Академический Документы
Профессиональный Документы
Культура Документы
Maximum
Values Matrix
Version 4.0 MR1
Technical Note
Revision history
Revision history
Version
Date
Description of changes
FortiOS v2.50
Release 2
9 March 2004
Release 3
5 May 2004
Release 4
17 August 2004
Release 5
5 November 2004
Release 6
25 February 2005
Release 7
08 April 2005
Release 8
12 May 2005
Release 9
4 October 2005
Release 10
26 October 2005
Release 11
28 April 2006
Release 12
19 June 2006
Release 13
29 September 2006
Release 14
29 December 2006
Release 15
08 February 2007
Release 16
11 April 2007
Release 17
15 June 2007
Release 18
15 January 2008
Release 19
15 May 2008
Revision history
Version
Date
Description of changes
Release 20
26 August 2008
Release 21
4 March 2009
Release 22
15 April 2009
Release 23
22 May 2009
Release 24
29 July 2009
Release 25
10 September 2009
Release 26
3 November 2009
Release 27
11 November 2009
Release 28
12 November 2009
Release 29
17 November 2009
Release 30
23 November 2009
Release 31
2 February 2010
30B
All 50 and 60
models
All 80 models
100A
200A, 200B,
224B
200B
300A
310B, 311B
400A
500A
620B
800
800F
1000A
1000FA2
1240B
3600,3600A
3016B, 3810A
5000 Series
FortiGate Model
256
256
256
4096
4096
4096
4096
8192
4096
8192
8192
8192
8192
8192
8192
8192
Transparent mode:
Interfaces (VLAN +
physical) per VDOM
255
255
255
255
255
255
255
255
255
255
255
255
255
255
255
255
Secondary IP addresses
per interface
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
Feature
System
Interface
IPv6 tunnels
Zones
20
20
20
20
50
50
50
50
100
100
100
200
100
200
500
500
500
Zone interfaces
DHCP
32
32
32
32
32
32
32
32
32
32
32
32
32
16
16
16
16
16
16
16
16
16
16
16
16
16
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
Communities
Community hosts
Accounts
300
300
300
300
300
300
300
300
300
300
300
300
300
300
300
300
550
Access profiles
16
16
16
16
16
16
16
64
16
64
64
64
64
Session-helper
32
32
32
32
32
32
32
256
256
256
256
256
256
256
256
256
256
Session-TTL ports
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
VDOM link
* * VDOM links are interfaces. See maximum values for system interfaces. * *
GRE tunnel
* * GRE tunnels are interfaces. See maximum values for system interfaces. * *
200
200
200
200
200
200
200
200
1024
200
200
200
1024
200
8192
8192
8192
ARP proxy
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
30B
All 50 and 60
models
All 80 models
100A
200A, 200B,
224B
200B
300A
310B, 311B
400A
500A
620B
800
800F
1000A
1000FA2
1240B
3600,3600A
3016B, 3810A
5000 Series
FortiGate Model
TOS-based priority
16
16
16
16
16
16
16
16
16
16
16
16
16
16
16
16
16
Static
Static routes
100
100
100
100
500
500
500
500
500
500
500
10000
500
10000
10000
10000
10000
Static6
500
500
500
500
500
500
500
500
500
500
500
500
500
Policy
Policy routes
16
16
16
16
100
100
100
100
250
100
100
250
250
250
250
250
250
Feature
Router (NAT mode)
Access-list
Prefix-list
Key-chain
BGP
Entries
n/a
32
32
32
100
100
20
100
100
100
100
100
100
100
100
100
100
n/a
20
20
20
20
20
100
20
20
20
20
20
20
20
20
20
20
Entries
n/a
32
32
32
100
100
20
100
100
100
100
100
100
100
100
100
100
n/a
20
20
20
20
20
16
20
20
20
20
20
20
20
20
20
20
Entries
n/a
16
16
16
16
16
16
16
16
16
16
100
16
100
100
100
100
n/a
20
20
20
20
20
20
20
20
20
20
20
20
20
20
20
20
Confederation- peers
n/a
* * No set limit * *
Aggregate-addresses
n/a
* * No set limit * *
100
100
100
100
100
100
Neighbors
n/a
* * No set limit * *
Networks
n/a
* * No set limit * *
n/a
100
100
100
100
100
100
100
Authentication paths
RIP
100
100
100
* * No set limit * *
Networks
n/a
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
Distribute lists
n/a
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
Neighbors
n/a
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
Offset lists
n/a
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
Distances
n/a
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
Passive interfaces
n/a
256
256
256
300
300
300
300
300
300
300
300
300
300
300
300
300
Interfaces
n/a
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
n/a
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
Route
3600,3600A
3016B, 3810A
5000 Series
10
10
10
10
10
800
800F
10
620B
500A
400A
310B, 311B
300A
200B
200A, 200B,
224B
100A
1240B
OSPF
n/a
1000A
1000FA2
Areas
Feature
All 80 models
30B
FortiGate Model
All 50 and 60
models
* * No set limit * *
Range of areas
n/a
* * No set limit * *
Virtual links
n/a
* * No set limit * *
Filter lists
n/a
* * No set limit * *
Interfaces
n/a
Networks
n/a
Neighbors
n/a
* * No set limit * *
10
10
10
10
10
10
10
10
10
10
Passive interfaces
n/a
Summary addresses
n/a
10
10
10
10
10
10
10
10
* * No set limit * *
10
10
10
10
10
10
10
10
Distribute lists
n/a
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
n/a
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
Map
n/a
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
Map rule
n/a
20
20
20
20
20
20
20
20
20
20
20
20
20
20
20
20
VDOM
200
200
500
1000
5000
2000M
8000
5000
20000
5000
20000
50000
20000
50000
50000
50000
50000
1600
10000
40000
10000
40000
100000
40000
100000
10000
100000
100000
100
100
100
100
100
100
100
100
100
100
100
Firewall
Policies
Unit
User groups per
identity-based policy
IPv6
policies
Addresses
IPv6
addresses
100
100
100
10000 4000
100
100
100
64
64
64
64
64
64
64
64
64
64
64
64
64
64
64
64
64
VDOM
200
200
500
1000
2000
2000
2000
5000
20000
5000
20000
50000
20000
50000
50000
50000
50000
4000
4000
4000
10000
40000
10000
40000
100000
40000
100000
10000
100000
100000
64
64
64
64
128
64
128
128
128
128
256
256
256
Unit
Multicast policies
Load
balancing
monitor
* * No set limit * *
* * No set limit * *
32
32
32
32
DNS translations
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
VDOM
n/a
256
256
256
256
256
256
256
256
256
256
256
256
256
512
512
512
Unit
n/a
VDOM
500
* * No set limit * *
500
Unit
VDOM
Unit
500
500
1000
1000
* * No set limit * *
500
500
500
500
* * No set limit * *
1000
1000
1000
3000
6000
3000
6000
10000
6000
10000
10000
10000
10000
1000
6000
12000
6000
12000
20000
12000
20000
20000
20000
20000
1000
3000
6000
3000
6000
10000
6000
10000
10000
10000
10000
1000
6000
12000
6000
12000
20000
12000
20000
20000
20000
20000
30B
All 50 and 60
models
All 80 models
100A
200A, 200B,
224B
200B
300A
310B, 311B
400A
500A
620B
800
800F
1000A
1000FA2
1240B
3600,3600A
3016B, 3810A
5000 Series
FortiGate Model
Groups/VDOM
500
500
500
500
500
500
500
500
500
500
500
4096
500
4096
4096
4096
4096
Groups/Unit
2500
2500
2500
2500
2500
2500
2500
2500
2500
2500
2500
10000
2500
10000
10000
10000
10000
300
300
300
300
300
300
300
300
300
300
300
300
300
300
300
300
300
Feature
Address
group
IPv6 address
group
Service
Service group
Schedules
Virtual IP
Load Balance
Groups/VDOM
500
500
500
500
500
500
500
500
500
500
500
4096
500
4096
4096
4096
4096
Groups/Unit
2500
2500
2500
2500
2500
2500
2500
2500
2500
2500
2500
10000
2500
10000
10000
10000
10000
Predefined services
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
Custom services
1024
1024
1024
1024
1024
1024
1024
1024
1024
1024
1024
1024
1024
1024
4096
4096
4096
Groups
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
300
300
300
300
300
300
300
300
300
300
300
300
300
300
300
300
300
One-time
256
256
256
256
256
256
256
256
256
256
256
256
256
256
256
256
256
Recurring
256
256
256
256
256
256
256
256
256
256
256
256
256
256
256
256
256
Virtual IPs
500
500
500
500
500
500
500
500
2048
500
500
8196
500
8196K
10000
10000D
10000B
VIP groups
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
1024
1024
1024
Virtual servers
n/a
1Q
500
500
500
500
500
500
8196
500
8196K
10000
10000
10000J
n/a
16
16
16
32
IP pools
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
256
256
256
256
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
Protection profiles
32
32
32
32
32
32
32
32
500
32
500
500
500
500
500
500
500
Traffic Shapers
n/a
32
32
32
32
32
32
32
500
32
500
500
500
500
500
500
500
20
20
20
20
20
20
20
20
20
20
20
20
20
20
20
20
20
10
10
10
10
10
10
10
10
10
10
10
1000
1000
1000
2000
2000
2000
32000
32000
50000
32000
32000
50000
50000
5000
250000
250000
250000
UTM
AntiVirus
File pattern list entries per 20000 20000 20000 32000 32000 32000
VDOM
Intrusion
Protection
IPS sensors
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
256
256
256
256
256
256
256
256
256
256
256
256
256
256
256
256
256
30B
All 50 and 60
models
All 80 models
100A
200A, 200B,
224B
200B
300A
310B, 311B
400A
500A
620B
800
800F
1000A
1000FA2
1240B
3600,3600A
3016B, 3810A
5000 Series
FortiGate Model
10
10
10
10
10
10
10
10
1000
10
10
1000
1000
1000
2000
2000
2000
Feature
Web content lists
Web content list entries per 20000 20000 20000 32000 32000 32000
VDOM
URL filter lists
10
10
10
10
10
10
URL filter list entries per 20000 20000 20000 32000 32000 32000
VDOM
Web Filter
32000
50000
32000
32000
50000
50000
50000
250000
250000
25000
10
10
1000
10
10
1000
1000
1000
2000
2000
2000
20000
32000
50000
32000
32000
50000
50000
50000
250000
250000
25000
100
100
1000
4000
4000
4000
4000
4000
10000
4000
10000
10000
10000
10000
10000
10000
20000
52
52
52
52
52
52
52
52
52
52
52
52
52
52
52
52
52
1000
1000
2000
12000
12000
12000
12000
12000
12000
12000
12000
12000
12000
12000
10
10
50
200
200
200
200
200
400
200
400
400
400
400
400
400
500
10
10
60
200
200
200
200
200
400
200
400
400
400
400
400
400
500
10
10
10
10
10
10
10
10
1000
10
10
1000
1000
1000
2000
2000
2000
32000
32000
50000
32000
32000
50000
50000
50000
250000
250000
250000
10
10
1000
10
10
1000
1000
1000
2000
2000
2000
32000
32000
50000
32000
32000
50000
50000
50000
250000
250000
250000
10
10
1000
10
10
1000
1000
1000
2000
2000
2000
32000
32000
50000
32000
32000
50000
50000
50000
250000
250000
250000
10
10
1000
10
10
1000
1000
1000
2000
2000
2000
32000
32000
50000
32000
32000
50000
50000
50000
250000
250000
250000
10
10
1000
10
10
1000
1000
1000
2000
2000
2000
32000
32000
50000
32000
32000
50000
50000
50000
250000
250000
250000
10
10
1000
10
10
1000
1000
1000
2000
2000
2000
32000
32000
50000
32000
32000
50000
50000
50000
250000
250000
250000
10
10
10
10
10
10
AntiSpam
32000
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
All 80 models
200B
300A
310B, 311B
400A
500A
620B
800
800F
1000A
1000FA2
1240B
3600,3600A
3016B, 3810A
5000 Series
512
512
1000
16384
16384
16384
16384
16384
16384
16384
16384
16384
16384
16384
Data Leak
Prevention
Application
Control
200A, 200B,
224B
All 50 and 60
models
Feature
100A
30B
FortiGate Model
512
512
1000
32768
32768
32768
32768
32768
32768
32768
32768
32768
32768
32768
512
512
1000
16384
16384
16384
16384
16384
16384
16384
16384
16384
16384
16384
512
512
1000
32768
32768
32768
32768
32768
32768
32768
32768
32768
32768
32768
25000
25000
25000
25000
32000
32000
32000
16
16
16
16
16
16
16384
16
50000
16
16
50000
50000
50000
64000
64000
64000
32
32
32
32
32
32
256
32
32
32
32
32
32
32
32
32
32
Local
200
200
200
200
200
200
200
500
500
500
500
500
500
500
1000
1000
1000
CA
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
CRL
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
200
20
200L
80
1500
200P
2000
1500
3000
3000
3000
5000
3000
5000
5000
5000
5000
3000
6000
3000
6000
10000
6000
10000
1000
10000
10000
VPN
Certificate
* * No set limit * *
Phase1 interface
Phase2 per VDOM
20
200L
80
1500
200P
Phase2 interface
Manual-keys per VDOM
2000
* * No set limit * *
1500
3000
3000
3000
5000
3000
5000
5000
5000
5000
3000
6000
3000
6000
10000
6000
10000
1000
10000
10000
20
50
80
200
200P
2000
* * No set limit * *
Manual-keys interface
1500
3000
1500
3000
5000
3000
5000
5000
5000
5000
3000
6000
3000
6000
10000
6000
10000
1000
10000
10000
Concentrators
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
500
10
40
100
160
300
300
300
300
300
300
300
300
300
300
300
300
300
Local
Local users
20
20
500
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
5000
5000
5000
Radius
Servers
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
LDAP
Servers
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
TACACS+
Servers
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
Windows AD
256
256
256
256
256
256
256
256
1024
1024
1024
1024
1024
1024
1024
1024
1024
User
10
30B
All 50 and 60
models
All 80 models
100A
200A, 200B,
224B
200B
300A
310B, 311B
400A
500A
620B
800
800F
1000A
1000FA2
1240B
3600,3600A
3016B, 3810A
5000 Series
FortiGate Model
User groups
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
Feature
User Group
350
350
350
350
350
350
350
350
350
350
350
350
350
350
350
350
350
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
32
AIM users
20
20
500
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
ICQ users
20
20
500
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
IM Users
MSN users
20
20
500
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
Yahoo users
20
20
500
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
1000
Rules
n/a
n/a
n/a
n/a
64E
n/a
64
n/a
128F
n/a
n/a
128
n/a
n/a
256
256G
256H
SSL servers
n/a
n/a
n/a
n/a
64E
n/a
64
n/a
128F
n/a
n/a
128
n/a
n/a
256
256G
256H
n/a
32
n/a
64F
n/a
n/a
64
n/a
n/a
128
128G
128H
WAN Optimization
Rule
Peer
Authentication groups
n/a
n/a
n/a
n/a
32E
Peers
n/a
n/a
n/a
n/a
64E
n/a
64
n/a
128F
n/a
n/a
128
n/a
n/a
256
256G
256H
50
50
50
50
50
50
50
50
50
50
50
50
50
50
50
50
50
Logging
The FortiGate-30B does not have VLAN or VDOM support. Only the three physical interfaces
(Internal, External, Modem) are available.
FortiGate-5001FA2 value=4096
FortiGate-1000A value=500
FortiGate-200B value=8000
FortiGate-5001A value=5000
FortiGate-200B value=16000
FortiGate-3600 value=4096
FortiGate-200B value=2000
FortiGate-82C value=3
WAN optimization is supported on the FGT-3600A, FGT-3016B, and FGT-3810A, but not on the
FGT-3600.
H
WAN optimization is supported on the FGT-5001A-SW, but not on any other 5000-series FortiGate
units.
11
12
www.fortinet.com
www.fortinet.com