The hardware, processors, and throughput specs are identical on both models. The only difference is that the 61F includes a 128 GB internal SSD. That storage enables on-box logging, local quarantine of threat files, and extended FortiGuard intelligence retention without a separate FortiAnalyzer or cloud logging subscription. If you need local logs for compliance or do not have a log management appliance in your stack, the 61F is worth the small price difference.

Fortinet rates the 60F and 61F for environments with approximately 25 to 75 concurrent users. The practical limit depends more on your traffic mix than raw headcount. A site with heavy video conferencing or large file transfers will approach the threat protection ceiling (700 Mbps) well before the firewall throughput ceiling (10 Gbps). If your internet circuit runs above 500 Mbps and you enable full UTM inspection, talk to one of our engineers before purchasing so we can confirm the fit.

Yes. Fortinet's SD-WAN capability is built directly into FortiOS and is active on every FortiGate at no extra license cost. The 60F and 61F support multi-WAN failover, performance-based routing, and application-aware traffic steering across up to 10 GE RJ45 interfaces, with no separate SD-WAN subscription required.

The appliance ships with a base FortiCare support contract. To enable IPS, antivirus, web filtering, DNS filtering, and application control you need a FortiGuard bundle. Fortinet offers three tiers for this platform: UTM (core threat services), ATP (adds sandbox and extended detection), and Enterprise Protection (full stack including OT and IoT signatures). All three are available in 1, 3, and 5-year terms. Firewalls.com can quote any bundle alongside the hardware in one line item.

Yes, through two main paths. FortiGate Cloud is Fortinet's SaaS management portal and works without any additional on-premise hardware. FortiManager is the on-premise centralized management platform, better suited for multi-site deployments or organizations that need policy versioning and staged rollouts. Both handle configuration, policy deployment, and firmware management across all registered FortiGate units. The 61F also supports on-box reporting through its internal SSD, so you can run basic reports without FortiAnalyzer.