Fortinet · Firewalls

FortiGate 4800F

NGFW for data centres and large-scale environments.

Category
Firewalls
Family
FortiGate
FortiGate 4800F — official front and rear technical views

Overview

FortiGate 4800F integrates network security and connectivity through FortiOS. Model selection should consider actual traffic, SSL inspection, FortiGuard services, VPN, high availability and environment growth.

Key features

Technical specifications

Interfaces and hardware
Accelerated ports — 400GE/200GE/100GE/40GE QSFP-DD/ QSFP56/QSFP28/QSFP+ slots8
Accelerated ports — 200GE/100GE/40GE QSFP56/QSFP28/QSFP+ slots12
Accelerated ports — 50GE/25GE/10GE/GE SFP56/SFP28/SFP+/SFP slots8
Accelerated ports — 50GE/25GE/10GE/GE SFP56/SFP28/SFP+/SFP High Availability and Aux slots4
10GE/GE RJ45 management ports2
USB 3.01
Console1
Local storageFG-4800F: no local data SSD is listed. Variant FG-4801F: 2 × 1.92 TB SSD.
Dedicated TPMYes
Bluetooth Low Energy (BLE)Yes
Physical signed-firmware switchDash in the datasheet: feature not listed for this SKU
Included transceivers2x SFP+ (SR 10 GE)
Hardware accelerationNP7 / CP9
Documented optional DAC cables400 GE QSFPDD passive DAC cable, 1m (FN-CABLE-QSFPDD-DAC-01); 400 GE QSFPDD passive DAC cable, 2.5m (FN-CABLE-QSFPDD-DAC-B5)
PoE, Wi-Fi and cellular connectivityPoE output, a Wi-Fi radio and a 5G cellular modem are not listed for this SKU in the datasheet consulted.
Performance
IPS87 GbpsEnterprise Traffic Mix; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
NGFW77 GbpsEnterprise Traffic Mix; firewall, IPS and Application Control enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Threat Protection75 GbpsEnterprise Traffic Mix; firewall, IPS, Application Control and Malware Protection enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Firewall IPv4 — UDP 1518/512/64 bytes3.1 / 3.1 / 0.93 TbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Firewall IPv6 — UDP 1518/512/86 bytes3.1 / 3.1 / 0.93 TbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Firewall latency — UDP 64 bytes3.6 μsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Packet forwarding1396 MppsLaboratory results; actual performance varies with configuration and traffic.
IPsec VPN — throughput (512 bytes)800 Gbps512-byte packets; AES256-SHA256 encryption. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL-VPN — historical throughput18 GbpsRSA-2048 certificate used in the published test. Published historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
SSL inspection — throughput63 GbpsIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — new connections/s60 000IPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — concurrent sessions30 millionIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Application control — HTTP 64 KB180 GbpsHTTP 64 KB; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
CAPWAP — throughput (HTTP 64 KB)112 GbpsHTTP 64 KB. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Capacity and VPN
Concurrent TCP sessions280 million / 1.8 billion (with a licence for Hyperscale)Capacity is conditional on the Hyperscale licence specified in the datasheet; the figures do not represent automatically included capabilities.
New TCP sessions per second915 000 / 25 million (with a licence for Hyperscale)Capacity is conditional on the Hyperscale licence specified in the datasheet; the figures do not represent automatically included capabilities.
Firewall policies200 000
Site-to-site IPsec tunnels40 000
Client-to-gateway IPsec tunnels200 000
SSL-VPN — historical concurrent users (recommended maximum)30 000Published historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
VDOMs — default / maximum10 / 500
Managed FortiSwitches — maximum300
Managed FortiAPs — total / tunnel8192 / 4096
FortiTokens — maximum20 000
High availabilityActive-Active, Active-Passive, Clustering
Installation and power
Dimensions (H × W × D), inches6.89 x 17.13 x 26.10
Dimensions (H × W × D), mm175 x 435 x 663
Weight90.83 lbs ( 41.2 kg)
Form factor and mountingRack, 4 RU
AC power supply200–240V AC, 50/60 Hz
Power consumption — average / maximum1602 W / 1918.2 W
Maximum AC current7.99A@240VAC
Heat dissipation6544.9 BTU/h
DC input (DC variant)-72V to -40V
Maximum DC current (DC variant)40.94A@48VDC
Redundant power suppliesYes, hot-swappable, 2+2
Power supply efficiency80Plus-compatible
Fan moduleHot-swap
Operating temperature32°F to 122°F (0°C to 50°C)
Storage temperature-31°F to 158°F (-35°C to 70°C)
Humidity10% to 90%, non-condensing
Noise63.794 dBA
AirflowFront-to-rear airflow
Operating altitudeUp to 10 000 ft (3048 m)
ComplianceFCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB
CertificationsUSGv6/IPv6
Licensing and lifecycle
FortiGuard licensing and supportFortiGuard services and FortiCare support depend on the purchased bundle or subscription; hardware alone does not imply that all services are included.
Hyperscale licensingThe datasheet lists a separate Hyperscale licence for session acceleration functions; confirm the SKU and availability.
SSL-VPN and FortiOS versionPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
Lifecycle and document reviewEnd of Order / End of Support are not stated in this datasheet; confirm the official milestones for each SKU before purchasing.

Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.

Documents and references