Fortinet FortiGate 2500E (FG-2500E) High-throughput core firewall with heaps of copper + 10G, plus built-in 10G bypass for fail-open designs.This is a really practical pick for data centre edge / core refreshes where you need lots of 1G RJ45, some 10G SFP+, and bypass ports for resiliency. At-a-glance performance (Enterprise Traffic Mix) IPS: 11.5 Gbps NGFW: 9.0 Gbps Threat Protection: 5.4 Gbps SSL Inspection (IPS avg HTTPS): 9.4 Gbps IPsec VPN (512B): 95 Gbps huge SSL-VPN throughput: 6 Gbps Recommended concurrent SSL-VPN users: 30,000 very high What that means: strong VPN scale, good SSL inspection, but Threat Protection throughput is the main limiter if youre planning everything on + malware at high sustained throughput. Ports & interfaces (the big selling point) 32 x GE RJ45 ports (plus 2 x GE RJ45 MGMT/HA) 34 total RJ45 physical 10 x 10GE SFP+ slots 2 x 10GE SFP+ bypass ports (SR optics, LC connector) Console + USB Internal storage: 1 x 480GB SSD Form factor: 2RU, dual AC hot-swappable PSU What 10G bypass is (simple explanation) Those 2x 10G bypass SFP+ ports are designed so that if the firewall loses power or fails, traffic can physically pass through the bypass pair (fail-open), which is handy in designs where keeping a critical link up matters more than blocking during an outage. Scale & capacity (enterprise) IPv4 firewall throughput (1518/512/64 UDP): 150 / 150 / 95 Gbps Latency (64B UDP): 2.00 ¼s (very low) Firewall throughput: 145.5 Mpps Concurrent sessions (TCP): 20 million New sessions/sec: 500,000 Firewall policies: 100,000 VDOMs: 10 default / 500 max SSL inspection concurrent sessions: 2 million FortiAPs: 4096 total / 2048 tunnel FortiSwitch: 196 FortiTokens: 20,000 View data sheet: FortiGate 2500E Series Datasheet
