Fortinet FortiGate 4400F

The FortiGate 4400F is a compact hyperscale next-generation firewall (NGFW) built for large enterprises and service providers. It is designed to secure the network edge, the hybrid and hyperscale datacentre core, and internal network segments from a single 4U chassis, and includes a dedicated TPM module that hardens the appliance by generating, storing and authenticating cryptographic keys in hardware. A perpetual Hyperscale Firewall License is available separately to unlock hardware-accelerated CGNAT features, including hardware session setup, firewall session logging and NAT, via the SPU NP7.

On the Enterprise traffic mix, the series delivers 94 Gbps of IPS throughput, 82 Gbps of NGFW throughput and 75 Gbps of threat protection throughput, with firewall throughput reaching up to 1.2 Tbps (1.15 Tbps at 1518-byte UDP) at 750 Mpps. It supports up to 700 million concurrent TCP sessions, 10 million new sessions per second, 310 Gbps of IPsec VPN throughput and 86 Gbps of SSL inspection throughput.

Connectivity is provided by 12x 100GE QSFP28/40GE QSFP+ slots and 16x 25GE SFP28/10GE SFP+/GE SFP slots (plus 2 HA and 2 AUX slots), with 2x GE RJ45 management ports, a USB 3.0 port and a console port. The unit ships as a 4U rack-mount chassis with a hot-swappable fan tray and hot-swappable AC power supplies (2+2 redundant), and supports Active, Active-Active, Passive and clustering HA configurations.

Key features

• SPU NP7 and CP9 hardware-accelerated processing
• 12x 100GE QSFP28/40GE QSFP+ slots and 16x 25GE SFP28/10GE SFP+/GE SFP slots (plus 2 HA and 2 AUX slots)
• Up to 1.2 Tbps firewall throughput and 750 Mpps
• Hardware-accelerated VXLAN and DDoS protection for high-throughput “elephant flows”
• Up to 700 million concurrent TCP sessions and 10 million new sessions/second
• IPsec VPN throughput of 310 Gbps across up to 40,000 gateway-to-gateway tunnels
• SSL inspection throughput of 86 Gbps with 9 million concurrent inspected sessions
• Dedicated TPM module for hardware-based key generation, storage and authentication
• Hot-swappable fan tray and redundant power supplies
• 4 RU rack-mount chassis

Works with

• FortiGate high-end firewalls
• FortiGuard licences & renewals

Frequently asked questions

Do I need the bundle, or can I buy hardware only?

Hardware-only gets you the appliance with SPU NP7/CP9 acceleration and no FortiGuard subscription active. The bundle variants add FortiCare Premium support plus either FortiGuard Unified Threat Protection (UTP) or Enterprise Protection for a fixed 1, 3 or 5 year term, which is the simpler route if the firewall needs to be licensed from day one.

Is there a DC-powered version of the 4400F?

Yes. The 4400F-DC is otherwise identical to the 4400F but takes -48V to -60V DC input instead of mains AC, for deployment in telecom and data-centre racks that run on DC power.

How do I size a deployment against these numbers?

Real-world throughput depends on the security profile enabled (IPS, SSL inspection, application control) and average packet size, so the Enterprise traffic mix figures above are the most realistic planning baseline. The 4400F series ships with 12x 100/40GE QSFP28 slots and 16x 25/10GE SFP28/SFP+ slots plus dedicated HA and AUX slots, and supports Active, Active-Active, Passive and clustering HA configurations. Talk to us with your expected traffic mix and port requirements before committing to a model.

Sizing a FortiGate deployment? Call 0333 242 1314 or email sales@clisecure.com.