1. Introduction
This manual provides instructions for the Fortinet FortiGate 60F Firewall Security Appliance. The FortiGate 60F is designed to deliver robust security and networking capabilities for small to medium-sized businesses, offering unified threat protection (UTP) against various cyber threats. This document covers the physical setup, operational guidelines, maintenance procedures, troubleshooting tips, and detailed product specifications.
Figure 1: Front view of the FortiGate 60F appliance.
2. Setup
2.1 Unpacking and Inspection
Carefully unpack the FortiGate 60F appliance and its accessories. Verify that all components are present and undamaged. The package should include the FortiGate 60F unit, a power adapter, and an Ethernet cable.
2.2 Physical Connections
Connect the power adapter to the device and a power outlet. Connect your network devices (e.g., modem, switches, computers) to the appropriate ports on the FortiGate 60F. The device features multiple GE RJ45 ports for WAN, DMZ, and internal network connections. A console port is available for direct management.
Figure 2: Rear view of the FortiGate 60F showing ports and interfaces. This includes USB, Console, WAN, DMZ, and internal GE RJ45 ports.
2.3 Initial Configuration
Upon initial power-up, the device will boot. Access the management interface via a web browser or the console port for initial configuration. Refer to the Fortinet documentation for detailed steps on network setup, IP address assignment, and basic security policy configuration.
3. Operation
The FortiGate 60F operates as a comprehensive security gateway, providing firewall, VPN, intrusion prevention, and unified threat protection (UTP) services.
3.1 Unified Threat Protection (UTP)
With the included 36-month UTP subscription, the FortiGate 60F provides advanced security features such as:
- Antivirus/Anti-malware: Protection against viruses, spyware, and other malicious software.
- Web Filtering: Controls access to inappropriate or malicious websites.
- Intrusion Prevention System (IPS): Detects and blocks network intrusions and exploits.
- Anti-botnet: Identifies and prevents communication with botnet command and control servers.
3.2 Security Services and Subscriptions
The FortiGate 60F leverages FortiGuard Security Services for real-time threat intelligence and updates. The UTP bundle includes various services. For a detailed overview of available services and bundles, refer to the subscription table below.
Figure 3: Overview of FortiGuard Security Services and Subscription Bundles.
4. Maintenance
4.1 Firmware Updates
Regularly check for and apply firmware updates to ensure optimal performance and security. Firmware updates often include new features, bug fixes, and critical security patches.
Important Note: FortiOS versions 7.4.4 and later may have limitations on proxy-related features for FortiGate models with 2 GB RAM or less, including the 60F. Before upgrading, consult the official Fortinet documentation to understand potential impacts on features like Zero Trust Network Access (ZTNA), proxy-based inspection modes, explicit/transparent proxies, and certain UTM profiles.
4.2 Security Definition Updates
Ensure that your FortiGate 60F is configured to receive automatic updates for FortiGuard security definitions (antivirus, IPS, web filtering, etc.). These updates are crucial for protecting against the latest threats.
4.3 Configuration Backup
Periodically back up your device configuration. This allows for quick restoration of settings in case of an issue or hardware replacement.
5. Troubleshooting
5.1 Connectivity Issues
- No Internet Access: Verify physical cable connections, check WAN interface status, and review firewall policies.
- Internal Network Problems: Confirm LAN interface configuration, DHCP settings, and internal routing.
5.2 Performance Degradation
- Monitor CPU and memory usage through the device's dashboard.
- Review active sessions and security logs for unusual activity or high traffic.
- Ensure firmware is up-to-date and security definitions are current.
5.3 Feature Limitations (FortiOS 7.4.4+)
If you experience issues with proxy-related features after a firmware upgrade to FortiOS 7.4.4 or later, it may be due to hardware limitations on 2GB RAM models. Consult Fortinet's official release notes and administration guides for specific details and workarounds.
5.4 VPN Configuration
Configuring VPNs (especially IPsec) can be complex. Refer to Fortinet's extensive documentation and community forums for detailed guides. Note that SSL VPN support may have changed in newer firmware versions, requiring the use of IPsec.
6. Specifications
6.1 Physical Characteristics
- Product Dimensions: 6.3 x 8.5 x 1.5 inches (16.0 x 21.6 x 3.8 cm)
- Item Weight: Approximately 2 pounds (0.91 kg)
- Form Factor: Desktop
Figure 4: FortiGate 60F with indicated dimensions.
6.2 Performance Metrics
The FortiGate 60F offers the following performance capabilities:
Figure 5: Detailed performance specifications for the FortiGate 60F.
- IPS Throughput: 1.4 Gbps
- NGFW Throughput: 1 Gbps
- Threat Protection Throughput: 700 Mbps
- Firewall Throughput (1518 / 512 / 64 byte UDP packets): 10/10/6 Gbps
- Firewall Throughput (Packets Per Second): 9 Mpps
- IPsec VPN Throughput (512 byte): 6.5 Gbps
6.3 Connectivity
- Ports: Multiple GE RJ45 ports (WAN, DMZ, Internal), USB, Console
- Wireless Communication Standard: 802.11ac (if applicable to specific variant)
- Antenna Type: Internal
7. Warranty and Support
7.1 FortiCare Premium Support
The FortiGate 60F bundle includes 3 years of FortiCare Premium support. This service provides high-quality technical support, hardware replacement, and access to firmware updates. For support, register your device on the official Fortinet support portal.
7.2 Important Information Regarding Purchases from Unauthorized Sellers
Purchasing FortiGate devices from unauthorized sellers may lead to significant limitations. Fortinet support is primarily available for products acquired directly from an authorized Fortinet channel partner. Limitations may include:
- Limited access to firmware updates and security patches.
- No official technical support from Fortinet.
- Inability to use FortiGuard services, such as antivirus updates.
- Difficulties in transferring device ownership.
These restrictions can severely impact the long-term usability and security of the device. Always ensure your purchase is from an authorized Fortinet reseller to guarantee full access to all features and support services.
For official documentation and support resources, please visit the Fortinet Support Website.
