Maximum values for hardware appliances

The following table lists the maximum number of configuration objects per FortiAuthenticator appliance that can be added to the configuration database for different FortiAuthenticator hardware models.

Similar to the FortiAuthenticator-VM, the FortiAuthenticator hardware appliances permit stacking licenses.

The maximum values in this document are the maximum configurable values and are not a commitment of performance.

Feature		Model
		200E	300F	400E	800F	1000D	2000E	3000E	3000F
System
Network	Static Routes	50	50	50	50	50	50	50	50
Messages	SMTP Servers	20	20	20	20	20	20	20	20
	SMS Gateways	20	20	20	20	20	20	20	20
	SNMP Hosts	20	20	20	20	20	20	20	20
Administration	Syslog Servers	20	20	20	20	20	20	20	20
	User Uploaded Images	40	90	115	415	515	1015	2015	2015
	Language Files	50	50	50	50	50	50	50	50
Realms		20	60	80	320	400	800	1600	1600
Authentication
General	Auth Clients (NAS)	166	500	666	2666	3333	6666	13333	13333
	Users (Local + Remote)1	500	1500/3500*	2000	8000/18000*	10000	20000	40000	40000/240000*
	User RADIUS Attributes	1500	4500	6000	24000	30000	60000	120000	120000
	User Groups	50	150	200	800	1000	2000	4000	4000
	Group RADIUS Attributes	150	450	150	2400	600	6000	12000	12000
	FortiTokens	1000	3000	4000	16000	20000	40000	80000	80000
	FortiToken Mobile Licenses2	200	200	200	200	200	200	200	200
	LDAP Entries	1000	3000	4000	16000	20000	40000	80000	80000
	Device (MAC-based Auth.)	2500	7500	10000	40000	50000	100000	200000	200000
	RADIUS Client Profiles	500	1500	2000	8000	10000	20000	40000	40000
	Remote LDAP Users Sync Rule	50	150	200	800	1000	2000	4000	4000
	Remote LDAP User Radius Attributes	1500	4500	6000	24000	30000	60000	120000	120000
Remote authentication servers	Remote LDAP Servers	20	60	80	320	400	800	1600	1600
	Remote RADIUS Servers	20	60	80	320	400	800	1600	1600
	Remote SAML Servers	20	60	80	320	400	800	1600	1600
	Remote OAuth Servers	20	60	80	320	400	800	1600	1600
FSSO & Dynamic Policies
FSSO	FSSO Users	500	1500	2000	8000	10000	20000	200000³	200000
	FSSO Groups	250	750	1000	4000	5000	10000	20000	20000
	Domain Controllers	10	15	20	80	100	200	400	400
	RADIUS Accounting SSO Clients	166	500	666	2666	3333	6666	13333	13333
	FortiGate Services	50	150	200	800	1000	2000	4000	4000
	FortiGate Group Filtering	250	750	1000	4000	5000	10000	20000	20000
	FSSO Tier Nodes	5	15	20	80	100	200	400	400
	IP Filtering Rules	250	750	1000	4000	5000	10000	20000	20000
Accounting Proxy	Sources	500	1500	2000	8000	10000	20000	40000	40000
	Destinations	25	75	100	400	500	1000	2000	2000
	Rulesets	25	75	100	400	500	1000	2000	2000
Certificates
User Certificates	User Certificates	2500	7500	10000	40000	50000	100000	200000	200000
User Certificates	Server Certificates	50	150	200	800	1000	2000	4000	40000
Certificate Authorities	CA Certificates	10	10	10	50	50	50	50	50
	Trusted CA Certificates	200	200	200	200	200	200	200	200
	Certificate Revocation Lists	200	200	200	200	200	200	200	200
SCEP	Enrollment Requests	2500	7500	10000	40000	50000	100000	200000	200000

1Users includes both local and remote users.

2 FortiToken Mobile Licenses refers to the licenses that can be applied to a FortiAuthenticator, not the number of FortiToken Mobile instances that can be managed. The total number is limited by the FortiToken metric.

3For the 3000E model, the total number of concurrent SSO users is set to a higher level to cater for large deployments.

* Upper limit

Maximum values for hardware appliances

Similar to the FortiAuthenticator-VM, the FortiAuthenticator hardware appliances permit stacking licenses.

The maximum values in this document are the maximum configurable values and are not a commitment of performance.

Feature		Model
		200E	300F	400E	800F	1000D	2000E	3000E	3000F
System
Network	Static Routes	50	50	50	50	50	50	50	50
Messages	SMTP Servers	20	20	20	20	20	20	20	20
	SMS Gateways	20	20	20	20	20	20	20	20
	SNMP Hosts	20	20	20	20	20	20	20	20
Administration	Syslog Servers	20	20	20	20	20	20	20	20
	User Uploaded Images	40	90	115	415	515	1015	2015	2015
	Language Files	50	50	50	50	50	50	50	50
Realms		20	60	80	320	400	800	1600	1600
Authentication
General	Auth Clients (NAS)	166	500	666	2666	3333	6666	13333	13333
	Users (Local + Remote)1	500	1500/3500*	2000	8000/18000*	10000	20000	40000	40000/240000*
	User RADIUS Attributes	1500	4500	6000	24000	30000	60000	120000	120000
	User Groups	50	150	200	800	1000	2000	4000	4000
	Group RADIUS Attributes	150	450	150	2400	600	6000	12000	12000
	FortiTokens	1000	3000	4000	16000	20000	40000	80000	80000
	FortiToken Mobile Licenses2	200	200	200	200	200	200	200	200
	LDAP Entries	1000	3000	4000	16000	20000	40000	80000	80000
	Device (MAC-based Auth.)	2500	7500	10000	40000	50000	100000	200000	200000
	RADIUS Client Profiles	500	1500	2000	8000	10000	20000	40000	40000
	Remote LDAP Users Sync Rule	50	150	200	800	1000	2000	4000	4000
	Remote LDAP User Radius Attributes	1500	4500	6000	24000	30000	60000	120000	120000
Remote authentication servers	Remote LDAP Servers	20	60	80	320	400	800	1600	1600
	Remote RADIUS Servers	20	60	80	320	400	800	1600	1600
	Remote SAML Servers	20	60	80	320	400	800	1600	1600
	Remote OAuth Servers	20	60	80	320	400	800	1600	1600
FSSO & Dynamic Policies
FSSO	FSSO Users	500	1500	2000	8000	10000	20000	200000³	200000
	FSSO Groups	250	750	1000	4000	5000	10000	20000	20000
	Domain Controllers	10	15	20	80	100	200	400	400
	RADIUS Accounting SSO Clients	166	500	666	2666	3333	6666	13333	13333
	FortiGate Services	50	150	200	800	1000	2000	4000	4000
	FortiGate Group Filtering	250	750	1000	4000	5000	10000	20000	20000
	FSSO Tier Nodes	5	15	20	80	100	200	400	400
	IP Filtering Rules	250	750	1000	4000	5000	10000	20000	20000
Accounting Proxy	Sources	500	1500	2000	8000	10000	20000	40000	40000
	Destinations	25	75	100	400	500	1000	2000	2000
	Rulesets	25	75	100	400	500	1000	2000	2000
Certificates
User Certificates	User Certificates	2500	7500	10000	40000	50000	100000	200000	200000
User Certificates	Server Certificates	50	150	200	800	1000	2000	4000	40000
Certificate Authorities	CA Certificates	10	10	10	50	50	50	50	50
	Trusted CA Certificates	200	200	200	200	200	200	200	200
	Certificate Revocation Lists	200	200	200	200	200	200	200	200
SCEP	Enrollment Requests	2500	7500	10000	40000	50000	100000	200000	200000

1Users includes both local and remote users.

3For the 3000E model, the total number of concurrent SSO users is set to a higher level to cater for large deployments.

* Upper limit

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

Release Notes

Maximum values for hardware appliances

Maximum values for hardware appliances

Maximum values for hardware appliances

Maximum values for hardware appliances