FortiGate 60E end of life: replacement options, prices and support
Fortinet stopped selling the FortiGate-60E in December 2021 and ends support for it in December 2026. Five later variants (DSL, DSLJ, POE, LENC, USG) run on to dates between May 2027 and January 2029. The 60E is not on FortiOS 7.6's supported-models list, so its firmware stops at the 7.4 branch. The closest current Fortinet replacement is the FortiGate 70G; the 60F is still sold and is the cheaper like-for-like swap.
Lifecycle dates by variant
| Variant | End of Sale | Last Date of Support | Status on 2026-10-06 |
|---|---|---|---|
| FortiGate-60E | 2021-12 | 2026-12 | Support ends this quarter |
| FortiGate-60E-DSLJ, 60E-USG | 2022-05 | 2027-05 | Supported |
| FortiGate-60E-POE | 2022-10 | 2027-10 | Supported |
| FortiGate-60E-LENC | 2023-01 | 2028-01 | Supported |
| FortiGate-60E-DSL | 2023-05 | 2028-05 | Supported |
| FortiGate-60E-POE-USG | 2024-01 | 2029-01 | Supported |
Source: Fortinet hardware lifecycle feed, last verified 2026-10-05. Full part list: FortiGate 60E family page. The FortiGate 61E is tracked separately: its base model reached end of support in July 2026.
What the FortiGate 60E is
A fanless desktop next-generation firewall for a small office or branch, built on Fortinet's SoC3 processor. It runs FortiOS and handles firewall, IPsec and SSL VPN, SD-WAN and, with a FortiGuard subscription, IPS, antivirus, web filtering and application control.
| Specification | FortiGate 60E |
|---|---|
| Interfaces | 10 × GE RJ45: 2 WAN, 7 internal, 1 DMZ |
| Firewall throughput (1518 / 512 / 64 byte) | 3 / 3 / 3 Gbps |
| Concurrent sessions / new sessions per second | 1.3 million / 30,000 |
| Firewall policies | 5,000 |
| IPsec VPN throughput | 2 Gbps |
| SSL-VPN throughput / users | 150 Mbps / 100 |
| IPS throughput | 350 Mbps (enterprise mix) |
| NGFW / threat protection throughput | 250 Mbps / 180 Mbps |
| Managed FortiAPs (total / tunnel) | 10 / 5 |
| Size, weight, power | 38 × 216 × 160 mm, 0.9 kg, 11.7 W average / 14 W max |
Source: Fortinet datasheet "FortiGate/FortiWiFi 60E Series", revision FGFWF-60E-DAT-R3-201607. Fortinet no longer hosts it; a reseller copy is the one cited here. Some reseller pages quote 200 Mbps threat protection, which appears to come from a later revision.
What end of support means for this unit
- Support contracts stop. Fortinet's lifecycle policy says that after End of Support it "is under no obligation to provide support services", and that no service contract may be extended past that date. Contract extensions close earlier still: the Last Service Extension Date is 12 months before End of Support. For the base FortiGate-60E, with End of Support in December 2026, that point has passed.
- Firmware stops at FortiOS 7.4. The FortiOS 7.4.7 release notes list the FG-60E, 60E-DSL, 60E-DSLJ, 60E-POE and FG-61E as supported models. The FortiOS 7.6.4 supported-models list names none of them.
- The last firmware gets urgent fixes only. Under the same policy, the final firmware release for a hardware model stays in an urgent-fix phase (critical issues and medium, high and critical PSIRT vulnerabilities) until that model's End of Support, and FortiGuard updates are provided "for supported firmware releases only".
Source: Fortinet Product Lifecycle Policy, document 875-111 V3.00, June 2025. Fortinet distributes it through its support portal; the copy read for this page is attached to a public tender filing.
For a firewall, the subscription and firmware updates are the product. A 60E that still powers on but no longer receives FortiGuard signatures or security fixes is filtering traffic with rules that stop changing.
Options
| Your situation | Practical path |
|---|---|
| Fortinet shop, same office, want the least change | FortiGate 70G. Same FortiOS, same policy model, more headroom, current product |
| Tight budget, same feature set as today | FortiGate 60F. Cheapest current Fortinet unit with the same port count; check the SSL-VPN note below |
| Office growing, or heavy inspection of encrypted traffic | FortiGate 90G. Several times the 60E's inspection throughput, plus two 10G ports |
| Want cloud management and no on-box configuration | Cisco Meraki MX67 or MX68, with a mandatory licence |
| Want to stop paying a security subscription | Netgate 4200 running pfSense Plus |
| Replacement is budgeted but months away | Keep the 60E running with a spare unit and a spare power adapter on the shelf; see third-party maintenance below |
Avoid as a replacement: the FortiGate 70F (end of sale 2026-05, end of support 2031-05) and the SonicWall TZ270 and TZ470 (end of sale 2026-06). All three are already past end of sale.
Side-by-side specifications
| FortiGate 60E | FortiGate 60F | FortiGate 70G | FortiGate 90G | Meraki MX67 / MX68 | Netgate 2100 | Netgate 4200 | |
|---|---|---|---|---|---|---|---|
| Status | End of sale 2021-12 | Current | Current | Current | Current | Current | Current |
| Firewall throughput | 3 Gbps | 10 Gbps | 10 Gbps | 28 Gbps | 700 Mbps (stateful) | 964 Mbps (iperf3), 249 Mbps (IMIX) | 8.61 Gbps (iperf3), 3.21 Gbps (IMIX) |
| IPS | 350 Mbps | 1.4 Gbps | 2.5 Gbps | 4.5 Gbps | 400 Mbps (advanced security) | Snort / Suricata packages | Snort / Suricata packages |
| Threat protection | 180 Mbps | 700 Mbps | 1.3 Gbps | 2.2 Gbps | n/a | n/a | n/a |
| SSL inspection | 340 Mbps | 630 Mbps | 1.4 Gbps | 2.6 Gbps | n/a | n/a | n/a |
| IPsec VPN | 2 Gbps | 6.5 Gbps | 7.1 Gbps | 25 Gbps | 400 Mbps | 254 Mbps (iperf3) | 3.2 Gbps (iperf3) |
| SSL-VPN | Yes, 150 Mbps | Not on FortiOS 7.6.0+ | Not supported | n/a | n/a | n/a | n/a |
| Concurrent sessions | 1.3 M | 700,000 | 1.4 M | 3 M | Sized for 50 devices | n/a | n/a |
| Ports | 10 × GE | 10 × GE (2 WAN, 1 DMZ, 5 internal, 2 FortiLink) | 10 × GE (2 WAN, 6 LAN, 2 FortiLink) | 8 × GE + 2 × 10G RJ45/SFP+ shared | MX67: 5 × GE; MX68: 12 × GE incl. 2 PoE+ | 5 × GE (WAN is RJ45/SFP combo) | 4 × 2.5G |
| Managed FortiAPs | 10 | 64 | 96 | n/a | n/a | n/a | n/a |
| Power | 14 W max | 12.43 W max | 12.8 W max | n/a | 18 W (MX67) / 100 W (MX68) | n/a | n/a |
Sources: Fortinet datasheets for the 60F, 70G and 90G; Meraki MX67/MX68 datasheet; Netgate product pages for the 2100 and 4200. "n/a" means the vendor does not publish that figure. Each vendor measures differently: Fortinet quotes large-packet UDP, Netgate quotes iperf3 and IMIX, Meraki quotes a single figure. Compare within a vendor, not across vendors.
How each option compares with the 60E
- FortiGate 70G. Same: FortiOS, policy and object model, FortiGuard services, desktop fanless form factor, 10 copper ports, footprint (216 × 160 mm). Different: about 7× the IPS and threat-protection throughput, dedicated FortiLink ports for FortiSwitch, no SSL-VPN, no on-board storage (the 71G adds an SSD). The best fit for most 60E sites.
- FortiGate 60F. Same: FortiOS, form factor, 10 ports, the same AC adapter part. Different: roughly 4× the threat-protection throughput, fewer concurrent sessions (700,000 against 1.3 million) and fewer firewall policies (2,000 against 5,000). Check the policy count on the 60E before choosing it. SSL-VPN is not supported from FortiOS 7.6.0.
- FortiGate 90G. Same: FortiOS and the full feature set. Different: a much larger box in throughput terms, with two 10G ports. Worth the cost only if the site is growing or inspects a lot of HTTPS.
- Meraki MX67 / MX68. Same: desktop branch security appliance with SD-WAN, IPS and site-to-site VPN. Different: managed from the Meraki cloud dashboard; Fortinet's free FortiConverter licence covers FortiGate-to-FortiGate moves only, so plan to rebuild the configuration by hand; and a licence is mandatory: when a licence lapses past its grace period the appliance stops passing client traffic (Meraki licensing documentation). Meraki sizes both for up to 50 devices, smaller than the 60E's design point.
- Netgate 2100 / 4200 with pfSense Plus. Same: stateful firewall, IPsec, routing, multi-WAN. Different: no subscription required (Netgate states software updates are included for the life of the 4200), IPS through the free Snort or Suricata packages rather than a vendor-maintained service, a different configuration model with no automated conversion. The 2100's IMIX figures sit below a 60E; the 4200 is the closer match.
Migrating from a 60E
- Configuration conversion is free for FortiGate to FortiGate. Fortinet's FortiConverter offers a free opt-in licence for this case, requested from FortiConverter > Tickets > "Get free license". Only a target FortiGate without a licence can be selected (Fortinet documentation).
- Plan for SSL-VPN first. If remote users connect to the 60E with SSL-VPN, the 70G datasheet lists SSL-VPN as not supported, and the 60F datasheet marks it unsupported from FortiOS 7.6.0. Moving those users to IPsec VPN in FortiClient is part of the migration, not a follow-up. Check the 90G datasheet before relying on SSL-VPN there.
- Interface names change. The 60F, 70G and 90G add dedicated FortiLink ports, so check the interface mapping in the converted configuration before cutover.
- Budget for new subscriptions. FortiGuard and FortiCare are sold per model: the renewal and bundle part numbers below name the 70G (FC-10-GT70G, FG-70G-BDL). Buy the replacement as a bundle, or buy hardware only and add a subscription.
Where to buy, with prices
Snapshot taken 2026-10-06. Prices change; follow the link for today's figure.
| Item | Seller | Price | Notes |
|---|---|---|---|
| FortiGate 70G, hardware only (FG-70G) | DataCenter360 (Canada) | CAD 1,571.71 (list CAD 2,234.78) | New, in stock, FortiGuard sold separately |
| FortiGate 70G + 3 years FortiCare Premium and FortiGuard UTP (FG-70G-BDL-950-36) | DataCenter360 | CAD 3,667.44 (list CAD 5,214.64) | New |
| FortiGate 70G UTP renewal, 1 year (FC-10-GT70G-950-02-12) | DataCenter360 | CAD 919.71 | Subscription only |
| FortiGate 60F, hardware only (FG-60F) | DataCenter360 | CAD 1,007.22 (list CAD 1,416.41) | New, in stock |
| Netgate 2100 BASE | Netgate store | USD 599.00 | New, includes TAC Lite |
| Netgate 4200 MAX | Netgate store | USD 829.00 | New, includes TAC Lite |
| Meraki MX67-HW | NetworkTigers | Quote only | New, 365-day warranty; licence bought separately |
| FortiGate 60E, refurbished (spare unit) | Reboot IT (Australia) | AUD 109.00 (regular AUD 149.00) | Sold out at time of check, 12-month warranty |
| FortiGate 60E, refurbished (spare unit) | NetworkTigers | Quote only | Grade A, 365-day warranty, stated as registrable on FortiCloud |
When buying a used 60E as a spare, ask the seller to confirm it is registrable on FortiCloud, as NetworkTigers states for its units.
Spare parts
- AC power adapter, SP-FG60E-PDC-5 (pack of 5). Listed as fitting the FG/FWF 60E, 61E, 60F, 61F, 80E and 81E (Area9 listing; also stocked by Fleet Network and Ingram Technologies). The same part carries over if you move to a 60F.
- A whole spare unit. A refurbished 60E listed at AUD 109 costs less than one year of FortiGuard UTP for a 70G (CAD 919.71). It covers hardware failure only.
Third-party maintenance
The providers below describe hardware maintenance: replacing a failed unit. None of the pages cited here offers FortiGuard signature updates or FortiOS fixes, and under Fortinet's lifecycle policy those updates are delivered by Fortinet for supported firmware releases (checked 2026-10-06). For a firewall, that makes third-party maintenance a bridge to a replacement date rather than a way to keep the 60E in service long term. If a provider offers security updates, ask where they come from.
- Park Place Technologies publishes a FortiGate EOSL page and offers third-party hardware maintenance. The page does not list the 60E by name (checked 2026-10-06), so ask for it by part number.
- Procurri publishes a Fortinet end-of-service-life page covering hardware maintenance; it does not list individual models.
- Refurbished resellers such as NetworkTigers sell 60E units with a 365-day warranty, which is the simplest form of hardware cover for a unit that is being retired anyway.
Questions
Is the FortiGate 60E end of life?
Yes. It reached End of Sale in December 2021 and its Last Date of Support is December 2026, per Fortinet's hardware lifecycle feed. Later variants run to between May 2027 and January 2029.
Can the FortiGate 60E run FortiOS 7.6?
No. It is listed as supported in the FortiOS 7.4.7 release notes and absent from the 7.6.4 supported-models list.
What replaces the FortiGate 60E?
Among current Fortinet models, the 70G is the closest step up and the 60F is the lowest-cost like-for-like swap. Avoid the 70F, which reached End of Sale in May 2026.
Can I move my 60E configuration to a new FortiGate?
Yes. FortiConverter offers a free licence for FortiGate-to-FortiGate configuration migration. SSL-VPN users need moving to IPsec: the 70G datasheet lists SSL-VPN as not supported, and the 60F datasheet marks it unsupported from FortiOS 7.6.0.
Sources
- Fortinet hardware lifecycle RSS feed (lifecycle dates)
- FortiGate/FortiWiFi 60E Series datasheet, R3
- FortiGate 60F, 70G and 90G datasheets
- FortiOS 7.4.7 and 7.6.4 release notes, supported models
- Fortinet Product Lifecycle Policy, 875-111 V3.00, June 2025 (copy)
- FortiConverter free FortiGate-to-FortiGate migration licence
- Meraki MX67 and MX68 datasheet; Meraki licence compliance
- Netgate 2100 and 4200 product pages
Researched by EOSL.ai; specifications, prices and third-party pages checked Oct 6, 2026. Lifecycle dates come from the Fortinet FortiGate 60E record, which is re-verified against the vendor source every week. Prices change daily; follow each price's link for the current figure.