Fortinet FortiGate 600E LENC Firewall (FG-600E-LENC)

Organizations operating under export-control cryptography restrictions need a campus-scale firewall that clears compliance without sacrificing throughput. The FortiGate 600E LENC delivers 36 Gbps firewall throughput and 10 Gbps IPS via NP6 and CP9 hardware accelerators in a 1 RU chassis with no onboard SSD, running low-encryption firmware to satisfy import and use regulations in restricted jurisdictions.

What’s in the box

The FG-600E-LENC ships as a 1 RU rack-mount appliance with 2 hardware-accelerated 10 GE SFP+ uplink slots, 8 hardware-accelerated GE RJ45 data ports, and 8 hardware-accelerated GE SFP slots. Two dedicated GE RJ45 management ports keep out-of-band access separate from production traffic. The unit includes 2 SX 1 GE SFP transceivers, 2 USB ports, and 1 RJ45 console port. There is no onboard SSD; local log retention requires a FortiAnalyzer or centralized syslog solution.

Where it’s strong

At 36 Gbps IPv4 firewall throughput (1518-byte UDP) and 40.5 Mpps packet forwarding, the 600E LENC handles multi-gigabit campus aggregation with headroom. IPS runs at 10 Gbps, NGFW at 9.5 Gbps, and full Threat Protection at 7 Gbps. The NP6 offloads traffic from the CPU; the CP9 drives IPsec at 20 Gbps and SSL inspection in hardware. Eight million concurrent TCP sessions and 450,000 new sessions per second support large user populations, while 1.54 microsecond firewall latency keeps real-time applications responsive.

Hardware alone vs bundle

FG-600E-LENC is an appliance-only SKU with no FortiCare or FortiGuard subscription included. That fits buyers adding a standby HA node with shared licensing, refreshing hardware while porting active licenses from a retiring unit, or splitting capital and operating budgets across separate purchase orders. Before production, add at least a FortiCare support contract and the FortiGuard security bundle that matches your threat profile.

Who runs it

The 600E LENC fits mid-size campus networks and enterprise branch aggregation points on 1 Gbps or faster WAN links. It is a purpose-built choice for government agencies, defense contractors, and regulated industries in countries where export-control laws restrict the import or use of products with unrestricted cryptographic strength. Security teams that need NP6 and CP9 hardware-accelerated inspection without on-box log storage overhead are the core buyers.

Moving up

When on-box log retention becomes necessary and a FortiAnalyzer is impractical, the FG-601E is the direct step up: same 1 RU chassis and interface layout, factory-fitted with 2x 240 GB SSDs. If throughput outgrows the 600 series or hot-swap redundant power supplies become a hard requirement, the 900 or 1000 series is the next tier. The 600E-LENC stays the right pick when export-control compliance is the deciding factor and logging is handled externally.

Buying from DataCenter360.ca

DataCenter360.ca is an authorized Fortinet Select Partner stocking the FG-600E-LENC for Canadian buyers with same-day or next-business-day dispatch. FortiCare and FortiGuard subscriptions can be added in the same order, giving export-regulated buyers a single-vendor path for both the appliance and its ongoing services. Contact the team for volume pricing or multi-unit deployment quotes on the 600E LENC.

Frequently asked questions