FortiGate® 3400E Series

Introduction

The FortiGate 3400E series delivers high-performance threat protection and SSL inspection for large enterprises and service providers, with the flexibility to be deployed at the enterprise/cloud edge, in the data center core or internal segments. The multiple high-speed interfaces, high port density, superior security efficacy, and high throughput of the 3400E series keep your network connected and secure.

Image shows the front view of a FortiGate 3400E or 3401E network security appliance. It is a rack-mountable device with multiple LED indicators and ports visible on the front panel, labeled with numbers 1 through 6.

Key Features

Security

• Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement.
• Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic.
• Prevents and detects against known and unknown attacks using continuous threat intelligence from AI-powered FortiGuard Labs security services.

Performance

• Delivers industry's best threat protection performance and ultra-low latency using purpose-built Security Processor (SPU) technology.
• Provides industry-leading performance and protection for SSL encrypted traffic.

Certification

• Independently tested and validated best security effectiveness and performance.
• Received unparalleled third-party certifications from NSS Labs.

Networking

• Delivers advanced networking capabilities that seamlessly integrate with advanced layer 7 security and virtual domains (VDOMs) to offer extensive deployment flexibility, multi-tenancy, and effective utilization of resources.
• Delivers high-density, flexible combination of various high-speed interfaces to enable best TCO for customers for data center and WAN deployments.

Management

• Includes a management console that is effective, simple to use, and provides comprehensive network automation & visibility.
• Provides Zero Touch Integration with Security Fabric's Single Pane of Glass Management.
• Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture.

Security Fabric

• Enables Fortinet and Fabric-ready partners' products to provide broader visibility, integrated end-to-end detection, threat intelligence sharing, and automated remediation.

Performance Summary

Refer to specification table for details.

Deployment Scenarios

Next Generation Firewall (NGFW)

• Reduces complexity by combining threat protection security capabilities into a single high-performance network security appliance.
• Identifies and stops threats with powerful intrusion prevention beyond port and protocol, examining actual applications in network traffic.
• Delivers industry's highest SSL inspection performance using industry-mandated ciphers while maximizing ROI.
• Proactively blocks newly discovered sophisticated attacks in real-time with advanced threat protection.

Segmentation

• Intent-based Segmentation builds a robust security framework while proactively reducing risk, cost, and complexity.
• Integrates with Security Fabric seamlessly to allow third-party solutions and continuous trust assessment, thereby preventing sophisticated attacks.
• Protects critical business applications and helps implement any compliance without network redesigns.

IPS

• Highly cost-effective mitigation of unpatched vulnerabilities for hard-to-patch systems such as IoT, ICS, and Scada.
• Protects sensitive data to achieve various regulatory compliance such as PCI, HIPAA, PII, GDPR.
• Multiple inspection engines, threat intelligence feeds, and advanced threat protection options defend against unknown threats in real-time.
• Best-of-breed intrusion prevention with high-performance SSL inspection.

Mobile Security for 4G, 5G and IoT

• SGi LAN security powered by multiple SPUs to provide high-performance CGNAT and accelerate IPv4 and IPv6 traffic.
• RAN Access Security with highly scalable and best-performing IPsec aggregation and control security gateway (SecGW).
• User plane security enabled by full Threat Protection and visibility into GTP-U inspection.
• Signaling security to inspect various protocols such as SCTP, Diameter, GTP-C, SIP and provide protection against attacks.
• High-speed interfaces enable deployment flexibility.

Diagram illustrating a FortiGate 3400E deployment in a large campus network. It shows an Internet connection feeding into a FortiGate NGFW, which is connected to FortiAP (Secure Access Point), FortiSwitch (Switching), and FortiClient (Endpoint Protection). Management is handled by FortiManager (Single Pane-of-Glass Management) and analytics by FortiAnalyzer. The diagram emphasizes Next Generation Firewall (NGFW) and Intent-based Segmentation.

Diagram illustrating a FortiGate 3400E deployment in a data center. It shows an Internet connection feeding into a FortiGate NGFW/IPS, connected to FortiClient (VPN Client) and potentially other internal network segments. Management is handled by FortiManager (Single Pane-of-Glass Management) and analytics by FortiAnalyzer. The diagram emphasizes IPS/NGFW and Intent-based Segmentation.

Hardware

FortiGate 3400E/-DC and 3401E/-DC

Image shows the front panel of a FortiGate 3401E appliance, with numbered ports and status indicators. Below the appliance image, labels indicate key technologies: NP6 (Network Processor), CP9 (Content Processor), 100GE, 40GE, AC DUAL, DC DUAL, and 4TB (internal storage).

Interfaces

1. USB Management Port
2. Console Port
3. 2x GE RJ45 Management Ports
4. 2x 25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots
5. 22x 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots
6. 4x 100 GE QSFP28 / 40 GE QSFP+ Slots

Powered by SPU

• Custom SPU processors deliver the power needed to detect malicious content at multi-Gigabit speeds.
• Other security technologies cannot protect against today's wide range of content- and connection-based threats because they rely on general-purpose CPUs, causing a dangerous performance gap.
• SPU processors provide the performance needed to block emerging threats, meet rigorous third-party certifications, and ensure that the network security solution does not become a network bottleneck.

Network Processor (SPU NP6)

• Fortinet's new, breakthrough SPU NP6 network processor works inline with FortiOS functions, delivering:
• Superior firewall performance for IPv4/IPv6, SCTP, and multicast traffic with ultra-low latency down to 2 microseconds.
• VPN, CAPWAP, and IP tunnel acceleration.
• Anomaly-based intrusion prevention, checksum offload, and packet defragmentation.
• Traffic shaping and priority queuing.

Content Processor (SPU CP9)

• Fortinet's new, breakthrough SPU CP9 content processor works outside the direct flow of traffic and accelerates the inspection of computationally intensive security features:
• Enhanced IPS performance with unique capability of full signature matching at SPU.
• SSL Inspection capabilities based on the latest industry-mandated cipher suites.
• Encryption and decryption offloading.

100 GE Connectivity for Network

High-speed connectivity is essential for network security segmentation at the core of data networks. The FortiGate 3400E provides multiple 100 GE QSFP28 slots, simplifying network designs without relying on additional devices to bridge desired connectivity.

Fortinet Security Fabric

Security Fabric

The Security Fabric delivers broad visibility, integrated AI-driven breach prevention, and automated operations, orchestration, and response across all Fortinet and its ecosystem deployments. It allows security to dynamically expand and adapt as more and more workloads and data are added. Security seamlessly follows and protects data, users, and applications as they move between IoT, devices, and cloud environments throughout the network. All this is tied together under a single pane of glass management to deliver leading security capabilities across the entire environment while also significantly reducing complexity.

FortiGates are the foundation of Security Fabric, expanding security via visibility and control by tightly integrating with other Fortinet security products and Fabric-Ready Partner solutions.

Diagram illustrating the Fortinet Security Fabric. It depicts a central FortiGate appliance connected to various security and networking components, including FortiClient, FortiAP, FortiSwitch, FortiNAC, FortiManager, FortiAnalyzer, FortiSIEM, FortiSandbox, FortiWeb, FortiMail, FortiADC, FortiCASB, and FortiGate VM. It also shows connections to Fabric-Ready Partner solutions and APIs, emphasizing integrated visibility, detection, and automated response across the network.

FortiOS

Control all security and networking capabilities across the entire FortiGate platform with one intuitive operating system. Reduce complexity, costs, and response time with a truly consolidated next-generation security platform.

• A truly consolidated platform with a single OS and pane-of-glass for all security and networking services across all FortiGate platforms.
• Industry-leading protection: NSS Labs Recommended, VB100, AV Comparatives, and ICSA validated security and performance. Ability to leverage latest technologies such as deception-based security.
• Control thousands of applications, block the latest exploits, and filter web traffic based on millions of real-time URL ratings in addition to true TLS 1.3 support.
• Prevent, detect, and mitigate advanced attacks automatically in minutes with integrated AI-driven breach prevention and advanced threat protection.
• Improved user experience with innovative SD-WAN capabilities and ability to detect, contain and isolate threats with Intent-based Segmentation.
• Utilize SPU hardware acceleration to boost security capability performance.

Screenshot snippet showing a FortiOS interface. It displays a network topology view with devices like 'JSmith-WinPC' connected through 'ROOT-FW1' and 'ISFW-SEG1'. Traffic status, bandwidth, and vulnerability information are presented for the device.

Services

FortiGuard™ Security Services

FortiGuard Labs offers real-time intelligence on the threat landscape, delivering comprehensive security updates across the full range of Fortinet's solutions. Comprised of security threat researchers, engineers, and forensic specialists, the team collaborates with the world's leading threat monitoring organizations and other network and security vendors, as well as law enforcement agencies.

FortiCare™ Support Services

Our FortiCare customer support team provides global technical support for all Fortinet products. With support staff in the Americas, Europe, Middle East, and Asia, FortiCare offers services to meet the needs of enterprises of all sizes.

For more information, please refer to forti.net/fortiguard and forti.net/forticare.

Specifications

Interfaces and Modules

System Performance - Enterprise Traffic Mix

System Performance and Capacity

Note: All performance values are "up to" and vary depending on system configuration.
¹ IPsec VPN performance test uses AES256-SHA256.
² IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured with Logging enabled.
³ SSL Inspection performance values use an average of HTTPS sessions of different cipher suites.
⁴ NGFW performance is measured with Firewall, IPS and Application Control enabled.
⁵ Threat Protection performance is measured with Firewall, IPS, Application Control and Malware Protection enabled.

Dimensions and Power

Operating Environment and Certifications

Order Information

Products

Optional Accessories

Bundles

¹ 24x7 plus Advanced Services Ticket Handling
² Available when running FortiOS 6.2