下一代防火墙 (NGFW)
Fortinet在2025年Gartner®混合式部署防火墙魔力象限™报告中获评领导者
获取报告 免费产品演示FortiGate是部署最广泛的网络防火墙 ,占据全球市场份额超过50%。FortiGate 下一代防火墙(NGFW)全面保护当今混合环境中的数据、资产和用户。基于专利的Fortinet 安全处理器(SPU),Fortinet FortiGate NGFWs加速了安全与网络性能,有效保障日益增长的数据密集型流量和云端应用的安全。FortiGate 新一代防火墙,由 FortiGuard人工智能安全服务 助您防范网络攻击并降低安全风险,通过持续的实时防护与响应机制,有效抵御最新型、最复杂的威胁。
AI 驱动安全性
以人工智能为核心的威胁情报平台 提供及时防护、主动防御和高效运营
防范潜在的量子计算威胁并支持:
量子密钥分发(QKD)——需要 FortiOS 7.4.2
面向IPsec VPN的后量子密码学(PQC)——需FortiOS 7.6.1版本
NIST批准的算法及算法堆叠
FortiGate 下一代防火墙解决方案支持物理、虚拟和云环境等多种灵活部署模式,基于一体化、可扩展的统一平台,提供无可比拟的稳定网络和安全性能。
面对复杂的合规风险、隐蔽的人工智能威胁以及人工智能增强型恶意软件,贵组织的安全防护必须全面且具有适应性。FortiGuard人工智能驱动的安全服务为您提供抵御这些关键攻击媒介的防御能力,同时具备灵活定制保护方案以满足您特定需求的能力。选择单点菜单,或从我们强大的模块化组合中挑选:提供三种安全方案:涵盖全面防护的ENT套件、保障网络安全的UTP套件,以及作为第一道防线的高级威胁防护(ATP)套件,确保您的组织获得精准的实时保护与最大价值。
什么是它:为您的整个攻击面提供终极安全防护——涵盖网络、网页、文件、SaaS、数据及设备。包括ATP和UTP。
为什么选择耳鼻喉科? 防范人工智能威胁,满足合规要求,实现规模扩展,并以最低的单项服务成本构建面向未来的安防体系。
包含内容:所有ATP + UTP功能,外加防数据泄露(DLP)、攻击面安全监控与风险评分、基于AI的在线恶意软件防护,以及物联网检测与漏洞关联分析。
未包含内容:OT专用设备与协议识别。为OT环境添加OT安全服务。
什么是它:网络与网页的全面高级防护。包括高级威胁防护(ATP)服务。阻断更多威胁途径。包含在耳鼻喉科组合包中。
为什么选择UTP? 防范日益猖獗的网络威胁、入侵行为和恶意软件。
包含内容:高级威胁防护(ATP)中的所有功能,包括URL 过滤、视频过滤以及反僵尸网络/C2通信服务。
未包含内容:高级防数据泄露、在线恶意软件防护、物联网检测、攻击面监控。请考虑使用(上文所述的)ENT安全套件以实现全面安全防护。
什么是它:防范已知的网络入侵和恶意软件。包含在耳鼻喉科组合包中。
为什么是高级威胁防护(ATP)?:提供保护核心网络和文件威胁所需的核心安全服务。
包含内容:基础安全服务包括:入侵防御服务、防病毒、FortiSandbox SaaS、应用程序控制和内联云计算访问安全代理(CASB)。
未包含内容:关键网络/DNS安全(URL/DNS过滤、反僵尸网络安全)、防数据泄露(DLP)、在线恶意软件防护服务、物联网安全、攻击面监控。请考虑采用ENT安全套件(参见上文),以全面抵御现代威胁趋势。
“Fortinet始终是我们持续提升安全态势的可靠合作伙伴。” FortiGate以动态方式帮助阻断所有不受欢迎的流量类型,从而最大限度地缩小我们的可见攻击面.
"总体而言,这是一款非常棒的产品,拥有丰富的安全功能组合,易于使用和部署…轻松集成 Fortinet 其他产品系列。”
“设备价格:就功率、吞吐量和性能而言,价格超值。易于使用:非常棒的用户界面,菜单和选项等都非常直观。卓越性能:即使开启所有统一威胁管理(UTM)功能,性能也不打折扣。”
"FortiGate 提供稳健可靠的性能。界面直观,支持集中管理优势,真正帮助我们节省宝贵时间。在我们测试的产品中,该产品的安全功能非常出色。内置 VPN 更是锦上添花。"
“与其他供应商相比,FortiGate 防火墙物超所值,性价比高。Fortinet 拥有一支技术精湛的专业安全研究团队,确保我们及时了解威胁态势最新动态。产品具备集成优势,支持跨 Security Fabric 安全平台实现协同运行,表现非常出色。”
"这款产品确实表现出色。经初步评估后,我们针对特定应用需求,决定在组织内部署 Fortinet 下一代防火墙(NGFW)。Fortinet 深度包检测(DPI)高级功能,如应用程序控制和工业威胁签名识别、入侵防御系统以及防病毒功能,为我们提供了充分的安全保障。"可靠性:Fortinet 防火墙设计可靠,确保长时间正常运行。旗下防火墙产品支持多种优势功能,
"产品远超预期。硬件性能显著优于其他同类供应商,易于管理,故障排除高效快速"
"我们部署过多家供应商的终端安全和边缘设备。到目前为止,Fortinet 产品性能尤为卓越,用户界面直观易操作,客户服务高效及时,技术支持精湛专业。"
"保护网络安全是我们部署网络安全解决方案的最终目的。第三方渗透测试结果表明,FortiGate 表现卓越,我们的网络非常安全。"
"11 个月前,我们在主要办公场所部署了这款下一代防火墙(NGFW)产品。这款产品简单易用,还能提供强大的安全性。连接远程办公室和云端的 IPsec 隧道稳定可靠,还可通过面板清晰查看 VPN 用户状态,稳定且可控。"
"简化管理和配置。无论是小型机还是大型机,都支持同一款操作系统,无需重新配置即可轻松进行硬件路径升级。"
"对我们而言,构建全方位的安全保护尤为重要。因此,我们更倾向于部署不同品牌、不同类型的安全工具,以实现安全性的有效补充。我们曾与多个下一代防火墙(NGFW)品牌合作过,每款产品各有优势,但 FortiGate 更为出众。这款产品不仅是世界领先产品之一,无缝集成的 SD-WAN 解决方案还能跨多个链路实现负载均衡。FortiGate 具备卓越的可扩展性,助力我们轻松应对业务增长带来的网络挑战。"
"我们使用 Fortinet FortiGate 解决方案已长达 4 年。事实证明,这是一款性能稳定、功能强大的解决方案。我们为所有站点部署了这款解决方案,其中一个站点基于主动/主动集群模式部署,目前运行良好。部署 FortiEMS 帮助我们打造了安全合规的工作站。整个系统易于管理。"
"质量卓越,易于使用和设置,我们强烈推荐这款产品"
"FortiGate 防火墙为企业提供全面的威胁防护。涵盖各种功能,全方位保护组织免受各类网络攻击。具备高性能和高级安全性。""性价比高,设备安全性高,用户界面非常友好,Fortinet 始终保持卓越的创新能力"
"性价比高,设备安全性高,用户界面非常友好,Fortinet 始终保持卓越的创新能力"
"我们使用 Fortinet NGFW 的整体体验非常好。管理门户简单易操作,给我们提供了非常好的操作灵活性。"
"我们使用 FortiGate 设备已经超 5 年之久。我们部署了硬件和云服务、下一代防火墙(NGFW)、无线接入点等。作为我们可靠的合作伙伴,衷心感谢 Fortinet 为我们提供的优质服务"
"非常出色的产品,使用方便,而且提供持续的专业支持"
"北欧地区实力雄厚的专业团队。大力投资支持当地市场"
"作为安全网络领域的先驱,Fortinet 产品支持网络和安全性无缝扩展至任意位置,包括远程分支机构办公室(ROBO)、园区和数据中心"
| MODEL | THREAT PROTECTION | DATA SHEET | VIDEO |
|---|---|---|---|
| FortiGate 7121F |
520 Gbps |
|
|
| FortiGate 7081F |
312 Gbps |
|
|
| FortiGate 4800F |
70 Gbps |
|
|
| FortiGate 4400F |
75 Gbps |
|
|
| FortiGate 4200F |
45 Gbps |
|
|
| FortiGate 3800G |
200 Gbps |
|
|
| FortiGate 3700F |
75 Gbps |
|
|
| FortiGate 3500F |
63 Gbps |
|
|
| FortiGate 3200F |
45 Gbps |
|
|
| FortiGate 3000F |
33 Gbps |
|
|
| FortiGate 2600F |
25 Gbps |
|
|
| FortiGate 1800F |
15 Gbps |
|
|
| FortiGate 1000F |
13 Gbps |
|
| MODEL | THREAT PROTECTION | DATA SHEET | VIDEO |
|---|---|---|---|
| FortiGate 900G |
30 Gbps |
|
|
| FortiGate 700G |
26 Gbps |
|
|
| FortiGate 600F |
10.5 Gbps |
|
|
| FortiGate 400F |
9 Gbps |
|
|
| FortiGate 200G |
6 Gbps |
|
|
| FortiGate 200F |
3 Gbps |
|
|
| FortiGate 120G |
2.8 Gbps |
|
|
| FortiGate 100F |
1 Gbps |
|
| MODEL | THREAT PROTECTION | DATA SHEET | VIDEO |
|---|---|---|---|
| FortiGate 90G |
2.2 Gbps |
|
|
| FortiGate 80F |
900 Mbps |
|
|
| FortiGate 70G |
1.3 Gbps |
|
|
| FortiGate 70F |
800 Mbps |
|
|
| FortiGate 60F |
700 Mbps |
|
|
| FortiGate 50G |
1.1 Gbps |
|
|
| FortiGate 40F |
600 Mbps |
|
|
| FortiGate 30G |
500 Mbps |
|
|
| MODEL | THREAT PROTECTION | DATA SHEET | VIDEO |
|---|---|---|---|
| FortiGate 91G |
2.2 Gbps |
|
|
| FortiGate 901G |
20 Gbps |
|
|
| FortiGate 3501F |
63 Gbps |
|
|
支持各类供应商产品和服务轻松迁移至 FortiGate 下一代防火墙(NGFW)
安全、可扩展的以太网交换机,保持出众性能的同时,降低复杂性
提供高性能无线接入点,实现出色的稳定性和安全连接
统一管理网络和安全运营、策略管理和工作流自动化
跨整个 Security Fabric 安全平台实现集中可视化、统一监控和自动化威胁响应
运用设备发现、精细控制和自动化威胁响应,为终端设备打造零信任安全态势
欢迎访问 www.fortinet.com/fabricready,查看技术联盟合作伙伴完整列表。以下为当前 FortiGate 下一代防火墙技术联盟合作伙伴列表:
ServiceNow makes work better. Our applications automate, predict, digitize and optimize business processes across IT, Customer Service, Security Operations, HR and more, for a better enterprise experience.
CrowdStrike has redefined security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk — endpoints and cloud workloads, identity, and data.
Armis the leading unified asset visibility and security platform designed to address the new threat landscape that connected devices create. Our real-time and continuous protection sees the full context of all managed, unmanaged, and IoT devices, including medical devices, operational technology, and industrial control systems.
Claroty's ICS Security Platform passively protects industrial networks and assets from cyberattack; ensuring safe and continuous operation of the worlds most critical infrastructures without compromising the safety and security of personnel or expensive industrial assets. 2018 S4 ICS Challenge winner!
Siemens is a global powerhouse focusing on the areas of electrification, automation and digitalization.
Digital Realty supports the world’s leading enterprises and service providers by delivering the full spectrum of data center, colocation and interconnection solutions. Together with Fortinet, Digital Realty is implementing new security controls for Hybrid IT architectures that are localized at global points of business presence to reduce IT vulnerability points and improve network stability.
Intel invents at the boundaries of technology to make amazing experiences possible for business and society, and for every person on Earth. To learn more about Intel and our technologies, please visit: www.intel.com
The Dragos mission is to safeguard civilization from those trying to disrupt the industrial infrastructure. Dragos provides solutions for asset identification, threat detection, and response with insights from industrial control systems (ICS) cybersecurity experts. Dragos works with Fortinet to provide increased visibility and improved correlation of cyber events. This helps customers evaluate and make better informed decisions when classifying events and required actions.
Megaport changes how people, enterprises, and services interconnect globally. Our Network as a Service solution enables fast, flexible, and secure connectivity across 700+ locations in North America, Asia Pacific, and Europe. Establish private connectivity in minutes to the world’s top cloud providers like Microsoft, Google, AWS, Oracle and IBM via the Megaport platform.
Tufin leads the Security Policy Orchestration market, enabling enterprises to centrally manage, visualize, and control security policies across hybrid cloud and physical network environments.
What’s needed now is unified network security designed for today’s hybrid infrastructure with integrated next-generation firewalls (NGFWs) across the network and form factors, centralized management, and coordinated response to threats.
This collection of success stories illustrates how companies across various industries have leveraged the latest security and AI/ML technologies to achieve remarkable outcomes in cybersecurity, operational efficiency, and business resilience.
The speed of business is accelerating the data center’s journey toward digital transformation, requiring new hybrid network architectures that combine on-premises data centers with multiple public and private cloud deployments to form a hybrid mesh firewall (HMF) environment. However, to meet the needs of organizations expanding their digital transformation, the underlying enabling technologies must be more reliable and energy-efficient. They must also deliver consistent security across the hybrid architecture to defend against threats.
This unified security platform provides coordinated protection to multiple areas of enterprise IT, including corporate sites, such as branches, campuses, data centers, public and private clouds, and remote workers. This, then, can form the core of a broader security framework.
FortiGate 3800G Series Datasheet
FortiGate 700G Series Datasheet
FortiGate 7000F Series Datasheet
FortiGate 3200F Series Datasheet
FortiGate FortiWiFi 40F Series Datasheet
FortiGate 900G Series Datasheet
FortiGate 3000F Series Datasheet
The FortiGate 7000F series delivers unparalleled value as an all-in-one cybersecurity solution that integrates high-performance networking and security.
Integrated network firewalls bring enormous benefits to enterprise IT. These include increased IT operational efficiency, simplified cybersecurity operations, reduced organizational risk, relief from the cybersecurity skills gap, resilient protection against known and unknown cyberthreats, automation and coordination via AI/ML, and a lower total cost of ownership.
FortiGate Next-Generation Firewalls (NGFWs) offer a game-changing solution to stop today’s sophisticated, evasive threats and zero-day attacks.
Fortinet’s AI Data Center Firewall Solution addresses threats targeting AI and LLM systems with ASIC accelerated inspection, LLM-aware threat protection, and unified governance across every layer of the AI stack.
Enterprises are adopting hybrid IT, Industrial Internet of Things (IIoT), and 5G to improve operational agility. These tools help them build composable and scalable architectures that interconnect distributed branches, campuses, on-premises data centers, and multi-clouds into a unified network. And yet, amid this change, the enterprise on-premises data center remains an essential component of most networks. Its role is vital because it protects applications, data, and workloads that can’t be moved to the cloud but still need to be consumed by employees, customers, and partners.
FortiGate Next-Generation Firewalls (NGFWs), as part of a hybrid mesh firewall architecture, protect dynamic campus networks using powerful AI-powered security services that provide deep visibility into all users, devices, and applications.
The rapid adoption of digital transformation pushes business networks to adopt a hybrid strategy. As a result, the network infrastructure is getting more distributed, making it hard to manage and secure. And not surprisingly, among all causes leading to cyber incidents and network downtime, human error and misconfigurations are at the top.
FortiGate NGFWs also provide a wide range of additional advanced security, including the ability to be deployed as part of a hybrid mesh firewall (HMF) architecture, built-in SD-WAN, dynamic network segmentation, and converged networking and security functionality. When deployed as part of a cybersecurity mesh architecture, FortiGate also provides single-pane-of-glass management, making security visibility and policy orchestration less complex and more flexible across all network edges.
Today’s IT teams require deep visibility into applications, users, and devices in order to defend enterprise networks against cyberthreats, but this is often a challenge.
5 reasons why the FortiGate 6000F is the best choice
The FortiGate 90G series of next generation firewalls (NGFWs) are designed to deliver the highest performance and efficiency in a compact, fanless desktop form factor to address the complex power and security needs in small offices and branches.
Explore how Fortinet secures your hybrid networks and increases operational efficiency with unified management across all firewall deployments providing a coordinated response to threats. Hybrid Mesh Firewall: The future of network security revolutionizing your defense strategy.
See how the FG-3700F performs when we test ultra-low latency through Spirent, a multinational telecommunications testing company.
Introducing the latest Mid Range FortiGate 400F and 600F series, check out our latest video datasheet to find out more
The FortiGate 3500F delivers the industry’s highest SSL decryption performance (including TLS 1.3), thanks to purpose-built Security Processing Units (SPUs). Integrated FortiGuard Security Services protect from all manner of cyber threats. Access proxy capabilities are included to enable zero trust network access (ZTNA).
The FortiGate 4400F series introduces the world’s first Hyperscale Firewall that seamlessly enables Security-Driven Networking, manages all security risks for enterprises, and protects 5G networks. With high-port density, it offers encrypted and high-speed data center interconnects.
Envien is one of the most significant and strongest groups of companies in Central and Eastern Europe operating in the production of biofuels used in motor fuels - diesel and petrol.
Get an overview of Fortinet Intent-based Segmentation in less than 2-minutes
Join Fortinet experts for a clear, practical conversation on how quantum computing will change today’s cryptographic landscape, where your environment is most exposed, and what it takes to build a quantum-safe posture without adding operational complexity.
Revolutionize your network management and security operations by learning how GenAI powers FortiManager.
Gain expert insights on financial benefits, security risk reduction, and ROI with our AI-powered cybersecurity solution.
Advanced cyber threats, encrypted broadband, network brownouts, and a complex mess of point products make it difficult for IT teams. Join this new webcast to learn how network firewalls will evolve to help enterprises face these challenges in 2023.
Explore how Fortinet Secure Networking solutions help public sector and education IT teams deliver and protect critical services, such as student learning systems, first responder connectivity and next-generation 911 technologies. In these environments, networking and security convergence improves performance and overall operability.
Organizations are struggling with lack of visibility, smarter threats, and complex management of legacy solutions. Join us to explore a better approach to securing the campus edge. Plus, get details on how the FortiGate 600 series delivers a converged networking and security for campus edge deployments support a zero-trust edge strategy.
Gain a better understanding on how to address rising challenges due to hybrid multi-cloud environments, mobility, and remote work by proactively disrupting attack chains with coordinated, automated, end-to-end security.
Digital transformation, IoT, IT/OT convergence, and the pandemic have dramatically disrupted the security landscape. Learn how Security-Driven Networking, delivered through FortiGate solves today’s challenges.
Fortinet’s platform improves security performance and contributes to sustainability efforts by optimizing power efficiency and reducing the carbon footprint of large-scale deployments.
Fortinet’s Secure AI Data Center solution delivers the visibility, performance, and protection required as AI transforms the enterprise data center.
This paper outlines the urgency of the quantum threat and presents two strategic approaches to mitigating it: Post-Quantum Cryptography (PQC) and Quantum Key Distribution (QKD).
By adopting microsegmentation within a centralized, policy-driven architecture, organizations can strengthen zero-trust initiatives, meet compliance mandates, and improve cybersecurity resilience across hybrid and multi-cloud environments.
The distributed nature of modern networks, coupled with the rising sophistication of cybercrime, demands a holistic, integrated, and proactive security strategy.
The key challenge lies in deploying solutions that scale and adapt to the evolving hybrid landscape, securing critical applications and high-throughput traffic across diverse network environments.
With the right solutions, effective and efficient security for hybrid and hyperscale data centers is well within reach.
NGFWs should provide threat protection at every edge across the branch, campus, and the data center without sacrificing performance.
Fortinet 致力于帮助广大用户赢得商业成功,FortiCare 服务每年助力成千上万的用户,充分挖掘现有产品和服务的投资潜力,实现价值最大化。为此,FortiCare 基于生命周期理念,为广大用户提供业内卓越的安全服务,助力用户持续拥抱商业成功。
技术支持服务
各种基于设备的选项支持高效操作。FortiCare Elite 选项为关键产品提供 15 分钟的响应时间。
高级支持
通过指定专家的运营审查,可提供各种基于客户的白手套服务,以减少干扰并提高生产力。
专业服务
我们的多供应商专家可以设计和部署基于最佳实践的完整解决方案,帮助您实现网络或安全目标并采用新功能。
RMA
整个产品系列均提供 Premium RMA 选项,加急更换有缺陷的硬件,以满足您的可用性目标。
诚邀您通过 FortiGate 下一代防火墙自助式演示,体验网络与安全无缝融合的强大性能。
演示内容:
Gartner, Magic Quadrant for Hybrid Mesh Firewall, By Rajpreet Kaur, Adam Hils, Charanpal Bhogal, Esraa ElTahawy, Feng Gao, Tiffany Taylor, 25 August 2025
GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, Magic Quadrant is a registered trademark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.
Gartner does not endorse any vendor, product, or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.