FortiGate model comparison: 30G to 200F throughput, sessions and sizing
Every FortiGate model we sell compared - firewall, IPsec, IPS, NGFW and threat-protection throughput, concurrent sessions, ports and recommended office size.
The numbers that matter
When sizing a FortiGate, ignore the headline firewall throughput and look at Threat Protection throughput (all UTP features on, which is how it runs in practice) and concurrent sessions. A 100-user office with a 1 Gbps fibre line needs roughly 1 Gbps of threat-protection capacity - a FortiGate 70G or 90G - not a 40F.
| Model | Firewall | IPsec VPN | IPS | NGFW | Threat protection | Sessions | Ports | FortiAPs | FortiSwitches |
|---|---|---|---|---|---|---|---|---|---|
| FortiGate 30G | 4 Gbps | 3.5 Gbps | 800 Mbps | 570 Mbps | 500 Mbps | 600,000 | 4x GE | 16 / 8 | 8 |
| FortiGate 40F | 5 Gbps | 4.4 Gbps | 1 Gbps | 800 Mbps | 600 Mbps | 700,000 | 5x GE | 16 / 8 | 8 |
| FortiGate 50G | 5 Gbps | 4.5 Gbps | 2.25 Gbps | 1.25 Gbps | 1.1 Gbps | 720,000 | 5x GE | 16 / 8 | 8 |
| FortiGate 60F | 10 Gbps | 6.5 Gbps | 1.4 Gbps | 1 Gbps | 700 Mbps | 700,000 | 10x GE | 64 / 32 | 24 |
| FortiGate 70G | 10 Gbps | 7.1 Gbps | 2.5 Gbps | 1.5 Gbps | 1.3 Gbps | 1.4 M | 10x GE | 96 / 48 | 24 |
| FortiGate 80F | 10 Gbps | 6.5 Gbps | 1.4 Gbps | 1 Gbps | 900 Mbps | 1.5 M | 8x GE + 2 SPP | 96 / 48 | 24 |
| FortiGate 90G | 28 Gbps | 25 Gbps | 4.5 Gbps | 2.5 Gbps | 2.2 Gbps | 3 M | 8x GE + 2x 10GE SPP | 128 / 64 | 24 |
| FortiGate 100F | 20 Gbps | 11.5 Gbps | 2.6 Gbps | 1.6 Gbps | 1 Gbps | 1.5 M | 2x 10GE SFP+, 18x GE, 8x SFP | 128 / 64 | 32 |
| FortiGate 120G | 39 Gbps | 35 Gbps | 5.3 Gbps | 3.1 Gbps | 2.8 Gbps | 3 M | 4x 10GE SFP+, 18x GE, 8x SFP | 128 / 64 | 48 |
| FortiGate 200F | 27 Gbps | 13 Gbps | 5 Gbps | 3.5 Gbps | 3 Gbps | 3 M | 4x 10GE SFP+, 18x GE, 8x SFP | 256 / 128 | 64 |
Figures from Fortinet datasheets; SPP = shared port pair. G-series models use Fortinet's SP5 ASIC for higher IPS/NGFW throughput at the same price point as the F-series they replace.
Sizing by office
| Site | Users | Internet link | Model |
|---|---|---|---|
| Home office, retail outlet | 5-15 | up to 500 Mbps | FortiGate 30G / 40F |
| Small office, clinic, school branch | 15-40 | 500 Mbps - 1 Gbps | FortiGate 50G / 60F |
| Medium office, SD-WAN branch | 40-100 | 1 Gbps | FortiGate 70G / 80F |
| Large branch, SME HQ | 100-250 | 1-2 Gbps | FortiGate 90G / 100F |
| Campus / data-centre edge | 250-1,000 | 2-10 Gbps | FortiGate 120G / 200F |
Bundles
Part numbers ending -BDL-950-12 include the hardware plus 1 year of FortiGuard Unified Threat Protection (IPS, antivirus, web/DNS filtering, application control, anti-botnet) and FortiCare Premium 24x7. 3- and 5-year bundles (-36 / -60) are cheaper per year. See FortiGate licensing explained and the 60F vs 70G vs 90G comparison.
Frequently Asked Questions
Which FortiGate is best for 50 users?
A FortiGate 60F or 70G. The 70G adds more IPS/NGFW throughput, newer ASIC and 4x more sessions for a small premium, so it is the better choice if the office will grow.
What does FortiGate throughput mean?
Firewall throughput is raw packet forwarding; NGFW adds application control and IPS; Threat Protection adds antivirus and web filtering - the realistic number for an office running the full UTP bundle.
