FortiGate 60F Unboxing!
HTML-код
- Опубликовано: 8 июл 2024
- The 60 series FortiGate has long been a stronghold in Fortinet device deployments. Easily the most cost effective box with the best bang per buck the F generation has made it even better. Watch as I discuss the benefits of the 60F and why I look to deploy many more of them.
Buy Hardware: bit.ly/3VyXy5x
Get Consulting: bit.ly/36FinSU
My Other Projects:
Office Of The CISO: bit.ly/3HGMH1o
Packet Llama: bit.ly/3SEX3H4
###### SOCIAL LINKS ######
Twitter: bit.ly/2WXiRAv
Facebook: bit.ly/3eigz4D
Instagram: bit.ly/3cZneAz
######################
Legendary video. This was my first watch of you, and I watched the whole video, lol. I don't usually do that. Very informative and entertaining.
I have deployed 45 60F unit to corporate remote sites and this is one of the best move I have made.
Great device that 60F, when for it for my previous project and we already using more than 60 units with no regrets at all. All of them got fortiswitch and fortiap been working great for 8 months now. Of course if you want bigger punch, 100F is the way to go else the all rounder is the 60F. The F series has been a real revolution in term of performance/cost ratio for firewalls.
I've deployed tons 60Fs, 80Fs, and 100Fs with no issue. About to deploy 50+ more 60F's. They all run at 30% memory and 1-2% CPU doing full threat inspection.
I love them
How do you gauge the right device based on # of users?
Just found your channel and I am really appreciating it so far.
I recently bought a FortiGate 81f for using Fiber Internet (1GBit/s) in my Home Office. Great machine as well.
I am testing FortiGates to replace our old Firewalls from another brand, which is not taking steps foward in security.
Some things are really different and for a non-Pro, maybe a litte bit too complicated. Like requesting five steps to build an IPSec VPN.
Can you do a comparison between that 60f and the 80e you mentioned please ?
Great video thank you 👍
Can you do a video of how you'd recommend to setup a Fortigate switch for a home residence topology. Would the Fortigate firewall sit between a cable modem and a Linksys router? Would you configure the Fortigate firewall to have a private IP address?
Hi Mike, can you please make a Video about config a fortiswitch without using Fortilink Management. Radius Authentication, Auto VLAN etc.
Anybody know why on a 61F I can configure 802.1x on wireless but not on a software switch or how I would go about setting up 802.1x on the FortiWifi 61F hardaware switch ports?
Can you go over the licenses and how you find the sku? I’m looking to use one of these to do east west VLAN traffic (just port based policies), dns filtering and some reporting. Perhaps the 61F. Love the content. Keep it coming.
I have this at home as my personal "lab unit". I tend to run 60F's and 100F's in a lot of my sml/med deployments. I like a lot of the specifics as to the deployment scenarios. Unrelated - I'd like to see more videos on FortiOS releases.. feels like it's been hard to find a release to squat on lately. I like a lot of the newer switch controller features, but you start to see a lot of known issues in other areas as you move up in release.
I've been running the 60Fs and 100Fs since their release as well. Solid units!
What’s the max recommended users for the 60F and 100f and max recommended SSL vpn connections? Contemplating either of these to upgrade a 61e deployment in a Med business environment
@@Aaron-er4qe I have several sites with around 50 users + remote VPN connections. It's a tank for most smb use cases.
Got one for home about a year back because I wanted to SD-WAN my broadband and StarLink (SL), which finally arrived about 2 months ago. This way I can easily fail over for the immature SL or even take it camping and revert to the cable modem. So far it's been all working great, I'm leaning on the SL hard and it's getting the job done, mostly, as expected.
However... I have an odd problem, the new rectangle SL with Ethernet adapter add-on is dropping about 50% of packets to the fg60f, but a dumb switch between them "solves" the problem. Tried everything I can think of, it must be the SL modem/chipset that is jankie, is my best guess. I have a reddit thread on this issue and about a dozen confirmations from others experiencing the same problem and workaround. I would LOVE it if you could offer any new ideas, or even some debugging tips to get to the root cause.
We are all dumbfounded so far... I'm about ready to bring the SL router+eth in to work and see if I can replicate the issue on our fg500 & fg600 pairs. You can reference the reddit thread for all the things I have tried, like fixed speeds, duplexes, other ports on fg60f, etc...
Great video. I love your shirt (If Fortinet Support was good, I would be broke). I love their products but their support is 😖. I tell my Fortinet account manager that all the time. Great content, keep up the good work 👍🏾
Thanks for this video. I am waiting for my first ever Fortinet equipment and it is FortiGate 60F. This is to replace my Ubiquiti USG-PRO. I have several switches and APs from Ubiquiti UniFi series on my network and I wonder how this will work for me. Any tips concerning how to setup VLANs and VPN on hybrid environment ? My network has IoT devices and IP monitoring that I am separating with around 100 clients total. Gradually I will replace all switches and APs with Fortinet but since money is an issue for me I would appreciate your advice how to start my adventure with Fortinet.
Is it too much 100 clients for 60F?
We use this and the new 80F, which adds 2 SFP ports (great for clients that want Dual WAN or have a DIA WAN line)
Yesssss. Love me some 80F
You can easily do dual wan on the 60F too, it'll just have to be copper.
I forget which video. u ever said prefer to choose F series compare to E series because of F series has local disk
but I read on reddit, local disk easier to damage. they prefer to pump log to fortianalyzer
what is ur comment on that
Modern gates with a 1 in the model have disks. (61, 81, 101, etc). Disks do reach write limits faster. Centralized logging is nice. Especially if you have multiple firewalls out there.
for an unboxing video you didn't do much setup. I enjoyed the discussion but was looking for HOW to do initial setup.
I have a basic configuration video that covers that specifically. Will try to do more.
i have a fortigate 100f i enabled web filter but on some browser like chrome and ms edge it doesnt block the pages i need it does it on firefox but on other browsers it does not block. Also the block message is not displayed ? how do i fix please? already have latest firmware upto date recently just did the update still same issue
If they are Google services or Facebook, you may need to block QUIC (UDP/443). Also, your policy may be set to ‘no-inspection’ which must be changed to ‘cert-inspection’ as a minimum.
@@RowanKaag would blocking QUIC also disable fast browsing slowing down internet browsing on my browsers?
@@emortal9622 in theory you might experience degraded performance on websites using QUIC: at first because eg the Chrome browser is hardcoded to try QUIC first. It has to ‘timeout’ before falling back to HTTP(S) and secondly because the protocol in itself is written to be faster (one aspect being that it is UDP based so less statechecking, saving time).
An application control profile that blocks QUIC is almost a must for web filtering. All the other web filtering devices I've used other than Fortinet recommend it. The other thing to try is on the policy where you have web filtering is switch the inspection mode from Flow-based to Proxy-based. Flow-based is the default. On 6.2 and newer firmware (may have been since 6.0) you can change the inspection mode per policy instead of doing it as a setting for the entire firewall like on older firmware.
How would you rate this as a DHCP server + primary gateway for 100 user office? At what point would you jump up to the 80F or 100F?
Would be fine if it is a flat single subnet and the internet connection is less than 1 gigabit. I propose devices based on traffic crossing interfaces and the threat protection required for said traffic.
@@FortinetGuru Just a couple direct gateway subnets for WiFi vs. wired LAN - straight out to the internet. Curious at what point you'd upgrade to an 80 or 100F
What is the difference between F, E, D, and so on in the names of models? Do they mean anything at all?
Generation of fortigate. F series are running SOC4 chips. Usually major process hardware advancements result in newer generations.
I also have 60F for a year now and I love it. Fortigates are getting better and better each day. If you want more bang for you buck, than fortigate is the way to go. Hey Mike, I was wondering: can you run multiple websites behind this firewall with just one public ip ? I have read somewhere that it is possible, but I haven't found yet a way to do it.
You can run thousands of sites on a single IP. Apache has a virtual server section which is essentially “this domain goes to this directory” etc
You don’t even need Apache; HTTP Host Balancing can be done via Virtual Server on 60+ series hardware (like the mentioned 60F).
@@RowanKaag That would be a single virtual server load-balancing to many back-end servers. For many front-end sites, you'll need 1 IP per site ...
@@RowanKaag HTTP host is indeed for load balancing behind one IP. I was wondering the option of Virtual ip with FQDN option. If it is possible to run 2 domains on one single external address. I'll try this in my lab.
Hi good videos, and if you have time to do VPN ssl s2s this will be a new content "just opinion "
i love u
I love the F series, stronger Fortigates
Very strong
@@FortinetGuru Could you bring a video about ZTNA on Fortigate?
Big fan!!