FortiGate 90G

FortiGate 90G is positioned for branches and small head offices that want performance close to 1U appliances while staying in the desktop class. According to the official data sheet its IPv4 firewall throughput is 28 / 28 / 27.9 Gbps with 1518 / 512 / 64 byte UDP packets, its IPS throughput is 4.5 Gbps, its Threat Protection throughput is 2.2 Gbps and its IPsec VPN throughput is 25 Gbps. Small-packet performance being almost equal to large-packet performance is the directly observable effect of the Secure SD-WAN ASIC SP5.

The real reason to scale up in a branch is the speed of attacks. Fortinet's 2026 Global Threat Landscape report states that the number of confirmed ransomware victims rose to 7,831 in 2025 and that the time to exploitation for critical vulnerabilities has fallen to 24-48 hours (Fortinet, 2026). At that tempo, keeping IPS and virtual patching permanently enabled is mandatory. On the FortiGate 90G, IPS throughput is 4.5 Gbps and SSL inspection throughput is 2.6 Gbps; the figure that applies with all profiles including antivirus enabled at the same time is the 2.2 Gbps Threat Protection throughput. It is this last number that is binding in sizing, and it covers a 1 Gbit/s class branch line with full inspection.

What size of organization is the FortiGate 90G suited to?

The 90G is scaled for a busy branch of 100-150 users or a single-location mid-sized business centre. The device holds 3 million concurrent TCP sessions, opens 124,000 new sessions per second and supports 5,000 firewall policies and 10 VDOMs. In SSL inspection it handles 300,000 concurrent inspected sessions and 1,400 new connections per second. The built-in controller scales to 128 FortiAP units (64 of them in tunnel mode) and 24 FortiSwitch units; the FG-91G variant comes with a 120 GB internal SSD.

What is the 90G's 25 Gbps IPsec VPN throughput good for?

This is the most striking figure in the desktop FortiGate family: while the FortiGate 80F offers 6.5 Gbps and the 70G 7.1 Gbps, the 90G rises to 25 Gbps. Fortinet runs all IPsec tests with AES256-SHA256 and 512 byte packets, so the figure is not an optimistic cleartext measurement. In practical terms: in SD-WAN, when a separate overlay tunnel is built across every WAN line, the encryption load grows quickly, and the 90G absorbs that load without pushing it onto the CPU. The device terminates 200 gateway-to-gateway and 2,500 client-to-gateway tunnels.

What is the difference between the FortiGate 90G, the 80F and the 120G?

The table shows the 90G's place clearly: on the firewall and VPN side it is several times the 80F, and on threat prevention it comes close to the FortiGate 120G (2.2 versus 2.8 Gbps). The 120G's real advantage is less raw performance than port density, rack mounting and dual power supplies; in branches that do not need rack space and redundant power, the 90G is the better cost-performance point.

Does the FortiGate 90G have integrated Wi-Fi and PoE?

No. The hardware table in the data sheet leaves the wireless interface row blank for the FG-90G and FG-91G; no PoE ports or power budget are listed either. The port layout consists of two 10/5/2.5/GE RJ45 or 10GE/GE SFP+/SFP shared media pairs and eight GE RJ45 internal ports. Wireless access is provided by separate FortiAP access points and managed by the 90G's built-in controller; if PoE power is needed, a FortiSwitch PoE model goes in between. The device includes TPM and BLE.

Which FortiOS release is supported?

There is a critical footnote in the data sheet: SSL-VPN is supported only between FortiOS 7.0.12 and 7.0.15. In a current deployment, remote access should be designed not with SSL-VPN but with IPsec dial-up tunnels or the ZTNA application gateway. On release lifespan, Fortinet extended the end of support for FortiOS 7.4 to 11 November 2028 and that of 7.6 to 25 January 2030 with bulletin CSB-260330-1 (Fortinet Community, 2026). Because it is not stated which release the performance figures were measured on, measurements should be repeated at release transitions.

Sora Yazılım provides licensing, deployment, configuration migration and managed services as a Fortinet authorized channel partner across the whole FortiGate product family. We can clarify whether the FortiGate 90G is the right size through your user count, WAN line count, VPN topology and PoE requirements; write to us through our contact page for a quotation.