FortiGate/FortiWiFi 90D SeriesFortiGate 90D, 90D-POE, FortiWiFi 90D, 90D-POEThe Fortinet Enterprise Firewall Solution delivers end-to-end network security with one platform, onenetwork security operating system and unified policy management with a single pane of glass — for theindustry’s best protection against the most advanced security threats and targeted attacks.Security Fabric IntegrationDeployment ModesFortiGate appliances, interconnectedwith the Fortinet Security Fabric,form the backbone of the FortinetEnterprise Solution.Distributed Enterprise FirewallHardware Acceleration3.5 GbpsFirewallSPU SoC22 MillionConcurrentSessions20041 Mbps25 Mbps22.5 MbpsIPSNGFWThreat Protection10032YesThird-Party CertificationsMultiple GE RJ45 PoE VariantsDATA SHEET

FortiGate/FortiWiFi 90D SeriesHARDWAREFortiGate/FortiWiFi 90D(-POE)1234SOC2Desktop32GBSOC2Desktopa/b/g/n5( )( )POE32GBPOEInterfaces1. Console Port2. USB Management Port3. 2x USB Ports4. 1 4x GE RJ45 Switch Ports /10x GE RJ45 Switch and 4x RJ45 PoE Ports on PoE Models5. 2x GE RJ45 WAN PortsInstall in Minutes with FortiExplorerPowered by SPU SoC2§§ Combines a RISC-based CPU withFortinet’s proprietary SPU content andnetwork processors for unmatchedperformance§§ Simplifies appliance design and enables breakthroughperformance for smaller networks§§ Supports firewall acceleration across all packet sizes formaximum throughput§§ Delivers accelerated UTM content processing forsuperior performance and protection§§ Accelerates VPN performance for high speed, secureremote accessThe FortiExplorer wizard enables you to easily and quickly set upand configure FortiGate and FortiWiFi platforms with easy-to-followinstructions. The application runs on Windows, Mac OS X desktopsand laptops as well as popular mobile devices. Simply connect tothe appropriate USB port on the appliance, and be fully protectedin minutes.3G/4G WAN ConnectivityThe FortiGate/FortiWiFi 90D Series includes a USB port thatallows you to plug in a compatible third-party 3G/4G USB modem,providing additional WAN connectivity or a redundant link formaximum reliability.Compact and Reliable Form FactorDesigned for small environments, you can place it on a desktop orwall-mount it. It is small, lightweight yet highly reliable with superiorMTBF (Mean Time Between Failure), minimizing the chance of anetwork disruption.Superior Wireless CoverageA built-in dual-band, dual-stream access point with internalantennas is integrated on the FortiWiFi 90D and provides speedy802.11n coverage on both 2.4 GHz and 5 GHz bands. The dualband chipset addresses the PCI-DSS compliance requirement forrogue AP wireless scanning, providing maximum protection forregulated

FortiGate/FortiWiFi 90D SeriesSOFTWAREFortiOSControl all the security and networking capabilities across the entireFortiGate platform with one intuitive operating system. Reduceoperating expenses and save time with a truly consolidated nextgeneration security platform.§§ A truly consolidated platform with one OS for all security andnetworking services for all FortiGate platforms.§§ Industry-leading protection: NSS Labs Recommended, VB100,AV Comparatives and ICSA validated security and performance.§§ Control thousands of applications, block the latest exploits, andfilter web traffic based on millions of real-time URL ratings.§§ Detect, contain and block advanced attacks automatically inminutes with integrated advanced threat protection framework.§§ Solve your networking needs with extensive routing, switching,WiFi, LAN and WAN capabilities.§§ Activate all the SPU-boosted capabilities you need on thefastest firewall platform available.For more information, please refer to the FortiOS datasheet available at www.fortinet.comSERVICESFortiGuard Security ServicesFortiCare Support ServicesFortiGuard Labs offers real-time intelligence on the threatOur FortiCare customer support team provides global technicallandscape, delivering comprehensive security updates acrosssupport for all Fortinet products. With support staff in the Americas,the full range of Fortinet’s solutions. Comprised of securityEurope, Middle East and Asia, FortiCare offers services to meet thethreat researchers, engineers, and forensic specialists, theneeds of enterprises of all sizes:team collaborates with the world’s leading threat monitoring§§ Enhanced Support — For customers who need supportorganizations, other network and security vendors, as well as lawenforcement agencies:during local business hours only.§§ Comprehensive Support — For customers who need around-§§ Real-time Updates — 24x7x365 Global Operations researchsecurity intelligence, distributed via Fortinet Distributed Networkto all Fortinet platforms.§§ Security Research — FortiGuard Labs have discovered overthe-clock mission critical support, including advanced exchangehardware replacement.§§ Advanced Services — For global or regional customers whoneed an assigned Technical Account Manager, enhanced170 unique zero-day vulnerabilities to date, totaling millions ofservice level agreements, extended software support, priorityautomated signature updates monthly.escalation, on-site visits and more.§§ Validated Security Intelligence — Based on FortiGuard§§ Professional Services — For customers with more complexintelligence, Fortinet’s network security platform is tested andsecurity implementations that require architecture and designvalidated by the world’s leading third-party testing labs andservices, implementation and deployment services, operationalcustomers and more.Enterprise BundleFortiGuard Labs delivers a number of security intelligence services to augment the FortiGate firewall platform.You can easily optimize the protection capabilities of your FortiGate with the FortiGuard Enterprise Bundle. Thisbundle contains the full set of FortiGuard security services plus FortiCare service and support offering the mostflexibility and broadest range of protection all in one package.3

FortiGate/FortiWiFi 90D SeriesSPECIFICATIONSFORTIGATE 90DFORTIWIFI 90DFORTIGATE 90D-POEFORTIWIFI 90D-POEGE RJ45 WAN Ports2222GE RJ45 Switch Ports14141010GE RJ45 PoE Ports––44FE RJ45 PoE Ports––––GE SFP DMZ Slots––––Wireless Interface–802.11 a/b/g/n–802.11 a/b/g/nUSB Ports (Client / Server)1/21/21/21/2Hardware SpecificationsConsole (RJ45)1Internal Storage32 GBSystem PerformanceFirewall Throughput (1518 / 512 / 64 byte UDP packets)3.5 / 3.5 / 3.5 GbpsFirewall Latency (64 byte UDP packets)4 μsFirewall Throughput (Packets Per Second)5.3 MppsConcurrent Sessions (TCP)2 MillionNew Sessions/Second (TCP)4,000Firewall Policies5,000IPsec VPN Throughput (512 byte packets)1 GbpsGateway-to-Gateway IPsec VPN Tunnels200Client-to-Gateway IPsec VPN Tunnels1,000SSL-VPN Throughput35 MbpsConcurrent SSL-VPN Users (Recommended Maximum)200IPS Throughput (HTTP / Enterprise Mix) 1275 / 41 MbpsSSL Inspection Throughput 235 MbpsApplication Control Throughput 360 MbpsNGFW Throughput 425 MbpsThreat Protection Throughput 522.5 MbpsCAPWAP Throughput 6260 MbpsVirtual Domains (Default / Maximum)10 / 10Maximum Number of FortiAPs (Total / Tunnel Mode)32 / 16Maximum Number of FortiTokens100Maximum Number of Registered FortiClients200High Availability ConfigurationsActive / Active, Active / Passive, ClusteringDimensionsHeight x Width x Length (inches)1.72 x 8.5 x 8.781.72 x 9.2 x 8.781.72 x 8.5 x 8.781.72 x 9.2 x 8.78Height x Width x Length (mm)44 x 216 x 22344 x 234 x 22344 x 216 x 22344 x 234 x 223Weight3.5 lbs (1.6 kg)3.5 lbs (1.6 kg)3.5 lbs (1.6 kg)3.5 lbs (1.6 kg)Form FactorDesktopDesktopDesktopDesktopMaximum Current110 V / 1.5 A, 220 V / 0.75 A110 V / 1.5 A, 220 V / 0.75 A110 V / 2 A, 220 V / 1 A110 V / 2 A, 220 V / 1 ATotal Available PoE Power Budget*––61.6 W61.6 WPower Consumption (Average / Maximum)18 / 22 W21 / 25 W59 / 89 W60 / 90 WHeat Dissipation74 BTU / h85 BTU/h303 BTU/h307 BTU/hEnvironmentPower RequiredOperating Temperature100–240V AC, 50–60 Hz32–104 F (0–40 C)Storage Temperature-31–158 F (-35–70 C)Humidity10–90% non-condensingOperating AltitudeUp to 7,400 ft (2,250 m)ComplianceSafetyFCC Part 15 Class B/A, C-Tick, VCCI, CE, UL/cUL, CBCertificationsICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6Note: All performance values are “up to” and vary depending on system configuration. IPsec VPN performance is based on 512 byte UDP packets using AES-256 SHA1. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. SSLInspection is measured with IPS enabled and HTTP traffic, using TLS v1.2 with AES256-SHA. 3. Application Control performance is measured with 64 Kbytes HTTP traffic. 4. NGFW performance is measured with IPS and Application Control enabled, based onEnterprise Traffic Mix. 5. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix. 6. CAPWAP performance is based on 1444 byte UDP packets.* Maximum loading on each PoE port is 15.4 W (802.3af)

FortiGate/FortiWiFi 90D SeriesORDER INFORMATIONProductSKUDescriptionFortiGate 90DFG-90D16x GE RJ45 ports (2x WAN ports, 14x Switch ports), 32 GB onboard storage. Max managed FortiAPs (Total / Tunnel) 32 / 16.FortiWiFi 90DFWF-90D16x GE RJ45 ports (2x WAN ports, 14x Switch ports), Wireless (802.11a/b/g/n), 32 GB onboard storage. Max managed FortiAPs (Total / Tunnel) 32 / 16.FortiGate 90D-POEFG-90D-POE16x GE RJ45 ports (including 2x WAN ports, 10x Switch ports, 4x PoE ports), 32 GB SSD onboard storage. Max managed FortiAPs (Total / Tunnel) 32 / 16.FortiWiFi 90D-POEFWF-90D-POE16x GE RJ45 ports (including 2x WAN ports, 10x Switch ports, 4x PoE ports), Wireless (802.11a/b/g/n), 32 GB SSD onboard storage. Max managed FortiAPs (Total / Tunnel) 32 / 16.SP-RACKTRAY-01Rack mount tray for FG-30D, FG-40C, FG-50/51E, FG-60C, FG-60D/-POE, FG-70D, FG-80D, FG-90D/-POE, FAD-100E, FRC-100D, FWB-100D, FML-60D, FVE-100E.Optional AccessoryRack mount trayGLOBAL HEADQUARTERSFortinet Inc.899 KIFER ROADSunnyvale, CA 94086United StatesTel: SALES OFFICE905 rue Albert Einstein06560 ValbonneFranceTel: 33.4.8987.0500APAC SALES OFFICE300 Beach Road 20-01The ConcourseSingapore 199555Tel: 65.6395.2788LATIN AMERICA SALES OFFICESawgrass Lakes Center13450 W. Sunrise Blvd., Suite 430Sunrise, FL 33323United StatesTel: 1.954.368.9990Copyright 2017 Fortinet, Inc. All rights reserved. Fortinet , FortiGate , FortiCare and FortiGuard , and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All otherproduct or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affectperformance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified productwill perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as inFortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuanthereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be 02