FortiGate Maximum Values Matrix - FirewallShop.com

TECHNICAL NOTEFortiGate Maximum Values MatrixVersion 3.0 MR2www.fortinet.com

FortiGate Maximum Values Matrix Technical NoteVersion 3.0 MR219 June 200601-30002-0074-20060619© Copyright 2006 Fortinet, Inc. All rights reserved. No part of thispublication including text, examples, diagrams or illustrations may bereproduced, transmitted, or translated in any form or by any means,electronic, mechanical, manual, optical or otherwise, for any purpose,without prior written permission of Fortinet, Inc.TrademarksABACAS, APSecure, FortiASIC, FortiBIOS, FortiBridge, FortiClient,FortiGate, FortiGuard, FortiGuard-Antispam, FortiGuard-Antivirus,FortiGuard-Intrusion, FortiGuard-Web, FortiLog, FortiManager, Fortinet,FortiOS, FortiPartner, FortiProtect, FortiReporter, FortiResponse,FortiShield, FortiVoIP, and FortiWiFi are trademarks of Fortinet, Inc. in theUnited States and/or other countries. The names of actual companies andproducts mentioned herein may be the trademarks of their respectiveowners.Regulatory complianceFCC Class A Part 15 CSA/CUS!Caution: If you install a battery that is not the correct type, it couldexplode. Dispose of used batteries according to local regulations.

FortiGate maximum valuesFeatureFirewallVDOM 200 500 500 1000 2000 5000 5000 20000 20000 50000 50000 50000 50000PoliciesUnit No limit No limit No limit No limit 4000 10000 10000 40000 40000 100000 100000 100000 100000Policy pool names 64 64 64 64 64 64 64 64 64 64 64 64 64IPv6 VDOM 200 500 500 1000 2000 5000 5000 20000 20000 50000 50000 50000 50000policiesUnit No limit No limit No limit No limit 4000 10000 10000 40000 40000 100000 100000 100000 100000Multicast policies 32 32 32 32 64 64 64 128 128 128 256 256 256DNS translations 32 32 32 32 32 32 32 32 32 32 32 32 32AddressesVDOM 500 500 500 500 1000 3000 3000 6000 6000 10000 10000 10000 10000Unit No limit No limit No limit No limit No limit 6000 6000 12000 12000 20000 20000 20000 20000IPv6addressesAddressgroupIPv6addressgroupServiceServicegroup50A60, 60MWiFi-60AWiFi-6060WM100100A200200A300300AFortiGate ModelVDOM 500 500 500 500 1000 3000 3000 6000 6000 10000 10000 10000 10000Unit No limit No limit No limit No limit No limit 6000 6000 12000 12000 20000 20000 20000 20000Groups 500 500 500 500 500 500 500 500 500 500 500 500 500Addresses pergroup300 300 300 300 300 300 300 300 300 300 300 300 300Groups 500 500 500 500 500 500 500 500 500 500 500 500 500Predefinedservices500 500 500 500 500 500 500 500 500 500 500 500 500Customservices1024 1024 1024 1024 1024 1024 1024 1024 1024 1024 1024 1024 1024Groups 500 500 500 500 500 500 500 500 500 500 500 500 500Services pergroup300 300 300 300 300 300 300 300 300 300 300 300 300SchedulesOne-time 256 256 256 256 256 256 256 256 256 256 256 256 256Recurring 256 256 256 256 256 256 256 256 256 256 256 256 256Virtual IP Virtual IPs 500 500 500 500 500 500 500 500 500 500 1024 1024 1024IP pools 512 512 512 512 512 512 512 512 512 512 512 512 512Static IP/Mac bindings 256 256 256 256 1000 1000 1000 1000 1000 1000 1000 1000 1000Protection profiles 32 32 32 32 32 32 32 500 500 500 500 500 500400400A500500A800800F1000. 1000A1000FA230003020360036204000, 50015001FA25002, 5004FortiGate Maximum Values Matrix Technical Note6 01-30002-0074-20060619

FortiGate maximum valuesFeatureVPNLocal 200 200 200 200 200 200 200 200 200 200 200 200 200CertificateCA 200 200 200 200 200 200 200 200 200 200 200 200 200CRL 200 200 200 200 200 200 200 200 200 200 200 200 200Phase1per VDOM20 50 50 80 200 1500 1500 3000 3000 5000 5000 5000 5000Phase1per unitNo limit No limit No limit No limit No limit 3000 3000 6000 6000 10000 10000 10000 10000Phase1interface* * See maximum values for system interfaces. * *Phase2per VDOM20 50 50 80 200 1500 1500 3000 3000 5000 5000 5000 5000Phase2per unitNo limit No limit No limit No limit No limit 3000 3000 6000 6000 10000 10000 10000 10000IPSec Phase2interface* * See maximum values for system interfaces. * *Manual-keysper VDOM 20 50 50 80 200 1500 1500 3000 3000 5000 5000 5000 5000Manual-keysper unitNo limit No limit No limit No limit No limit 3000 3000 6000 6000 10000 10000 10000 10000Manual-keysinterface* * See maximum values for system interfaces. * *Concentrators 500 500 500 500 500 500 500 500 500 500 500 500 500Tunnels perconcentrator300 300 300 300 300 300 300 300 300 300 300 300 300UserLocal Local users 20 500 500 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000Radius Servers 6 6 6 6 6 6 6 6 6 6 6 6 6LDAP Servers 6 6 6 6 6 6 6 6 6 6 6 6 6WindowsADUserGroup50A60, 60MWiFi-60AWiFi-6060WM100100A200200A300300AFortiGate ModelServers 256 256 256 256 256 256 1024 1024 1024 1024 1024 1024 1024User groups 100 100 100 100 100 100 100 100 100 100 100 100 100Members peruser group350 350 350 350 350 350 350 350 350 350 350 350 350AntivirusFile block file patterns 56 56 56 56 56 56 56 56 56 56 56 56 56File patterns for autosubmissionto Fortinet20 20 20 20 20 20 20 20 20 20 20 20 20Intrusion ProtectionCustom IPS signatures 32 32 32 32 32 32 32 32 32 32 128 128 128Anomalies 100 100 100 100 100 100 100 100 100 100 100 100 100400400A500500A800800F1000. 1000A1000FA230003020360036204000, 50015001FA25002, 5004FortiGate Maximum Values Matrix Technical Note01-30002-0074-20060619 7

FortiGate maximum valuesFeature50A60, 60MWiFi-60AWiFi-6060WM100100A200200A300300AFortiGate ModelWeb FilterFortiGuard local catalog 20 20 20 20 20 20 20 20 20 20 20 20 20IM/P2PAIM users 20 500 500 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000ICQ users 20 500 500 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000MSN users 20 500 500 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000Yahoo users 20 500 500 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000LoggingTraffic filter rules 50 50 50 50 50 50 50 50 50 50 50 50 50400400A500500A800800F1000. 1000A1000FA230003020360036204000, 50015001FA25002, 5004FortiGate Maximum Values Matrix Technical Note8 01-30002-0074-20060619

www.fortinet.com

www.fortinet.com