Replace Old FortiGate 200B With New FortiGate

Author
SecurityPlus
Gold Member
  • Total Posts : 300
  • Scores: 4
  • Reward points: 0
  • Joined: 2014/08/11 18:41:34
  • Status: offline
2020/03/23 07:48:45 (permalink)
0

Replace Old FortiGate 200B With New FortiGate

We have a new potential customer that wants to replace their old FortiGate 200B with a new FortiGate. I'm not familiar with FortiGates prior to the D models. What would a new E or D series firewall that would be equivalent to this firewall? They will have about 100 users using VPN with a 500 MB pipe. They can only get 100 MB through their 200B.

FWF30E, FG50E, FWF50E, FG60D, FWF60D, FG60E, FG60F, FG80E, FG100D
FortiOS 5.2, 5.4, 5.6, and 6.0
FortiSwitch FS-224E-POE
FAP-221E, FAP-221C
#1

4 Replies Related Threads

    rwpatterson
    Expert Member
    • Total Posts : 8466
    • Scores: 201
    • Reward points: 0
    • Joined: 2006/08/08 10:08:18
    • Location: Long Island, New York, USA
    • Status: online
    Re: Replace Old FortiGate 200B With New FortiGate 2020/03/23 08:07:18 (permalink)
    5 (1)
    Starting with some of the "C" models. WAN ports were GB. After that most models had them on most ports. You should check out the spec sheets for today's models to see what's offered. With the CPU and technology improvements over the years, the smaller number models now have more horsepower than the larger ones of yesteryear did.

    -Bob - self proclaimed posting junkie!
    See my Fortigate related scripts at: http://fortigate.camerabob.com

    -4.3.19-b0694
    FWF60B
    FWF80CM (4)
    FWF81CM (2)
     
    #2
    SecurityPlus
    Gold Member
    • Total Posts : 300
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/08/11 18:41:34
    • Status: offline
    Re: Replace Old FortiGate 200B With New FortiGate 2020/03/23 08:49:33 (permalink)
    0
    Thanks!

    FWF30E, FG50E, FWF50E, FG60D, FWF60D, FG60E, FG60F, FG80E, FG100D
    FortiOS 5.2, 5.4, 5.6, and 6.0
    FortiSwitch FS-224E-POE
    FAP-221E, FAP-221C
    #3
    Dave Hall
    Expert Member
    • Total Posts : 1641
    • Scores: 174
    • Reward points: 0
    • Joined: 2012/05/11 07:55:58
    • Location: Canada
    • Status: offline
    Re: Replace Old FortiGate 200B With New FortiGate 2020/03/23 10:22:44 (permalink)
    0
    We replaced our 200Bs with 200Ds, but overall they were both a bit over powering for the remote locations we placed them in.  Originally the 200B was the recommended replacement for the 200A (from a Fortinet partner).  This time around, we will be replacing the 200Ds with 101Es.  I agree with Bob - the new models are more powerful then models of yesteryear. 
     
    That said, with regards to possible suitable replacement it's been suggested to look at the CPU/Memory/current session usage on your current model then find a suitable replacement with perhaps better specs.  If you find more than one comparable model, I suggest checking the VPN related system performance of the models involved.
     

     
    Other things to keep in mind, performance wise, is optimizing the configuration on the fgt - even an high-end fgt model can be "dog slow" if the config is not tailored to the network/traffic and with all the bells and whistles enabled (unless of course you need it).
     
     

    Attached Image(s)


    NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
    #4
    ede_pfau
    Expert Member
    • Total Posts : 6241
    • Scores: 522
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Replace Old FortiGate 200B With New FortiGate 2020/03/24 03:50:56 (permalink)
    0
    All true but still there is a fine line between SoC models and those with a proper CPU.
     
    Up to and including the 100E/F, these FGTs are considered "desktop models" and feature a SoC3/4. There are tasks which demand high CPU performance, like session buildup, SSLVPN, IPsec tunnel buildup (not: usage) and more. A look into the datasheet will reveal if these figures suit your needs - and future needs.
     
    I personally was always grateful to my customer when he decided for a 'real' FGT. Work on and manage a 60X and then a 600X and you'll see what I mean. There is a reason why the 1500D with several Xeon multicore CPUs still is around a lot, though being a D series model.

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #5
    Jump to:
    © 2020 APG vNext Commercial Version 5.5