1RU enterprise-edge and campus-core next-generation firewall powered by Fortinet's NP6 + CP9 SPU, with 2x 240 GB onboard SSD for local logging. Delivers 36 Gbps firewall throughput, 10 Gbps IPS and 7 Gbps threat protection across 8 million concurrent sessions.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 601E 1RU appliance with 2x 240 GB SSD. License not included. | View productFG-601E |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-601E-BDL-809-12 | View productFG-601E-BDL-809-36 | View productFG-601E-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-601E-BDL-950-12 | View productFG-601E-BDL-950-36 | View productFG-601E-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F6H1E-809-02-12 | View productFC-10-F6H1E-809-02-36 | View productFC-10-F6H1E-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F6H1E-950-02-12 | View productFC-10-F6H1E-950-02-36 | View productFC-10-F6H1E-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F6H1E-928-02-12 | View productFC-10-F6H1E-928-02-36 | View productFC-10-F6H1E-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 601E is a 1RU enterprise next-generation firewall built on Fortinet's NP6 network processor and CP9 content processor. It delivers 36 Gbps of IPv4/IPv6 firewall throughput, 10 Gbps of IPS, 9.5 Gbps of NGFW and 7 Gbps of threat protection, with 8 million concurrent sessions and 1.54 µs firewall latency.
The 601E is the storage variant of the FortiGate 600E: identical performance and interfaces, plus 2x 240 GB onboard SSD. That local storage keeps traffic logs, reports and archived events on the appliance itself, which suits sites that need on-box forensics or retention without deploying a separate FortiAnalyzer.
Its port mix — 2x 10GE SFP+, 8x GE SFP and 8x hardware-accelerated GE RJ45 — suits campus cores, mid-to-large enterprise edges and internal segmentation. FortiOS consolidates NGFW, SD-WAN, SSL inspection, ZTNA and FortiGuard services on one appliance, and the 601E manages up to 96 FortiSwitches and 1,024 FortiAPs as a Security Fabric root.

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 36 / 36 / 27 Gbps |
| IPv6 firewall throughput (1518 / 512 / 64 byte, UDP) | 36 / 36 / 27 Gbps |
| Firewall latency (64 byte, UDP) | 1.54 µs |
| Firewall throughput (packets/sec) | 40.5 Mpps |
| Concurrent sessions (TCP) | 8 Million |
| New sessions/second (TCP) | 450,000 |
| Firewall policies | 10,000 |
| IPS throughput | 10 Gbps |
| NGFW throughput | 9.5 Gbps |
| Threat protection throughput | 7 Gbps |
| IPsec VPN throughput (512 byte) | 20 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 2,000 |
| Client-to-gateway IPsec VPN tunnels | 50,000 |
| SSL-VPN throughput | 7 Gbps |
| Concurrent SSL-VPN users (tunnel mode) | 10,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 8 Gbps |
| SSL inspection concurrent sessions | 800,000 |
| Application control throughput (HTTP 64K) | 15 Gbps |
| CAPWAP throughput (HTTP 64K) | 18 Gbps |
| Virtual domains (default / max) | 10 / 10 |
| Managed FortiAPs (total / tunnel) | 1,024 / 512 |
| Managed FortiSwitches | 96 |
| Maximum FortiTokens | 5,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | Fortinet SPU (NP6 + CP9) |
| Interfaces | 2x 10GE SFP+ slots, 8x GE SFP slots, 8x GE RJ45 hardware-accelerated, 2x GE RJ45 management, 2x USB, 1x RJ45 console; 2x SFP SX (1 GE) transceivers included |
| Onboard storage | 2x 240 GB SSD |
| Power supply | 100-240V AC, 50/60 Hz; redundant PSU optional (hot-swappable) |
| Power consumption (avg / max) | 129 W / 244 W |
| Heat dissipation | 832 BTU/h |
| Form factor | Rack mount, 1RU |
| Dimensions (H x W x L) | 1.75 x 17.0 x 15.0 in (44.45 x 432 x 380 mm) |
| Weight | 16.6 lbs (7.5 kg) |
| Operating temperature | 32°F to 104°F (0°C to 40°C) |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB; USGv6/IPv6 certified |
Source: official Fortinet FortiGate 600E Series datasheet (FG-601E column).
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The FortiGate 600E and 601E share the same NP6 + CP9 platform, interfaces and performance. The 601E adds 2x 240 GB onboard SSD for local logging and reporting.
| Model | Onboard SSD | Best for | |
|---|---|---|---|
| FortiGate 600E | — | Core firewalling, no on-box storage | View → |
| FortiGate 601E | ✓ 2x 240 GB | Same platform with local SSD logging | Viewing |
The 601E sits at the enterprise-edge and campus-core end of the FortiGate range. Step down to the 400F for smaller sites, or up to the current-generation 900G for higher throughput. Same FortiOS and FortiGuard services across the range.
Every available SKU for the FG-601E: hardware, protection bundles, subscriptions, services, cloud, support and RMA. Brand new, shipped from Canada; licensing delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 601E 1RU appliance with 2x 240 GB SSD. License not included. | View productFG-601E |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-601E-BDL-809-12 | View productFG-601E-BDL-809-36 | View productFG-601E-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-601E-BDL-950-12 | View productFG-601E-BDL-950-36 | View productFG-601E-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F6H1E-809-02-12 | View productFC-10-F6H1E-809-02-36 | View productFC-10-F6H1E-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F6H1E-950-02-12 | View productFC-10-F6H1E-950-02-36 | View productFC-10-F6H1E-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F6H1E-928-02-12 | View productFC-10-F6H1E-928-02-36 | View productFC-10-F6H1E-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-F6H1E-189-02-12 | — | — |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-F6H1E-247-02-12 | View productFC-10-F6H1E-247-02-36 | View productFC-10-F6H1E-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-F6H1E-284-02-12 | View productFC-10-F6H1E-284-02-36 | View productFC-10-F6H1E-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-F6H1E-204-02-12 | View productFC-10-F6H1E-204-02-36 | View productFC-10-F6H1E-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-F6H1E-100-02-12 | View productFC-10-F6H1E-100-02-36 | View productFC-10-F6H1E-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-F6H1E-577-02-12 | View productFC-10-F6H1E-577-02-36 | View productFC-10-F6H1E-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-F6H1E-108-02-12 | View productFC-10-F6H1E-108-02-36 | View productFC-10-F6H1E-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-F6H1E-112-02-12 | View productFC-10-F6H1E-112-02-36 | View productFC-10-F6H1E-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-F6H1E-159-02-12 | View productFC-10-F6H1E-159-02-36 | View productFC-10-F6H1E-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-F6H1E-589-02-12 | View productFC-10-F6H1E-589-02-36 | View productFC-10-F6H1E-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-F6H1E-1337-02-12 | View productFC-10-F6H1E-1337-02-36 | View productFC-10-F6H1E-1337-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-F6H1E-1387-02-12 | View productFC-10-F6H1E-1387-02-36 | View productFC-10-F6H1E-1387-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-F6H1E-131-02-12 | View productFC-10-F6H1E-131-02-36 | View productFC-10-F6H1E-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-F6H1E-585-02-12 | View productFC-10-F6H1E-585-02-36 | View productFC-10-F6H1E-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-F6H1E-464-02-12 | View productFC-10-F6H1E-464-02-36 | View productFC-10-F6H1E-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-F6H1E-660-02-12 | View productFC-10-F6H1E-660-02-36 | View productFC-10-F6H1E-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-F6H1E-210-02-12 | View productFC-10-F6H1E-210-02-36 | View productFC-10-F6H1E-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-F6H1E-211-02-12 | View productFC-10-F6H1E-211-02-36 | View productFC-10-F6H1E-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-F6H1E-212-02-12 | View productFC-10-F6H1E-212-02-36 | View productFC-10-F6H1E-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-F6H1E-301-02-12 | View productFC-10-F6H1E-301-02-36 | View productFC-10-F6H1E-301-02-60 |
Rack-mount the 601E in a standard 1RU slot; redundant power is available as an option.
Performance, interfaces and FortiOS features are identical. The FortiGate 601E adds 2x 240 GB onboard SSD for local logging and reporting; the 600E has no onboard storage. Choose the 601E when you want on-box logs and reports without deploying a separate FortiAnalyzer.
No. As of Fortinet’s July 2026 product lifecycle publication the FortiGate 600E and 601E are not listed for end-of-order or end-of-support, so they remain orderable with full FortiGuard and FortiCare coverage. Lifecycle dates for the whole catalog are on our Fortinet end-of-life page.
36 Gbps of IPv4/IPv6 firewall throughput, 10 Gbps of IPS, 9.5 Gbps of NGFW and 7 Gbps of threat protection, with 8 million concurrent sessions and 450,000 new sessions per second, accelerated by Fortinet’s NP6 + CP9 SPU.
That depends on traffic volume and logging verbosity rather than a fixed figure. The 2x 240 GB SSDs comfortably hold weeks of security-event logging for a typical enterprise edge; full session logging at high throughput fills them much faster. For long retention or multi-device correlation, pair the 601E with FortiAnalyzer or FortiAnalyzer Cloud — both are listed on this page.
Most enterprise deployments choose UTP (950) for IPS, advanced malware protection and web/DNS/video filtering, or Enterprise (809) for the full service set including DLP and AI-based inline malware prevention. Both include FortiCare Premium support.