FortiWeb 100F
100 Mbps of HTTP throughput with full WAF inspection
- HTTP throughput
- 100 Mbps
- Form factor
- Rackmount
The FortiWeb 100F delivers 100 Mbps of HTTP throughput, defending web applications and APIs against the OWASP Top 10, bot traffic, credential stuffing and API abuse, attacks that arrive as legitimate HTTPS and pass a network firewall untouched.
At 100 Mbps of HTTP throughput this is a single-application appliance, one public site, one portal, one API endpoint. It has four gigabit copper ports and no bypass interfaces, so a failure takes the path down with it: deploy it where an outage is survivable, or in reverse-proxy mode where you control failover elsewhere. If you are protecting a cardholder-data application to satisfy PCI DSS, check your real peak HTTP rate first; 100 Mbps is easy to exceed on a busy checkout.
How to work out whether it fits
The arithmetic a datasheet leaves out. If any of it does not match your situation, that is worth a call rather than a guess.
Work backwards from requests, not bandwidth. A hundred megabits of HTTP is roughly 1,000 requests per second at a 12 KB average response, comfortable for a brochure site or an internal portal, tight for anything with images or an API behind it. Measure a busy hour on the origin before committing, because WAF inspection is applied to every request including the ones your CDN would otherwise absorb. If you are fronting anything with a checkout, start at the 400F.
What to order alongside the FortiWeb 100F
The published threat protection figure for this model is measured with IPS, application control and malware protection all running. Those arrive as a FortiGuard subscription, so the bundle you choose decides whether the hardware can reach the number you sized it on. Every bundle already includes FortiCare Premium 24x7 support.
| Bundle | What it adds | 1 yearlist price | 3 yearslist price | 5 yearslist price |
|---|---|---|---|---|
| Enterprise ProtectionENT | The broadest bundle. Everything in UTP, plus the services that cover data, SaaS posture and attack-surface visibility, plus inline zero-day malware prevention. | on quote | on quote | on quote |
| Unified Threat ProtectionUTP | The traditional mid-tier: perimeter defence covering network, file, web and email threats. Everything most sites actually switch on. | on quote | on quote | on quote |
| Advanced Threat ProtectionATP | The narrow bundle: IPS and the full malware stack including cloud sandboxing, without the web and email filtering layers. | on quote | on quote | on quote |
These are Fortinet list prices. You will not pay them.
Every quote we write is discounted from list, and how far below depends on quantity, term and whether we register the deal with Fortinet. Longer terms also price better per year, which is why three and five year bundles are usually the better buy on a device you intend to keep through a refresh cycle. Part numbers follow Fortinet’s standard bundled convention; not every model carries every combination, so we confirm the exact orderable SKU before anything is placed.
FortiWeb 100F is the entry point in this family
Ranked on throughput, the figure that separates these models. All values are Fortinet’s own and cited on each product page.
Nothing below this
This is the smallest model in the family. If it is still more than you need, the honest answer is usually a different product line rather than a smaller box.
FortiWeb 100F
100 Mbps
7 models in this family span 100 Mbps to 70 Gbps.
FortiWeb 400F
500 Mbps
400% more headroom. Worth costing if you expect growth inside the refresh cycle, replacing early is dearer than buying up once.
Highlights
- 100 Mbps HTTP throughput
- Machine-learning behaviour model, not signatures alone
- API schema validation and rate limiting
- Compact inline or reverse-proxy deployment
Typical deployments
- A single customer-facing web application or portal
- Small PCI DSS scope where a WAF is required in front of one system
- Lab, staging and policy-development environments before production rollout
The numbers, with their conditions
Every figure below is Fortinet's own, with the test conditions it was measured under.
Performance
| Throughput (HTTP) | 100 Mbps |
|---|
Hardware
| Total interfaces | 4x GE RJ45 |
|---|
Sources
- Fortinet Product Matrix (July 2026), retrieved 2026-09-01
- Fortinet Partner Portal price list, retrieved 2026-09-01
Reproduced from Fortinet published documentation and subject to change without notice. Where a figure is load-bearing for your design, ask us to confirm it in writing before you order; we will.