FortiGate Rugged Series
FortiGate Rugged Series
FortiGate Rugged Series
Security-Driven Unlike traditional security solutions made for office and enterprise networks, the FortiGate
Networking with FortiOS Rugged Series is industrially rugged and offer all-in-one security appliances with advanced
delivers converged threat protection capabilities for securing critical industrial networks against cyber threats.
networking and security
FortiOS Everywhere
FortiOS, Fortinet’s Advanced Operating System
FortiOS enables the convergence of high performing networking and security across the
Fortinet Security Fabric. Because it can be deployed anywhere, it delivers consistent and
Available in context-aware security posture across network, endpoint, and multi-cloud environments.
FortiOS dramatically expands the Fortinet Security Fabric’s ability to deliver advanced AI/ML-
powered services, inline advanced sandbox detection, integrated ZTNA enforcement, and
more. It provides protection across hybrid deployment models for hardware, software, and
Software-as-a-Service with SASE.
FortiOS expands visibility and control, ensures the consistent deployment and enforcement
of a simplified, single policy and management framework. Its security policies enable
centralized management across large-scale networks with the following key attributes:
OT focused dashboard for assets and analytics Visibility and control for OT applications and
protocols
2
FortiGate Rugged Firewalls Data Sheet
ASIC Advantage
4
9
3 C
9
0 iSo
6
LP
14 rt
Fo
FortiCare Services
Fortinet is dedicated to helping our customers succeed, and every year FortiCare Services
help thousands of organizations get the most from our Fortinet Security Fabric solution. Our
lifecycle portfolio offers Design, Deploy, Operate, Optimize, and Evolve services. Operate
services offer device-level FortiCare Elite service with enhanced SLAs to meet our customer’s
operational and availability needs. In addition, our customized account-level services provide
rapid incident resolution and offer proactive care to maximize the security and performance
of Fortinet deployments.
3
FortiGate Rugged Firewalls Data Sheet
Use Cases
Industrial Security
• Implement industrial-grade security across the industrial networks with industry certified
next-generation firewall appliances
• Secure industrial networks with deep packet inspection (DPI) for 50+ OT applications and
protocols supporting up to payload level visibility and control
• Apply virtual patching or vulnerability shielding with OT centric IPS (intrusion prevention
system) and minimize risks against security threats that have potential to exploit known or
unknown vulnerabilities
4
FortiGate Rugged Firewalls Data Sheet
Use Cases
Secure SD-WAN
• FortiGate WAN Edge powered by one OS and unified security and management framework
and systems transforms and secures WANs
• Delivers superior quality of experience and effective security posture for work-from-any
where models, SD-Branch, and cloud-first WAN use cases
• Achieve operational efficiencies at any scale through automation, deep analytics, and
self-healing
Universal ZTNA
• Control access to applications no matter where the user is and no matter where the
application is hosted for universal application of access policies
• Provide extensive authentications, checks, and enforce policy prior to granting application
access - every time
• Agent-based access with FortiClient or agentless access via proxy portal for guest or BYOD
5
FortiGate Rugged Firewalls Data Sheet
FortiGuard Services
FortiGuard AI-Powered Security
FortiGuard’s rich suite of security services counter threats in real time using AI-powered,
coordinated protection designed by FortiGuard Labs security threat researchers, engineers,
and forensic specialists.
Web Security
Advanced cloud-delivered URL, DNS (Domain Name System), and Video Filtering providing
complete protection for phishing and other web born attacks while meeting compliance.
Additionally, its dynamic inline CASB (Cloud Access Security Broker) service is focused on
securing business SaaS data, while inline ZTNA traffic inspection and ZTNA posture check
provide per-sessions access control to applications. It also integrates with the FortiClient
Fabric Agent to extend protection to remote and mobile users.
Content Security
Advanced content security technologies enable the detection and prevention of known
and unknown threats and file-based attack tactics in real-time. With capabilities like CPRL
(Compact Pattern Recognition Language), AV, inline Sandbox, and lateral movement protection
make it a complete solution to address ransomware, malware, and credential-based attacks.
Device Security
Advanced security technologies are optimized to monitor and protect IT, IIoT, and OT
devices against vulnerability and device-based attack tactics. Its validated near-real-time
IPS intelligence detects, and blocks known and zero-day threats, provides deep visibility
and control into OT protocols, and provides automated discovery, segmentation, and pattern
identification-based policies.
SOC-as-a-Service
Includes tier-one hunting and automation, log location, 24x7 SOC analyst experts, managed
firewall and endpoint functions, and alert triage.
6
FortiGate Rugged Firewalls Data Sheet
Hardware
FortiGate Rugged 60F FortiGate Rugged 60F-3G4G
6 7 6
1 2 3 4 5 1 2 3 4 5
DC1 + - DC1 + -
+ - + -
SERIAL SERIAL SIM1
6 7 8 9 10
Interfaces Interfaces
1. 1x USB Port 1. 1x USB Port
2. 1x RJ45 Console Port 2. 1x RJ45 Console Port
3. 4x GE RJ45 Ports 3. 4x GE RJ45 Ports
4. 1x GE RJ45 Bypass Port Pair (PORT4 and WAN1)* 4. 1x GE RJ45 Bypass Port Pair (PORT4 and WAN1)*
5. 2x GE RJ45/SFP Shared Media Ports 5. 2x GE RJ45/SFP Shared Media Ports
6. 1x DB9 Serial Port (RS-232) 6. 2x SMA Antennae Connections for Cellular Wireless
7. 2x DC Power Inputs (Redundant Failover) 7. 1x SMA Antenna Connection for GPS
8. 1x DB9 Serial Port (RS-232)
9. 1x Integrated 3G/4G LTE Modem (Dual SIM - Active/Passive)
* NOTE: WAN1/WAN2 and SFP1/SFP2 are shared interfaces
10. 2x DC Power Inputs (Redundant Failover)
7
FortiGate Rugged Firewalls Data Sheet
Hardware
FortiGate Rugged 70F FortiGate Rugged 70F-3G4G
10
GPS
9 9
2 3 4 MAIN 2 3 4 DIV
COM1/COM2 1/2 3/4 WAN1/WAN2 COM1/COM2 1/2 3/4 WAN1/WAN2
1 1
11
BLE
RST/
BLE
RST/
DC1+
DC1–
DC2+
DC2 –
DC2
IN1
IN2
N1+
REF
N2+
COM
NO
OUT
NC
DC1
DC1+
DC1–
DC2+
DC2 –
DC2
IN1
IN2
N1+
REF
N2+
COM
NO
OUT
NC
5 5
7 6 7 6
8
FortiGate Rugged Firewalls Data Sheet
Specifications
FGR-60F FGR-60F-3G4G FGR-70F FGR-70F-3G4G
GE RJ45 Interfaces 4 4 6 6
Bypass GE RJ45 Port Pair PORT4 and WAN1 PORT4 and WAN1 PORT3 and PORT4 PORT3 and PORT4
Dedicated GE SFP Slots No No 2 2
GE RJ45/SFP Shared Media Pairs 2 2 No No
Serial Interface 1 DB9 1 DB9 1 RJ45 1 RJ45
USB (Client / Server) 1 1 1 1
RJ45 Console Port 1 1 1 1
Cellular Modem No 3G / 4G LTE, GPS No 3G / 4G LTE, GPS
Bluetooth Low Energy (BLE) No No Yes Yes
Transceivers Included No No No No
Processor FortiSoC4 FortiSoC4 FortiSoC4 FortiSoC4
Trusted Platform Module (TPM) Yes Yes Yes Yes
Digital I/O Module (DIO) No No Yes Yes
System Performance and Capacity
IPv4 Firewall Throughput 6/6/5.95 Gbps 6/6/5.95 Gbps 8/8/8 Gbps 8/8/8 Gbps
(1518* / 512 / 64 byte UDP
packets)
Firewall Latency (64 byte, UDP) 3.10 μs 3.10 μs 6.71 μs 6.71 μs
Firewall Throughput 8.9 Mpps 8.9 Mpps 12 Mpps 12 Mpps
(Packets Per Second)
Concurrent Sessions (TCP) 600 000 600 000 1M 1M
New Sessions/Second (TCP) 19 000 19 000 35 000 35 000
Firewall Policies 5000 5000 5000 5000
IPsec VPN Throughput (512 byte) 1 3.5 Gbps 3.5 Gbps 6.5 Gbps 6.5 Gbps
Gateway-to-Gateway IPsec VPN 200 200 200 200
Tunnels
Client-to-Gateway IPsec VPN 500 500 500 500
Tunnels
SSL-VPN Throughput 400 Mbps 400 Mbps 450 Mbps 450 Mbps
Concurrent SSL-VPN Users 100 100 100 100
(Recommended Maximum)
SSL Inspection Throughput 460 Mbps 460 Mbps 500 Mbps 500 Mbps
(IPS, avg. HTTPS) 3
SSL Inspection CPS 300 300 380 380
(IPS, avg. HTTPS) 3
SSL Inspection Concurrent 70 000 70 000 90 000 90 000
Session (IPS, avg. HTTPS) 3
Application Control Throughput 1.3 Gbps 1.3 Gbps 1.1 Gbps 1.1 Gbps
(HTTP 64K)
Virtual Domains 10 / 10 10 / 10 10 / 10 10 / 10
(Default / Maximum)
Maximum Number of FortiAPs 30 / 10 30 / 10 64 / 32 64 / 32
(Total / Tunnel)
Maximum Number of FortiTokens 500 500 500 500
Maximum Number of 16 16 16 16
FortiSwitches
High Availability Configurations Active-Active, Active-Passive, Active-Active, Active-Passive, Active-Active, Active-Passive, Active-Active, Active-Passive,
Clustering Clustering Clustering Clustering
Note: All performance values are “up to” and vary depending on system configuration.
1
IPsec VPN performance test uses AES256-SHA256. 4
NGFW performance is measured with Firewall, IPS and Application Control enabled.
2
IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured 5
Threat Protection performance is measured with Firewall, IPS, Application Control and
with Logging enabled. Malware Protection enabled.
3
SSL Inspection performance values use an average of HTTPS sessions of different 6
AC adapter not supported.
cipher suites. 7
AC adapter not supported. Requires fabricated DC cables (refer to QuickStart Guide).
8
DC cables are not included.
9
FortiGate Rugged Firewalls Data Sheet
Specifications
FGR-60F FGR-60F-3G4G FGR-70F FGR-70F-3G4G
Threat Protection Throughput 2, 5 500 Mbps 500 Mbps 580 Mbps 580 Mbps
Height x Width x Length (inches) 1.68 x 8.50 x 6.70 1.68 x 8.50 x 6.70 4.8 x 3.2 x 4.4 4.8 x 3.2 x 4.4
Height x Width x Length (mm) 42.7 x 216 x 170 42.7 x 216 x 170 122 x 80.5 x 111 122 x 80.5 x 111
Weight 3.85 lbs (1.75 kg) 4.06 lbs (1.84 kg) 2.87 lbs (1.3 kg) 2.87 lbs (1.3 kg)
Form Factor Desktop/ DIN-rail/ Wall Mount Desktop/ DIN-rail/ Wall Mount DIN-rail DIN-rail
Operating Environment
Operating Temperature -40°–167°F (-40°–75°C) -40°–167°F (-40°–75°C) -40°–167°F (-40°–75°C) -40°–167°F (-40°–75°C)
Storage Temperature -40°–167°F (-40°–75°C) -40°–167°F (-40°–75°C) -40°–167°F (-40°–75°C) -40°–167°F (-40°–75°C)
Operating Altitude Up to 10 000 ft (3048 m) Up to 10 000 ft (3048 m) Up to 10 000 ft (3048 m) Up to 10 000 ft (3048 m)
Note: All performance values are “up to” and vary depending on system configuration.
1
IPsec VPN performance test uses AES256-SHA256. 4
NGFW performance is measured with Firewall, IPS and Application Control enabled.
2
IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured 5
Threat Protection performance is measured with Firewall, IPS, Application Control and
with Logging enabled. Malware Protection enabled.
3
SSL Inspection performance values use an average of HTTPS sessions of different 6
AC adapter not supported.
cipher suites. 7
AC adapter not supported. Requires fabricated DC cables (refer to QuickStart Guide).
8
DC cables are not included.
10
FortiGate Rugged Firewalls Data Sheet
Specifications
FGR-60F FGR-60F-3G4G FGR-70F FGR-70F-3G4G
Industry Compliance and Certifications
Electric Power Industry IEC 61850-3 and IEEE 1613 Certified IEC 61850-3 and IEEE 1613 Certified IEC 61850-3 and IEEE 1613 Certified IEC 61850-3 and IEEE 1613 Certified
EMC EN 55032:2015, Class A EN 55032:2015, Class A ETSI EN 301 489-1 V2.2.3 (2019-11) ETSI EN 301 489-1 V2.2.3 (2019-11)
EN 55035: 2017 EN 55035: 2017 ETSI EN 301 489-17 V3.2.4 (2020-09) ETSI EN 301 489-17 V3.2.4 (2020-09)
EN IEC 61000-6-4:2019 EN IEC 61000-6-4:2019 ETSI EN 301 489-19 V2.1.1 (2019-04) ETSI EN 301 489-19 V2.1.1 (2019-04)
IEC 61850-3:2013 IEC 61850-3:2013 ETSI EN 301 489-52 V1.2.1 (2021-11) ETSI EN 301 489-52 V1.2.1 (2021-11)
EN 301 489-1 V2.2.3 ETSI EN 301 908-1 V15.1.1 (2021-09) ETSI EN 301 908-1 V15.1.1 (2021-09)
Draft EN 301 489-52 V1.1.0 (2016-11) EN 55032:2015, Class A EN 55032:2015, Class A
IEC 61850-3:2013 IEC 61850-3:2013
Health and Safety IEC 62368-1:2014, 2nd Ed. IEC 62368-1:2014, 2nd Ed. IEC 62368-1:2014, 2nd Ed. IEC 62368-1:2014, 2nd Ed.
EN 62368-1:2014 EN 62368-1:2014 EN 62368-1:2014 EN 62368-1:2014
IEC 62368-1:2018, 3rd Ed. IEC 62368-1:2018, 3rd Ed. IEC 62368-1:2018, 3rd Ed. IEC 62368-1:2018, 3rd Ed.
EN IEC 62368-1:2020 EN IEC 62368-1:2020 EN IEC 62368-1:2020 EN IEC 62368-1:2020
Maritime Industry1 IEC 60945:2002 4th Ed. IEC 60945:2002 4th Ed.
DNV GL Type Approved DNV GL Type Approved
Regulatory Compliance FCC Part 15 Class A, RCM, VCCI Class A, FCC Part 15 Class A, RCM, VCCI Class A, FCC Part 15 Class A, RCM, VCCI Class A, FCC Part 15 Class A, RCM, VCCI Class A,
CE, UL/cUL, CB CE, UL/cUL, CB CE, UL/cUL, CB CE, UL/cUL, CB
RF Draft ETSI EN 301 489-19 V2.2.0 (2020-09) ETSI EN 300 328 V2.2.2 (2019-07) ETSI EN 300 328 V2.2.2 (2019-07)
ETSI EN 301 489-52 V1.2.1 (2021-11) EN IEC 62311:2020 EN 301 908-1 V13.1.1 (2019-11)
EN 301 908-1 V13.1.1 (2019-11) EN 50665:2017 EN 301 908-2 V13.1.1
EN 301 908-2 V13.1.1 FCC Part 15 Subpart C 15.247 EN 301 908-13 V13.1.1
EN 301 908-13 V13.1.1 FCC 47 CFR Part 2.1091 EN 303 413 V1.2.1 (2021-04)
EN 303 413 V1.2.1 (2021-04) ISED RSS-247 Issue 2 EN IEC 62311:2020
RSS-102 Issue 5 EN 50665:2017
FCC Part 15 Subpart C 15.247
FCC 47 CFR Part 2.1091
ISED RSS-247 Issue 2
RSS-102 Issue 5
Rolling Stock Industry EMC, Shock and Vibration Compliant EMC Compliant EN 50155:2017 EMC, Shock, and Vibration EN 50155:2017 EMC, Shock, and Vibration
EN 50121-1:2017 EMC EN 50121-1:2017 EMC Certified Certified
EN 50121-4:2016 EMC EN 50121-4:2016 EMC
IEC60068-2-27:2008 Shock
IEC 60068-2-6:2007 Vibration
1. Maritime certification is only available for Gen3 release of FGR-60F and FGR-60F-3G4G.
FGR-60F-3G4G FGR-70F-3G4G
Cellular Wireless Regional Compatibility
Maximum Tx Power 20 dBm 20 dBm
UMTS/HSPA+ B1, B2, B3, B4, B5, B6, B8, B9, B29 B1, B2, B3, B4, B5, B6, B8, B9, B29
WCDMA No No
GSM/GPRS/EDGE No No
Module Certifications FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB
11
FortiGate Rugged Firewalls Data Sheet
⇶Additional parameters supported for the signatures in the GUI (requires FortiOS v6.4 or above).
Visit https://www.fortiguard.com/services/is to view the latest list of industrial applications and protocols included in the
FortiGuard Industrial Security Service.
12
FortiGate Rugged Firewalls Data Sheet
Ordering Information
Product SKU Description
FortiGate Rugged 60F FGR-60F Ruggedized, indoor, IP20, 4x GE RJ45 ports, 2x shared media ports (supports, 2x GE RJ45 ports or 2x
SFP slots), 1x GE RJ45 bypass port pair (between PORT4 and WAN1), 1x RJ45 serial port (console), 1x DB9
serial port (data), 1x USB port, dual power inputs.
FortiGate Rugged 60F-3G4G FGR-60F-3G4G Ruggedized, indoor, IP20, 4x GE RJ45 ports, 2x shared media ports (supports, 2x GE RJ45 ports or 2x SFP
slots), 1x GE RJ45 bypass port pair (between PORT4 and WAN1), 1x RJ45 serial port (console), 1x DB9
serial port (data), 1x USB port, embedded 3G/4G LTE wireless WAN module (includes, 2 SIM slots - Active/
Passive, 2x external SMA WWAN antennae), Passive GPS (includes, 1x external SMA GPS antenna), dual
power inputs.
FortiGate Rugged 70F FGR-70F Ruggedized, indoor, IP40, 4x GE RJ45 LAN ports, 1x GE RJ45 bypass port pair (between PORT3 and
PORT4), 2x GE RJ45 WAN ports, 2x SFP slots, 1x RJ45 serial port (data), 1x RJ45 serial port (console), 1x
USB port, 1x MicroSD card slot, dual power inputs.
FortiGate Rugged 70F-3G4G FGR-70F-3G4G Ruggedized, indoor, IP40, 4x GE RJ45 LAN ports, 1x GE RJ45 bypass port pair (between PORT3 and
PORT4), 2x GE RJ45 WAN ports, 2x SFP slots, 1x RJ45 serial port (data), 1x RJ45 serial port (console),
1x USB port, 1x MicroSD card slot, embedded 3G/4G LTE wireless WAN module (includes, 2x SIM slots -
Active/Passive, 2x external SMA WWAN antennae), Passive GPS (includes, 1x external SMA GPS antenna),
dual power inputs.
Optional Accessories
1 GE SFP RJ45 transceiver module, -40°–85°C operation FN-TRAN-GC 1 GE SFP RJ45 transceiver module for systems with SFP and SFP/SFP+ slots.
1 GE SFP LX transceivers, SMF, -40°–85°C operation FN-TRAN-LX 1 GE SFP LX transceiver module, -40°C–85°C, over SMF, for all systems with SFP and SFP/SFP+ slots.
1 GE SFP SX transceivers, MMF, -40°–85°C operation FR-TRAN-SX 1 GE SFP SX transceiver module, -40°C–85°C, over MMF, for all systems with SFP and SFP/SFP+ slots.
1 GE SFP transceivers, 90 km range, -40–85°C operation FR-TRAN-ZX 1 GE SFP transceivers, -40°C–85°C operation, 90 km range for all systems with SFP slots.
100base-FX SFP transceiver module FS-TRAN-FX 100 Mb multimode SFP transceiver module, -40° to 85°C, 2 km range for systems with SFP Slots and
capable of 10/100 Mb mode selection
OT Ordering Guide
Fortinet’s OT ordering guide offers high-level mapping of solutions aligned with the Purdue Model based deployment
architecture, allowing end-users and partners to select suitable solutions for their OT cybersecurity requirements. It contains a
non-exhaustive list of the best-selling Fortinet products suited for OT cybersecurity use-cases and requirements.
13
FortiGate Rugged Firewalls Data Sheet
1.
Available when running FortiOS 7.2
FortiGuard Bundles
FortiGuard Labs delivers a number of security intelligence services to augment the FortiGate firewall platform.
You can easily optimize the protection capabilities of your FortiGate with one of these FortiGuard Bundles.
14
www.fortinet.com
Copyright © 2023 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product
or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser
that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any
such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise
revise this publication without notice, and the most current version of the publication shall be applicable.
FGR-DAT-R30-20230426