Fortinet FortiGate Rugged 60F (FGR-60F)

Fortinet FortiGate Rugged 60F (FGR-60F)
Security Grade A- Calculator v	Fortinet FortiGate Rugged 60F Brand: Fortinet Category: Router • Model / Gen: FGR-60F Release Date: 2020-12-02 • Status: Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Vendor warns about physical disruption and console/boot access. Rugged environmental ratings are not proof of tamper resistance; Rare is qualitative, not a measured incident rate.
Known vulnerabilities	Rare	🔗 Proof	Historical FortiOS vulnerability: CVE-2024-21762 includes 7.4.0–7.4.2. Do not attribute that affected range to the assessed 7.6.6 build.
Prior attacks	Rare	🔗 Proof	CISA confirms active exploitation of CVE-2024-21762 in vulnerable FortiOS deployments. This is platform history, not a forensic incident on this individual FGR-60F.
Updatability	Very common	🔗 Proof	FGR-60F appears explicitly in FortiOS 7.6.6 support. Update capability is documented; no fixed patch cadence is promised.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Peer-certificate and EAP checks are available but configuration-dependent. Partial does not claim mandatory mutual authentication for every external integration.
Communications	Encrypted with up-to-date encryption	🔗 Proof	Assessed management profile: HTTPS with TLS 1.2/1.3. This does not mean every forwarded packet or optional protocol is encrypted.
Storage	Encrypted with up-to-date encryption	🔗 Proof	Scope: private configuration secrets, with AES-128 encryption and an operator-controlled key enabled. NOT whole-flash encryption or encryption of every log.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	Administrator profiles separate read, write and denied permissions; super-admin controls other accounts. The assessed profile uses least-privilege accounts.
Authentication	Secure	🔗 Proof	Password-plus-FortiToken MFA is enabled in the assessed profile. It is a configurable capability, not a universal factory-default guarantee.
Brute-force protection	Exist	🔗 Proof	Documented administrator lockout defaults: 3 failed attempts, 60 seconds. Settings are configurable; retained in this documentation-based profile.
Event logging	Access event logged	🔗 Proof	Vendor examples record successful and failed administrator access with account, method and outcome. Retention and durable storage depend on deployment.
Passwords	Require change after setup with complexity requirements	🔗 Proof	FortiOS 7.6.5+ enforces 12 characters plus upper/lowercase, digit and special character. Noncompliant passwords require change before login; this profile retains enforcement.
Category Score	Score: 1 / 3

Technical Specifications

Property	Details
Operating System & App	FortiOS (assessment baseline: 7.6.6) (Companion App: )
Hardware (CPU / GPU)	CPU: Fortinet SoC4 / SD-WAN ASIC • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: 12–125 V DC; redundant dual inputs • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: Wired Ethernet; base FGR-60F, not the LTE variant
Physical (Dimensions & Mass)	Dimensions: 42.7 × 216 × 170 mm (H × W × D) • Mass: 1.75 kg

Documentation-based assessment of the base FGR-60F, using a declared FortiOS 7.6.6 configuration profile: HTTPS/TLS administration, administrator MFA, operator-key private-data encryption, login lockout, access-event logging and the default-enforced password policy. No physical appliance, firmware image or network traffic was tested. These are documented configured capabilities, not guarantees about every factory-default or deployed unit. Storage scope is private configuration secrets; no whole-flash encryption or encryption of every log is claimed. Historical CVE and active-exploitation evidence applies to the cited older FortiOS versions, not automatically to build 7.6.6 or an individually observed FGR-60F. None/Rare/Very common are qualitative classifications, not measured incident rates. The software baseline is documented and model-compatible, not a claim that it is the latest recommended patch. Release date denotes the manufacturer's public launch on 2020-12-02, not a verified first retail-delivery day. Hardware metadata refers only to base FGR-60F, not FGR-60F-3G4G. Rugged environmental protection is not assumed to mean tamper resistance. SSL VPN is not claimed for the assessed 7.6.6 version. Optional fields without verified data, including current sales status, are left blank.