FortiGate Entry-Level Firewalls
Branch, retail and small-office NGFW, desktop form factor, full FortiOS
Compare all 8 models
Figures are Fortinet’s own, sortable, cited on every product page| Model | enterprise mix | 512 byte | IPS, avg. HTTPS | Actions | ||
|---|---|---|---|---|---|---|
| FortiGate 90GFG-90G | 2.2 Gbps | 25 Gbps | 2.6 Gbps | 3 Million | 8x GE RJ45, 2x 10GE shared port pairs | Details |
| FortiGate 70GFG-70G | 1.3 Gbps | 7.1 Gbps | 1.4 Gbps | 1.4 Million | 10x GE RJ45 | Details |
| FortiGate 50GFG-50G | 1.1 Gbps | 4.5 Gbps | 1.3 Gbps | 720,000 | 5x GE RJ45 | Details |
| FortiGate 80FFG-80F | 900 Mbps | 6.5 Gbps | 715 Mbps | 1.5 Million | 8x GE RJ45, 2x shared port pairs | Details |
| FortiGate 70FFG-70F | 800 Mbps | 6.1 Gbps | 700 Mbps | 1.5 Million | 10x GE RJ45 | Details |
| FortiGate 60FFG-60F | 700 Mbps | 6.5 Gbps | 630 Mbps | 700,000 | 10x GE RJ45 | Details |
| FortiGate 40FFG-40F | 600 Mbps | 4.4 Gbps | 310 Mbps | 700,000 | 5x GE RJ45 | Details |
| FortiGate 30GFG-30G | 500 Mbps | 3.5 Gbps | 400 Mbps | 600,000 | 4x GE RJ45 | Details |
How to read these numbers
Entry-level FortiGates run the same FortiOS as the chassis platforms at the top of the range. You are not buying a cut-down operating system; you are buying less silicon. Every policy, VPN, SD-WAN and Security Fabric feature is present; the ceiling is throughput and session count.
More on choosing within this range
The number that decides which model you need is threat protection throughput, not firewall throughput. Firewall throughput is measured on UDP with every inspection engine switched off, and on these models it is five to ten times the figure you will actually see once IPS, application control and malware scanning are running. A FortiGate 60F does 10 Gbps of firewall throughput and 700 Mbps of threat protection. Size on the second number.
The G-series models (30G, 50G, 70G, 90G) are the current generation and carry markedly better inspection performance per dollar than the F-series they replace, the 90G alone does 2.2 Gbps of threat protection, more than triple the 80F. Where a G-series equivalent exists, it is usually the better buy unless you specifically need an F-series variant such as 3G4G or DSL.
Before you order
How much internet bandwidth does the site actually have?
Match threat protection throughput to your circuit, with headroom. A 500 Mbps circuit with full inspection wants at least a 50G or 70G, not a 40F. If you are provisioning gigabit fibre to a branch, start at the 70G or 90G.
Do you need to terminate SSL inspection?
SSL inspection is the most expensive thing a small FortiGate does, and it is the figure that collapses first. Note that the 30G, 40F, 50G, 60F and 70G publish no SSL VPN throughput at all, and several F-series models lose SSL VPN entirely on FortiOS 7.6.0+ because they only carry 2 GB of RAM. If remote-access VPN matters, that constraint decides the model.
Are you managing switches and access points from the firewall?
FortiGate manages FortiSwitch and FortiAP directly with no separate controller, but the limits are per-model: a 30G handles 8 switches and 16 APs, a 90G handles 24 and 128. For a site with more than a couple of APs, this often matters more than throughput.
PoE, LTE failover, DSL or WiFi?
These come as model variants rather than add-on cards at this tier. The 50G alone ships in WiFi, DSL, SFP, PoE and 5G variants. Decide the variant before the model, a 70G PoE and a 70G are ordered as different SKUs.
All FortiGate Entry-Level Firewalls
FortiGate 30G
The smallest current-generation FortiGate, full FortiOS for a micro site
FortiGate 40F
Five-port desktop NGFW with LTE variant, the long-serving branch workhorse
FortiGate 50G
The variant-rich branch model, WiFi, DSL, SFP, PoE and 5G in one family
FortiGate 60F
Ten-port desktop NGFW, the most widely deployed FortiGate ever built
FortiGate 70F
The 60F's port count with 1.5 million sessions and working SSL VPN
FortiGate 70G
Line-rate 10 Gbps firewall with 1.4 Gbps SSL inspection, the entry-level value pick
FortiGate 80F
Bypass, DSL and LTE variants with dual power inputs, the resilient branch box
FortiGate 90G
28 Gbps firewall and 25 Gbps IPsec in a desktop chassis, the top of entry-level