FortiWeb 4000F
70 Gbps of HTTP throughput with full WAF inspection
- HTTP throughput
- 70 Gbps
- Form factor
- Rackmount
The FortiWeb 4000F delivers 70 Gbps of HTTP throughput, defending web applications and APIs against the OWASP Top 10, bot traffic, credential stuffing and API abuse, attacks that arrive as legitimate HTTPS and pass a network firewall untouched.
70 Gbps, seven times the 3000F, with 40GE QSFP bypass. This is a carrier and hyperscale application-security platform, and the jump is large enough that arriving here should follow a measurement, not an estimate. If your peak HTTP rate is genuinely tens of gigabits you are almost certainly running an application estate that also needs FortiADC in front of it; we would rather scope that together than quote this in isolation.
How to work out whether it fits
The arithmetic a datasheet leaves out. If any of it does not match your situation, that is worth a call rather than a guess.
Seventy gigabits is a design engagement, not a model selection. At this scale a WAF is almost never deployed alone; it sits behind load balancing, in front of a CDN, and the traffic reaching it is already filtered by both. The number that matters is what survives that chain, and it is usually far below the circuit. Bring us the topology and the measured origin traffic and we will tell you honestly whether you need this or two 3000Fs.
What to order alongside the FortiWeb 4000F
The published threat protection figure for this model is measured with IPS, application control and malware protection all running. Those arrive as a FortiGuard subscription, so the bundle you choose decides whether the hardware can reach the number you sized it on. Every bundle already includes FortiCare Premium 24x7 support.
| Bundle | What it adds | 1 yearlist price | 3 yearslist price | 5 yearslist price |
|---|---|---|---|---|
| Enterprise ProtectionENT | The broadest bundle. Everything in UTP, plus the services that cover data, SaaS posture and attack-surface visibility, plus inline zero-day malware prevention. | on quote | on quote | on quote |
| Unified Threat ProtectionUTP | The traditional mid-tier: perimeter defence covering network, file, web and email threats. Everything most sites actually switch on. | on quote | on quote | on quote |
| Advanced Threat ProtectionATP | The narrow bundle: IPS and the full malware stack including cloud sandboxing, without the web and email filtering layers. | on quote | on quote | on quote |
These are Fortinet list prices. You will not pay them.
Every quote we write is discounted from list, and how far below depends on quantity, term and whether we register the deal with Fortinet. Longer terms also price better per year, which is why three and five year bundles are usually the better buy on a device you intend to keep through a refresh cycle. Part numbers follow Fortinet’s standard bundled convention; not every model carries every combination, so we confirm the exact orderable SKU before anything is placed.
FortiWeb 4000F is the top in this family
Ranked on throughput, the figure that separates these models. All values are Fortinet’s own and cited on each product page.
FortiWeb 3000F
10 Gbps
600% less than the FortiWeb 4000F. Worth it only if your measured requirement genuinely fits inside it.
FortiWeb 4000F
70 Gbps
7 models in this family span 100 Mbps to 70 Gbps.
Top of the family
Nothing larger in this line. Beyond this the design changes, clustering, a different product, or a conversation rather than a bigger box.
Highlights
- 70 Gbps HTTP throughput
- Machine-learning behaviour model, not signatures alone
- API schema validation and rate limiting
- Hardware bypass interfaces for inline deployment
Typical deployments
- Service-provider and hyperscale application protection
- Very large public estates measured in tens of gigabits of HTTP
- Environments where WAF and load balancing are designed as one tier
The numbers, with their conditions
Every figure below is Fortinet's own, with the test conditions it was measured under.
Performance
| Throughput (HTTP) | 70 Gbps |
|---|
Hardware
| Total interfaces | 2x 40GE QSFP bypass, 10x 10GE SFP+ (incl. 2 bypass), 8x GE RJ45 bypass |
|---|
Sources
- Fortinet Product Matrix (July 2026), retrieved 2026-09-01
- Fortinet Partner Portal price list, retrieved 2026-09-01
Reproduced from Fortinet published documentation and subject to change without notice. Where a figure is load-bearing for your design, ask us to confirm it in writing before you order; we will.