FortiGate 90G: FortiSP5 NGFW Technical Review & Guide (2026)

FortiGate 90G is Fortinet's desktop-form-factor next-generation firewall (NGFW) powered by the FortiSP5 security processor (ASIC). It delivers up to 28 Gbps of firewall throughput, 4.5 Gbps IPS, and 2.2 Gbps threat-protection throughput; it offers 8 GE RJ45 ports and 2 shared 10GE ports. It is designed for large branches, distributed enterprise locations, and the campus edge, and it works with FortiGuard AI-powered security services.

What is the FortiGate 90G?

FortiGate 90G is Fortinet's mid-segment desktop NGFW model. It combines next-generation firewall, SD-WAN, and Zero Trust access capabilities in a single device; thanks to the FortiSP5 security processor, it delivers high performance even on encrypted traffic.

A firewall stands guard at the point where the corporate network meets the internet: it inspects inbound and outbound traffic, stops threats, and enforces policies. Because modern threats hide inside encrypted traffic, it is critical that the firewall can decrypt and inspect that traffic (SSL inspection); however, this requires serious processing power. The FortiGate 90G meets this burden with dedicated ASIC hardware.

The 90G is positioned specifically for large branches of 50-100 users and the campus edge. As part of Fortinet's Security Fabric architecture, it can be managed from a single console together with components such as FortiSwitch, FortiAP, and FortiAnalyzer. Sora Yazılım right-sizes and deploys this model with its NSE 4-7 certified team; you can review our FortiGate NGFW page for the entire product family.

Fortinet is one of the few manufacturers that stands out in the industry with its in-house ASIC chips. While most competitors rely on general-purpose processors, Fortinet offloads security operations to dedicated hardware. The FortiSP5 in the 90G is the mid-segment reflection of this engineering heritage and is the key element that defines the model's price/performance balance.

Technical specifications and performance

With the FortiSP5 ASIC, the FortiGate 90G delivers 28 Gbps of firewall throughput, 4.5 Gbps IPS, 2.2 Gbps threat protection, and 1.4 Gbps SSL VPN throughput. By supporting 3 million concurrent sessions, it handles heavy branch and campus-edge traffic.

The most critical metric among these values is "threat-protection throughput": the real-world speed achieved when all security features (IPS, anti-malware, application control) are enabled at the same time. Although the catalog firewall figures are impressive, organizations' real-world experience is determined by this combined throughput. The FortiGate 90G holds a strong position in its segment on this metric.

The right model choice should be made not only against today's bandwidth but also against future growth and the need for SSL inspection. As the share of encrypted traffic rises, SSL inspection throughput becomes decisive; for this reason, sizing requires application-profile analysis.

In environments that require high availability, two FortiGate 90G units can be positioned to operate in an active-passive or active-active cluster (HA). When one device fails, the other takes over within seconds; this way the firewall ceases to be a single point of failure. For branches with no tolerance for downtime, this redundancy should be a standard part of the design.

Ports and connectivity

The FortiGate 90G offers 8 internal GE RJ45 ports and 2 shared WAN ports. The shared ports support 10/5/2.5 GE RJ45 or 10GE SFP+/SFP connectivity, providing fiber and copper flexibility.

Multi-WAN support is critical for branch environments: two different internet lines (fiber and a backup link) can be connected to provide load balancing and automatic failover. The 10GE port option enables high-speed fiber lines and the connection to the campus backbone to be used at full capacity.

The 8 internal GE ports are sufficient for direct device connectivity in a small office; in larger environments, they can be expanded with FortiSwitch and managed from a single console over FortiLink. This ensures that the wired network is also included in the same policy and visibility layer as the firewall.

Another important point in port selection is future growth. Even if the 10GE port option is not needed today, it becomes valuable when migrating to fiber infrastructure or when bandwidth needs increase. A good design meets the current need while anticipating a few years of growth, thereby deferring the cost of an upgrade.

NGFW capabilities

The FortiGate 90G combines intrusion prevention (IPS), anti-malware, application control, web filtering, SSL inspection, SD-WAN, and ZTNA in a single device. With FortiGuard AI-powered security services, it provides coordinated protection against zero-day and file-based threats.

An important advantage of Fortinet is that SD-WAN is offered in the base firmware without requiring an additional license. This enables multi-branch organizations to perform intelligent routing and link optimization through the firewall without buying a separate SD-WAN solution. ZTNA (Zero Trust Network Access), in turn, goes beyond the traditional VPN by verifying every access based on identity and device posture.

FortiGuard services are the brain of the firewall: IPS signatures, the anti-malware database, URL categories, and threat intelligence all come from here. Keeping these subscriptions current is mandatory for the effectiveness of protection; an expired FortiGuard subscription leaves the device vulnerable to known new threats.

Application control is another important layer of modern networks. By recognizing thousands of applications, it determines which applications may be used by which users; bandwidth-consuming or risky applications are restricted. In environments where IoT devices are proliferating, device visibility and segmentation are critical for keeping the attack surface under control.

Why does the FortiSP5 ASIC matter?

FortiSP5 is Fortinet's in-house-developed security processor. By performing security operations on dedicated hardware instead of a general-purpose CPU, it delivers line-rate SSL inspection and IPS; this provides a clear cost and energy advantage over competitors at the same performance level.

General-purpose processors slow down under intensive operations such as decryption and deep packet inspection; this leads either to a performance drop or to security features being turned off. Fortinet's ASIC approach accelerates these operations in hardware, delivering high throughput even with security enabled. This eliminates the "security versus performance" dilemma.

This hardware acceleration is the fundamental reason FortiGate is preferred in environments that require low latency (VoIP, video, real-time applications). The 90G is a strong mid-segment representative of this architecture.

Another benefit of the ASIC approach is energy efficiency. Performing the same security work with less power reduces both operating cost and heat load; this is especially important in branch cabinets with limited cooling. As a result, the 90G offers a balanced option in terms of both performance and operational efficiency.

Who is it right for? Model positioning

The FortiGate 90G is ideal for large branches of 50-100 users, distributed enterprise locations, and the campus edge. The 40F/60F models are preferred for smaller offices, and the 200F/400F models for larger headquarters.

The right model choice is a cost-performance balance. A model that is too small creates a bottleneck and leads to security features being turned off; a model that is too large means unnecessary cost. Fortinet's performance guide helps determine the right model based on user count, bandwidth, and application profile.

In multi-branch organizations, a larger model is typically used for headquarters and mid-range models such as the 90G for branches, all connected to one another with SD-WAN. Sora Yazılım designs this sizing and topology from the outset; for cloud workloads, it builds a hybrid architecture with FortiGate CNF.

For small locations that need wireless, the FortiWiFi 90G variant eliminates the need for a separate access point with integrated Wi-Fi. This provides both security and wireless access with a single device in stores and small branches with limited cabinet space. The model choice is made according to the location's physical and user profile.

Maintenance, licensing, and support

Keeping the FortiGate 90G healthy requires regular FortiOS updates, current FortiGuard subscriptions, and FortiCare hardware support. Lifecycle management is as important as hardware selection for the continuity of security.

FortiCare covers hardware warranty, technical support, and faulty-device replacement (RMA); FortiGuard includes the threat-intelligence subscriptions. Keeping both current is essential for both protection and support continuity. Expired licenses leave the device vulnerable to current threats and suspend the right to support.

Regular maintenance covers firmware upgrades, configuration backup, health checks, and performance optimization. For these processes, our FortiGate maintenance and repair and firewall maintenance services ensure the device operates securely and efficiently throughout its lifespan. In the event of a fault or configuration issue, our FortiGate technical support processes provide fast resolution and business continuity.

Frequently Asked Questions

What is the FortiGate 90G?

It is Fortinet's desktop-form-factor next-generation firewall powered by the FortiSP5 ASIC. It delivers 28 Gbps firewall and 4.5 Gbps IPS throughput; it is designed for large branches and the campus edge.

What performance does the FortiGate 90G offer?

It supports 3 million concurrent sessions with 28 Gbps firewall, 4.5 Gbps IPS, 2.2 Gbps threat protection, and 1.4 Gbps SSL VPN throughput.

How many ports does the 90G offer?

It offers 8 internal GE RJ45 ports and 2 shared WAN ports (10/5/2.5 GE RJ45 or 10GE SFP+/SFP); this provides fiber and copper connectivity flexibility.

Is an additional license required for SD-WAN?

No. FortiGate offers SD-WAN in its base firmware without an additional license. This is one of Fortinet's most important cost advantages.

Who is the FortiGate 90G right for?

It is ideal for large branches of 50-100 users, distributed enterprise locations, and the campus edge. The 40F/60F are recommended for smaller offices, and the 200F/400F for larger headquarters.

What does the FortiSP5 ASIC do?

By accelerating security operations on dedicated hardware, it delivers line-rate SSL inspection and IPS; this provides high performance and a cost advantage even with security enabled.

Conclusion

With the hardware acceleration of the FortiSP5 ASIC, the FortiGate 90G delivers a powerful NGFW for large branches and the campus edge: 28 Gbps firewall, 4.5 Gbps IPS, license-free SD-WAN, and ZTNA. With the right sizing and current FortiGuard subscriptions, it provides security and performance together. Its integration into the Security Fabric ecosystem makes the branch a consistent part of the organization's overall security architecture.

To determine the right FortiGate model for your organization and design the topology, you can schedule a free discovery call with the Sora Yazılım team.