Fortinet FortiGate 601E Firewall (FG-601E)

Mid-size enterprise security teams that need to retain firewall logs on-premises will find the FortiGate 601E built for exactly that requirement. Where the standard 600E carries no onboard storage, the 601E ships with 2x 240 GB SSDs, giving security operations teams a local repository for traffic logs, event logs, and compliance audit trails without a separate FortiAnalyzer appliance. NP6 and CP9 hardware acceleration keep inspection running at 36 Gbps firewall throughput and 10 Gbps IPS under full enterprise traffic load.

What’s in the box

The FG-601E fits in a standard 1U rack slot (1.75 x 17.0 x 15.0 inches, 16.6 lbs / 7.5 kg) and ships with 2x SFP (SX 1 GE) transceivers included. Physical connectivity covers 2x 10 GE SFP+ slots, 8x GE RJ45 ports, 8x GE SFP slots, 2x GE RJ45 management ports, 2x USB ports, and 1x RJ45 console port. The defining addition over the 600E is 2x 240 GB onboard SSDs. Power draw is 129 W average and 244 W maximum, with optional hot-swap redundant power supplies available.

Where it’s strong

Organizations that must produce documented evidence of network activity for PCI-DSS reviews, HIPAA audit requests, or SOC 2 Type II assessments benefit directly from the onboard SSDs. At 36 Gbps firewall throughput and 7 Gbps Threat Protection, the appliance handles a dense campus edge or branch data center without shipping all logs off-box. With 8 million concurrent TCP sessions and 450,000 new sessions per second, it absorbs peak connectivity demand without dropping inspection quality.

Hardware alone vs bundle

The FG-601E appliance-only SKU suits buyers who already hold active FortiCare contracts, want to negotiate support terms separately, or are standardizing on a specific FortiGuard bundle tier across multiple sites. Because the SSDs enable local logging from day one, a freshly racked unit with no active cloud subscription starts recording traffic logs immediately, which is useful during proof-of-concept deployments or staged licensing rollouts.

Who runs it

Finance, healthcare, and government-adjacent organizations running PCI, HIPAA, or FedRAMP-aligned environments are common buyers. Distributed IT teams managing satellite offices from a central NOC also benefit: local log storage prevents a cloud-logging outage from creating a gap in the audit trail. Any mid-size enterprise security team that needs to answer a forensic question about last week’s traffic without waiting on a cloud vendor is the right fit.

Moving up

If sustained firewall throughput consistently approaches 36 Gbps, or concurrent sessions regularly exceed 8 million, the next step is a higher-end mid-range FortiGate platform. Buyers operating in environments with strict encryption export restrictions should evaluate the FortiGate 600E LENC variant instead of the 601E. Those needing 100 GE interfaces or data-center-class throughput should look at the FortiGate 1000 series and above.

Buying from DataCenter360.ca

DataCenter360.ca is an authorized Fortinet Select Partner stocking the FG-601E new in Canada, with orders shipping within 0 to 1 business days. Our pre-sales team can match the right FortiCare and FortiGuard bundle to your log retention and inspection requirements before you commit. The 601E’s 480 GB of onboard SSD capacity starts recording from the moment the unit is racked, so compliance logging begins immediately with no external dependency.

Frequently asked questions