company
Fortinet
Palo Alto
Fortinet
cisco
CPU
Intel Xeon Silver 4110 2.1 G, 8C/16T, 9.6 GT/s, 11M Cache, Turbo, HT (85W) DDR4-2400 (Qty
۲)
Memory
۸GB RDIMM, 2666 MT/s, Single Rank (Qty 4)
Hard Disk
۱TB 7.2K RPM SATA 6 Gbps 2.5in Hot-plug Hard Drive (Qty 2)
Optical Drive
None Required
BMC
iDRAC9 Express, integrated (Qty 1)
Network Interface
Broadcom 5720 QuadPort 4x 1 GB Ethernet, RJ45
RAID Card
PERC H330 Integrated RAID Controller (Qty 1)
RAID Configuration
RAID 1
Console Access
None
Form Factor
۱U Rack mountable
Power Supply
Dual 550W Hot Plug Power Supply
Dual (1+1) 300W Auto Ranging (100V–۲۴۰V)
Input Power
۱۰۰-۲۴۰V AC Autoranging
Input Current
۶.۲۵ A
Cooling
۷fans
Function
Control and Application Server
Capacity
up to 15,000 ports in the network
Firewall throughput (App-ID enabled)
۲۰۰Gbps
Threat prevention throughput (DSRI Enabled)
۱۶۰Gbps
Threat prevention throughput
۱۰۰Gbps
IPSec VPN throughput
۸۰Gbps
Max sessions
۸۰,۰۰۰,۰۰۰
New sessions per second
۱,۲۰۰,۰۰۰
Virtual systems (base/max)
۲۵/۲۲۵
۱۰/۱۰۰/۱۰۰۰Interfaces(Copper, RJ-45)
۴
SFP Interfaces
۲
Local Storage
۲x 2 TB Hard Disk Drive
Total Users (Local + Remote)
۱۰,۰۰۰
FortiTokens
۲۰,۰۰۰
RADIUS Clients (NAS Devices)
۳,۳۳۳
User Groups
۱,۰۰۰
CA Certificates
۵۰
User Certificates
۵۰,۰۰۰
Throughput: Firewall (FW) + Application Visibility and Control (AVC)(1024B)
۱۴۸Gbps
Throughput: FW + AVC + Intrusion Prevention System (IPS (1024B)
۱۳۲Gbps
Maximum concurrent sessions, with AVC
۶۳million
Maximum new connections per second, with AVC
۸۵۰K
TLS (Hardware Decryption)
۲۵Gbps
Throughput: NGIPS (1024B)
۱۴۸Gbps
IPSec VPN throughput (1024B TCP w/Fastpath)
۵۱Gbps
MaximumVPN Peers
۶۰,۰۰۰
URL filtering: number of categories
More than 80
URL filtering: number of URLs categorized
More than 280 million
Stateful inspection firewall throughput
۲۳۴Gbps
Stateful inspection firewall throughput (multiprotocol)
۱۳۰Gbps
Concurrent firewall connections
۷۰million
Firewall latency (UDP 64B microseconds)
۳.۵
New connections persecond
۴million
High availability
Active/active and active/standby
Scalability
VPN load balancing, firewall clustering
Cisco Security Intelligence
Standard, with IP, URL, and DNS threat intelligence
Cisco Firepower NGIPS
Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence
Clustering
Up to 16 security modules across up to 16 different Firepower 9300 chassis
Centralized management
Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator
Adaptive Security Device Manager
Web-based, local management for small-scale deployments