FortiGate 90G Series Datasheet

“`html

FortiGate 90G Series Datasheet

In today’s dynamic threat landscape, securing network perimeters is paramount for businesses of all sizes. As organizations expand their digital footprint and embrace hybrid work models, the need for robust, high-performance security solutions at the network edge becomes increasingly critical. Aging firewall infrastructure can no longer keep pace with evolving cyber threats, leading to potential vulnerabilities and operational inefficiencies. This document explores the capabilities and specifications of the FortiGate 90G series, a next-generation firewall and SD-WAN appliance designed specifically to address the demanding requirements of small businesses and remote offices, offering a compelling blend of performance, efficiency, and simplified management.

Product Overview

The FortiGate 90G Next-Generation Firewall (NGFW) represents a significant advancement in network security for small and distributed environments. Powered by Fortinet’s cutting-edge SP5 ASIC processor, the FortiGate 90G delivers industry-leading performance and energy efficiency, establishing a new benchmark for firewalls in its class. This solution integrates advanced security functions, networking capabilities, and centralized management options to provide a comprehensive defense against modern cyber threats, including sophisticated ransomware attacks.

Unlike traditional firewalls that rely on general-purpose CPUs, the FortiGate 90G leverages hardware acceleration through its purpose-built SP5 ASIC. This specialized processor is optimized for security processing tasks, enabling the appliance to achieve significantly higher throughput for key security functions like firewall filtering, IPSec VPNs, threat protection, and SSL inspection. The result is a security platform that not only delivers superior performance but also operates with remarkable energy efficiency, leading to lower operational costs and a reduced environmental footprint. The FortiGate 90G is not just a firewall; it’s a versatile security and networking appliance that includes integrated SD-WAN and Zero Trust Network Access (ZTNA) capabilities, making it an ideal solution for businesses looking to modernize their network infrastructure and secure their distributed workforce.

The FortiGate 90G series focuses on providing a powerful yet easy-to-manage security solution for use cases such as securing small office/branch office (SO/BO) locations, supporting employees working from home, and facilitating secure business expansion with SD-WAN deployments. Its feature set and performance characteristics make it well-suited for IT leaders responsible for networking and infrastructure in organizations that need to replace outdated security devices or consolidate their security vendor landscape. By offering a single, integrated platform for security and networking, the FortiGate 90G simplifies deployment, configuration, and ongoing management, which is particularly beneficial for organizations with limited IT resources or a shortage of skilled cybersecurity professionals.

FortiGate 90G Series Technical Specifications

The FortiGate 90G series is engineered to provide exceptional performance and efficiency, setting it apart from competing solutions. The following table outlines key technical specifications, highlighting the raw power and capabilities of this next-generation firewall.

Specification FortiGate 90G
Firewall Throughput 28.0 Gbps
IPSec VPN Throughput 25.0 Gbps
Threat Protection Throughput 2.2 Gbps
SSL Inspection Throughput 2.6 Gbps
Concurrent Sessions 1,500,000
Connections Per Second 124,000
Watts/Gbps Firewall Throughput 0.87
Watts/Gbps IPsec VPN Throughput 0.94
BTU/h per Gbps Firewall Throughput 2.97
Processor Fortinet SP5 ASIC
Form Factor Desktop

These specifications demonstrate the significant performance advantage the FortiGate 90G holds over its competitors. For example, with 28 Gbps of firewall throughput, it delivers nine times more than a leading competitor. Its IPSec VPN throughput of 25 Gbps is sixteen times higher. When it comes to threat protection, the 2.2 Gbps performance is double that of a competitor. Furthermore, the energy efficiency metrics are particularly impressive, with the FortiGate 90G consuming significantly less power per gigabit per second of throughput, resulting in substantial energy savings.

Hardware Architecture

At the core of the FortiGate 90G’s impressive performance lies its advanced hardware architecture, centered around Fortinet’s proprietary SP5 ASIC (Security Processor). This purpose-built system-on-a-chip is designed to accelerate demanding security and networking functions directly in hardware, offloading these tasks from the main general-purpose CPU. This not only boosts performance significantly but also reduces power consumption and heat generation compared to solutions relying solely on software processing on standard processors. The SP5 ASIC enables the FortiGate 90G to deliver line-rate performance for essential security services, ensuring that security does not become a bottleneck for network traffic.

The physical design of the FortiGate 90G is optimized for deployment in small office environments and remote locations. It typically comes in a compact desktop form factor, making it easy to install on a desk or shelf. The device includes a range of network interfaces to connect to the local network, WAN links, and secure VPN connections. The number and type of ports may vary depending on the specific model within the 90G series, but they are designed to support various connectivity requirements, including high-speed Ethernet connections. The appliance is designed for quiet operation, which is important in office environments. Power is supplied through an external power adapter, and the SP5 ASIC’s efficiency contributes to the low overall power consumption. While detailed information about specific port configurations, power supply wattage, gross weight, and shipping dimensions would typically be found in a detailed product datasheet, the core hardware characteristic that drives its performance and efficiency is the integrated SP5 ASIC.

The robust construction of the FortiGate 90G ensures reliability and durability, even in environments that may not have dedicated data center infrastructure. The hardware is designed to operate within a specified temperature and humidity range, making it suitable for deployment in standard office settings. Integrated cooling mechanisms, combined with the low power draw of the SP5 ASIC, help maintain optimal operating temperatures without requiring noisy fans or specialized cooling racks. The front panel includes status indicators that provide visual feedback on the device’s operational status, network activity, and security alerts, allowing for quick assessment of the appliance’s health and performance without needing to access the management interface. This focus on practical, reliable hardware design complements the advanced capabilities of the SP5 ASIC and the FortiOS software.

Software Architecture

The FortiGate 90G runs on Fortinet’s unified operating system, FortiOS. FortiOS is a comprehensive, purpose-built security and networking operating system that powers all FortiGate devices, regardless of their form factor or size. This “FortiOS-everywhere” design is a cornerstone of Fortinet’s security fabric approach, enabling seamless integration and consistent policy enforcement across a wide range of Fortinet products and services. For the FortiGate 90G, FortiOS provides a robust foundation for delivering its Next-Generation Firewall, SD-WAN, and ZTNA functionalities. It offers a rich set of features, including deep packet inspection, intrusion prevention, web filtering, application control, anti-virus, and much more, all managed through an intuitive interface.

FortiOS on the FortiGate 90G provides a centralized point of control for all security and networking configurations. Administrators can define granular security policies based on users, applications, devices, and network zones. The operating system leverages the capabilities of the SP5 ASIC to accelerate these security functions, ensuring that policies are enforced efficiently without impacting network performance. The SD-WAN capabilities integrated into FortiOS allow organizations to intelligently route traffic across multiple wide area network connections based on application requirements and network conditions. This improves application performance, optimizes bandwidth utilization, and enhances network resilience. The ZTNA enforcement integrated into FortiOS enables secure access to applications and data based on identity and context, regardless of location, supporting secure remote work and reducing the attack surface.

For managing multiple FortiGate devices, including the 90G series, Fortinet offers FortiManager. FortiManager provides a single-pane-of-glass management platform, allowing administrators to centralize policy management, device provisioning, and monitoring for their entire Fortinet security infrastructure. This integration with FortiManager simplifies the operational complexity associated with managing distributed firewalls, especially for organizations with numerous branch offices or remote sites. FortiManager facilitates consistent policy enforcement across all managed devices, reduces manual configuration errors, and provides comprehensive visibility into the security posture of the entire network. The deep integration between FortiOS on the FortiGate 90G and FortiManager streamlines workflows, improves efficiency, and enables administrators to respond more quickly to security threats and network changes. Rich analytics and reporting capabilities within FortiManager provide valuable insights into network traffic patterns, security events, and device performance, aiding in proactive threat hunting and network optimization.

Advanced Security Capabilities

Leveraging the power of the SP5 ASIC and the comprehensive features of FortiOS, the FortiGate 90G delivers a suite of advanced security capabilities essential for protecting small businesses and remote offices against modern cyber threats. At its core is a high-performance Next-Generation Firewall (NGFW) engine that goes beyond traditional port- and protocol-based filtering. The NGFW on the FortiGate 90G provides stateful inspection of network traffic, offering granular control over applications, users, and content. This allows administrators to enforce policies that restrict access to certain applications or websites, preventing the spread of malware and reducing the risk of data breaches. Furthermore, the NGFW delivers robust protection against a wide range of network-based attacks.

Integrated within the FortiGate 90G is a powerful Intrusion Prevention System (IPS) that leverages a frequently updated database of threat signatures to detect and block malicious traffic patterns and attack attempts in real-time. The SP5 ASIC accelerates the IPS engine, ensuring that even with deep inspection enabled, the appliance maintains high throughput. This real-time threat prevention is crucial for stopping exploits and preventing attackers from gaining a foothold in the network. In addition to IPS, the FortiGate 90G includes comprehensive anti-malware protection. This includes signature-based detection and proactive behavioral analysis to identify and block viruses, worms, Trojans, and other forms of malicious software before they can infect endpoints or spread across the network.

To protect against sophisticated threats and prevent data exfiltration, the FortiGate 90G offers robust SSL/TLS inspection capabilities. With a dedicated SP5 ASIC, the appliance can decrypt, inspect, and re-encrypt SSL/TLS encrypted traffic at high speed without significantly impacting performance. This is critical as a large percentage of malicious traffic is now encrypted. By inspecting encrypted traffic, the FortiGate 90G can detect hidden malware, prevent command-and-control communications, and enforce policy within encrypted sessions. The integration with AI-powered FortiGuard Security Services further enhances the security posture of the FortiGate 90G. These cloud-delivered services provide real-time threat intelligence, including updated signatures, web filtering categories, and vulnerability information, ensuring that the appliance is continuously protected against the latest evolving cyber threats, including sophisticated ransomware variants. This multi-layered approach to security provides comprehensive protection at the network edge.

Integrated SD-WAN and ZTNA

Beyond its core firewall functionalities, the FortiGate 90G integrates advanced Software-Defined Wide Area Network (SD-WAN) and Zero Trust Network Access (ZTNA) capabilities. These integrated features are essential for supporting modern business requirements, including optimizing network performance for cloud-based applications, reducing reliance on expensive dedicated network links, and securely enabling remote workforces. The SD-WAN functionality within FortiOS allows organizations to intelligently route traffic across multiple WAN connections, including broadband internet, MPLS, and cellular links. Leveraging application identification, the FortiGate 90G can steer critical business applications over the most performant or reliable link, ensuring a better user experience and improved business continuity.

The integrated SD-WAN features provide centralized control and visibility over WAN connections from branch offices to headquarters and the cloud. Administrators can define application-aware policies that prioritize traffic for specific applications like voice or video) and dynamically select the best path based on real-time network conditions such as latency, jitter, and packet loss. This proactive approach to traffic management optimizes bandwidth utilization and reduces the impact of network congestion or link failures, leading to significant cost savings by enabling organizations to leverage less expensive broadband internet connections. The SD-WAN capabilities also simplify branch office connectivity by providing automated provisioning and configuration, reducing the need for specialized IT personnel at each location. This streamlined deployment and management process is particularly valuable for businesses with a distributed footprint.

In parallel with SD-WAN, the FortiGate 90G incorporates Zero Trust Network Access (ZTNA) enforcement. ZTNA is a security framework that assumes no user or device can be trusted a priori, requiring strict verification before granting access to network resources. Rather than relying on traditional perimeter-based security, ZTNA enforces access controls based on identity, device posture, and context. The FortiGate 90G acts as a ZTNA enforcement point, brokering secure connections between users and applications, regardless of where the user is located or where the application resides (on-premises or in the cloud). This capability is fundamental for securely supporting remote employees and third-party access, eliminating the need for traditional VPNs that can introduce security risks.

By integrating ZTNA with its NGFW and SD-WAN capabilities, the FortiGate 90G provides a unified platform for securing the network edge and enabling secure access for a hybrid workforce. This convergence of security and networking functions within a single appliance simplifies the security architecture, reduces complexity, and improves overall security posture. Organizations can define and enforce consistent access policies across all users and applications, gaining improved visibility and control over who is accessing what resources and from where. This integrated approach aligns with the principles of Fortinet’s Security Fabric, which aims to provide pervasive, integrated, and automated security across the entire network.

Energy Efficiency and Cost Savings

A significant differentiator for the FortiGate 90G is its remarkable energy efficiency, a direct benefit of the custom-designed SP5 ASIC. While performance is a primary concern for network security devices, the operational costs associated with power consumption cannot be overlooked, especially for businesses looking to reduce expenses and minimize their environmental impact. The FortiGate 90G sets a new standard in this regard, consuming significantly less power per gigabit per second of firewall throughput compared to its competitors. This translates into tangible cost savings on electricity bills over the lifespan of the device, contributing to a quicker return on investment.

The competitive landscape analysis presented in the source material clearly illustrates the power consumption优势 of the FortiGate 90G. For firewall throughput, it consumes a mere 0.87 Watts/Gbps, dramatically lower than the 55.00 Watts/Gbps of a competitor. Similarly, for IPSec VPN throughput, the 90G uses 0.94 Watts/Gbps, whereas a competitor consumes a staggering 110.00 Watts/Gbps. These figures demonstrate up to 96% less power consumption per unit of throughput compared to competitive offerings. This energy efficiency is not just about reducing electricity costs; it also contributes to lower cooling requirements, further reducing overall operational expenses. In environments with limited power capacity or rising energy costs, the energy efficiency of the FortiGate 90G is a compelling factor.

Beyond energy efficiency, implementing the FortiGate 90G can lead to further cost savings through consolidation and simplified management. By combining NGFW, SD-WAN, ZTNA, and even Wi-Fi control within a single appliance, businesses can reduce the number of disparate security and networking devices they need to purchase, deploy, and manage. This consolidation not only lowers capital expenditures but also reduces ongoing maintenance and support costs. The simplified management offered by FortiOS and FortiManager further contributes to cost savings by reducing the administrative overhead required to manage the security infrastructure. A recent Forrester study on Fortinet Secure SD-WAN highlights an impressive 300% ROI with payback in just 8 months, driven by factors such as reduced network disruption and improved issue resolution, all of which are facilitated by the capabilities found in the FortiGate 90G.

The ability of the FortiGate 90G to “do more with less” by providing a comprehensive suite of security and networking functions in a single, energy-efficient platform allows organizations, particularly small businesses and branch offices, to maximize their IT budget while enhancing their security posture and network performance. This combination of high performance, energy efficiency, and feature consolidation makes the FortiGate 90G an economically attractive solution for organizations looking to modernize their security infrastructure and achieve a strong return on investment.

Ordering Information

To acquire the FortiGate 90G series and enhance your network security and performance, you can place an order using the following information. Various models and bundle options are available, often including FortiGuard security services subscriptions for comprehensive threat protection and ongoing support.

Part Number Description
FG-90G FortiGate 90G Hardware only
FG-90G-BDL-950-XX FortiGate 90G Bundled with FortiGuard Security Services and FortiCare Support (XX denotes specific service level and term)
FC-10-00090-XXX-XX FortiCare Support and FortiGuard Security Services for FG-90G (XXX denotes service bundle, XX denotes term)
LIC-FG-90G-SDWAN FortiGate 90G SD-WAN License (if not included in bundle)

Please note that the exact part numbers and available bundles may vary. It is recommended to consult with a Fortinet authorized partner or visit the official Fortinet website for the most up-to-date ordering information and to discuss specific requirements and licensing options. Purchasing through authorized channels ensures that you receive genuine Fortinet products and have access to necessary support and services.

For global discount offers and to explore purchasing options, please visit https://itmall.sale. They can assist you with obtaining the FortiGate 90G series and related services to meet your organization’s security and networking needs while potentially offering competitive pricing and expert guidance on deployment and configuration.

“`

Related Post

Nexus 9000 Series Firmware Upgrade Failure

Navigating the Complexities of Nexus 9000 Series Firmwa...

Uniting for Glory: LA’s Olympic Vision

Uniting for Glory: LA's Olympic Vision 2028 As the Cit...

The Age of Microperimeters

The Age of Microperimeters: Redefining Cybersecurity in...