FortiSwitch with FortiGate: Is Centralised Network Security Worth It for UK SMEs?

As small and medium-sized businesses grow, their networks become more complex. More employees, wireless access points, IP phones, CCTV cameras, printers and connected devices create additional demands on network performance, administration and security.

Managing a firewall and network switches separately can make troubleshooting and policy management more time-consuming. Fortinet addresses this challenge with an integrated networking approach that combines a FortiGate next-generation firewall with compatible FortiSwitch managed Ethernet switches through FortiLink.

This integration allows businesses to manage supported switching functions, monitor connected devices and coordinate network access policies through a central interface. For organisations already using FortiGate, this can make network administration more straightforward.

However, is a FortiSwitch with FortiGate worth the investment for a UK SME, or would a standalone managed switch be sufficient? The answer depends on the business's security requirements, existing infrastructure, technical resources and plans for future growth.

In this guide, we examine how FortiLink works, the practical benefits of integration, VLANs, PoE, network visibility, advantages, disadvantages and limitations to help businesses make an informed purchasing decision.

1. What Is FortiSwitch and How Does It Work with FortiGate?

FortiSwitch is Fortinet's family of managed Ethernet switches designed for business networks. These switches connect computers, access points, IP phones, printers, cameras and other wired devices to the local network.

FortiGate is Fortinet's next-generation firewall platform. It provides network security capabilities such as firewall policies, traffic inspection, VPN connectivity and other security services, depending on the model and configuration.

When compatible FortiSwitch hardware is connected to a FortiGate using FortiLink, the firewall can manage supported switching functions through a central interface. This integrates network access management with the wider Fortinet Security Fabric.

1.1. What Is FortiLink?

FortiLink is Fortinet's proprietary management protocol for connecting compatible FortiSwitch switches to a FortiGate firewall. It enables the firewall to discover, authorise and manage supported switches, reducing the need to configure each device independently.

Through the FortiGate management interface, administrators can configure supported switch ports, manage VLANs, monitor connected devices and work with network access policies.

For example, an IT administrator setting up a new office may be able to manage the firewall and compatible switches through the same interface instead of maintaining separate management workflows for each device.

1.2. What Happens When FortiSwitch Is Managed by FortiGate?

In a typical FortiLink deployment, the administrator connects the compatible switch to the FortiGate, establishes the FortiLink connection, discovers and authorises the switch, and then configures the supported switching features.

1. Connect: Connect the FortiSwitch to the designated FortiLink interface or supported connection topology.
2. Discover: Allow the FortiGate to discover the compatible switch.
3. Authorise: Approve the switch for management.
4. Configure: Set up VLANs, switch ports, PoE settings and other supported functions.
5. Monitor: Review connected devices and network status through the management interface.

The exact process depends on the FortiGate model, FortiOS version, FortiSwitch model and network topology. Compatibility should be checked before deployment.

2. FortiSwitch with FortiGate: Key Features Explained

2.1. Centralised Network Management

One of the main reasons to pair a FortiSwitch with a FortiGate is to manage supported firewall and switching functions through a common interface.

Without integration, administrators may need to access the switch's separate management interface to configure ports, review its status or change network settings. FortiLink brings many supported switching tasks into the FortiGate management workflow.

This can be especially useful for businesses with multiple switches or branch offices where consistent configuration and easier troubleshooting are important.

2.2. Network Visibility and Connected-Device Monitoring

Businesses need to know which devices are connected to their networks. Unidentified or poorly documented devices can make troubleshooting difficult and complicate security management.

When supported FortiSwitch and FortiGate features are configured, administrators can obtain information about connected devices and their network connections through the central management interface.

This can help IT teams identify connected equipment, investigate connectivity problems and apply appropriate access policies.

However, visibility is not the same as complete threat detection. The information available depends on the device, configuration, software versions and enabled security features.

2.3. VLANs and Network Segmentation

A Virtual Local Area Network (VLAN) allows a business to separate devices into logical network groups, even when they share the same physical switching infrastructure.

For example, an office might configure separate VLANs for:

• Employee computers and laptops.
• Guest Wi-Fi users.
• IP phones and voice systems.
• CCTV cameras and other IoT equipment.
• Printers and shared office devices.

When FortiSwitch is managed through FortiLink, supported VLANs can be integrated with FortiGate interfaces and firewall security policies. This can help administrators control communication between network segments.

For instance, a business may want guest devices to access the internet without being able to connect to internal file servers. VLANs help establish the separation, while appropriately configured firewall policies enforce the intended restrictions.

2.4. Power over Ethernet (PoE and PoE+)

Power over Ethernet allows compatible network devices to receive electrical power and data over the same Ethernet cable. Selected FortiSwitch models support PoE, PoE+ or other PoE standards, depending on the hardware.

PoE-enabled FortiSwitch models can power compatible equipment such as:

• Wireless access points.
• IP phones.
• Compatible CCTV cameras.
• Other supported Ethernet-powered devices.

For a growing business, PoE can simplify installation by reducing the need for separate power adapters and electrical outlets near connected devices.

When managed through FortiGate, supported PoE settings and power budgets can also be monitored or configured through the central interface.

2.5. Network Access Control (NAC)

Network Access Control helps businesses decide which devices can connect to particular network resources and under what conditions.

Depending on the supported FortiLink configuration and enabled features, administrators can use device information, segmentation and access policies to manage network access. This is particularly useful when employee devices, guest equipment and IoT devices share the same infrastructure.

For example, a business may want to place an unfamiliar device into a restricted network segment rather than immediately allowing it access to sensitive business systems.

Advanced authentication and NAC requirements should be checked against the selected FortiGate and FortiSwitch models, software versions and deployment design.

2.6. Traffic Management and Switching Performance

FortiSwitch models support different switching capacities, port speeds, uplink options and Layer 2 or Layer 3 capabilities. These differences determine how well a particular switch fits a business's network design.

Features such as VLANs, Quality of Service (QoS), link aggregation and supported routing functions can help administrators organise traffic and use network resources more effectively.

However, integration with FortiGate does not automatically increase a switch's physical switching capacity. Businesses should check the exact model's throughput, port speeds and uplink specifications against their requirements.

3. How FortiSwitch and FortiGate Work Together

The following example shows how the two devices can work together in a typical small business network.

Example: A Growing UK Office

Imagine an office with 30 employees, several wireless access points, IP phones, printers and CCTV cameras. The business wants to separate employee and guest traffic, monitor connected equipment and simplify network administration.

1. FortiGate firewall: Handles internet connectivity, firewall policies and supported security inspection.
2. FortiSwitch: Connects the wired devices and forwards traffic within the local network.
3. FortiLink: Provides the management connection between the compatible switch and firewall.
4. VLAN configuration: Separates employee, guest and IoT traffic into appropriate network segments.
5. Security policies: Control permitted traffic between VLANs and other network interfaces.
6. Monitoring: Helps administrators review connected devices and troubleshoot network issues.

This arrangement can give the business a more consistent way to manage its network. The result still depends on correct configuration, suitable hardware and properly maintained security policies.

4. What Are the Main Benefits for UK SMEs?

4.1. Less Administrative Complexity

Managing a firewall and multiple switches through separate interfaces can increase administrative effort. FortiLink reduces this separation by bringing supported switching management into the FortiGate interface.

For businesses with small IT teams, fewer separate management workflows can make routine configuration and troubleshooting more manageable.

4.2. More Consistent Security Policies

Network security becomes harder to maintain when devices and departments are connected without a clear segmentation strategy.

FortiSwitch and FortiGate integration can help businesses connect VLAN configuration with firewall policies. This makes it easier to implement a consistent approach to controlling traffic between network segments.

For example, an organisation can allow staff to access approved internal applications while restricting guest devices from reaching sensitive resources.

4.3. Better Visibility of Wired Devices

A central view of connected devices can help administrators understand which equipment is connected, where it is connected and which network segment it uses.

This information can be useful when investigating connection failures, identifying unfamiliar equipment or reviewing changes to the office network.

4.4. Easier Deployment of Additional Switches

As a business expands into additional rooms or offices, it may need more switches and network ports. FortiLink supports discovery and central management of compatible FortiSwitch devices.

This can simplify expansion compared with manually maintaining separate configurations for each switch, although larger deployments still require proper network planning and change management.

4.5. Simplified PoE Management

PoE-enabled FortiSwitch models can power compatible access points, phones and cameras over Ethernet. Supported PoE monitoring and controls can also be managed through FortiGate.

This combination can help businesses monitor available power capacity and troubleshoot powered devices from a more centralised location.

4.6. A More Integrated Security Architecture

Fortinet's Security Fabric approach connects supported networking and security products to provide a more coordinated view of the environment.

For businesses already using FortiGate, choosing compatible FortiSwitch hardware can reduce the need to introduce a separate switching-management ecosystem. This may simplify operations, particularly when network segmentation and device visibility are priorities.

5. Advantages of FortiSwitch with FortiGate

5.1. One Main Management Interface

Supported firewall and switching functions can be administered through the FortiGate interface, reducing the need to switch between separate management systems for routine tasks.

5.2. Integrated VLAN and Firewall Policy Workflows

Network segments can be connected to FortiGate interfaces and security policies, helping administrators define how devices in different parts of the network communicate.

5.3. Useful for Businesses with Limited IT Resources

A business with a small IT team may benefit from simplified switch discovery, centralised configuration and a common troubleshooting workflow.

5.4. Options for Different Network Sizes

FortiSwitch includes models for small offices, branch locations and larger deployments, with different port counts, uplink speeds and PoE capabilities. This allows businesses to select hardware based on their current requirements.

5.5. Suitable for Networks with PoE Devices

Selected models can power compatible access points, phones and cameras, helping reduce separate power requirements and simplifying cable installation.

5.6. Potentially Lower Management Overhead

When a business already uses FortiGate, integrating its switches may reduce duplicated administration and make configuration more consistent. The actual savings depend on network size, staff experience and deployment complexity.

6. Disadvantages and Limitations to Consider

Although FortiSwitch and FortiGate integration offers practical advantages, it also introduces dependencies and requirements that businesses should understand before investing.

6.1. Greater Dependence on the Fortinet Ecosystem

FortiLink management is designed around Fortinet's compatible products and supported software versions. A business choosing this architecture should plan around the compatibility and lifecycle of its FortiGate and FortiSwitch hardware.

This may be less attractive to organisations that prefer to mix switching, firewall and network-management products from different vendors.

6.2. Configuration Can Still Require Networking Knowledge

Centralised management simplifies certain tasks, but it does not remove the need for network planning. VLANs, firewall policies, routing, link aggregation and PoE budgets must still be configured correctly.

Incorrect policies can block legitimate business traffic or expose resources that should be restricted. Complex deployments may require an experienced network administrator or professional installation support.

6.3. Compatibility Must Be Verified

Not every FortiSwitch model works with every FortiGate model or software release in every management configuration. Supported features can also vary between hardware models and FortiOS versions.

Before purchasing, verify the compatibility matrix and confirm that the selected devices support the intended FortiLink deployment.

6.4. The Firewall Can Become a Critical Dependency

In a FortiLink-managed design, the FortiGate provides the management point for connected switches. If the firewall or FortiLink connection experiences a problem, switch management and traffic handling may be affected depending on the topology and failure.

Existing switched traffic may continue to operate in some failure scenarios, but businesses should not assume that every service will remain available. The outcome depends on the network design and configuration.

Organisations that need high availability should evaluate redundant firewall configurations, switch redundancy, uplink design and recovery procedures.

6.5. The Hardware Investment May Be Higher Than Necessary

A standalone managed switch from another vendor may provide sufficient VLAN, QoS and monitoring features at a lower purchase price for a simple network.

If a business does not need FortiLink, integrated device visibility or a common management workflow, paying for a tightly integrated ecosystem may not provide enough additional value.

6.6. Advanced Features May Depend on the Exact Model

FortiSwitch products differ in switching capacity, PoE power, port speeds, uplink types, routing capabilities and redundancy support.

A business should not assume that every FortiSwitch offers the same features. Confirm the exact part number and supported functions before selecting a model.

6.7. Centralised Management Does Not Automatically Guarantee Security

Connecting a FortiSwitch to a FortiGate does not automatically eliminate security risks. Effective protection still depends on correctly configured policies, firmware maintenance, appropriate access controls, monitoring and secure administrative practices.

Network visibility can help identify devices, but visibility alone does not guarantee that a compromised device will be detected or blocked.

7. FortiSwitch with FortiGate vs a Standalone Managed Switch

A standalone managed switch can provide VLANs, traffic management and local configuration without relying on FortiLink. The best choice depends on whether the business values integration with its firewall more than vendor flexibility or a potentially lower initial cost.

Consideration	FortiSwitch with FortiGate	Standalone Managed Switch
Management	Centralised through FortiGate when using FortiLink	Usually managed through its own interface or platform
Firewall policy integration	Supported integration with FortiGate	Depends on the vendor and network design
VLAN support	Supported; can be integrated with FortiGate interfaces and policies	Available on most business-class managed switches
Device visibility	Can provide integrated visibility through supported Fortinet features	Depends on the switch and management platform
PoE	Available on selected models	Available on selected models
Vendor flexibility	Best suited to a Fortinet-centred design	May offer more flexibility across vendors
Initial cost	Depends on switch, firewall and required services	May be lower for simpler requirements
Best fit	Businesses prioritising integrated management and security workflows	Businesses needing managed switching without deep firewall integration

This is a general comparison. Features, costs and management options vary by model and vendor.

8. When Is FortiSwitch with FortiGate Worth It?

8.1. Businesses Already Using FortiGate

If your business already uses a FortiGate firewall, a compatible FortiSwitch can extend the same management approach to the wired network. This can be particularly useful when the IT team wants a consistent method for configuring VLANs, managing ports and reviewing connected devices.

8.2. Offices with Guest, Employee and IoT Networks

Businesses that need to separate employees, visitors, cameras, phones and other connected devices can benefit from integrating switch VLANs with firewall policies.

For example, a hotel, retail store or professional office may need guest internet access while restricting access to internal business systems.

8.3. Businesses Using Multiple PoE Devices

Organisations deploying wireless access points, IP phones and compatible cameras may benefit from PoE switching and centralised management of supported power functions.

8.4. Businesses with Multiple Switches or Branches

As a network expands, separate switch configurations can become harder to maintain. Centralised management can help standardise configurations and simplify routine administration across supported devices.

9. When Is a Standalone Managed Switch Sufficient?

FortiLink integration is not essential for every business. A standalone managed switch may be a sensible choice when the network has straightforward requirements and does not need the additional integration.

9.1. Small Offices with Basic Requirements

If the business needs a limited number of ports, basic VLANs and standard traffic management, a standalone managed switch may provide everything required.

9.2. Businesses with an Existing Multi-Vendor Network

Organisations already using network-management tools from another vendor may prefer to retain their existing infrastructure rather than introduce a Fortinet-centred switching architecture.

9.3. Cost-Sensitive Deployments

When the main requirement is reliable Ethernet connectivity and basic managed-switch features, the additional value of FortiLink may not justify the cost difference.

9.4. Networks That Do Not Need Integrated Device Policies

If the business has limited segmentation requirements and does not need centralised device visibility, a suitable standalone switch can be simpler and more cost-effective.

10. How to Choose the Right FortiSwitch for Your Business

Choosing the correct FortiSwitch requires more than counting Ethernet ports. The switch should match the number of connected devices, PoE requirements, uplink capacity and the intended management architecture.

10.1. Calculate Your Port Requirements

Count computers, printers, access points, phones, cameras, servers and uplinks. Allow some spare capacity for future devices, but avoid paying for ports the business is unlikely to use.

10.2. Check the PoE Power Budget

For a PoE deployment, add the expected power requirements of all powered devices. Compare the total with the switch's supported PoE budget and allow reasonable headroom for expansion.

10.3. Confirm Uplink Speed

Check whether the switch needs Gigabit, 10GbE or another uplink configuration. Ensure that the selected transceivers, cables and connected equipment are compatible.

10.4. Verify FortiGate and FortiSwitch Compatibility

Check the Fortinet compatibility documentation for the selected FortiGate, FortiSwitch and software versions. Confirm that the required FortiLink and management features are supported.

10.5. Plan Network Segmentation Before Installation

Identify which devices should communicate with each other and which should be restricted. Create a VLAN and firewall-policy plan before connecting business-critical devices.

10.6. Consider Resilience and Support

For business-critical networks, consider what happens if the firewall, switch or uplink fails. Check available redundancy options, support requirements, warranty terms and firmware-maintenance procedures.

11. Is FortiSwitch with FortiGate Cost-Effective for UK SMEs?

The value of FortiSwitch integration should be assessed against the total cost of the network, not just the price of the switch.

Businesses should consider the following costs:

• FortiSwitch hardware and the required FortiGate firewall.
• PoE-capable models and their required power budgets.
• Compatible uplink cables and optical transceivers.
• Installation, configuration and network testing.
• Support, warranty and optional security-service subscriptions.
• Future expansion, maintenance and potential downtime.

11.1. Where the Value Comes From

The main potential savings come from reduced administrative effort, consistent configuration and easier troubleshooting. Businesses already using FortiGate may gain additional value from managing supported switching and security functions through a familiar interface.

11.2. Where Costs Can Increase

The overall investment may be higher if the business needs to purchase a new FortiGate, upgrade existing hardware or obtain professional configuration support. Optional support and security services may also affect recurring costs.

Do not assume that every Fortinet feature is included in every product or service plan. Check the current licensing and support terms for the proposed configuration.

11.3. A Practical Buying Decision

If integrated security management is a priority and the business already uses FortiGate, FortiSwitch may offer meaningful operational value. If the network only needs basic managed switching, compare the total cost and capabilities of standalone alternatives before committing.

Explore the available Fortinet switches at StackLink UK to compare suitable models for your network requirements.

12. Frequently Asked Questions

Can FortiSwitch work without a FortiGate firewall?

Yes. Supported FortiSwitch models can operate in standalone mode and be managed through their own management interface. FortiLink management and its integrated workflows require a compatible FortiGate deployment.

What is the main benefit of FortiLink?

FortiLink allows compatible FortiSwitch devices to be managed through a FortiGate firewall, bringing supported switching configuration, device visibility and network access functions into a central management workflow.

Does FortiSwitch with FortiGate improve network security?

It can help improve security management through VLAN segmentation, integrated firewall policies and supported network access controls. The actual protection depends on correct configuration, suitable security features and ongoing maintenance.

Can FortiSwitch separate guest Wi-Fi from the company network?

Yes. A suitable configuration can use VLANs to separate guest and employee traffic, with firewall policies controlling communication between those networks. The wireless access point and network configuration must also support the intended design.

Does every FortiSwitch support PoE?

No. PoE support and power budgets vary by model. Check the exact product specifications to confirm the supported PoE standard, number of powered ports and total power budget.

Does FortiLink require an additional licence?

FortiLink is a built-in Fortinet management capability, but the licensing and support requirements for the overall deployment depend on the products, software and additional services selected. Verify the current terms with Fortinet or your supplier.

Is FortiSwitch better than a standalone managed switch?

Not in every situation. FortiSwitch is particularly attractive for businesses that want centralised management with FortiGate. A standalone managed switch may be sufficient for simpler networks or organisations that prefer a multi-vendor environment.

What happens if the FortiGate becomes unavailable?

The impact depends on the topology, firewall role, switch configuration and failure scenario. Existing switched traffic may continue in some circumstances, but management and traffic requiring the firewall can be affected. Critical deployments should include appropriate redundancy and recovery planning.

Is FortiSwitch suitable for a small UK office?

Yes, provided the selected model matches the office's port count, performance, PoE and management requirements. A small office that already uses FortiGate may benefit from integration, while a simpler office may prefer a standalone managed switch.

13. Final Verdict: Should UK SMEs Choose FortiSwitch with FortiGate?

FortiSwitch with FortiGate can be a strong choice for UK small and medium-sized businesses that want a more integrated approach to network management and security. FortiLink brings supported switching functions into the FortiGate management interface, while VLANs, PoE and network visibility can help businesses manage connected devices more effectively.

The biggest advantages are centralised administration, integration between network segmentation and firewall policies, and the ability to manage supported switching functions through an existing Fortinet environment.

However, the solution is not automatically the best option for every business. Compatibility must be checked, configuration still requires planning, and organisations become more dependent on the Fortinet ecosystem. Businesses with straightforward networking requirements may find a standalone managed switch sufficient.

Our recommendation: Choose FortiSwitch with FortiGate when integrated network visibility, coordinated security policies and simplified management are important to your business. If your priority is simply adding Ethernet ports and basic VLAN support, compare standalone managed alternatives before investing in a fully integrated setup.

Ready to compare models? Visit the Fortinet switches collection at StackLink UK to explore available options for small offices, growing businesses and more demanding network environments.

Official References and Further Reading

• Fortinet Ethernet Switches – product family and switching capabilities.
• Fortinet Secure Switching for Small Businesses – integration, device visibility and management benefits.
• Fortinet Documentation: FortiSwitch Integration – FortiLink, VLANs, device visibility and PoE management.
• Fortinet FortiSwitch Management Guide – FortiLink management and configuration information.
• StackLink UK Fortinet Switches – browse available FortiSwitch products.

Specifications, supported functions, compatibility and licensing terms can change between product models and software releases. Confirm the current manufacturer documentation and product details before making a purchasing decision.