FG-1100E-BDL-950-12

Description

The Fortinet FortiGate 1100E-DC with 24×7 FortiCare and FortiGuard Unified Threat Protection (UTP) for 1 year is a high-performance security appliance designed for large enterprises and service providers. It offers advanced threat protection, SSL inspection, and high throughput capabilities.

The FortiGate‑1100E‑DC is a high‑performance next‑generation firewall (NGFW) / unified threat management appliance targeted at large enterprises, data center edges, service providers, and environments that demand both high throughput and advanced security. Its “DC” suffix indicates support for −48 V DC power (common in telecom / carrier / data center environments).

It pairs robust hardware (multiple high‑speed interfaces, specialized security processors) with Fortinet’s FortiOS feature set (IPS, SSL inspection, application control, threat protection, etc.).

Product Features

Hardware & Interfaces

1. Power / Build
   • DC‑powered model (−48V typical) suited for data center / telco environments. 
   • Redundant, hot‑swappable power supplies
   • Rack‑mountable 2U form factor
2. Interfaces / Port‑Types
   The device has a rich mix of high‑speed and traditional ports to serve diverse networking needs.

• 2 × 40 GE QSFP+ slots.
• 4 × 25 GE SFP28 slots (each can also operate at 10 GE).
• 4 × 10 GE SFP+ slots.
• 8 × 1 GE SFP slots.
• 16 × 1 GE RJ‑45 ports for general LAN/WAN traffic.
• 2 × RJ‑45 ports reserved for Management / HA (High Availability).
• Console port and USB ports

3. Hardware Acceleration / Specialized Processors
Fortinet SPU (Security Processing Unit) architecture: NP6 for network‑level acceleration (packet processing, IPS, etc.), CP9 for content and security‑intensive operations (SSL / TLS inspection, encryption/decryption) to offload CPU

FG-1100E-BDL-950-12 Advantages

• High Throughput & Low Latency
  The 1100E‑DC delivers very strong performance even when advanced security functions are turned on: IPS throughput is ~12.5 Gbps, NGFW throughput ~9.8 Gbps, threat protection ~7.1 Gbps.
  It also has low latency and high packet rate capability, so it can handle demanding traffic loads without becoming a bottleneck.

• Strong SSL / TLS Inspection
  Because much modern traffic is encrypted, the ability to inspect SSL/TLS traffic at high speed is critical. The FortiGate‑1100E‑DC achieves ~10 Gbps SSL inspection throughput; can handle many concurrent SSL inspection sessions.

• High Capacity for Connections, VPNs, Users
  It supports a large number of concurrent sessions (e.g. ~8 million TCP sessions), many SSL VPN users, many IPsec VPN tunnels. This makes it suitable for large sites, service providers, or environments with many remote users.

• Flexible and High‑Speed Interfaces
  It has a mix of high‑speed ports (40 GE QSFP+, 25 GE SFP28, 10 GE, etc.), plus many RJ‑45 and fiber‑SFP interfaces. This means good flexibility in connecting to data centres, core network links, or WANs without needing lots of additional gear.

• DC Power Option & Redundancy
  The “‑DC” model uses DC power (often −48 V), which is advantageous in data centre / telecom environments that standardize on DC power. It often includes redundant/hot‑swappable power supplies, making for higher availability.

• Unified Threat Protection (UTP)
  The bundle of FortiGuard services (antivirus, web filtering, IPS, application control, botnet protection, etc.) gives you broad coverage of threat vectors. This reduces risk because you’re protected not just at the network firewall boundary but also at many points of vulnerability. Having all services from one vendor helps compatibility, updates, and unified threat intelligence.

• 24×7 FortiCare Support
  Having round‑the‑clock support ensures that if there are issues — hardware failures, firmware problems, critical threats — you can get help any time. This improves reliability, and uptime, which is critical for mission‑critical infrastructure.

• Scalability & Multi‑Tenancy
  Features like Virtual Domains (VDOMs), large numbers of policies, the ability to support many managed devices (switches, access points), make it useful in complex or multi‑site networks. You can partition and manage different parts of the network from the same appliance or from the same management plane.

• Security Fabric Integration & Threat Intelligence
  FortiGuard Labs continuously updates threat intelligence; integrated ecosystem (“Security Fabric”) allows better visibility, automated response, sharing of threat information. This helps defend against zero‑day threats and evolving attacks.

• Better Total Cost of Ownership (TCO)
  Because you are consolidating many security functions (firewall, IPS, web filtering, VPN, etc.) into a single appliance plus service bundle, you save on buying multiple standalone devices, integrating them, managing multiple consoles, etc. Also, with strong support, reliability, and high performance, you might replace less often or have fewer performance‑related upgrades.

• Regulatory and Compliance Support
  Many industries require inspection of traffic, logging, protection against malware, intrusion detection, etc. This system provides many of the tools needed (audit logs, deep inspection, policy controls, application control etc.) to help satisfy compliance such as PCI‑DSS, GDPR, etc.

Features: Security / Software / Management

With the FortiGuard UTP (Unified Threat Protection) bundle + FortiCare 24×7, you get a large suite of security, protection, management, & support features. Some of them:

• UTP Contents (FortiGuard) include:
  • Intrusion Prevention System (IPS) 
  • Antivirus / Anti‑Malware
  • Web filtering (URL, DNS)
  • Application control (monitoring & blocking of applications) 
  • Botnet / Command & Control protection 
  • SSL/TLS / encrypted traffic inspection to detect threats hiding in encrypted sessions.

• Management / Integration
  • Fortinet Security Fabric – integrates with other Fortinet devices and partners for threat intelligence, automated response, visibility. 
  • Zero‑touch provisioning / built‑in tools to enforce best practices / compliance checklists. 
  • Support for Virtual Domains (VDOMs) – logical separation / multi‑tenancy.

• VPN / Remote Access
  • Strong IPsec VPN throughput (~48 Gbps)
  • SSL VPN throughput ~8.4 Gbps, with support for many concurrent SSL VPN users.

• Reliability & Environmental
  • High availability configurations: Active‑Passive, Active‑Active, clustering. 
  • Operating temp ~0‑40 °C; rack dimensions suited for data center.

Use Cases & Deployment Scenarios

The FG‑1100E‑DC is best suited for:

• Data center edge / core: connecting internal segments, enforcing security between zones, inspecting high‑volume east‑west and north‑south traffic.

• Carrier / telecom / service providers: the DC power variant and high throughput make it suitable for telco racks and service provider networks.

• Large enterprise campus / WAN edges: when multiple high speed uplinks (25G, 40G) are needed, plus deep security inspection.

• Multi-tenant / managed security service providers (MSSPs): support for virtualization (VDOMs), multi‑tenancy, segmentation.

• Environments with heavy encrypted traffic: strong TLS/SSL inspection throughput helps mitigate the risk of “blind spots.”

• Regulated / compliance environments: where deep inspection, logging, threat detection, segmentation, etc. are mandated.