Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Release Notes

    6.0.0
    6.6.2
    6.6.1
    6.6.0
    6.5.5
    6.5.4
    6.5.3
    6.5.2
    6.5.1
    6.5.0
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.3.4
    6.3.3
    6.3.2
    6.3.1
    6.3.0
    6.2.2
    6.2.1
    6.2.0
    6.1.3
    6.1.2
    6.1.1
    6.1.0
    6.0.8
    6.0.7
    6.0.6
    6.0.5
    6.0.4
    6.0.3
    6.0.2
    6.0.1
    6.0.0
    5.5.0
    5.4.1
    5.4.0
    5.3.1
    5.3.0
    5.2.2
    5.2.1
    5.2.0
    5.1.2
    5.1.1
    5.1.0
    5.0.0
    4.3.4
    4.3.3
    4.3.2
    4.3.1
    4.3.0
    4.2.1
    4.2.0

    Maximum values for hardware appliances

    Maximum values for hardware appliances

    This section lists the maximum number of configuration objects per FortiAuthenticator appliance that can be added to the configuration database for different FortiAuthenticator hardware models.

    The maximum values in this document are the maximum configurable values and are not a commitment of performance.

    The following table describes the maximum values set for the various hardware models.

    Feature Model
    200E 400E 1000D 2000E 3000E
    System
    Network Static Routes 50 50 50 50 50
    Messages SMTP Servers 20 20 20 20 20
    SMS Gateways 20 20 20 20 20
    SNMP Hosts 20 20 20 20 20
    Administration Syslog Servers 20 20 20 20 20
    User Uploaded Images 39 114 514 1014 2014
    Language Files 50 50 50 50 50
    Realms 20 80 400 800 1600
    Authentication
    General Auth Clients (NAS) 166 666 3333 6666 13333
    Users
    (Local + Remote)1     		500 2000 10000 20000 40000
    User Radius Attributes 1500 6000 30000 60000 120000
    User Groups 50 200 1000 2000 4000
    Group Radius Attributes 150 150 600 6000 12000
    FortiTokens 1000 4000 20000 40000 80000
    FortiToken Mobile Licenses2 200 200 200 200 200
    LDAP Entries 1000 4000 20000 40000 80000
    Device (MAC-based Auth.) 2500 10000 50000 100000 200000
    RADIUS Client Profiles 500 2000 10000 20000 40000
    Remote LDAP Servers 20 80 400 800 1600
    Remote LDAP Users Sync Rule 50 200 1000 2000 4000
    Remote LDAP User Radius Attributes 1500 6000 30000 60000 120000
    FSSO & Dynamic Policies
    FSSO FSSO Users 500 2000 10000 20000 2000003
    FSSO Groups 250 1000 5000 10000 20000
    Domain Controllers 10 20 100 200 400
    RADIUS Accounting SSO Clients 166 666 3333 6666 13333
    FortiGate Services 50 200 1000 2000 4000
    FortiGate Group Filtering 250 1000 5000 10000 20000
    FSSO Tier Nodes 5 20 100 200 400
    IP Filtering Rules 250 1000 5000 10000 20000
    Accounting Proxy Sources 500 2000 10000 20000 40000
    Destinations 25 100 500 1000 2000
    Rulesets 25 100 500 1000 2000
    Certificates
    User Certificates User Certificates 2500 10000 50000 100000 200000
    Server Certificates 50 200 1000 2000 4000
    Certificate Authorities CA Certificates 10 10 50 50 50
    Trusted CA Certificates 200 200 200 200 200
    Certificate Revocation Lists 200 200 200 200 200
    SCEP Enrollment Requests 2500 10000 50000 100000 200000

    1 Note that Users is the only metric used for the number of allowed users. Local Users and Remote Users share the same limit value. This enables Local Users or Remote Users to be equal to Users or for there to be a mixture of user types, however, the total number of local and remote users cannot exceed the Users metric.

    2 FortiToken Mobile Licenses refers to the licenses that can be applied to a FortiAuthenticator, not the number of FortiToken Mobile instances that can be managed. The total number is limited by the FortiToken metric.

    3 For the 3000E, the total number of concurrent SSO users is set to a higher level to cater for large deployments.

    Previous
    Next

    Maximum values for hardware appliances

    Maximum values for hardware appliances

    This section lists the maximum number of configuration objects per FortiAuthenticator appliance that can be added to the configuration database for different FortiAuthenticator hardware models.

    The maximum values in this document are the maximum configurable values and are not a commitment of performance.

    The following table describes the maximum values set for the various hardware models.

    Feature Model
    200E 400E 1000D 2000E 3000E
    System
    Network Static Routes 50 50 50 50 50
    Messages SMTP Servers 20 20 20 20 20
    SMS Gateways 20 20 20 20 20
    SNMP Hosts 20 20 20 20 20
    Administration Syslog Servers 20 20 20 20 20
    User Uploaded Images 39 114 514 1014 2014
    Language Files 50 50 50 50 50
    Realms 20 80 400 800 1600
    Authentication
    General Auth Clients (NAS) 166 666 3333 6666 13333
    Users
    (Local + Remote)1     		500 2000 10000 20000 40000
    User Radius Attributes 1500 6000 30000 60000 120000
    User Groups 50 200 1000 2000 4000
    Group Radius Attributes 150 150 600 6000 12000
    FortiTokens 1000 4000 20000 40000 80000
    FortiToken Mobile Licenses2 200 200 200 200 200
    LDAP Entries 1000 4000 20000 40000 80000
    Device (MAC-based Auth.) 2500 10000 50000 100000 200000
    RADIUS Client Profiles 500 2000 10000 20000 40000
    Remote LDAP Servers 20 80 400 800 1600
    Remote LDAP Users Sync Rule 50 200 1000 2000 4000
    Remote LDAP User Radius Attributes 1500 6000 30000 60000 120000
    FSSO & Dynamic Policies
    FSSO FSSO Users 500 2000 10000 20000 2000003
    FSSO Groups 250 1000 5000 10000 20000
    Domain Controllers 10 20 100 200 400
    RADIUS Accounting SSO Clients 166 666 3333 6666 13333
    FortiGate Services 50 200 1000 2000 4000
    FortiGate Group Filtering 250 1000 5000 10000 20000
    FSSO Tier Nodes 5 20 100 200 400
    IP Filtering Rules 250 1000 5000 10000 20000
    Accounting Proxy Sources 500 2000 10000 20000 40000
    Destinations 25 100 500 1000 2000
    Rulesets 25 100 500 1000 2000
    Certificates
    User Certificates User Certificates 2500 10000 50000 100000 200000
    Server Certificates 50 200 1000 2000 4000
    Certificate Authorities CA Certificates 10 10 50 50 50
    Trusted CA Certificates 200 200 200 200 200
    Certificate Revocation Lists 200 200 200 200 200
    SCEP Enrollment Requests 2500 10000 50000 100000 200000

    1 Note that Users is the only metric used for the number of allowed users. Local Users and Remote Users share the same limit value. This enables Local Users or Remote Users to be equal to Users or for there to be a mixture of user types, however, the total number of local and remote users cannot exceed the Users metric.

    2 FortiToken Mobile Licenses refers to the licenses that can be applied to a FortiAuthenticator, not the number of FortiToken Mobile instances that can be managed. The total number is limited by the FortiToken metric.

    3 For the 3000E, the total number of concurrent SSO users is set to a higher level to cater for large deployments.

    Previous
    Next