Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Maximum values for hardware appliances

The following table lists the maximum number of configuration objects per FortiAuthenticator appliance that can be added to the configuration database for different FortiAuthenticator hardware models.

Caution

The maximum values in this document are the maximum configurable values and are not a commitment of performance.

Feature

Model

 

 

200E

300F

400E

800F

1000D

2000E

3000E

System

 

Network

Static Routes

50

50

50

50

50

50

50

Messages

SMTP Servers

20

20

20

20

20

20

20

SMS Gateways

20

20

20

20

20

20

20

SNMP Hosts

20

20

20

20

20

20

20

Administration

Syslog Servers

20

20

20

20

20

20

20

User Uploaded Images

40

90

115

415

515

1015

2015

Language Files

50

50

50

50

50

50

50

Realms

20

60

80

320

400

800

1600

Authentication

 

General

Auth Clients (NAS)

166

500

666

2666

3333

6666

13333

 

Users
(Local + Remote)1

500

1500

2000

8000

10000

20000

40000

User RADIUS Attributes

1500

4500

6000

24000

30000

60000

120000

User Groups

50

150

200

800

1000

2000

4000

Group RADIUS Attributes

150

450

150

2400

600

6000

12000

FortiTokens

1000

3000

4000

16000

20000

40000

80000

FortiToken Mobile Licenses2

200

200

200

200

200

200

200

LDAP Entries

1000

3000

4000

16000

20000

40000

80000

Device (MAC-based Auth.)

2500

7500

10000

40000

50000

100000

200000

RADIUS Client Profiles

500

1500

2000

8000

10000

20000

40000

Remote LDAP Servers

20

60

80

320

400

800

1600

Remote LDAP Users Sync Rule

50

150

200

800

1000

2000

4000

Remote LDAP User Radius Attributes

1500

4500

6000

24000

30000

60000

120000

FSSO & Dynamic Policies

 

FSSO

FSSO Users

500

1500

2000

8000

10000

20000

2000003

FSSO Groups

250

750

1000

4000

5000

10000

20000

Domain Controllers

10

15

20

80

100

200

400

RADIUS Accounting SSO Clients

166

500

666

2666

3333

6666

13333

FortiGate Services

50

150

200

800

1000

2000

4000

FortiGate Group Filtering

250

750

1000

4000

5000

10000

20000

FSSO Tier Nodes

5

15

20

80

100

200

400

IP Filtering Rules

250

750

1000

4000

5000

10000

20000

Accounting Proxy

Sources

500

1500

2000

8000

10000

20000

40000

Destinations

25

75

100

400

500

1000

2000

Rulesets

25

75

100

400

500

1000

2000

Certificates

 

User Certificates

User Certificates

2500

7500

10000

40000

50000

100000

200000

Server Certificates

50

150

200

800

1000

2000

4000

Certificate Authorities

CA Certificates

10

10

10

50

50

50

50

Trusted CA Certificates

200

200

200

200

200

200

200

Certificate Revocation Lists

200

200

200

200

200

200

200

SCEP

Enrollment Requests

2500

7500

10000

40000

50000

100000

200000

1Users includes both local and remote users.

2     FortiToken Mobile Licenses refers to the licenses that can be applied to a FortiAuthenticator, not the number of FortiToken Mobile instances that can be managed. The total number is limited by the FortiToken metric.

3For the 3000E model, the total number of concurrent SSO users is set to a higher level to cater for large deployments.

Maximum values for hardware appliances

The following table lists the maximum number of configuration objects per FortiAuthenticator appliance that can be added to the configuration database for different FortiAuthenticator hardware models.

Caution

The maximum values in this document are the maximum configurable values and are not a commitment of performance.

Feature

Model

 

 

200E

300F

400E

800F

1000D

2000E

3000E

System

 

Network

Static Routes

50

50

50

50

50

50

50

Messages

SMTP Servers

20

20

20

20

20

20

20

SMS Gateways

20

20

20

20

20

20

20

SNMP Hosts

20

20

20

20

20

20

20

Administration

Syslog Servers

20

20

20

20

20

20

20

User Uploaded Images

40

90

115

415

515

1015

2015

Language Files

50

50

50

50

50

50

50

Realms

20

60

80

320

400

800

1600

Authentication

 

General

Auth Clients (NAS)

166

500

666

2666

3333

6666

13333

 

Users
(Local + Remote)1

500

1500

2000

8000

10000

20000

40000

User RADIUS Attributes

1500

4500

6000

24000

30000

60000

120000

User Groups

50

150

200

800

1000

2000

4000

Group RADIUS Attributes

150

450

150

2400

600

6000

12000

FortiTokens

1000

3000

4000

16000

20000

40000

80000

FortiToken Mobile Licenses2

200

200

200

200

200

200

200

LDAP Entries

1000

3000

4000

16000

20000

40000

80000

Device (MAC-based Auth.)

2500

7500

10000

40000

50000

100000

200000

RADIUS Client Profiles

500

1500

2000

8000

10000

20000

40000

Remote LDAP Servers

20

60

80

320

400

800

1600

Remote LDAP Users Sync Rule

50

150

200

800

1000

2000

4000

Remote LDAP User Radius Attributes

1500

4500

6000

24000

30000

60000

120000

FSSO & Dynamic Policies

 

FSSO

FSSO Users

500

1500

2000

8000

10000

20000

2000003

FSSO Groups

250

750

1000

4000

5000

10000

20000

Domain Controllers

10

15

20

80

100

200

400

RADIUS Accounting SSO Clients

166

500

666

2666

3333

6666

13333

FortiGate Services

50

150

200

800

1000

2000

4000

FortiGate Group Filtering

250

750

1000

4000

5000

10000

20000

FSSO Tier Nodes

5

15

20

80

100

200

400

IP Filtering Rules

250

750

1000

4000

5000

10000

20000

Accounting Proxy

Sources

500

1500

2000

8000

10000

20000

40000

Destinations

25

75

100

400

500

1000

2000

Rulesets

25

75

100

400

500

1000

2000

Certificates

 

User Certificates

User Certificates

2500

7500

10000

40000

50000

100000

200000

Server Certificates

50

150

200

800

1000

2000

4000

Certificate Authorities

CA Certificates

10

10

10

50

50

50

50

Trusted CA Certificates

200

200

200

200

200

200

200

Certificate Revocation Lists

200

200

200

200

200

200

200

SCEP

Enrollment Requests

2500

7500

10000

40000

50000

100000

200000

1Users includes both local and remote users.

2     FortiToken Mobile Licenses refers to the licenses that can be applied to a FortiAuthenticator, not the number of FortiToken Mobile instances that can be managed. The total number is limited by the FortiToken metric.

3For the 3000E model, the total number of concurrent SSO users is set to a higher level to cater for large deployments.