An NP6 generation 2 RU data center firewall; 80 Gbps IPv4 firewall, 8 million concurrent sessions and parts commonality with an existing E-series fleet.
The FortiGate 1100E is an NP6 generation data center firewall that offers 80 / 80 / 45 Gbps IPv4 firewall throughput, 7.11 Gbps Threat Protection and 8 million concurrent TCP sessions in a 2 RU chassis. Its fastest interfaces are two 40GE QSFP+ slots. It is chosen when extending existing E-series deployments and in cabinets that require -48V DC power.
The FortiGate 1100E is an NP6 generation data center firewall that offers 80 / 80 / 45 Gbps IPv4 firewall throughput (1518 / 512 / 64-byte UDP), 12.5 Gbps IPS, 9.8 Gbps NGFW and 7.11 Gbps Threat Protection throughput in a 2 RU chassis. It carries 8 million concurrent TCP sessions, opens 500,000 new sessions per second, and its fastest interfaces are two 40GE QSFP+ slots.
The most widespread piece of misinformation about this model is that it is "the FortiGate 1000F with increased session capacity". The official data sheets do not support that: the 1100E supports 8 million and the 1000F 7.5 million concurrent sessions — a difference of only about 7% — whereas on firewall throughput the 1000F leads by a factor of 2.5. The FortiGate 1100E is not a higher model but the previous NP6 generation; the 1000F comes with NP7. What the two models share is the CP9 content processor; according to Fortinet's documentation the CP9 provides more than 10 Gbps of pattern matching acceleration in flow-based inspection (Fortinet Document Library, 2026), and the SSL inspection throughput of both models sits at the same 10 Gbps level.
The only concrete rationale that makes the FortiGate 1100E defensible today is operational commonality with an existing E-series fleet: the 1100E shares the same power supply SKU (SP-FG300E-PS) with the FG-300/301E, FG-400/401E, FG-500/501E and FG-600/601E, so the spare parts pool and the field replacement procedure stay unchanged. The other two rationales often put forward are weakened by the official data sheets. -48V DC power: the FG-1100E-DC really is a DC input model and the 1000F data sheet has no DC option — but Fortinet also lists the FG-900G-DC with dual DC power supplies (48–60 VDC), and in 1 RU at that. Copper port density: the 1100E has sixteen GE RJ45 ports, but the 900G also offers 16 switch ports plus 1 management port. In other words, neither DC power nor copper density on its own points to the 1100E. On the capacity side it supports 10 default / 250 maximum VDOMs, 100,000 firewall policies, 20,000 gateway-to-gateway and 100,000 client-to-gateway IPsec tunnels. For the full model family and the selection criteria, take a look at our FortiGate product page.
| Metric (official data sheet) | FortiGate 1100E | FortiGate 1000F |
|---|---|---|
| IPv4 Firewall Throughput (1518 / 512 / 64-byte UDP) | 80 / 80 / 45 Gbps | 198 / 196 / 134 Gbps |
| IPS Throughput | 12.5 Gbps | 19 Gbps |
| NGFW Throughput | 9.8 Gbps | 15 Gbps |
| Threat Protection Throughput | 7.11 Gbps | 13 Gbps |
| SSL Inspection Throughput | 10 Gbps | 10 Gbps |
| Concurrent SSL Inspection sessions | 780,000 | 600,000 |
| SSL-VPN Throughput | 8.4 Gbps | 5.3 Gbps |
| IPsec VPN Throughput (512-byte) | 48 Gbps | 55 Gbps |
| Concurrent sessions (TCP) | 8 million | 7.5 million |
| New sessions per second (TCP) | 500,000 | 650,000 |
| Firewall latency (64-byte UDP) | 2.76 µs | 3.45 µs |
| Hardware acceleration | SPU NP6 + CP9 | SPU NP7 + CP9 |
| Fastest interface | 2x 40GE QSFP+ | 2x 100GE QSFP28 / 40GE QSFP+ |
| Power consumption (average / maximum) | 217 W / 336 W | 210 W / 408 W |
| DC power option | FG-1100E-DC (-48V DC) | Not listed in the data sheet |
The one-sentence summary of the table is this: the FortiGate 1100E leads the 1000F only on concurrent sessions, concurrent SSL inspection sessions, SSL-VPN throughput, latency and the DC power option. On firewall, IPS, NGFW, Threat Protection, IPsec VPN, new sessions per second and interface speed, the 1000F is markedly ahead. That is why our default choice in a new data center project is the FortiGate 1000F. If traffic is inspection-heavy, the FortiGate 900G, which delivers 30 Gbps Threat Protection and 28 million sessions in a 1 RU chassis, is more efficient; if session and IPS capacity are critical, the FortiGate 1800F, with 12 million sessions and four 100GE QSFP28 slots, is the one to evaluate.
The FortiGate 1100E's interface layout is listed in the data sheet as follows: 2x 40GE QSFP+, 4x 25GE SFP28 / 10GE SFP+ / GE SFP, 4x 10GE SFP+ / GE SFP, 8x GE SFP, 16x GE RJ45 and 2x GE RJ45 management/HA ports. This means direct connectivity in existing data centers with a 40 Gigabit core. In an environment that has moved to a 100 Gigabit core, by contrast, the 1100E requires an intermediate conversion layer; the device does not have a 100GE slot. In deployments with high copper port requirements, the sixteen GE RJ45 ports outnumber the 1000F's eight RJ45 ports; however, the 1000F's RJ45 ports support 10GE / 5GE / 2.5GE / GE / 100M speeds, while those on the 1100E are limited to GE. On the VPN side, with 48 Gbps of IPsec throughput (512-byte, AES256-SHA256) and 20,000 gateway-to-gateway tunnels it can take on the role of a branch aggregation point; for remote access the data sheet lists 8.4 Gbps SSL-VPN throughput and a recommended maximum of 10,000 concurrent tunnel mode users. The 2.76 µs firewall latency with 64-byte UDP packets and 67.5 Mpps of packet capacity are notable figures in latency-sensitive internal segmentation scenarios.
Fortinet data sheets do not state the FortiOS release on which performance figures were measured; the release decision is therefore made purely according to the support calendar. The CSB-260330-1 bulletin (March 2026) sets the calendar for the two lines as follows: on FortiOS 7.4 engineering support ends on 11 May 2027 and full support on 11 November 2028; on FortiOS 7.6 these dates are 25 July 2028 and 25 January 2030 (Fortinet Community, 2026). The lifecycle rule is fixed: a major release receives 36 months of engineering support followed by 18 months of "Must Fix" support; on the LTS line the total extends to 72 months and that access is tied to a FortiCare Elite contract (Fortinet Community, 2026). On a mature hardware platform such as the FortiGate 1100E the real question is the lifecycle of the hardware itself. Let us be clear here: we do not give a date unless we have seen a verified, published EOS date for this model. Before purchase we check Fortinet's official Product Life Cycle record together with you. If you are targeting a depreciation window longer than five years, the F and G series models are a safer choice.
In Turkey the FortiGate 1100E is usually positioned not at the center of a greenfield design but on top of an existing deployment. For the log retention obligation under KVKK (Turkey's data protection law), PCI-DSS segmentation requirements and the log integrity required in BDDK (Turkish banking regulator) audits, we deploy the device together with FortiAnalyzer, and we consolidate multi-device policy management in FortiManager. The data sheet lists active-active, active-passive and clustering HA options; in 1100E refresh projects, leaving the existing device as the HA peer and bringing the new node into active service is the least disruptive migration path. The data sheet states a 2 RU chassis, hot-swappable dual power supplies delivering 1+1 redundancy (80Plus) and 217 W average / 336 W maximum power consumption. As a Fortinet authorized channel partner, Sora Yazılım provides licensing, installation, migration from the legacy firewall and the managed service layer; before commissioning we move the existing policy set across with the FortiConverter service.
Do you already run a FortiGate 1100E and are considering a refresh? We profile the existing device's session, IPS and SSL inspection usage and prepare a comparative sizing report against the 1000F, 900G and 1800F; if you have constraints such as a DC-powered cabinet or copper port density, we factor those in as well. Reach us through our contact page and let us clarify the licensing, procurement and migration plan. We do not publish pricing on the page; quotes are prepared specifically for the project according to capacity and license scope.
In operator cabinets already running an FG-1100E-DC in the field, completing the second node with the same model allows an HA pair to be built without changing the -48V DC power and rack depth plan. A 2 RU chassis, 217 W average consumption and 1+1 redundant power supplies simplify the calculation in colocation spaces with tight energy budgets. In a greenfield DC cabinet design, however, we also bring the FG-900G-DC into the comparison.
Because it uses the same power supply SKU as FG-300E, FG-400E, FG-500E and FG-600E devices, it pools the spare parts inventory and field replacement procedures. Added to the same FortiManager policy tree, capacity is increased without changing the operating model.
48 Gbps of IPsec VPN throughput and 20,000 gateway-to-gateway tunnel capacity make it possible to terminate the provincial connections of multi-location public institutions at a single center. The 100,000 client-to-gateway tunnels leave additional capacity for field teams.
Sixteen GE RJ45 ports allow a large number of copper connections to be terminated directly without fiber conversion; the ports are limited to GE speed, so if 10GE copper is required you move to the 1000F's RJ45 ports. The 2.76 µs firewall latency with 64-byte UDP packets preserves the latency budget in internal segmentation between clinical systems.
The data sheet lists 8.4 Gbps SSL-VPN throughput and a recommended maximum of 10,000 concurrent tunnel mode users; 780,000 concurrent SSL inspection sessions are also supported. During periods with large numbers of remote academic and administrative staff, these two figures become decisive.
Organizations that already operate an E-series FortiGate fleet and are expanding capacity without changing their spare parts pool; enterprises completing an existing 1100E deployment with an HA peer or drawing up a refresh schedule; teams running a 2 RU device as an SSL-VPN and site-to-site IPsec aggregation point.
Fanless desktop NGFW delivering 5 Gbps IPv4 firewall for micro offices of 5–10 users.
Details10-port desktop NGFW delivering 10 Gbps IPv4 firewall for small offices and branches of 10–30 users.
DetailsThe SP5 ASIC-based branch NGFW that replaces the 60F: 10 Gbps symmetric firewall, 1.4 million sessions, PoE and FortiWiFi variants.
DetailsDesktop branch firewall with eight PoE/+ ports and a 96 W budget that also powers the access layer.
DetailsSora Yazılım handles sizing, licensing, deployment and ongoing management — all from a single team.