Skip to main content
Authorized Fortinet reseller · DynaScale Technologies888-907-0723 · 24/7[email protected]
FortiGate 2600F–4800F, 3000G/3500G/3800G

FortiGate High-End Firewalls

Data centre and service provider, 400GE optics, Hyperscale, terabit class

Size my firewallTalk to an engineer

Compare all 11 models

Figures are Fortinet’s own, sortable, cited on every product page
anythreat protection throughput. Models below the line dim rather than disappear; you can still see what you ruled out.
FortiGate High-End Firewalls model comparison
Modelenterprise mixenterprise mixActions
FortiGate 3800GFG-3800G200 Gbps250 Gbps210 Million / 450 Million1.1 Million / 7 Million3.53 µs4x 400GE, 6x 200GE QSFP56, 18x 50GE SFP56, 2x 10GE RJ45Details
FortiGate 3500GFG-3500G105 Gbps125 Gbps179 Million1.1 Million2.96 µs2x 400GE QSFP-DD, 4x 100GE QSFP28, 30x 25GE SFP28, 2x 10GE RJ45Details
FortiGate 3000GFG-3000G80 Gbps90 Gbps88 Million / 230 Million1.1 Million / 3 Million3.7 µs6x 100GE QSFP28/40GE QSFP+, 16x 25GE SFP28, 18x 10GE RJ45, 2x GE RJ45Details
FortiGate 3700FFG-3700F75 Gbps86 Gbps140 Million930,0003.56 µs / 1.45 µs4x 400GE QSFP-DD, 4x ULL 25GE SFP28, 20x 50GE SFP56, 2x 10GE RJ45Details
FortiGate 4400FFG-4400F75 Gbps94 Gbps210 Million / 700 Million1 Million / 10 Million2.98 µs12x 100GE QSFP28/40GE QSFP+, 20x 25GE SFP28, 2x GE RJ45Details
FortiGate 4800FFG-4800F75 Gbps87 Gbps280 Million / 1.8 Billion915,000 / 25 Million3.6 µs8x 400GE, 12x 200GE QSFP56, 12x 50GE SFP56, 2x 10GE RJ45Details
FortiGate 3500FFG-3500F63 Gbps72 Gbps140 Million / 348 Million1 Million / 5 Million2.98 µs6x 100GE QSFP28/40GE QSFP+, 32x 25GE SFP28, 2x GE RJ45Details
FortiGate 3200FFG-3200F45 Gbps63 Gbps70 Million800,0003.42 µs4x 400GE QSFP-DD, 12x 50GE SFP56, 4x 25GE SFP28, 2x 10GE RJ45Details
FortiGate 4200FFG-4200F45 Gbps52 Gbps210 Million / 450 Million1 Million / 7 Million3.02 µs8x 100GE QSFP28/40GE QSFP+, 18x 25GE SFP28, 2x GE RJ45Details
FortiGate 3000FFG-3000F33 Gbps36 Gbps70 Million / 230 Million870,000 / 3 Million3.92 µs6x 100GE QSFP28/40GE QSFP+, 18x 10GE RJ45, 2x GE RJ45Details
FortiGate 2600FFG-2600F25 Gbps31 Gbps24 Million / 40 Million1 Million / 2 Million3.41 µs4x 100GE QSFP28/40GE QSFP+, 16x 25GE SFP28, 16x 10GE RJ45, 2x 10GE SFP+, 2x GE RJ45Details

How to read these numbers

At the high end you are buying ASICs. Every model here runs multiple NP7 network processors and CP10 content processors, and the difference between two boxes with similar firewall throughput is how much of the traffic the ASICs can offload before it reaches the CPU.

More on choosing within this range

The G-series generation changes the arithmetic sharply. The 3000G and the 3000F have near-identical firewall throughput (397 Gbps), but the 3000G does 80 Gbps of threat protection against the 3000F's 33, two and a half times the inspected capacity in the same 2 RU. The same holds for the 3500G against the 3500F (105 vs 63) and the 3800G against everything below it (200 Gbps). If the deployment is inspection-heavy, the G-series is not a modest refresh.

The 4200F, 4400F and 4800F trade inspection depth for raw forwarding and session scale, the 4800F pushes 3.1 Tbps of firewall throughput and, with Hyperscale, 1.8 billion concurrent sessions, but its threat protection throughput (75 Gbps) is the same as the far smaller 4400F. These are carrier and hyperscale boxes, not deep-inspection boxes.

Before you order

Inspection depth or session scale?

This is the only question that matters at this tier and it splits the family cleanly. Inspection depth: 3500G, 3800G. Session scale: 4400F, 4800F. Ordering a 4800F to inspect traffic is an expensive way to get 75 Gbps.

Do you need ultra-low latency?

The 3700F carries dedicated ULL 25GE SFP28 ports and drops to 1.45 µs of firewall latency on them, against 3.56 µs on its standard ports. For financial trading and similar workloads that difference is the entire purchasing rationale.

400GE, 200GE or 100GE?

400GE QSFP-DD appears on the 3200F, 3500G, 3700F, 3800G and 4800F. The 2600F, 3000F/G, 3500F, 4200F and 4400F top out at 100GE QSFP28. Confirm the optics generation against your spine before selecting the model.

Power and rack budget?

This family runs from 2 RU with dual PSUs up to 4 RU with four PSUs. The 4800F also has a NEBS variant for carrier central-office environments, and most models here have a DC-power variant. Tell us the facility constraints and we will quote the right variant rather than the default one.

All FortiGate High-End Firewalls

FG-2600F

FortiGate 2600F

The entry point to the high-end range, 25 Gbps inspected in 2 RU

Threat protection25 Gbps
FG-3000F

FortiGate 3000F

397 Gbps firewall and 230 million Hyperscale sessions

Threat protection33 Gbps
FG-3000G

FortiGate 3000G

Same chassis as the 3000F, two and a half times the inspected throughput

Threat protection80 Gbps
FG-3200F

FortiGate 3200F

400GE QSFP-DD optics with 45 Gbps threat protection

Threat protection45 Gbps
FG-3500F

FortiGate 3500F

595 Gbps firewall with 348 million Hyperscale sessions

Threat protection63 Gbps
FG-3500G

FortiGate 3500G

105 Gbps threat protection and 400GE optics, the inspection flagship of 2 RU

Threat protection105 Gbps
FG-3700F

FortiGate 3700F

Ultra-low-latency ports at 1.45 µs, built for trading and real-time workloads

Threat protection75 Gbps
FG-3800G

FortiGate 3800G

200 Gbps threat protection, the highest inspected throughput outside a chassis

Threat protection200 Gbps
FG-4200F

FortiGate 4200F

800 Gbps firewall throughput with 450 million Hyperscale sessions

Threat protection45 Gbps
FG-4400F

FortiGate 4400F

1.15 Tbps firewall and 310 Gbps IPsec in 4 RU

Threat protection75 Gbps
FG-4800F

FortiGate 4800F

3.1 Tbps firewall and 1.8 billion sessions, the largest fixed FortiGate

Threat protection75 Gbps