelerated 10 GE SFP+ / GE SFP HA Slots | 2 |
| GE RJ45 Management Ports | 2 |
| USB 3.0 Port | 1 |
| Console RJ45 Port | 1 |
| Trusted Platform Module (TPM) | Included |
| Dimensions & Power | |
| AC Power Supply | 100–240VAC, 47/63 Hz |
| Power Consumption (Average / Maximum) | 420.3 W / 513.7 W |
| Heat Dissipation | 1754 BTU/h |
| Redundant Power Supplies | Default dual AC PSU for 1+1 Redundancy (Hot Swappable) |
| Operating Environment & Certifications | |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 10% to 90% non-condensing |
| Noise Level | 71.72 dBA |
| Forced Airflow | Side and Front to Back |
| Operating Altitude | Up to 10,000 ft (3048 m) |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 |
[/specifications]
[accesories]
| Included Transceivers | 2x SFP+ (SR 10 GE) |
| Optional Accessories | Rack Mount Sliding Rails, AC Power Supply, DC Power Supply, Various Transceiver Modules (1 GE SFP, 10 GE SFP+, 25 GE SFP28, 40 GE QSFP+, 100 GE QSFP28), Direct Attach Cables |
[/accesories]
The FortiGate 2601F Series empowers organizations to build security-driven networks, forming the foundation of a robust Hybrid Mesh Firewall architecture. By weaving security deep into the data center and across hybrid IT environments, it protects any edge at any scale. This FG-2601F-BDL-809-60 bundle includes the FortiGate 2601F firewall appliance with FortiCare Premium and FortiGuard Enterprise Protection for a 5 Year term.
With integrated 2x 960GB NVMe SSD storage, the FG-2601F allows for local logging and reporting without relying solely on external devices. It supports industry-first integrated Zero Trust Network Access (ZTNA) enforcement within an NGFW solution, automatically controlling and verifying user access to applications. The comprehensive interface options, including high-speed 100 GE and 25 GE slots, ensure that security never becomes a performance bottleneck in high-bandwidth environments.
Hyperscale Security and Performance for the Enterprise Edge
- Unparalleled Performance: Patented SPU NP7 and CP9 processors deliver up to 198 / 196 / 140 Gbps IPv4 firewall throughput and 25 Gbps threat protection throughput to handle massive traffic volumes.
- Local Storage Included: Equipped with dual 960GB NVMe SSDs to support on-device logging and reporting.
- High-Speed Connectivity: Features multiple 100 GE QSFP28 and 25 GE SFP28 slots to simplify network design and eliminate the need for additional bridging devices.
- Integrated ZTNA: Delivers the industry's first integrated Zero Trust Network Access enforcement, providing consistent convergence and seamless user experience.
- Operational Efficiency: Consolidates networking and security into a single platform powered by FortiOS, reducing complexity and lowering Total Cost of Ownership (TCO).
- Hardware-Assisted Security: Includes a Trusted Platform Module (TPM) to harden physical networking appliances and hardware acceleration for key security functions, including VPN and VXLAN.
- Enterprise Data Centers: Ideal for securing high-speed core networks with 100 GE connectivity and hyperscale inspection capabilities.
- Hybrid Cloud Environments: Provides dynamic segmentation and secure connectivity across on-premise and multi-cloud architectures.
- Internal Segmentation: Adapts to network topology to deliver end-to-end security and prevent lateral movement of threats using advanced VXLAN segmentation.
- Remote Workforce Security: Facilitates secure user access to applications through integrated ZTNA and high-performance IPsec VPN capabilities.
- IPS Throughput: 31 Gbps
- NGFW Throughput: 27 Gbps
- Threat Protection Throughput: 25 Gbps
- IPv4 Firewall Throughput (1518/512/64 byte, UDP): 198 / 196 / 140 Gbps
- IPsec VPN Throughput (512 byte): 55 Gbps
- Power Consumption (Average / Maximum): 420.3 W / 513.7 W
- Operating Temperature: 32°F to 104°F (0°C to 40°C)
- Onboard Storage: 2x 960GB NVMe SSD
- Form Factor: 2RU Rack Mount
Upgrade Your Network Security
Deploy the FortiGate 2601F-BDL-809-60 today for uncompromising performance, integrated storage, and Enterprise Protection backed by FortiCare Premium for a 5 Year term.
Original: $281,956.00
-65%$281,956.00
$98,684.60Product Information
Product Information
Shipping & Returns
Shipping & Returns
Description
[shortdesc]Firewall, 100GE/25GE/10GE interfaces, NP7/CP9 SPU acceleration, 2x960GB NVMe SSD, including 5 Year FortiCare Premium and FortiGuard Enterprise Protection[/shortdesc]
[properties]
| SKU | FG-2601F-BDL-809-60 |
| Bundle / Subscription | Firewall appliance + FortiCare Premium + FortiGuard Enterprise Protection (5 Year) |
| Form Factor | Rack Mount, 2RU |
| Threat Protection Throughput | 25 Gbps |
| Interfaces | 4x 100 GE QSFP28 / 40 GE QSFP+, 16x 25 GE SFP28 / 10 GE SFP+ / GE SFP, 16x 10 GE RJ45, 2x 10 GE SFP+ HA, 2x GE RJ45 MGMT |
| Onboard Storage | 2x 960GB NVMe SSD |
| Dimensions (H x W x L) | 3.5 x 17.25 x 21.1 in (88.4 x 438 x 536 mm) |
| Weight | 30.9 lbs (14.0 kg) |
[/properties]
[specifications]
| System Performance - Enterprise Traffic Mix | |
| IPS Throughput | 31 Gbps |
| NGFW Throughput | 27 Gbps |
| System Performance & Capacity | |
| IPv4 Firewall Throughput (1518/512/64 byte, UDP) | 198 / 196 / 140 Gbps |
| IPv6 Firewall Throughput (1518/512/86 byte, UDP) | 198 / 196 / 140 Gbps |
| Firewall Latency (64 byte, UDP) | 3.41 μs |
| Firewall Throughput (Packet per Second) | 210 Mpps |
| Concurrent Sessions (TCP) | 24 Million / 40 Million* |
| New Sessions/Second (TCP) | 1 Million / 2 Million* |
| Firewall Policies | 100,000 |
| IPsec VPN Throughput (512 byte) | 55 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 20,000 |
| Client-to-Gateway IPsec VPN Tunnels | 100,000 |
| SSL-VPN Throughput | 16 Gbps |
| Concurrent SSL-VPN Users (Recommended Max, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 20 Gbps |
| SSL Inspection CPS (IPS, avg. HTTPS) | 16,000 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 2.7 Million |
| Application Control Throughput (HTTP 64K) | 64 Gbps |
| CAPWAP Throughput (HTTP 64K) | 62.5 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 196 |
| Maximum Number of FortiAPs (Total / Tunnel) | 4096 / 2048 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of Registered FortiClients | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
| Hardware & Interfaces | |
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 4 |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 |
| Hardware Accelerated 10 GE / GE RJ45 Ports | 16 |
| Hardware Accelerated 10 GE SFP+ / GE SFP HA Slots | 2 |
| GE RJ45 Management Ports | 2 |
| USB 3.0 Port | 1 |
| Console RJ45 Port | 1 |
| Trusted Platform Module (TPM) | Included |
| Dimensions & Power | |
| AC Power Supply | 100–240VAC, 47/63 Hz |
| Power Consumption (Average / Maximum) | 420.3 W / 513.7 W |
| Heat Dissipation | 1754 BTU/h |
| Redundant Power Supplies | Default dual AC PSU for 1+1 Redundancy (Hot Swappable) |
| Operating Environment & Certifications | |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 10% to 90% non-condensing |
| Noise Level | 71.72 dBA |
| Forced Airflow | Side and Front to Back |
| Operating Altitude | Up to 10,000 ft (3048 m) |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 |
[/specifications]
[accesories]
| Included Transceivers | 2x SFP+ (SR 10 GE) |
| Optional Accessories | Rack Mount Sliding Rails, AC Power Supply, DC Power Supply, Various Transceiver Modules (1 GE SFP, 10 GE SFP+, 25 GE SFP28, 40 GE QSFP+, 100 GE QSFP28), Direct Attach Cables |
[/accesories]
The FortiGate 2601F Series empowers organizations to build security-driven networks, forming the foundation of a robust Hybrid Mesh Firewall architecture. By weaving security deep into the data center and across hybrid IT environments, it protects any edge at any scale. This FG-2601F-BDL-809-60 bundle includes the FortiGate 2601F firewall appliance with FortiCare Premium and FortiGuard Enterprise Protection for a 5 Year term.
With integrated 2x 960GB NVMe SSD storage, the FG-2601F allows for local logging and reporting without relying solely on external devices. It supports industry-first integrated Zero Trust Network Access (ZTNA) enforcement within an NGFW solution, automatically controlling and verifying user access to applications. The comprehensive interface options, including high-speed 100 GE and 25 GE slots, ensure that security never becomes a performance bottleneck in high-bandwidth environments.
Hyperscale Security and Performance for the Enterprise Edge
- Unparalleled Performance: Patented SPU NP7 and CP9 processors deliver up to 198 / 196 / 140 Gbps IPv4 firewall throughput and 25 Gbps threat protection throughput to handle massive traffic volumes.
- Local Storage Included: Equipped with dual 960GB NVMe SSDs to support on-device logging and reporting.
- High-Speed Connectivity: Features multiple 100 GE QSFP28 and 25 GE SFP28 slots to simplify network design and eliminate the need for additional bridging devices.
- Integrated ZTNA: Delivers the industry's first integrated Zero Trust Network Access enforcement, providing consistent convergence and seamless user experience.
- Operational Efficiency: Consolidates networking and security into a single platform powered by FortiOS, reducing complexity and lowering Total Cost of Ownership (TCO).
- Hardware-Assisted Security: Includes a Trusted Platform Module (TPM) to harden physical networking appliances and hardware acceleration for key security functions, including VPN and VXLAN.
- Enterprise Data Centers: Ideal for securing high-speed core networks with 100 GE connectivity and hyperscale inspection capabilities.
- Hybrid Cloud Environments: Provides dynamic segmentation and secure connectivity across on-premise and multi-cloud architectures.
- Internal Segmentation: Adapts to network topology to deliver end-to-end security and prevent lateral movement of threats using advanced VXLAN segmentation.
- Remote Workforce Security: Facilitates secure user access to applications through integrated ZTNA and high-performance IPsec VPN capabilities.
- IPS Throughput: 31 Gbps
- NGFW Throughput: 27 Gbps
- Threat Protection Throughput: 25 Gbps
- IPv4 Firewall Throughput (1518/512/64 byte, UDP): 198 / 196 / 140 Gbps
- IPsec VPN Throughput (512 byte): 55 Gbps
- Power Consumption (Average / Maximum): 420.3 W / 513.7 W
- Operating Temperature: 32°F to 104°F (0°C to 40°C)
- Onboard Storage: 2x 960GB NVMe SSD
- Form Factor: 2RU Rack Mount
Upgrade Your Network Security
Deploy the FortiGate 2601F-BDL-809-60 today for uncompromising performance, integrated storage, and Enterprise Protection backed by FortiCare Premium for a 5 Year term.














