Fortinet FDD-3000G | FortiDDoS 3000G DDoS Protection Appliance, 200 Gbps, 100GE

Authorised Fortinet Partner

SKU:FDD-3000G

Stock Status: Enquire

Request Quote

Sale Stock Status: Enquire

Shipping calculated at checkout.

Description

The FortiDDoS 3000G is a 2RU DDoS protection appliance that uses machine-learning-based, signature-free detection to inspect 100% of packets across Layers 3, 4 and 7. This SKU provides 4 port-pairs of DDoS defence ports (2x 100GE QSFP28 and 2x 10GE SFP+), 85 Gbps of inspected throughput and up to 200 Gbps / 300 Mpps of mitigation capacity, with a 1.92 TB SSD and 2-link single-mode passive optical bypass.

Attacks are mitigated autonomously with no operator intervention, with some stopped on the first packet and all within one second. The appliance covers DNS, NTP, DTLS, QUIC and IKE reflection and anomaly protection, supports IPv4 and IPv6, and integrates with hybrid on-premise and cloud mitigation through an open Attack Signaling API. Dual redundant hot-swappable AC power supplies and high availability support suit carrier, data centre and large enterprise deployments.

Features

- 100% machine-learning detection with no signature files or threat-protection subscriptions required
- Massively parallel architecture inspects 100% of Layer 3, 4 and 7 packets, even the smallest packets
- Autonomous mitigation with no operator intervention, all attacks mitigated within one second
- Continuous attack evaluation to minimise false positives
- Advanced DNS protection with 100% bidirectional inspection and NTP reflection protection
- DTLS, QUIC and IKE reflection and anomaly protection
- Monitors more than 10,000 UDP reflection ports, blocking the attacking port rather than all UDP
- Adaptive baselines built through continuous learning of normal traffic behaviour
- Hybrid on-premise and cloud mitigation via open Attack Signaling API and Flowspec script generation
- Full IPv4/IPv6 support, L3-L7 IP-inside-GRE inspection and IPSec site-to-site protection
- RESTful API, SNMP v2/v3, syslog to FortiAnalyzer/FortiSIEM, RADIUS/LDAP/TACACS+ authentication
- Extensive attack logging, forensic reporting and graphs
- High availability support and invisible in the data path with no MAC or IP addresses on data ports

Warranty

Fortinet provides robust warranty coverage for its hardware and software products, with durations and terms based on product category:
• Hardware Warranty: All Fortinet hardware products come with a 1-year (365 days) limited warranty from the Warranty Start Date, covering material defects in workmanship when compared to the published Functional Specifications.
• Software Warranty: Fortinet software is warranted for 90 days from the Warranty Start Date. An exception is FortiToken, which carries a 1-year warranty.
• Limited Lifetime Warranty Products:
Some products are covered by extended terms:
o FortiAP and FortiSwitch (excluding FortiSwitch-5000 series) include a limited lifetime warranty valid for 5 years beyond the product’s announced end-of-life date.
o FortiSwitch-5000 series is covered under the standard 1-year hardware warranty.
Extended Warranty Options:
IP Trading offers extended warranty solutions and ongoing FortiCare support services for Fortinet hardware. Contact our team to customise a support package that matches your operational needs.
https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf

All technical data should be verified on the manufacturer data sheets.

View full details

specs-tabs

Technical Specifications

FAQs

Datasheet

Technical Specifications

- 4 port-pairs DDoS defence ports: 2x 100GE QSFP28 (40GE QSFP+ also supported) and 2x 10GE SFP+ (10GE only)
- Passive optical bypass: 8 ports (2 links), 10/40/100 GE, 1310nm / 1550nm single-mode
- Maximum inspected throughput: 85 Gbps / 104 Mpps
- Maximum mitigation: 200 Gbps / 300 Mpps using ML-driven dynamic SmartNIC ACLs
- SYN flood mitigation: 51 Mpps
- Simultaneous TCP connections: 64M, simultaneous sources: 16M
- DNS / NTP queries per second: 8M / 8M
- Latency: below 70 µs
- Attack mitigation response time: first packet to under 1 second
- Storage: 1x 1.92 TB SSD
- Form factor: 2RU appliance, 88 x 438 x 600 mm, 14.6 kg
- Power: dual redundant hot-swappable AC supplies, 100-240V AC, 462 W average / 653 W maximum
- Airflow: front to back
- Operating temperature: 0 to 40 C
- Certifications: FCC Class A Part 15, UL/CB/cUL, RCM, VCCI, CE

FAQs

Q: What port configuration does the FortiDDoS 3000G provide?
A: It provides 4 port-pairs of DDoS defence ports: 2 pairs of 100GE QSFP28 (40GE QSFP+ also supported) and 2 pairs of 10GE SFP+, which are 10GE only.

Q: Does the FortiDDoS 3000G include optical bypass?
A: Yes. It includes passive optical bypass across 8 ports (2 links) supporting 10/40/100 GE over single-mode fibre at 1310nm / 1550nm, keeping traffic flowing if the appliance loses power.

Q: What throughput and mitigation capacity does it deliver?
A: It inspects up to 85 Gbps / 104 Mpps and mitigates up to 200 Gbps / 300 Mpps using ML-driven dynamic SmartNIC ACLs, with latency below 70 µs.

Q: Does it need signature updates or a threat subscription to mitigate DDoS attacks?
A: No. Detection is machine-learning-based and signature-free. Optional FortiGuard IP Reputation and DNS Domain Reputation subscriptions are available but are not required for DDoS mitigation.

Q: Can it be deployed alongside cloud-based DDoS mitigation?
A: Yes. The open Attack Signaling API and Flowspec script generation support hybrid on-premise and cloud mitigation for volumetric attacks that exceed local capacity.

Q: Is the power supply redundant?
A: Yes. The 2RU appliance has dual redundant hot-swappable AC power supplies accepting 100-240V AC at 50-60Hz.

Datasheet

This product has a detailed PDF datasheet available. Open PDF datasheet in a new tab .

Popular Products

CAT6A Ethernet Patch Cable | UTP | 28AWG | LSZH | 0.25M to 10M

OM4 Multimode Fibre Optic Cable | Duplex LC to LC | LSZH Aqua | 0.25 to 10 Meter

Juniper AP45-WW | Mist AP45 Wi-Fi 6E Access Point, 4x4:4, WW, Internal Antenna

Fortinet FG-60F | Entry-Level Firewall, 10x GE RJ45, 1 Gbps NGFW

ATEN CL3108NX-ATA-AU | 8-Port VGA LCD KVM Switch, 18.5in, Short Depth

APC SMX1500RMI2U | Smart-UPS X Rack/Tower UPS, 1500VA, 230V, 8x C13, LCD

Jabra 23189-999-779 | Evolve2 30 SE MS Teams Wired Stereo Headset, USB-C/USB-A

Eaton 5SX3000RAU | 5SX 3000VA Rack/Tower UPS, 2U, 2700W, 16A Input

Aruba R7J38A | AP-655 Wi-Fi 6E Tri-Radio Access Point, 4x4:4, Internal Antennas

Item added to your cart

Fortinet FDD-3000G | FortiDDoS 3000G DDoS Protection Appliance, 200 Gbps, 100GE