A few weeks ago, we published our Fortinet FortiGate FG-40F Review: Leveling Up Firewall Testing. At the same time, we were testing it with the Fortinet FortiGate FG-60F in back-to-back mode. Perhaps unsurprisingly, the units are similar in many ways. Still, many have not seen inside these boxes, so we thought we would open one up and show you how it is built, then plug it in and run high-performance Keysight CyPerf workloads across the gateway. We were not entirely sure what to expect, but, looking at the data, I think our results make sense.
You can purchase this on Amazon (affiliate link), but make sure you get the license and term bundle you need if you decide to purchase an FG-60F.
Fortinet FortiGate FG-60F External Hardware Overview
Like the FG-40F, the FG-60F is in a fanless white desktop chassis.
On the front left, we get the logo and model.
One neat little feature is that we get not just power and status, but also an HA status LED indicator on the front.
Then we get the port status LEDs on the front.
Flipping this around, you can see the implication. When this is running, the ports and status indicators are on opposite sides. Some love this while others do not, but usually folks have strong experiences.
On the left side, we get a reset button and the DC power input. This is a nice feature that companies like Fortinet and Sonicwall use, where the 12V power input has a latch to secure it.
There is also a USB and a console port. We had a firmware update get stuck, so we connected via the console to interrupt the boot during the recovery process.
Next, there are labeled WAN2, WAN1, and DMZ as part of the ten total Ethernet ports.
There are two designated FortiLink ports.
Then there are five labeled LAN ports. Of course, you can configure ports, but there is a good variety of ports already labeled on the chassis.
On the side, there is a vent.
On the other side, there is a vent with a lock point.
For a smaller form factor like this, designed for edge deployments, physical security is a thing even at the level of keeping the box in the building.
On the bottom, we get rubber feet and vents.
On the top, we get a big Fortinet logo.
Next, let us get inside, since that is probably more interesting.
Speaking of updates, fortigates can’t be directly updated to every version – you have to go in their required sequence. The ideal use case for the 60F might be, in addition to the extra ports, the ability to do a couple more things unlicensed than the 40F does. If you maintain a license, it matters less, of course. But then if you’re buying new, maybe you’ll be considering the G series anyway. And for other purposes you might jump directly to a used 100F or something depending on what you want. BTW the connector these and the sonicwalls use is a known standard which I’ve forgotten, but while YMMV I have found it to be cross compatible. Saves cost if you’re buying used ones and running unlicensed.