20-person software firm
A software company uses the 60F for internet + site-to-site VPN (AWS) + ZTNA. One device covers all security. ~$200/year FortiCare cost.
Fortinet · FortiGate NGFW
FortiGate 60F
10 Gbps firewall for 10–30 user small offices.
Quick answer
FortiGate 60F is Fortinet's most widely deployed small-office model, delivering 10 Gbps firewall and 1.4 Gbps threat prevention for 10–30 users. It includes 10x GbE ports, built-in SD-WAN and ZTNA, and supports remote ZTP (Zero Touch Provisioning) via FortiManager.
FortiGate 60F has been the bestselling SMB model in the FortiGate family for the last five years. It offers 10x GbE ports (2 WAN + 7 LAN + 1 DMZ configurable) with an internal switch fabric.
Variants: 60F (standard), 60F-3G4G (LTE), 60F-Wi-Fi (integrated Wi-Fi 6). The 70G model is the 60F's successor for new sales; the 60F remains for refresh deployments and stock supply.
Large installed base in Türkiye: more than 50,000 active FortiGate 60F deployments exist in Türkiye (Fortinet channel statistics, end of 2024). Bank branches, retail stores, accounting practices, SMB headquarters and freelance professionals are the most common segments. The device's mature hardware/software combination has delivered 99.95%+ uptime over the last five years.
NP6Lite ASIC and hardware acceleration: the Network Processor 6 Lite (NP6Lite) and Content Processor 9 Lite (CP9Lite) inside the 60F deliver strong hardware acceleration for its size. Firewall and VPN traffic is processed on the ASIC; the CPU handles only management and exception traffic. This architecture delivers 3–4x higher throughput than cheap software-based SMB firewalls (pfSense, OPNsense, Sophos XG SOHO).
Leader in SMB SD-WAN capability: the 60F is the most economical enterprise firewall with full SD-WAN included — no extra license required. Two ethernet WANs + LTE dongle give three active-active load-balanced paths. Application-aware path selection (Office 365, Zoom, Teams routed over the fastest link), forward error correction and packet duplication promote low-quality cheap internet links to enterprise quality.
ZTNA (Zero Trust Network Access) integration: ZTNA replaces traditional VPN with user + device + application-level checks. The 60F's built-in ZTNA gateway lets remote workers reach corporate applications through a browser without a VPN client. Microsegmentation and least-privilege access also simplify KVKK/GDPR compliance.
Compliance via FortiAnalyzer integration: all traffic logs from the 60F can be forwarded to on-prem FortiAnalyzer or cloud-based FortiAnalyzer Cloud. For KVKK, GDPR and PCI-DSS audits this delivers 1-year log retention. Automated monthly report production (top destinations, top blocked threats, per-user traffic analysis) streamlines internal audit work.
- 10 GbE ports
- 10 Gbps firewall
- 1.4 Gbps threat prevention
Key features
What this model offers
- 10 Gbps firewall, 1.4 Gbps threat prevention
- 10x GbE ports + internal switch fabric
- Built-in SD-WAN and ZTNA (no extra license)
- Wi-Fi 6 option (60F-Wi-Fi model)
- Zero Touch Provisioning (ZTP)
- FortiManager centralized management
- FortiASIC NP6Lite + CP9Lite acceleration
- LTE dongle support (60F-3G4G model)
- FortiAnalyzer log forwarding
- FortiSandbox integration
- Hardware-accelerated IPSec/SSL VPN
- FortiGuard AI threat intelligence
Tech Summary
Technical data
- Firewall throughput
- 10 Gbps
- IPS throughput
- 1.4 Gbps
- Threat prevention
- 1.4 Gbps
- SSL inspection
- 650 Mbps
- VPN throughput (IPsec)
- 6.5 Gbps
- Concurrent sessions
- 1,500,000
- New sessions/sec
- 30,000
- Ports
- 10x GbE (2 WAN + 7 LAN + 1 DMZ)
- FortiASIC
- NP6Lite + CP9Lite
- Wi-Fi (Wi-Fi model)
- Dual-band 802.11ax
- Power consumption (typical)
- 26 W
- Form factor
- Desktop, fanless
Use CasesSMB Bank Retail Accounting Education
At what scale is this model preferred?
Mini bank branch
A bank's mini branch uses a 60F + IPsec VPN to a central 200F. PCI-DSS-compliant configuration with FortiAnalyzer retention of 1 year.
Store chain SD-WAN
A retail chain runs 60F + SD-WAN at every store; MPLS spend dropped 60% and store opening dropped to 30 minutes.
Accounting practice
An accounting firm with KVKK-sensitive client data uses 60F-Wi-Fi for firewall + internal Wi-Fi + ZTNA in a single device. Guest Wi-Fi runs in an isolated VLAN.
Small private school / daycare
A 100-student daycare uses 60F + Web Filtering to block inappropriate content. Teacher + admin Wi-Fi run in separate VLANs with KVKK-compliant student data protection.
Who is it for?
10–30 user small office, bank mini branch, retail store, accounting practice, small clinic, daycare/small private school, freelance home office.
Frequently Asked Questions
Common questions about this model
Should I buy a 60F or a 70G?
For new purchases the 70G is recommended — about 2x performance (20 Gbps firewall vs 10 Gbps) at the same price band, plus SP5 ASIC, AI-based IPS and 5G dongle support. The 60F is still sold; expected EOS (End of Sale) mid-2027. Sora Yazılım recommends based on stock and pricing.
How is the 60F's performance with SSL inspection enabled?
About 650 Mbps with SSL inspection on. Sufficient for SMB traffic (HTTP/S, SaaS, email); for heavy SSL traffic (large non-CDN file transfers, video conferencing-heavy use) consider the 70G or 90G.
What's different about the Wi-Fi 6 variant?
60F-Wi-Fi: includes a built-in dual-band 802.11ax (Wi-Fi 6) access point — 2x2 MIMO, ~1.2 Gbps theoretical bandwidth. No separate FortiAP needed. Suitable for a single-room small office (~50 m²); larger spaces still need separate FortiAP-23JF/231F units.
How fast is delivery from stock?
60F is continuously stocked at Türkiye distributors. Typical delivery is 1–2 business days. Sora Yazılım as an authorized channel partner expedites supply; same-day options are available for urgencies.
Is FortiCare Premium necessary?
Standard (9x5 NBD) is enough for SMB; businesses requiring 24/7 support pick Premium (24x7 + 4-hour response). Bank branches, call centers, healthcare facilities and other mission-critical sites prefer Premium. The cost delta is roughly +30–40%.
How does ZTP work?
Zero-Touch Provisioning: the device leaves the box, connects to the internet and gets registered by serial number through Fortinet's cloud FortiZTP. FortiManager or FortiGate Cloud auto-pushes the prepared template config. No on-site engineer required; multi-branch rollouts open 50+ sites with a single click.
Difference from the older 60E?
60E is the prior generation (NP4Lite ASIC, ~3 Gbps firewall). The 60F gives roughly 3x performance + Wi-Fi 6 + modern ZTNA. Fortinet announced 60E EOS in 2023; EOLS 2028. Existing 60E users can migrate in a scheduled manner without rush.
Who needs the 60F-3G4G LTE model?
Mobile field sites that need LTE 4G failover, temporary offices, locations where cabling is hard to install (ATMs, digital signage, jewelers/pharmacies). The SIM slot is on the device; Turkish carriers are auto-recognized. Data-only SIM recommended.
FortiGate Cloud vs FortiManager?
FortiGate Cloud (SaaS): free up to 5 devices, mobile-app management, ZTP-ready — ideal for SMB. FortiManager: on-prem or cloud, 10+ devices, advanced policy lifecycle, RBAC, ITSM integration — for mid-to-large organizations. Sora Yazılım recommends accordingly.
How many FortiAPs can a 60F support?
The 60F's built-in WLAN controller supports up to 10 FortiAPs. For more, step up to the 80F (32 APs), 100F (64 APs) or use FortiManager + FortiAP Cloud. A typical small office needs 1–2 FortiAPs.
Vendor's official model page
Opens the vendor's original datasheet and product page in a new tab.
Fortinet — FortiGate 60F →Same Family
Other models of this product
FortiGate 40F
5 Gbps firewall for micro offices up to ~10 users.
DetailsFortiGate 70G
Successor to the 60F; 2x performance at the same price, SD-WAN-optimized.
DetailsFortiGate 80F
50–100 user branch with PoE+ ports to power FortiAP/FortiSwitch.
DetailsFortiGate 90G
Successor to the 80F; SP5 ASIC, 2x performance, high PoE budget.
DetailsFortiGate 60F — licensing + deployment + support
Sora Yazılım handles sizing, licensing, deployment and ongoing management — all from a single team.