FORTINET FortiGate-60F Hardware plus 1 Year 24x7 FortiCare and FortiGuard Unified Threat Protection (UTP)

top

Male che non sia indicato nella descrizione che l'aggiornamento del sistema operativo è esclusivamente a pagamento!! SI A PAGAMENTO! Il piano di assistenza costa il doppio o il triplo del costo del Fortigate. FOLLIA o FURTO? Io ho rifiutato il collo.

ライセンス限定ですが, 廉価購入できたのはOKです/^^/

Former Network Engineer here from ages past - I received my CCNA before CIDR notations were a thing. Most Consumer WiFi 'Routers' (Netgear, Linksys, Asus, etc) that are also used for connectivity for PCs/XBoxes have underpowered/crippled Broadcom (and others) silicon and sometimes have software switched ethernet! While it can be argued the firmware of a specific vendor has a lot to do with it, a large chunk of consumer WiFi gear uses the same underlying operating system; Linux with some binary firmware blobs (for the wifi controller/ethernet etc). OpenWRT seems better, but it still requires binary blobs. Now, the 60F I purchased is not a WiFi router, but it's a enterprise-class firewall, which can /behave/ like a router. It has IPv4/6 support, NAT, IDS, Firewalling, etc. Supports OSPF, BGP, RIP, Multicast.. However, the additional items (IDS, Antivirus) for this product are *not* cheap for the average home user. I'm sure there are similar vendors (Sonicwall, etc) that have cheaper options. Now - to the replacement: My existing setup was an Edgerouter. Ubiquiti products like the ER are awful (ER has hardware accel disabled by default and only decided to document it recently(?)). Was connected to Comcast Business and getting IPv4/IPv6 over DHCP. A common setup for home users. The Wireless router was Netgear R7800 connected to switch0 on the ER. (The R7800, as a consumer router, is just... bad. And slow. The GUI is doesn't have expansive options compared to other vendors that use the same exact Qualcomm radios. ) Unpacking was easy, connected Comcast to 'Wan1' and then a Computer to 'Port 1' - DHCP was already configured, and it immediately had internet access. Had to do some post configuration tweaking to get it to work the way I wanted with IPv6, DNS server on the LAN, etc. This device has 8 CPUs, hardware-accelerated Ethernet switching, etc.. Model name: FortiGate-60F ASIC version: SOC4 CPU: ARMv8 Number of CPUs: 8 RAM: 1918 MB EMMC: 3662 MB(MLC) /dev/mmcblk0 Hard disk: not available USB Flash: not available Network Card chipset: FortiASIC NP6XLITE Adapter (rev.) Pros: - The GUI is very nice, as well as having SSH ship out of the box - A lot of common settings are available in the GUI - Fast (Hardware accelerated Ethernet, switching, firewalling/NAT, etc) - Plenty of memory. - Has support for OSPF, BGP, VPN, IDS (Antivirus, DNS blocking, Anti-Spam, etc etc), SNMP, DHCP, NAT/SNAT, NAT64, Traffic Shaping/QoS, VLANs, etc. - 21W of power usage - doing multiple gigabit transfers from the switchports - Low CPU usage when doing nearly full saturation of the ports - unlike my R7800 that would have load spikes of doing any large transfers which would kill WiFi performance - 10Gbit/s L3 forwarding performance - Can do a gigabit+ of firewalling Cons: - IPv6 interfaces aren't configurable/showing in the GUI. You need to use CLI to set it up - Some things will /require/ the CLI (ie: get hardware status) - The documentation on some things could be better Get yourself a few cheap WiFi APs and use this device for a router. You'll never look back.

Enterprise grade config and security options for less than a lot of SOHO routers these days. This thing is great. I got the 60 over the 40 so I had the option of dual WAN ports but it wasn't necessary. You could definitely get by with a 40. The yearly UTP license might feel a bit steep but, when you consider what it's providing, it's a deal. Your average SOHO router has so little put into it after release, it's no wonder firmware updates are free. I really don't have anything bad to say about it. It's perfect. And, you can get a free unlimited trial license for the FortiAnalyzer VM to partner with it for some amazing logging, monitoring and overall metrics on your network. You can even use it for a syslog server for non-Fortinet gear.