FortiGate 60F Unboxing!

hey guys mike here and tonight we're going to be unboxing a fortigate 60f so stay tuned [Music] the 60 series 48 has been my go-to whenever i need something it makes a lot of sense in most small to medium-sized businesses and anything less was usually a waste now fortinet did fix that a lot with the 40f series i did a video about that previously if you haven't seen it yet check it out corporate armor is actually sponsoring this video and when i say sponsoring they provided the hardware came up with a deal with them so i can receive the hardware do unboxings talk about the gear for you guys check out corporate armor they're in the description below it's the buy hardware link um and they've they've given us the wonderful opportunity to be able to actually get hands-on with a lot of gear that i wouldn't be able to buy otherwise so it just makes a lot of sense i started deploying 60 series 40 gates with the charlie series the 60c obviously that box does not compare to the 60f the way the chips have been evolving year over year generation over generation have been absolutely phenomenal the 60f has the sock 4 and it's actually kind of embarrassing how much it's grown as far as its capability goes just for a point of reference the 60d which is the fortigate that to this day i've still deployed more of than any other could only do 35 megs of actual throughput when it comes to protection and i don't mean just standard firewall protection i'm talking about you know threat management the stuff that matters in this day and age right and why i say that's hilarious is because the 60f can do 10 gigs of actual firewall throughput it's actually able to do up to 700 megabits of threat protection 35 megabits on the 60d 700 megabits on the 60f now obviously the 60e is in between there which i've it's been a wonderful device for me as well but i'm i'm truly impressed with the 60f series a couple of you know data sheet type items that make sense to a lot of people is this firewall can do 10 gigs of firewall throughput it can do 1.4 gigs of ips that's intrusion prevention it can do one gig of next-gen firewall capability 700 megs if you have all the threat protect on and of course it's a small form factor but don't let that don't let that fool you i've done videos in the past where we talk about this rack mount capability things that convert a soho style fortigate like the 60 series or the 80 series into a rackmount 1u setup and i tell you i'm using those a lot the fact that you can take this box throw it in a rack idea when you rack shelf and basically use it in most data center environments at least for edge because most data center people they're not really pushing a whole lot of bandwidth certainly not 700 megs north to south most of your data center environments are pushing east-west traffic which means maybe a internal segmentation firewall that's a little bit beefier would make sense there but 6df can do a lot of that we've waited long enough let's dive in and actually open this as you can see new inbox 4860f i changed the camera angle a little bit hopefully it makes things a little bit more visible i'm still working on lighting this is another room in the house so we'll see how that matures as we go on so we pop this open quick start guide every 40 gate will come one to even the big series i bought some 1800 f's recently they come out with a bigger one of course we have the fortigate itself and then all the doodads that come with it it's a wonderful little shelf that's normally on top but i had already opened this quickly um power cable ethernet cable all that jazz anyways we'll close the box and just take a look at the actual 4g itself so as you can see 4860f you're looking at roughly five internal lan hardware switch ports that will be called lan or internal depending on the version of code you have your a and b four to link ports which are basically just hardware switch ports dedicated to ford link your dmz port which is just beside the lan ports and then you have two actual lan ports fortinet has gone back to doing console ports they've been doing that for a while used to they forced that little usb management port over to you and i wasn't a big fan of that the front of the device looks just like all the other ones right you know soho unit it's going to be small it's going to be capable of sitting on a desk and letting it ride it's going to have your link and activity lights across the front as well as your status light power light etc [Music] as far as the internal switches go it does come with a five port internal hardware switch and the two port four to link hardware switch but just like any other fortigate if it has switch fabric capability you have the option of breaking those hardware switches in so you could very well take the 40 link hardware switch remove that throw those ports into the internal or vice versa so you have a lot of flexibility there this is my go-to unit for c-tap style deployments and what i mean by that is usually you don't want to invest in a super expensive box to do client thread assessments unless it's a client that's big enough to where it justifies it right or if they have fiber capability obviously this device does not have sfp ports that are capable of holding fiber optics but you can drop this box in relatively easily in any environment and be able to do a client thread assessment and then give that report to the potential client or the existing client and it'll show you where you can actually take things and take it up a notch i have about 200 of these deployed for clients and they have a multitude of four switches and four aps hanging off of them they do a phenomenal job in that regard so it's a very strong robust box we have a lot of ha deployments of these surprisingly you know smaller businesses as far as bandwidth requirements go but they have to have the uptime for their employees makes a lot of sense and it works swimmingly i haven't tried 40 os 7 on these yet we'll see how it goes now this particular model is the fortigate 60f fortigates come in various versions now even across the same level what i mean by that is is you have the 6df and the forta wi-fi 6df which is the wireless capable version of this unit but you also have the fortigate 61f and the ford wi-fi 61f and the one being at the end is kind of important in this day and age especially if you don't have an analyzer or something like that because that means you have on disk storage capability with the device it has the actual disk that lets you you know log to it reference those logs that way you don't necessarily need an analyzer or ford cloud whereas the 60 series or the zero series of any model for the gate you're basically pulling just from ram so it's first in first out and it goes pretty quick if you're pushing any kind of traffic this is a relatively small box right especially with the pandemic and more and more folks working from home smaller offices i see them doing this a lot as far as use case goes using this box for an ssl vpn termination point and the reason why they're doing that is because the 60f can do up to 200 ssl vpn connections and can push up to 900 megs of ssl vpn throughput so as far as just having a secure ssl vpn appliance that doesn't charge you by user it's really awesome to have it ties in the ad just like any other 40 os product does and it really gives you the flexibility to jump in with florida client and go from there so that pretty much covers it on the fortigate 60f it's it's it's a hell of a box and i would never in my previous days go below a 60 series until the 40f came but just know if you expect yourself to grow in any way go ahead and skip the 40f jump into the 60f you'll be thankful you did in the future this is a robust box the only reason why i don't have one running at my house is because i needed a little bit more port density which is where ford switch comes in but of course my home network switch box isn't large enough to actually support that so i actually run an ade this is faster than my ade i like the 60f a lot hopefully this video gives you some good details about the 60f where it's useful if you have a small office or a home office it makes a lot of sense if you have specific use cases where you can put this thing to work in a bigger business you're in a pretty good hands there as well and of course if you buy some rack mount shelf thing that will convert this into a 1u rack mountable device you're going to be in pretty good hands when it comes to actually having a cost effective device that has a lot of capability the only time i would probably shy away from this box is if obviously if you need sfps or fiber optics because the box does not have that obviously if you need something faster than one gig interfaces you're going to be in a pinch if you have all these interfaces doing various networks or connections and when i say various connections i mean different subnets and there's going to be a lot of you know policy between those and you're going to do utm obviously you'll be limiting yourself a one gig interface can obviously throw more traffic at the box than the 700 meg's worth of threat protection it is capable of doing so you want to be cognizant of that east-west traffic gets you a bigger box if you're going to have a lot of different interfaces crossing a lot of stuff but even then it matters only if you have the actual traffic that's gonna you know do that all these people that buy one gig internet connections think that their throat flowing a gig at a box at any given time when really they peak to two or three hundred and they maintain five to ten it just is what it is if you're in the market for a 60f or any other florida gate check out corporate armor they have what you need and they have prices that are pretty damn competitive they're one of the best online shops for actually buying hardware getting it to you fast and they have a pretty knowledgeable staff whenever it comes to pinpointing specific things of course they have a relationship with me so if they have any questions they reach out to me and i help so 60f strong box get one if you don't have one and you have a small office or a home office or a small business that needs it if you like this video do me a favor hit the thumbs up button hit the subscribe button and hit the notify bell if you absolutely hated it tell me about it i want to know what you liked and did not like that way we can make these videos better obviously hit the thumbs down button if you didn't like it i don't give a it helps things improve this channel is completely organic a lot of the content is based on recommendations messages and things that you've sent me in the comments so you control the power here we have some videos upcoming about ssl vpn configuration on 40 os 7.0 as well as a basic configuration video i know those have been done before but there's a lot of nuances in 7.0 that have changed my approach a little bit so until next time i'll see you later [Music]

Channel: Fortinet Guru

Views: 2,937

Keywords:

Id: Yus8XOizbl0

Length: 12min 16sec (736 seconds)

Published: Mon May 17 2021