FortiGate 70F
The 60F's port count with 1.5 million sessions and working SSL VPN
- Threat protection
- 800 Mbps
- Firewall throughput
- 10 Gbps
- IPsec VPN
- 6.1 Gbps
- Concurrent sessions
- 1.5 Million
Front panel
- RJ45 copper
The 70F takes the 60F's ten-port layout and roughly doubles the session table to 1.5 million while raising firewall policies from 2,000 to 5,000. Critically, it publishes real SSL VPN figures — 405 Mbps and 200 concurrent users — where the 60F publishes none.
Choose the 70F over the 60F when the site has many concurrent connections rather than much bandwidth, or when you need remote-access SSL VPN terminated locally. If neither applies, the 70G offers substantially more inspection performance for a similar footprint.
Highlights
- 1.5 million concurrent sessions — more than double the 60F
- 405 Mbps SSL VPN, 200 concurrent tunnel-mode users
- 5,000 firewall policies
- 128 GB storage on the 71F variant
Typical deployments
- Branches terminating their own remote-access VPN
- Session-heavy sites — many small connections rather than large transfers
- Policy-heavy deployments that exceed the 60F's 2,000-rule ceiling
The numbers, with their conditions
Every figure below is Fortinet's own, with the test conditions it was measured under.
Performance
Fortinet's published figures. Firewall throughput is measured on UDP with no inspection enabled — size your deployment on threat protection throughput instead, which is measured with firewall, IPS, application control and malware protection all running against an enterprise traffic mix.
| Firewall throughput (1518 / 512 / 64 byte UDP) | 10 / 10 / 6 Gbps |
|---|---|
| IPsec VPN throughput (512 byte)IPsec VPN performance test uses AES256-SHA256. | 6.1 Gbps |
| IPS throughput (enterprise mix)IPS, application control, NGFW and threat protection are measured with logging enabled. | 1.4 Gbps |
| NGFW throughput (enterprise mix)NGFW performance is measured with firewall, IPS and application control enabled, enterprise mix traffic. | 1 Gbps |
| Threat protection throughput (enterprise mix)Threat protection performance is measured with firewall, IPS, application control and malware protection enabled, enterprise mix traffic. | 800 Mbps |
| SSL inspection throughput (IPS, avg. HTTPS)SSL inspection performance values use an average of HTTPS sessions of different cipher suites. | 700 Mbps |
| Application control throughput (HTTP 64K) | 1.8 Gbps |
| Firewall latency | 2.54 µs |
Capacity
| Concurrent sessions | 1.5 Million |
|---|---|
| New sessions / second | 35,000 |
| Firewall policies | 5,000 |
| Max gateway-to-gateway IPsec tunnels | 200 |
| Max client-to-gateway IPsec tunnels | 500 |
| SSL VPN throughput | 405 Mbps |
| Concurrent SSL VPN users (recommended max, tunnel mode) | 200 |
| Virtual domains (default / max) | 10 / 10 |
Security Fabric capacity
How much of the rest of the Fabric this model manages directly, with no separate controller.
| Max managed FortiAPs (total / tunnel) | 64 / 32 |
|---|---|
| Max managed FortiSwitches | 24 |
| Max FortiTokens | 500 |
Hardware
| Interfaces | 10x GE RJ45 |
|---|---|
| Local storage | 128 GB (71F) |
| Power supplies | Single AC PS |
| Form factor | Desktop |
| Variants | — |
Sources
- Fortinet Product Matrix — FortiGate Network Security Platform (July 2026) — retrieved 2026-09-01
Reproduced from Fortinet published documentation and subject to change without notice. Where a figure is load-bearing for your design, ask us to confirm it in writing before you order — we will.
Buyers also compare
FortiGate 60F
Ten-port desktop NGFW — the most widely deployed FortiGate ever built
FortiGate 70G
Line-rate 10 Gbps firewall with 1.4 Gbps SSL inspection — the entry-level value pick
FortiGate 80F
Bypass, DSL and LTE variants with dual power inputs — the resilient branch box