FortiSwitch

Why do you need FortiSwitch?

73% of attacks exploit lateral movement in LAN. Traditional switches are commodity - they pass traffic without security inspection. Separate management for switching and security creates silos and visibility gaps.

FortiSwitch is Ethernet switches with native Security Fabric integration. Managed directly by FortiGate, they implement security policies at port level. Zero additional licenses for basic switching and security features.

How does it work?

FortiLink Integration

FortiGate as controller:

• Automatic switch discovery
• Centralized configuration from FortiGate
• Security policy enforcement on ports
• Unified management interface
• Firmware management

Security Fabric Visibility

Full network visibility:

• Device identification per port
• Traffic inspection through FortiGate
• IOC correlation
• Anomaly detection
• Quarantine capability

Zero-Touch Provisioning

Simplified deployment:

• Switch connected to network
• Automatic registration with FortiGate
• Configuration push
• Ready to work in minutes
• FortiCloud optional

Key Features

Network Access Control

• 802.1X authentication
• MAC authentication bypass
• Guest VLAN
• FortiNAC integration
• Dynamic VLAN assignment

Segmentation

• VLAN isolation
• Private VLAN
• Microsegmentation with FortiGate
• Traffic quarantine
• East-west control

High Availability

• FortiLink stacking
• Multi-Chassis LAG (MCLAG)
• STP/RSTP/MSTP
• Hitless failover
• Single IP management

Power over Ethernet

• 802.3af PoE (15.4W)
• 802.3at PoE+ (30W)
• 802.3bt PoE++ (60W/90W)
• Power budgeting
• Per-port management

FortiSwitch Portfolio

Access Layer:

Series	Ports	PoE	Use Case
108F	8x GE	PoE+	Small office
124F	24x GE	PoE+	Branch
148F	48x GE	PoE+	Campus
248E	48x GE + 4x 10G	PoE+	Enterprise

Distribution/Aggregation:

• 424E/448E - 24/48 GE + 10G uplinks
• 524D/548D - 10G switches

Data Center:

• 1024E/1048E - 10G + 40G
• 3032E - 40G/100G spine

Who is it for?

• Organizations with FortiGate seeking unified network + security
• Enterprises needing microsegmentation
• Companies deploying Wi-Fi 6E/7 with PoE++
• IT teams wanting simplified management

Benefits

For IT: Single pane of glass with FortiGate, ZTP deployment, no extra licenses

For security: Security policy enforcement, traffic visibility, NAC integration

For business: Reduced OpEx, faster deployment, unified vendor

Specifications

Management	FortiGate (FortiLink), standalone
PoE	Up to PoE++ (90W)
Stacking	Virtual stacking, MCLAG
Security	802.1X, FortiNAC, VLAN

FAQ

Does FortiSwitch require separate controller? No. FortiGate manages FortiSwitch through FortiLink without additional software.

Which models have PoE++? F-series with PoE++ (802.3bt) up to 90W per port for demanding devices.

How does FortiLink work? Proprietary protocol connecting FortiGate with FortiSwitch. Automatic discovery, centralized config, policy push.

Can I use it without FortiGate? Yes. Standalone mode with CLI/GUI/SNMP. But you lose Security Fabric benefits.

How does stacking work? Virtual stacking through FortiLink. MCLAG for physical redundancy without dedicated stacking cables.

How many switches can FortiGate manage? Depending on FortiGate model - from dozens to hundreds of switches.

Does FortiSwitch integrate with FortiNAC? Yes. Dynamic VLAN assignment, MAC auth bypass, device profiling, quarantine.

What uplinks in access models? Typically 4x SFP+ (10G) in 24/48 port models for aggregation.

Are outdoor/industrial models available? Yes. Rugged series for harsh environments.

How does support work? Fortinet 24/7 TAC. nFlo as partner offers network design and switching deployment.