Fortinet black logo

Maximum values for hardware appliances

Maximum values for hardware appliances

The following table lists the maximum number of configuration objects per FortiAuthenticator appliance that can be added to the configuration database for different FortiAuthenticator hardware models.

Similar to the FortiAuthenticator-VM, the FortiAuthenticator hardware appliances permit stacking licenses.

Caution

The maximum values in this document are the maximum configurable values and are not a commitment of performance.

Feature

Model

200E

300F

400E

800F

2000E

3000E

3000F

System

Network

Static Routes

50

50

50

50

50

50

50

Messages

SMTP Servers

20

20

20

20

20

20

20

SMS Gateways

20

20

20

20

20

20

20

SNMP Hosts

20

20

20

20

20

20

20

Administration

Syslog Servers

20

20

20

20

20

20

20

User Uploaded Images

40

90

115

415

1015

2015

2015

Language Files

50

50

50

50

50

50

50

Realms

20

60

80

320

800

1600

1600

Authentication

General

Auth Clients (NAS)

166

500

666

2666

6666

13333

13333

Users
(Local + Remote)1

500

1500/3500*

2000

8000/18000*

20000

40000

40000/240000*

User RADIUS Attributes

1500

4500

6000

24000

60000

120000

120000

User Groups

50

150

200

800

2000

4000

4000

Group RADIUS Attributes

150

450

150

2400

6000

12000

12000

FortiTokens

1000

3000

4000

16000

40000

80000

80000

FortiToken Mobile Licenses2

200

200

200

200

200

200

200

LDAP Entries

1000

3000

4000

16000

40000

80000

80000

Device (MAC-based Auth.)

2500

7500

10000

40000

100000

200000

200000

RADIUS Client Profiles

500

1500

2000

8000

20000

40000

40000

Remote LDAP Users Sync Rule 50 150 200 800 2000 4000 4000
Remote LDAP User Radius Attributes 1500 4500 6000 24000 60000 120000 120000

Remote authentication servers

Remote LDAP Servers

20

60

80

320

800

1600

1600

Remote RADIUS Servers

20

60

80

320

800

1600

1600

Remote SAML Servers

20

60

80

320

800

1600

1600

Remote OAuth Servers

20

60

80

320

800

1600

1600

FSSO & Dynamic Policies

FSSO

FSSO Users

500

1500

2000

8000

20000

2000003

200000

FSSO Groups

250

750

1000

4000

10000

20000

20000

Domain Controllers

10

15

20

80

200

400

400

RADIUS Accounting SSO Clients

166

500

666

2666

6666

13333

13333

FortiGate Services

50

150

200

800

2000

4000

4000

FortiGate Group Filtering

250

750

1000

4000

10000

20000

20000

FSSO Tier Nodes

5

15

20

80

200

400

400

IP Filtering Rules

250

750

1000

4000

10000

20000

20000

Accounting Proxy

Sources

500

1500

2000

8000

20000

40000

40000

Destinations

25

75

100

400

1000

2000

2000

Rulesets

25

75

100

400

1000

2000

2000

Certificates

User Certificates

User Certificates

2500

7500

10000

40000

100000

200000

200000

Server Certificates

50

150

200

800

2000

4000

40000

Certificate Authorities

CA Certificates

10

10

10

50

50

50

50

Trusted CA Certificates

200

200

200

200

200

200

200

Certificate Revocation Lists

200

200

200

200

200

200

200

SCEP

Enrollment Requests

2500

7500

10000

40000

100000

200000

200000

1Users includes both local and remote users.

2 FortiToken Mobile Licenses refers to the licenses that can be applied to a FortiAuthenticator, not the number of FortiToken Mobile instances that can be managed. The total number is limited by the FortiToken metric.

3For the 3000E model, the total number of concurrent SSO users is set to a higher level to cater for large deployments.

* Upper limit

Maximum values for hardware appliances

The following table lists the maximum number of configuration objects per FortiAuthenticator appliance that can be added to the configuration database for different FortiAuthenticator hardware models.

Similar to the FortiAuthenticator-VM, the FortiAuthenticator hardware appliances permit stacking licenses.

Caution

The maximum values in this document are the maximum configurable values and are not a commitment of performance.

Feature

Model

200E

300F

400E

800F

2000E

3000E

3000F

System

Network

Static Routes

50

50

50

50

50

50

50

Messages

SMTP Servers

20

20

20

20

20

20

20

SMS Gateways

20

20

20

20

20

20

20

SNMP Hosts

20

20

20

20

20

20

20

Administration

Syslog Servers

20

20

20

20

20

20

20

User Uploaded Images

40

90

115

415

1015

2015

2015

Language Files

50

50

50

50

50

50

50

Realms

20

60

80

320

800

1600

1600

Authentication

General

Auth Clients (NAS)

166

500

666

2666

6666

13333

13333

Users
(Local + Remote)1

500

1500/3500*

2000

8000/18000*

20000

40000

40000/240000*

User RADIUS Attributes

1500

4500

6000

24000

60000

120000

120000

User Groups

50

150

200

800

2000

4000

4000

Group RADIUS Attributes

150

450

150

2400

6000

12000

12000

FortiTokens

1000

3000

4000

16000

40000

80000

80000

FortiToken Mobile Licenses2

200

200

200

200

200

200

200

LDAP Entries

1000

3000

4000

16000

40000

80000

80000

Device (MAC-based Auth.)

2500

7500

10000

40000

100000

200000

200000

RADIUS Client Profiles

500

1500

2000

8000

20000

40000

40000

Remote LDAP Users Sync Rule 50 150 200 800 2000 4000 4000
Remote LDAP User Radius Attributes 1500 4500 6000 24000 60000 120000 120000

Remote authentication servers

Remote LDAP Servers

20

60

80

320

800

1600

1600

Remote RADIUS Servers

20

60

80

320

800

1600

1600

Remote SAML Servers

20

60

80

320

800

1600

1600

Remote OAuth Servers

20

60

80

320

800

1600

1600

FSSO & Dynamic Policies

FSSO

FSSO Users

500

1500

2000

8000

20000

2000003

200000

FSSO Groups

250

750

1000

4000

10000

20000

20000

Domain Controllers

10

15

20

80

200

400

400

RADIUS Accounting SSO Clients

166

500

666

2666

6666

13333

13333

FortiGate Services

50

150

200

800

2000

4000

4000

FortiGate Group Filtering

250

750

1000

4000

10000

20000

20000

FSSO Tier Nodes

5

15

20

80

200

400

400

IP Filtering Rules

250

750

1000

4000

10000

20000

20000

Accounting Proxy

Sources

500

1500

2000

8000

20000

40000

40000

Destinations

25

75

100

400

1000

2000

2000

Rulesets

25

75

100

400

1000

2000

2000

Certificates

User Certificates

User Certificates

2500

7500

10000

40000

100000

200000

200000

Server Certificates

50

150

200

800

2000

4000

40000

Certificate Authorities

CA Certificates

10

10

10

50

50

50

50

Trusted CA Certificates

200

200

200

200

200

200

200

Certificate Revocation Lists

200

200

200

200

200

200

200

SCEP

Enrollment Requests

2500

7500

10000

40000

100000

200000

200000

1Users includes both local and remote users.

2 FortiToken Mobile Licenses refers to the licenses that can be applied to a FortiAuthenticator, not the number of FortiToken Mobile instances that can be managed. The total number is limited by the FortiToken metric.

3For the 3000E model, the total number of concurrent SSO users is set to a higher level to cater for large deployments.

* Upper limit