FortiSwitch Secure Access Switches
Ethernet switching managed from the FortiGate — no separate controller
Compare all 8 models
Figures are Fortinet’s own — sortable, cited on every product page| Model | Actions | ||||
|---|---|---|---|---|---|
| FortiSwitch 100 SeriesFS-100 | 1 Gbps | 8, 24, 48 | 1 or 10 Gbps | Some models | Details |
| FortiSwitch 200 SeriesFS-200 | 1 Gbps | 24, 48 | 1 Gbps | Yes | Details |
| FortiSwitch 400 SeriesFS-400 | 1 Gbps | 24, 48 | 10 Gbps | Yes | Details |
| FortiSwitch 500 SeriesFS-500 | 1 Gbps | 24, 48 | 10 Gbps | Yes | Details |
| FortiSwitch 600 SeriesFS-600 | 2.5 / 5 Gbps | 24, 48 | 25 Gbps | Yes | Details |
| FortiSwitch 1000 SeriesFS-1000 | 10 Gbps | 24, 48 | 40 or 100 Gbps | Yes | Details |
| FortiSwitch 2048FFS-2048F | 25 Gbps | 48 | 100 Gbps | — | Details |
| FortiSwitch 3032GFS-3032G | 40 / 100 Gbps | 32 | n/a | — | Details |
How to read these numbers
FortiSwitch's defining feature is that it has no management plane of its own to buy or run. In FortiLink mode the FortiGate becomes the switch controller: VLANs, port profiles, PoE, 802.1X and firmware are all configured from the firewall you already own, and switch ports become objects you can write firewall policy against.
More on choosing within this range
That changes what a switch is for. A device that fails posture check on a FortiSwitch port can be quarantined to a VLAN by the FortiGate automatically, without a separate NAC deployment, because the firewall owns both the policy and the port.
The range runs from the 100 series (1 Gbps ports, 8/24/48 count) through the 2.5/5 Gbps 600 series for WiFi 6E and 7 uplinks, the 10 Gbps 1000 series, and the 25 Gbps 2048F and 40/100 Gbps 3032G for data-centre top-of-rack.
Before you order
How much PoE budget do you need?
Total PoE budget, not port count, is what runs out. Add up the actual draw of your APs, cameras and phones — WiFi 6E and 7 access points can pull 40 W or more each, and a switch that lists PoE on every port rarely powers every port at maximum.
What speed do the access ports need to be?
1 Gbps access is still fine for desks. WiFi 6E and 7 APs are not — they will saturate a gigabit uplink, which is what the 2.5/5 Gbps 600 series exists for. Match the switch to the APs you are buying, not the ones you are replacing.
Do you need stacking or redundant power?
Redundant power supplies appear on some 200, 400 and 500 series models and as standard higher up. For a closet that carries the site's entire access layer this is not optional.
Will you run FortiLink or standalone?
FortiLink is the reason to buy FortiSwitch. It is also bounded by the FortiGate's max-managed-switch limit — 8 on a 30G, 48 on a 120G, 300 on the high end. Check that ceiling before sizing the access layer.
All FortiSwitch Secure Access Switches
FortiSwitch 100 Series
1 Gbps access ports, 8, 24, 48 port options, 1 or 10 Gbps uplinks
FortiSwitch 200 Series
1 Gbps access ports, 24, 48 port options, 1 Gbps uplinks
FortiSwitch 400 Series
1 Gbps access ports, 24, 48 port options, 10 Gbps uplinks
FortiSwitch 500 Series
1 Gbps access ports, 24, 48 port options, 10 Gbps uplinks
FortiSwitch 600 Series
2.5 / 5 Gbps access ports, 24, 48 port options, 25 Gbps uplinks
FortiSwitch 1000 Series
10 Gbps access ports, 24, 48 port options, 40 or 100 Gbps uplinks
FortiSwitch 2048F
25 Gbps access ports, 48 port options, 100 Gbps uplinks
FortiSwitch 3032G
40 / 100 Gbps access ports, 32 port options, n/a uplinks