FortiGate NGFW
AI-driven Next-Gen Firewall family (40F → 7081F).
FortiGate is Fortinet's hardware-accelerated (FortiASIC NP7/SP5) Next-Generation Firewall family. It scales from the FortiGate 40F for SMBs to the 7081F for hyperscale data centers, with line-rate SSL inspection, IPS, anti-malware, SD-WAN and ZTNA all in one device.
FortiGate is Fortinet's flagship product, deployed in 700,000+ organizations worldwide. The FortiASIC hardware acceleration performs SSL/TLS inspection 5–10x faster than software-based competitors.
All models run the same operating system (FortiOS); policy and configuration migrate easily from a small model to a large one. SD-WAN, ZTNA, secure web proxy, email filtering, basic WAF, application control and DNS security are built into the OS.
The family splits into three tiers by hardware acceleration: Entry (FortiASIC SoC), Mid-range (NP6/NP7 + CP9/SP5), High-end (NP7 + SP5 + multi-blade chassis). Hyperscale models reach 1.65 Tbps firewall throughput.
FortiGate is also available as FortiGate-VM on AWS, Azure, GCP and OCI marketplaces, and as FortiGate Cloud-Native Firewall in SaaS mode.
What it offers
- Hardware-accelerated SSL/TLS inspection (TLS 1.3)
- Built-in SD-WAN and ZTNA — no extra license
- FortiGuard AI threat intelligence
- FortiManager centralized policy
- Scalable family from 40F to 7081F
- Cloud (AWS/Azure/GCP) VM editions
- FortiOS — unified software stack
- Security Fabric automatic correlation
Models and segments
Choose the right model from the segments below — Sora handles sizing and quoting.
Entry-Level (SMB / Branch)
5–250 users — small office and branch.
- FortiGate 40F
5 Gbps firewall for micro offices up to ~10 users.
- 5x GbE ports
- 5 Gbps firewall
- 800 Mbps threat prevention
- FortiGate 60F
10 Gbps firewall for 10–30 user small offices.
- 10 GbE ports
- 10 Gbps firewall
- 1.4 Gbps threat prevention
- FortiGate 70G
Successor to the 60F; 2x performance at the same price, SD-WAN-optimized.
- 10x GbE ports
- 20 Gbps firewall
- 5 Gbps SSL inspection
- FortiGate 80F
50–100 user branch with PoE+ ports to power FortiAP/FortiSwitch.
- 14x GbE
- PoE+ 70W
- 10 Gbps firewall
- FortiGate 90G
Successor to the 80F; SP5 ASIC, 2x performance, high PoE budget.
- 14x ports
- 20 Gbps firewall
- PoE+ + Wi-Fi 6 option
- FortiGate 100F
100–250 user mid-branch or small headquarters.
- 10G SFP+ uplink
- 32 Gbps firewall
- FortiASIC NP6
- FortiGate 120G
Successor to the 100F; SP5 ASIC + AI IPS, higher bandwidth.
- 10G SFP+
- 60 Gbps firewall
- AI-based IPS
Mid-Range (Mid-Office / Campus)
250–3000 users — headquarters and campus.
- FortiGate 200F
250–500 user headquarters. Bestselling enterprise model.
- 27 Gbps firewall
- 10G SFP+ × 4
- NP6 ASIC
- FortiGate 400F
500–1000 user mid-to-large campus.
- 52 Gbps firewall
- 25G uplink
- NP6 + CP9
- FortiGate 600F
1000–2000 user large campus / DC branch.
- 98 Gbps firewall
- 40G QSFP+ uplink
- high session count
- FortiGate 900G
1500–3000 user large campus; next-gen NP7 + SP5.
- 140 Gbps firewall
- 40G uplink
- NP7 + SP5
- FortiGate 1000F
Data center edge; environments with strict compliance.
- 198 Gbps firewall
- 100G QSFP28
- RPS
- FortiGate 1100E
Higher-session DC NGFW.
- 198 Gbps firewall
- 100G QSFP28
- 30M+ sessions
High-End (Data Center / Hyperscale)
3000+ users — data center north-south, ISP backbone.
- FortiGate 1800F
Large data center; 200G uplinks, hyperscale SD-WAN.
- 462 Gbps firewall
- 100G/200G
- NP7
- FortiGate 2600F
Large DC; 770 Gbps firewall throughput.
- 770 Gbps firewall
- 200G uplink
- NP7
- FortiGate 3700F
Multi-tenant data center; 818 Gbps + 400G uplinks.
- 818 Gbps firewall
- 400G QSFP-DD
- hyperscale
- FortiGate 4400F
Highest standalone DC NGFW capacity.
- 818 Gbps firewall
- high session count
- 400G uplink
- FortiGate 7081F
Hyperscale chassis solution; 1.65 Tbps firewall throughput.
- 6U chassis
- 1.65 Tbps
- ISP backbone
Virtual & Cloud
Virtual editions for AWS, Azure, GCP, OCI, VMware, KVM, Hyper-V.
Important technical data
- Operating system
- FortiOS 7.4 / 7.6 (LTS)
- FortiASIC
- NP7 (network) + SP5 (security)
- Min/Max throughput
- 5 Gbps → 1.65 Tbps
- Form factor
- Desktop, 1U, 2U, 3U chassis
- Cluster
- HA (A-P, A-A), FGSP session sync
- VM editions
- AWS, Azure, GCP, OCI, VMware, KVM
Frequently asked questions
How do I pick the right FortiGate model?
Is the SD-WAN license included with FortiGate?
Can FortiGate inspect TLS 1.3 traffic?
Does FortiGate run on AWS / Azure / GCP?
How does ZTNA work on FortiGate?
Opens the vendor's original technical documentation and product page in a new tab.
Fortinet — FortiGate NGFW →Fortinet family — other products
FortiSASE
Cloud-delivered Secure Access Service Edge for hybrid workers.
DetailsFortiClient (ZTNA + EPP)
One agent for VPN, ZTNA, EDR and compliance.
DetailsFortiEDR / FortiXDR
Endpoint Detection & Response and extended detection/response.
DetailsFortiAP (Wi-Fi 6/6E/7)
Enterprise wireless access points orchestrated by FortiGate.
DetailsFortiGate NGFW licensing + deployment + support
Sora Yazılım handles licensing, deployment, training and ongoing management — all from a single team.