Fortinet FortiGate 60F / 61F.
NGFW performance for lean IT teams.
The FortiGate 60F and 61F pack 10 Gbps of firewall throughput and full next-generation inspection into a
compact desktop chassis. Both run on Fortinet's purpose-built NP6XLite and CP9 security processors, which
handle deep packet inspection, SSL decryption, and IPsec VPN without throttling live traffic. The 61F adds
128 GB of onboard SSD storage, so local logging and FortiGuard threat intelligence retention work without a
separate FortiAnalyzer appliance.
Data ports: 10x GE RJ45 (includes 1 dedicated management port) USB: 1x USB port Console: 1x RJ45 Storage (61F only): 128 GB internal SSD Form factor: Desktop Typical power draw: 22W (60F), 24W (61F)
VPN and Remote Access
IPsec tunnels (gateway to gateway): 200 IPsec tunnels (client to gateway): 250 SSL-VPN throughput: 900 Mbps Concurrent SSL-VPN users: 200 SD-WAN: Built into FortiOS at no added license cost
Session Capacity and Policies
Concurrent sessions: 700,000 New sessions per second: 35,000 Firewall policies: Up to 5,000 Recommended users: 25 to 75 Security profiles: App control, IPS, AV, DNS filtering, web filtering
Not sure whether the 60F or 61F fits your environment?
The two models run identical hardware and produce identical throughput numbers. The only split is
storage: the 61F carries a 128 GB internal SSD that enables on-box logging, local threat file quarantine,
and FortiGuard intelligence retention without a separate FortiAnalyzer. If local logs matter for your
compliance requirements, or if you do not have a log management appliance in place, the 61F is worth the
small premium. Compare both alongside the full FortiGate desktop lineup to see where they fit.
The hardware, processors, and throughput specs are identical on both models. The only
difference is that the 61F includes a 128 GB internal SSD. That storage enables on-box logging, local
quarantine of threat files, and extended FortiGuard intelligence retention without a separate
FortiAnalyzer or cloud logging subscription. If you need local logs for compliance or do not have a
log management appliance in your stack, the 61F is worth the small price difference.
Fortinet rates the 60F and 61F for environments with approximately 25 to 75
concurrent users. The practical limit depends more on your traffic mix than raw headcount. A site with
heavy video conferencing or large file transfers will approach the threat protection ceiling (700
Mbps) well before the firewall throughput ceiling (10 Gbps). If your internet circuit runs above 500
Mbps and you enable full UTM inspection, talk to one of our engineers before purchasing so we can
confirm the fit.
Yes. Fortinet's SD-WAN capability is built directly into FortiOS and is active on
every FortiGate at no extra license cost. The 60F and 61F support multi-WAN failover,
performance-based routing, and application-aware traffic steering across up to 10 GE RJ45 interfaces,
with no separate SD-WAN subscription required.
The appliance ships with a base FortiCare support contract. To enable IPS, antivirus,
web filtering, DNS filtering, and application control you need a FortiGuard bundle. Fortinet offers
three tiers for this platform: UTM (core threat services), ATP (adds sandbox and extended detection),
and Enterprise Protection (full stack including OT and IoT signatures). All three are available in 1,
3, and 5-year terms. Firewalls.com can quote any bundle alongside the hardware in one line item.
Yes, through two main paths. FortiGate Cloud is Fortinet's SaaS management portal and
works without any additional on-premise hardware. FortiManager is the on-premise centralized
management platform, better suited for multi-site deployments or organizations that need policy
versioning and staged rollouts. Both handle configuration, policy deployment, and firmware management
across all registered FortiGate units. The 61F also supports on-box reporting through its internal
SSD, so you can run basic reports without FortiAnalyzer.
Need help sizing or bundling a FortiGate 60F / 61F?
Tell us your internet circuit speed, approximate user count, and whether you need SD-WAN, remote access
VPN, or a managed firewall service on top. A certified Fortinet engineer responds within one business hour
with a configuration and licensing recommendation tailored to your environment.
