FortiGate catalog
12 current FortiGate G-series models, from the 30G for a small branch to the 3800G for a data-center or service-provider core. Each page lists every part number we would put on a quote with Fortinet’s list price, the datasheet specs with the version cited, and what we check before ordering. Fortinet list prices run from $697 for the 30G appliance to $494,471 for the 3800G.
Buy it by part number. We can move you onto it: a fixed $2,500 to replace an older FortiGate like for like; a firewall migration from another vendor or with a design change starts at $6,500 (single firewall, up to the 90-series class) or $8,900 for the 120G and 200G class or an HA pair; 400G and up are quoted on the call.
Updated October 21, 2026 · prices as of September 7, 2026
Each card shows two Fortinet list prices: the box on its own, and the box with three years of the UTP bundle (FortiCare support and hardware replacement plus the FortiGuard security subscriptions). Every model page lists the other terms and the renewals.
Fortinet list price (as of September 7, 2026), from the Fortinet Americas 2026 MidQ3 Price List. Your quote confirms current pricing, tax and shipping.
Branches, shops and small clinics: up to about 15 people on the 30G, 10 to 25 on the 50G.
For a branch, shop or small clinic of up to about 15 people on a circuit up to about 300 Mbps, often as an SD-WAN spoke behind a larger hub.
Desktop, four gigabit ports (1 WAN, 2 LAN, 1 FortiLink). The entry G-series for a small branch or SD-WAN spoke. The 31G adds 30 GB of storage.
For 10 to 25 people on a 300 to 750 Mbps circuit, with a managed switch behind the firewall handling the LAN.
Desktop, fanless, five gigabit ports. Variants add an SFP port, PoE+, a 5G modem or DSL; the 51G adds a 64 GB SSD.
Roughly 20 to 50 people on the 70G, 40 to 80 on the 90G.
For an office of roughly 20 to 50 people on a gigabit or slower circuit, especially where the firewall is also the only switch or has to power a few access points or phones.
Desktop, fanless, ten gigabit copper ports. A PoE variant powers four devices. The usual pick for a single office up to about 50 people.
For 40 to 80 people, a circuit above 1 Gbps or two circuits for SD-WAN, or a core switch with 10G uplinks that a gigabit firewall would choke.
Desktop, two 10G shared-media WAN pairs (copper or SFP+), eight gigabit ports. The smallest G-series that keeps up with multi-gig uplinks.
1RU with dual power and a dedicated HA port: a busy office, campus edge or branch hub on 10G and 25G uplinks.
For a mid-size office that has outgrown a desktop firewall: 1RU, dual power, a dedicated HA port, and enough GE, SFP and 10G ports to terminate the core switch stack directly.
1RU, dual built-in AC power, 16x GE RJ45, 8x GE SFP, 4x 10G SFP+, dedicated HA and management ports. The 121G adds a 480 GB SSD.
For a larger office or regional hub that inspects most of its traffic: multi-gigabit circuits, a 10G core, many SD-WAN or VPN peers, and an HA pair in one rack unit each.
1RU, dual built-in AC power, 8x 5G RJ45, 8x 10G SFP+, 8x GE RJ45, 4x GE SFP, dedicated HA and management ports. The 201G adds a 480 GB SSD.
For a large office, campus edge or branch hub: 25G and 10G uplinks, multi-gig copper WAN and a dedicated HA port, in one rack unit.
1RU, dual AC power, 4x 25G and 4x 10G cages, 16x GE SFP, 8x 5G copper, dedicated HA and management ports. The 401G adds 2x 480 GB SSD.
For a campus edge or branch hub that deep-inspects most of its traffic: the 400G's ports and chassis with twice its threat-protection throughput.
1RU, dual AC power, 4x 25G and 4x 10G cages, 16x GE SFP, 8x 5G copper, dedicated HA and management ports. 26 Gbps threat protection; the 701G adds 2x 480 GB SSD.
A data-center edge, service-provider edge or enterprise core, as an HA pair. Sized on measured traffic and quoted by part number.
For a data-center edge, campus core or SD-WAN hub: 10G and 25G uplinks, an HA pair, and tens of gigabits of inspected traffic in one rack unit.
1RU, dual hot-swap power, 4x 25G and 4x 10G cages, dedicated HA and management ports. The 901G adds 2x 480 GB SSD; the 900G has none. Built for an HA pair at a hub or data center.
For a data-center edge, service-provider edge or large enterprise core that needs 100G and 25G uplinks plus 10G copper in 2RU, as an HA pair. We size it on your measured traffic with inspection on and quote it by exact part number.
2RU, hot-swap AC power, 6x 100G QSFP28, 16x 25G SFP28 (2 are HA), 16x 10G RJ45, 2x 10G management. 3001G adds 2x 960 GB SSD.
For a data-center or service-provider edge, or a large enterprise core, that needs 400G uplinks and 25G density in 2RU, as an HA pair. We size it on your measured traffic with inspection on and quote it by exact part number.
2RU, hot-swap AC power, 2x 400G QSFP-DD, 4x 100G QSFP28, 30x 25G SFP28 (2 HA, 2 WAN), 2x 10G management. 3501G adds 2x 1.92 TB SSD.
For the largest data-center and service-provider edges and enterprise cores: 400G, 200G and 50G cages in 3RU with four hot-swap supplies, as an HA pair. We size it on your measured traffic with inspection on and quote it by exact part number.
3RU, four hot-swap AC or DC supplies, 4x 400G QSFP-DD, 6x 200G QSFP56, 18x 50G SFP56, 2x 10G management. 3801G adds 2x 1.92 TB SSD.
The circuit decides more than the headcount: we keep the internet speed at or below about 70 to 80 percent of threat-protection throughput with all profiles on, so inspection has headroom. The FortiGate sizing guide has the full rules and the 30G to 90G comparison.
Datasheet numbers side by side within each size group, with the appliance list price. Size on threat protection and SSL inspection, not the firewall figure.
| Datasheet figure | 30G | 50G |
|---|---|---|
| Threat protection | 500 Mbps | 1.1 Gbps |
| NGFW | 570 Mbps | 1.25 Gbps |
| IPS | 800 Mbps | 2.25 Gbps |
| SSL inspection (IPS, avg. HTTPS) | 400 Mbps | 1.3 Gbps |
| IPsec VPN (512 byte) | 3.5 Gbps | 4.5 Gbps |
| Firewall (1518 byte UDP) | 4 Gbps | 5 Gbps |
| Concurrent sessions | 600,000 | 720,000 |
| New sessions per second | 30,000 | 85,000 |
| Ports | 4x GE RJ45 (1 WAN, 2 LAN, 1 FortiLink) | 5x GE RJ45 (1 WAN, 3 LAN, 1 FortiLink) |
| Storage | None (31G: 30 GB) | None (51G: 64 GB SSD) |
| VDOMs (default / max) | Not supported | 5 / 5 |
| SSL-VPN | Not supported | Not supported |
| Form factor | Desktop | Desktop, fanless |
| Appliance list price | $697 FG-30G | $1,093 FG-50G |
| Datasheet figure | 70G | 90G |
|---|---|---|
| Threat protection | 1.3 Gbps | 2.2 Gbps |
| NGFW | 1.5 Gbps | 2.5 Gbps |
| IPS | 2.5 Gbps | 4.5 Gbps |
| SSL inspection (IPS, avg. HTTPS) | 1.4 Gbps | 2.6 Gbps |
| IPsec VPN (512 byte) | 7.1 Gbps | 25 Gbps |
| Firewall (1518 byte UDP) | 10 Gbps | 28 Gbps |
| Concurrent sessions | 1.4 M | 3 M |
| New sessions per second | 100,000 | 124,000 |
| Ports | 10x GE RJ45 (2 WAN, 6 LAN, 2 FortiLink); 70G-POE/71G-POE: 4 PoE/+ | 8x GE RJ45, 2x 10GE RJ45/SFP+ shared-media WAN |
| Storage | None (70G, 70G-POE); 64GB SSD (71G, 71G-POE) | None (90G); 1 x 120 GB SSD (91G) |
| VDOMs (default / max) | 10 / 10 | 10 / 10 |
| SSL-VPN | Not on FortiOS 7.4.8+ (ran on 7.2) | Not on FortiOS 7.2.12+, 7.4.8+, 7.6.1+ |
| Form factor | Desktop, fanless | Desktop |
| Appliance list price | $1,562 FG-70G | $3,638 FG-90G |
| Datasheet figure | 120G | 200G | 400G | 700G |
|---|---|---|---|---|
| Threat protection | 2.8 Gbps | 6 Gbps | 13 Gbps | 26 Gbps |
| NGFW | 3.1 Gbps | 7 Gbps | 14 Gbps | 29 Gbps |
| IPS | 5.3 Gbps | 9 Gbps | 25 Gbps | 38 Gbps |
| SSL inspection (IPS, avg. HTTPS) | 3 Gbps | 7 Gbps | 11.5 Gbps | 14 Gbps |
| IPsec VPN (512 byte) | 35 Gbps | 36 Gbps | 55 Gbps | 55 Gbps |
| Firewall (1518 byte UDP) | 39 Gbps | 39 Gbps | 164 Gbps | 164 Gbps |
| Concurrent sessions | 3 M | 11 M | 28 M | 28 M |
| New sessions per second | 140,000 | 400,000 | 580,000 | 700,000 |
| Ports | 16x GE RJ45, 8x GE SFP, 4x 10GE SFP+, HA, MGMT | 8x GE RJ45, 8x 5GE RJ45, 8x 10GE SFP+, 4x GE SFP, HA, MGMT | 8x 5GE RJ45, 16x GE SFP, 4x 10GE SFP+, 4x 25GE SFP28, HA, MGMT | 8x 5GE RJ45, 16x GE SFP, 4x 10GE SFP+, 4x 25GE SFP28, HA, MGMT |
| Storage | None (121G: 480 GB SSD) | None (201G: 480 GB SSD) | None (401G: 2x 480 GB SSD) | None (701G: 2x 480 GB SSD) |
| VDOMs (default / max) | 10 / 10 | 10 / 25 | 10 / 50 | 10 / 50 |
| SSL-VPN | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ |
| Form factor | 1RU, dual built-in AC PSU | 1RU, dual built-in AC PSU | 1RU, dual AC PSU (not hot-swap) | 1RU, dual AC PSU (not hot-swap) |
| Appliance list price | $5,511 FG-120G | $11,477 FG-200G | $24,696 FG-400G | $35,066 FG-700G |
| Datasheet figure | 901G | 3000G | 3500G | 3800G |
|---|---|---|---|---|
| Threat protection | 30 Gbps | 80 Gbps | 105 Gbps | 200 Gbps |
| NGFW | 31 Gbps | 85 Gbps | 115 Gbps | 210 Gbps |
| IPS | 42 Gbps | 90 Gbps | 125 Gbps | 250 Gbps |
| SSL inspection (IPS, avg. HTTPS) | 16.7 Gbps | 75 Gbps | 112 Gbps | 120 Gbps |
| IPsec VPN (512 byte) | 55 Gbps | 105 Gbps | 163 Gbps | 210 Gbps |
| Firewall (1518 byte UDP) | 164 Gbps | 397 Gbps | 595 Gbps | 795 Gbps |
| Concurrent sessions | 28 M | 88 M | 179 M | 200 M |
| New sessions per second | 720,000 | 1.1 M | 1.1 M | 1.11 M |
| Ports | 16x GE RJ45, 8x GE SFP, 4x 10GE SFP+, 4x 25GE SFP28, HA, MGMT | 6x 100GE QSFP28, 16x 25GE SFP28 (2 HA), 16x 10GE RJ45 (2 WAN), 2x 10GE MGMT | 2x 400GE QSFP-DD, 4x 100GE QSFP28, 30x 25GE SFP28 (2 HA, 2 WAN), 2x 10GE MGMT | 4x 400GE QSFP-DD, 6x 200GE QSFP56 (2 HA), 18x 50GE SFP56 (2 HA, 2 WAN), 2x 10GE MGMT |
| Storage | None (900G); 2x 480 GB SSD (901G) | None (3001G: 2x 960 GB SSD) | None (3501G: 2x 1.92 TB SSD) | None (3801G: 2x 1.92 TB SSD) |
| VDOMs (default / max) | 10 / 50 | 10 / 500 | 10 / 500 | 10 / 500 |
| SSL-VPN | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ |
| Form factor | 1RU, dual hot-swap PSU | 2RU, hot-swap AC PSUs | 2RU, hot-swap AC PSUs | 3RU, 4 hot-swap PSUs (AC or DC) |
| Appliance list price | $49,411 FG-901G | $197,789 FG-3000G | $302,702 FG-3500G | $494,471 FG-3800G |
Sources: Fortinet FortiGate / FortiWiFi 30G Series datasheet (FGFWF-30G-DAT-R07-20260414); Fortinet FortiGate / FortiWiFi 50G Series datasheet (FGFWF-50G-DAT-R18-20260929); Fortinet FortiGate / FortiWiFi 70G Series datasheet (FGFWF-70G-DAT-R10-20260929); Fortinet FortiGate 90G Series datasheet (FG-90G-DAT-R18-20260929); Fortinet FortiGate 120G Series datasheet (FG-120G-DAT-R19-20260929); Fortinet FortiGate 200G Series datasheet (FG-200G-DAT-R12-20260929); Fortinet FortiGate 400G Series datasheet (FG-400G-DAT-R06-20261013); Fortinet FortiGate 700G Series datasheet (FG-700G-DAT-R15-20260929); Fortinet FortiGate 900G Series datasheet (FG-900G-DAT-R23-20260929); Fortinet FortiGate 3000G Series datasheet (FG-3000G-DAT-R04-20260929); Fortinet FortiGate 3500G Series datasheet (FG-3500G-DAT-R03-20260929); Fortinet FortiGate 3800G Series datasheet (FG-3800G-DAT-R06-20260414). Enterprise traffic mix, logging enabled, values “up to”. Appliance list price from the Fortinet Americas 2026 MidQ3 Price List, effective September 7, 2026; each model page lists every bundle and renewal part number.
We quote every current FortiGate, including the F-series models still on the price list (40F, 60F, 80F, 400F and the 1000F to 4800F data-center range), plus FortiSwitch, FortiAP, FortiManager, FortiAnalyzer and renewals. Send the part number, or the circuit speed, user count and what the firewall has to do, and we will pick the model. See Fortinet reseller for everything we sell.
Every line on the quote is an exact Fortinet part number and term, sized to your circuit and the services you run. Your written quote confirms current pricing, tax and shipping.
Payment clears before the distributor order. The unit ships from distribution to your site; freight is billed at actual cost.
Hardware and subscriptions go on your FortiCare account, not ours. Serials and contract dates are on the invoice.
We watch the expiry for every serial we sell and contact you at 120, 90, 60 and 30 days out.
Full terms, special-order rules and what to send for a quote: how buying from us works. Want it run after it ships? See Sacramento Fortinet MSP.
Some customers buy hardware from us; others find it online. These are fixed fees for the engineering work, quoted separately from the hardware.
The exact model, licenses and support term for your circuit and users, by part number, with two revisions. Buy through us within 60 days and the fee comes off the install labor.
Bought it yourself? We check the serial, registration and licenses and bring the firmware to a clean baseline before we touch your network ($75 per switch or access point). Warranty claims on gear bought elsewhere are billed hourly.
Someone else set up your firewall. We review the configuration, rotate every password, take a backup, list the risks and document how it’s built: $1,500 up to the 90-series, $2,500 for 100F and up or an HA pair. A Network Risk Assessment, priced separately, comes first, because we inherit a configuration we haven’t seen.
Got a firewall quote from another provider? We review it line by line in writing. If we then do the swap for you, the fee comes off.
We buy through Fortinet’s authorized U.S. distribution. Every unit is new, in-channel and registered to your own FortiCare account. Our Fortinet partner ID goes on every quote so you can verify it.
Fortinet, FortiGate, FortiWiFi, FortiCare, FortiGuard, FortiManager, FortiAnalyzer, FortiOS, FortiSwitch, FortiAP and FortiLink are trademarks or registered trademarks of Fortinet, Inc. Ambio Edge Networks is an independent company and a Fortinet Engage partner; Fortinet does not endorse or sponsor this page.
Automated monitoring and alerting to your Slack, Teams or email and to us, configuration backups, a monthly report, and next-business-day response from a senior engineer (Mon–Fri, 8 AM–5 PM Pacific). Up to 10 managed devices.
No change hours are included. Standard remote changes you ask for bill at $225/hr, 30-minute minimum; larger engineering work is quoted first. Hardware, licensing and migration are quoted separately.
One-time monitoring launch: $1,950 on Essential; other plans pay twice the monthly fee for the first site, up to $3,500, and $1,500 for each additional full site (dashboard, alert routing, baseline, runbook). Only one firewall to look after? Edge Firewall Watch is $199 a month. Faster response and included change hours are on the Secure and Compliance plans.
Start with a fixed-fee network risk assessment, or read how managed network monitoring works.
Request a Quote
For a renewal or replacement, send the serial number and expiry. For a new install, send the circuit speed, user count, switches and access points, and the ship-to address. You get a written quote with exact Fortinet part numbers and terms. Not sure what to buy yet? A Network Risk Assessment audits the firewall, switches and Wi-Fi and gives you a ranked roadmap with budget ranges before you spend on hardware: $3,500 for one site with one firewall, up to three switch groups (a stack counts as one), 100 connected devices and six access points; larger networks are priced on the assessment pricing page. See a sample report (PDF).
A senior engineer reads your request and replies within 1 business day.
If anything is missing for an exact quote, we ask before guessing.
You get a written quote with part numbers, terms, shipping and tax lines.
Nothing is ordered until you accept and payment clears.
