Maximum values for hardware appliances
The following table lists the maximum number of configuration objects per FortiAuthenticator appliance that can be added to the configuration database for different FortiAuthenticator hardware models.
The maximum values in this document are the maximum configurable values and are not a commitment of performance. |
Feature |
Model |
||||||||
---|---|---|---|---|---|---|---|---|---|
|
200E |
300F |
400E |
800F |
1000D |
2000E |
3000E |
||
System |
|
||||||||
Network |
Static Routes |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
|
Messages |
SMTP Servers |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
|
SMS Gateways |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
||
SNMP Hosts |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
||
Administration |
Syslog Servers |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
|
User Uploaded Images |
40 |
90 |
115 |
415 |
515 |
1015 |
2015 |
||
Language Files |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
||
Realms |
20 |
60 |
80 |
320 |
400 |
800 |
1600 |
||
Authentication |
|
||||||||
General |
Auth Clients (NAS) |
166 |
500 |
666 |
2666 |
3333 |
6666 |
13333 |
|
|
Users
|
500 |
1500 |
2000 |
8000 |
10000 |
20000 |
40000 |
|
User RADIUS Attributes |
1500 |
4500 |
6000 |
24000 |
30000 |
60000 |
120000 |
||
User Groups |
50 |
150 |
200 |
800 |
1000 |
2000 |
4000 |
||
Group RADIUS Attributes |
150 |
450 |
150 |
2400 |
600 |
6000 |
12000 |
||
FortiTokens |
1000 |
3000 |
4000 |
16000 |
20000 |
40000 |
80000 |
||
FortiToken Mobile Licenses2 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
||
LDAP Entries |
1000 |
3000 |
4000 |
16000 |
20000 |
40000 |
80000 |
||
Device (MAC-based Auth.) |
2500 |
7500 |
10000 |
40000 |
50000 |
100000 |
200000 |
||
RADIUS Client Profiles |
500 |
1500 |
2000 |
8000 |
10000 |
20000 |
40000 |
||
Remote LDAP Servers |
20 |
60 |
80 |
320 |
400 |
800 |
1600 |
||
Remote LDAP Users Sync Rule |
50 |
150 |
200 |
800 |
1000 |
2000 |
4000 |
||
Remote LDAP User Radius Attributes |
1500 |
4500 |
6000 |
24000 |
30000 |
60000 |
120000 |
||
FSSO & Dynamic Policies |
|
||||||||
FSSO |
FSSO Users |
500 |
1500 |
2000 |
8000 |
10000 |
20000 |
2000003 |
|
FSSO Groups |
250 |
750 |
1000 |
4000 |
5000 |
10000 |
20000 |
||
Domain Controllers |
10 |
15 |
20 |
80 |
100 |
200 |
400 |
||
RADIUS Accounting SSO Clients |
166 |
500 |
666 |
2666 |
3333 |
6666 |
13333 |
||
FortiGate Services |
50 |
150 |
200 |
800 |
1000 |
2000 |
4000 |
||
FortiGate Group Filtering |
250 |
750 |
1000 |
4000 |
5000 |
10000 |
20000 |
||
FSSO Tier Nodes |
5 |
15 |
20 |
80 |
100 |
200 |
400 |
||
IP Filtering Rules |
250 |
750 |
1000 |
4000 |
5000 |
10000 |
20000 |
||
Accounting Proxy |
Sources |
500 |
1500 |
2000 |
8000 |
10000 |
20000 |
40000 |
|
Destinations |
25 |
75 |
100 |
400 |
500 |
1000 |
2000 |
||
Rulesets |
25 |
75 |
100 |
400 |
500 |
1000 |
2000 |
||
Certificates |
|
||||||||
User Certificates |
User Certificates |
2500 |
7500 |
10000 |
40000 |
50000 |
100000 |
200000 |
|
Server Certificates |
50 |
150 |
200 |
800 |
1000 |
2000 |
4000 |
||
Certificate Authorities |
CA Certificates |
10 |
10 |
10 |
50 |
50 |
50 |
50 |
|
Trusted CA Certificates |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
||
Certificate Revocation Lists |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
||
SCEP |
Enrollment Requests |
2500 |
7500 |
10000 |
40000 |
50000 |
100000 |
200000 |
1Users includes both local and remote users.
2 FortiToken Mobile Licenses refers to the licenses that can be applied to a FortiAuthenticator, not the number of FortiToken Mobile instances that can be managed. The total number is limited by the FortiToken metric.
3For the 3000E model, the total number of concurrent SSO users is set to a higher level to cater for large deployments.