FortiGate 3200F integrates network security and connectivity through FortiOS. Model selection should consider actual traffic, SSL inspection, FortiGuard services, VPN, high availability and environment growth.
Key features
Published performanceMaximum figures from the official Fortinet matrix for July 2026.
Engineering-based sizingFinal sizing accounts for active services, topology, redundancy and expansion.
Security FabricIntegration with the Fortinet ecosystem according to the defined architecture.
Technical specifications
Interfaces and hardware
Accelerated ports — 400 GE QSFP‑DD / 200 GE QSFP56 / 100 GE QSFP28 / 40 GE QSFP+ ports
4
Accelerated ports — 50 GE SFP56 / 25 GE SFP28 / 10 GE SFP+ / GE SFP slots
10
Accelerated ports — 25 GE SFP28 / 10 GE SFP+ / GE SFP ULL slots
4
Accelerated ports — 50 GE SFP56 / 25 GE SFP28 / 10 GE SFP+ HA1/HA2 slots
2
10 GE / GE RJ45 management ports
2
USB 3.0
1
Console RJ45
1
Local storage
FG-3200F: no local data SSD is listed. Variant FG-3201F: 2 × 960 GB SSD.
Dedicated TPM
Yes
Bluetooth Low Energy (BLE)
Yes
Physical signed-firmware switch
Dash in the datasheet: feature not listed for this SKU
Included transceivers
2x SFP+ (SR 10 GE)
Hardware acceleration
NP7 / CP9
Documented optional DAC cables
25 GE SFP28 passive DAC cable (FN-CABLE-SFP28-1); 25 GE SFP28 passive DAC cable (FN-CABLE-SFP28-3); 25 GE SFP28 passive DAC cable (FN-CABLE-SFP28-5); 50 GE SFP56 passive DAC cable, 1m (FN-CABLE-SFP56-DAC-L1); 50 GE SFP56 passive DAC cable, 2.5m (FN-CABLE-SFP56-DAC-LB5); 100 GE QSFP28 passive DAC cable, 1m (FN-CABLE-QSFP28-1); 200 GE QSFP56 passive DAC cable, 1m (FN-CABLE-QSFP56-DAC-L1); 200 GE QSFP56 passive DAC cable, 2.5m (FN-CABLE-QSFP56-DAC-LB5); 400 GE QSFPDD passive DAC cable, 1m (FN-CABLE-QSFPDD-DAC-01); 400 GE QSFPDD passive DAC cable, 2.5m (FN-CABLE-QSFPDD-DAC-B5)
PoE, Wi-Fi and cellular connectivity
PoE output, a Wi-Fi radio and a 5G cellular modem are not listed for this SKU in the datasheet consulted.
Performance
IPS
63 GbpsEnterprise Traffic Mix; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
NGFW
47 GbpsEnterprise Traffic Mix; firewall, IPS and Application Control enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Threat Protection
45 GbpsEnterprise Traffic Mix; firewall, IPS, Application Control and Malware Protection enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Firewall IPv4 — UDP 1518/512/64 bytes
387/385/178.5 GbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Firewall IPv6 — UDP 1518/512/86 bytes
387/385/178.5 GbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Firewall latency — UDP 64 bytes
3.42 μs / 1.45 μsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric. The ULL value is separate from the value for standard ports.
Packet forwarding
267.75 MppsLaboratory results; actual performance varies with configuration and traffic.
IPsec VPN — throughput (512 bytes)
105 Gbps512-byte packets; AES256-SHA256 encryption. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL-VPN — historical throughput
11 GbpsPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
SSL inspection — throughput
29 GbpsIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — new connections/s
30 000IPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — concurrent sessions
7.4 millionIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Application control — HTTP 64 KB
109 GbpsHTTP 64 KB; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
CAPWAP — throughput (HTTP 64 KB)
65 GbpsHTTP 64 KB. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
30 000Published historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
VDOMs — default / maximum
10 / 500
Managed FortiSwitches — maximum
300
Managed FortiAPs — total / tunnel
4096 / 2048
FortiTokens — maximum
20 000
Registered FortiClients — maximum
20 000
High availability
Active-Active, Active-Passive, Clustering
Installation and power
Dimensions (H × W × D), inches
3.5 x 17.44 x 23.9
Dimensions (H × W × D), mm
88.9 x 443 x 607.1
Weight
43.9 lbs (20 kg)
Form factor and mounting
Rack, 2RU
AC power supply
100–240VAC, 60/50 Hz
Power consumption — average / maximum
520W / 865 W
Maximum current
12@100V, 9A@240V
Heat dissipation
2955 BTU/h
Redundant power supplies (hot-swap)
Yes (two factory-installed AC power supplies for 1+1 redundancy)
Power supply efficiency
80Plus-compatible
Operating temperature
32°F to 104°F (0°C to 40°C)
Storage temperature
-31°F to 158°F (-35°C to 70°C)
Humidity
5% to 90%, non-condensing
Noise
71 dBA
Airflow
Front-to-rear airflow
Operating altitude
Up to 10 000 ft (3048 m)
Compliance
FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB
Certifications
USGv6/IPv6
Licensing and lifecycle
FortiGuard licensing and support
FortiGuard services and FortiCare support depend on the purchased bundle or subscription; hardware alone does not imply that all services are included.
SSL-VPN and FortiOS version
Published historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
Lifecycle and document review
End of Order / End of Support are not stated in this datasheet; confirm the official milestones for each SKU before purchasing.
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
