FortiGate: Next-Generation Firewall Overview
Automated visibility into applications, users and network and provides security ratings to adopt security best practices.
As security architects consider how to provide comprehensive threat protection for their enterprises, including intrusion prevention, web filtering, anti-malware and application control, they face a major complexity hurdle managing these point products with no integration and lack of visibility. Gartner estimates that by 2019 80% of enterprise traffic will be encrypted and 50% of attacks targeting enterprise will be hidden in encrypted traffic.
As security architects consider how to provide comprehensive threat protection for their enterprises, including intrusion prevention, web filtering, anti-malware and application control, they face a major complexity hurdle managing these point products with no integration and lack of visibility. Gartner estimates that by 2019 80% of enterprise traffic will be encrypted and 50% of attacks targeting enterprise will be hidden in encrypted traffic.
FortiGate: Next-Generation Firewall Videos
FortiGate Next Generation Firewall with Security Fabric Demo
Fortinet Network Security Solution
FortiOS 6.0 and Security Fabric Q&A with Michael Xie
FortiGate: Next-Generation Firewall Product Details
FortiGate enterprise firewalls offer flexible deployments from the network edge to the core, data center, internal segment, and the Cloud. FortiGate enterprise firewalls leverages purpose-built security processors (SPUs) that delivers scalable performance of advanced security services like Threat Protection, SSL inspection, and ultra-low latency for protecting internal segments and mission critical environments.
FortiGate NGFW provides automated visibility into cloud applications, IoT devices and automatically discovers end to end topology view of the enterprise network. FortiGate is a core part of security fabric and validated security protect the enterprise network from known and unknown attacks.
Features and Benefits

High-performance threat protection
Industry’s highest threat protection and SSL inspection performance to protect from malware attacks hiding in encrypted traffic

Validated security effectiveness
Independently certified and continuous threat intelligence updates provide robust protection from known and unknown attacks

Protect mission critical applications
Highly scalable segmentation and ultra-low latency to protect network segments

Continuous risk assessment via automation
Leverage automated workflow and auditing features to deal with scarce security staff and continuously maintain compliance posture

Security Fabric integration
Intelligently share threats across the entire digital attack surface to provide quick and automated protection

Enterprise class security management
Deliver consistent security policy — Single pane-of-glass to manage security assets irrespective of location and form factor
FortiGate: Chassis-based NGFW
Threat Protection |
80 Gbps |
SSL Inspection Throughput |
100 Gbps |
Network Interfaces |
Multiple 10 GE SFP+/SFP, 40 GE QSFP+, 100 GE CFP2/QSFP28 |
Threat Protection |
40 Gbps |
SSL Inspection Throughput |
50 Gbps |
Network Interfaces |
Multiple 10 GE SFP+/SFP, 40 GE QSFP+, 100 GE CFP2/QSFP28 |
Threat Protection |
35 Gbps |
SSL Inspection Throughput |
50 Gbps |
Network Interfaces |
Multiple 10 GE SFP+/SFP, 40 GE/100 GE QSFP28 |
Threat Protection |
13.5 Gbps |
SSL Inspection Throughput |
17 Gbps |
Network Interfaces |
2x 40GE QSFP+, 2x 10GE SFP+, 2x GE RJ45 |
FortiGate: Ultra high-end NGFW
Threat Protection |
60 Gbps |
SSL Inspection Throughput |
90 Gbps |
Network Interfaces |
Multiple 40/100 GE QSFP28, 1/10/25 GE SFP28, 1/10 GE SFP+ and GE RJ45 |
Threat Protection |
100 Gbps |
SSL Inspection Throughput |
130 Gbps |
Network Interfaces |
Multiple 40/100 GE QSFP28, 1/10/25 GE SFP28, 1/10 GE SFP+ and GE RJ45 |
FortiGate: High-end NGFW
Threat Protection |
20 Gbps |
SSL Inspection Throughput |
32 Gbps |
Network Interfaces |
10x 100GE QSFP28, 16x 10GE SFP+, 2x GE RJ45 |
Threat Protection |
13.5 Gbps |
SSL Inspection Throughput |
30 Gbps |
Network Interfaces |
Multiple 40/100 GE QSFP+/QSFP28, 10 GE SFP+ and GE RJ45 |
Threat Protection |
13 Gbps |
SSL Inspection Throughput |
23 Gbps |
Network Interfaces |
Multiple 100 GE CFP2, 40 GE QSFP+, 10 GE SFP+ and/or multiple GE SFP/RJ45 depending on variants |
Threat Protection |
13 Gbps |
SSL Inspection Throughput |
24 Gbps |
Network Interfaces |
Multiple 40 GE QSFP+, 10 GE SFP+ and GE SFP |
Threat Protection |
30 Gbps |
SSL Inspection Throughput |
34 Gbps |
Network Interfaces |
Multiple 100 GE, 40 GE QSFP28, multiple 10 GE SFP+/SFP |
Threat Protection |
23 Gbps |
SSL Inspection Throughput |
30 Gbps |
Network Interfaces |
Multiple 100 GE, 40 GE QSFP28, multiple 10 GE SFP+/SFP |
Threat Protection |
15 Gbps |
SSL Inspection Throughput |
20 Gbps |
Network Interfaces |
Multiple GE RJ45 and 10 GE SFP+ / GE SFP slots |
Threat Protection |
13 Gbps |
SSL Inspection Throughput |
22 Gbps |
Network Interfaces |
Multiple 10 GE SFP+ | Multiple GE SFP and GE RJ45 |
Threat Protection |
13 Gbps |
SSL Inspection Throughput |
19 Gbps |
Network Interfaces |
Multiple 10 GE SFP+ | Multiple GE SFP and GE RJ45 |
Threat Protection |
5.4 Gbps |
SSL Inspection Throughput |
11.5 Gbps |
Network Interfaces |
10x 10GE SFP+, 2x 10GE SFP+ bypass, 34x GE RJ45 |
Threat Protection |
5.4 Gbps |
SSL Inspection Throughput |
12.5 Gbps |
Network Interfaces |
6x 10GE SFP+, , 34x GE RJ45 |
Threat Protection |
5 Gbps |
SSL Inspection Throughput |
10.5 Gbps |
Network Interfaces |
8x 10GE SFP+/GE SFP, 16x GE SFP, 18x GE RJ45 |
Threat Protection |
4 Gbps |
SSL Inspection Throughput |
6 Gbps |
Network Interfaces |
4x 10GE SFP+/GE SFP, 16x GE SFP, 18x GE RJ45 |
Threat Protection |
4 Gbps |
SSL Throughput Inspection |
4 Gbps |
Network Interfaces |
2x 10 GE SFP+, 16x GE SFP, 18x GE RJ45 |
FortiGate: Mid-range NGFW
Threat Protection |
3 Gbps |
SSL Inspection Throughput |
4 Gbps |
Network Interfaces |
Multiple GE RJ45, GE SFP and 10 GE SFP+ slots |
Threat Protection |
3 Gbps |
SSL Inspection Throughput |
4 Gbps |
Network Interfaces |
Multiple GE RJ45, GE SFP, 10 GE SFP+ slots and bypass GE RJ45 pairs |
Threat Protection |
7Gbps |
SSL Inspection Throughput |
8 Gbps |
Network Interfaces |
Multiple GERJ45, Multiple GE SFP, Multiple 10GE SFP+ |
Threat Protection |
4.7 Gbps |
SSL Inspection Throughput |
6.8 Gbps |
Network Interfaces |
Multiple GE RJ45, GE SFP and 10 GE SFP+ Slots |
Threat Protection |
5 Gbps |
SSL Inspection Throughput |
4.8 Gbps |
Network Interfaces |
Multiple GE RJ45 and Multiple GE SFP Slots |
Threat Protection |
3 Gbps |
SSL Throughput Inspection |
6.8 Gbps |
Network Interfaces |
Multiple GE RJ45 and GE SFP Slots |
Threat Protection |
1.2 Gbps |
SSL Throughput Inspection |
1 Gbps |
Network Interfaces |
Multiple GE RJ45, GE SFP Slots |
Threat Protection |
250 Mbps |
SSL Throughput Inspection |
190 Mbps |
Network Interfaces |
Multiple GE RJ45, GE SFP Slots | PoE/+ Variants |
FortiGate: Entry-level NGFW
Threat Protection |
250 Mbps |
SSL Inspection Throughput |
180 Mbps |
Network Interfaces |
Multiple GE RJ45 | Varients with internal storage | Variants with PoE/+ interfaces |
Threat Protection |
200 Mbps |
SSL Throughput Inspection |
175 Mbps |
Network Interfaces |
Multiple GE RJ45 | WiFi variants | Variants with internal storage | Variants with PoE/+ interfaces |
Threat Protection |
160 Mbps |
SSL Throughput Inspection |
185 Mbps |
Network Interfaces |
Multiple GE RJ45 | WiFi Variants | Variants with dual radios | Variants with internal storage |
Threat Protection |
150 Mbps |
SSL Throughput Inspection |
160 Mbps |
Network Interfaces |
Multiple GE RJ45 | WiFi Variants |
Threat Protection |
25 Mbps |
SSL Throughput Inspection |
18 Mbps |
Network Interfaces |
10x GE RJ45 |