FortiGate 1000F
19 Gbps IPS, two 100 GE QSFP28 slots and 198 Gbps of firewall throughput in 2 RU — the first step into data centre scale.
Full specs and SKUsFortinet · FortiGate High-End
FortiGate 1000F vs FortiGate 1800F
Of the 67 specifications Fortinet publishes across these two models, 52 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 1800F
12 million concurrent sessions, four 40 GE QSFP+ slots and 198 Gbps of firewall throughput for the enterprise edge and hyperscale core.
Full specs and SKUsKey differences
The rows most buyers check first. All 52 differences are in the full table below.
-
IPS Throughput
FortiGate 1000F19 Gbps
FortiGate 1800F13 Gbps
-
NGFW Throughput
FortiGate 1000F15 Gbps
FortiGate 1800F11 Gbps
-
Threat Protection Throughput
FortiGate 1000F13 Gbps
FortiGate 1800F9.1 Gbps
-
IPv4 Firewall Throughput (1518 / 512 / 64 byte, UDP)
FortiGate 1000F198 / 196 / 134 Gbps
FortiGate 1800F198 / 197 / 140 Gbps
-
IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP)
FortiGate 1000F198 / 196 / 134 Gbps
FortiGate 1800F198 / 197 / 140 Gbps
-
Firewall Latency (64 byte, UDP)
FortiGate 1000F3.45 µs
FortiGate 1800F3.22 µs
Which one fits
The FortiGate 1800F is not a straight step up from the FortiGate 1000F: it publishes less threat-protection throughput (9.1 Gbps against 13 Gbps) and IPS throughput (13 Gbps against 19 Gbps). It gains TLS inspection throughput from 10 Gbps to 17 Gbps (1.7×) and the concurrent session table from 7.5 Million to 12 Million (1.6×). Neither choice moves IPsec VPN throughput (both 55 Gbps) or raw firewall throughput (198 / 196 / 134 Gbps against 198 / 197 / 140 Gbps), so a site held back by site-to-site tunnel capacity gains nothing from the FG-1800F.
Choose the FortiGate 1000F if
- TLS inspection throughput is already enough at 10 Gbps: the FG-1800F adds 1.7× you will not use.
- The FG-1000F is ahead on threat-protection throughput: 13 Gbps against 9.1 Gbps.
- The FG-1000F is ahead on IPS throughput: 19 Gbps against 13 Gbps.
- Your limit is site-to-site tunnel capacity, which the step up does not move: 55 Gbps against 55 Gbps.
Choose the FortiGate 1800F if
- TLS inspection throughput has to go past 10 Gbps: the FG-1800F publishes 17 Gbps.
- The concurrent session table has to go past 7.5 Million: the FG-1800F publishes 12 Million.
- The session setup rate has to go past 650,000: the FG-1800F publishes 750,000.
- The FG-1800F has 12 × 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots against 8.
15 of the 67 published rows are identical — Concurrent SSL-VPN Users at 10,000, Virtual Domains at 10 / 250, Firewall Policies at 100,000 and Gateway-to-Gateway IPsec VPN Tunnels at 20,000 among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 1000F | FortiGate 1800F |
|---|---|---|
| Interfaces and Modules | ||
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 2 | Not published |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 8 | 12 |
| Hardware Accelerated 10 GE / 5 GE / 2.5 GE / GE / 100M RJ45 Slots | 8 | Not published |
| 10 GE / GE RJ45 Management Ports | 1 | Not published |
| USB Ports (Client / Server) | 2 / 2 | Not published |
| Hardware | ||
| Hardware Accelerated 10 GE SFP+ / GE SFP Slots | 16 | Not published |
| 2.5 GE / GE HA Port | 1 | Not published |
| Console Port (RJ45) | 1 | Not published |
| Trusted Platform Module (TPM) | Yes | Not published |
| Included Transceivers | 2 x SFP SX | 2 x SFP+ (SR 10GE) |
| GE RJ45 Internal Ports | Not published | 16 |
| GE SFP Slots | Not published | 8 |
| GE RJ45 Management Ports | Not published | 2 |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 19 Gbps | 13 Gbps |
| NGFW Throughput | 15 Gbps | 11 Gbps |
| Threat Protection Throughput | 13 Gbps | 9.1 Gbps |
| System Performance and Capacity | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte, UDP) | 198 / 196 / 134 Gbps | 198 / 197 / 140 Gbps |
| IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) | 198 / 196 / 134 Gbps | 198 / 197 / 140 Gbps |
| Firewall Latency (64 byte, UDP) | 3.45 µs | 3.22 µs |
| Firewall Throughput (Packet per Second) | 201 Mpps | 210 Mpps |
| New Sessions/Second (TCP) | 650,000 | 750,000 |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 10,000 | 10,000 |
| SSL Inspection Throughput (IPS, avg HTTPS) | 10 Gbps | 17 Gbps |
| SSL Inspection CPS (IPS, avg HTTPS) | 11,000 | 9,500 |
| SSL Inspection Concurrent Session (IPS, avg HTTPS) | 600,000 | 1.3 Million |
| Virtual Domains (Default / Maximum) | 10 / 250 | 10 / 250 |
| Maximum Number of FortiAPs (Total / Tunnel) | 4,096 / 1,024 | 4,096 / 2,048 |
| System Performance | ||
| Concurrent Sessions (TCP) | 7.5 Million | 12 Million |
| Firewall Policies | 100,000 | 100,000 |
| IPsec VPN Throughput (512 byte) | 55 Gbps | 55 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 20,000 | 20,000 |
| Client-to-Gateway IPsec VPN Tunnels | 100,000 | 100,000 |
| SSL-VPN Throughput | 5.3 Gbps | 11 Gbps |
| Application Control Throughput (HTTP 64K) | 44 Gbps | 34 Gbps |
| CAPWAP Throughput (HTTP 64K) | 65 Gbps | 26.5 Gbps |
| Maximum Number of FortiSwitches Supported | 196 | 196 |
| Maximum Number of FortiTokens | 20,000 | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| Dimensions and Power | ||
| Height x Width x Length (mm) | 88.9 x 443 x 447.4 | 88.4 x 438 x 536 |
| Height x Width x Length (inches) | 3.5 x 17.44 x 17.63 | 3.5 x 17.25 x 21.1 |
| Form Factor (supports EIA/non-EIA standards) | Rack Mount, 2RU | Rack Mount, 2RU |
| AC Current (Maximum) | 6A@120VAC, 3A@240VAC | Not published |
| Power Consumption (Average / Maximum) | 210 W / 408 W | Not published |
| Redundant Power Supplies (Hot Swappable) | Yes (comes with 2 PSU default) | Not published |
| AC Maximum Current | Not published | 7A@100VAC, 3A@240VAC |
| DC Power Input | Not published | -48V to -60V DC |
| DC Maximum Current | Not published | 20A |
| Average Power Consumption | Not published | 388.3 W |
| Dimensions | ||
| Weight | 21.94 lbs (9.95 kg) | 30.2 lbs (13.7 kg) |
| Power and Environment | ||
| AC Power Supply | 100-240V AC, 50/60 Hz | Not published |
| Heat Dissipation | 1211 BTU/h | 1,854.84 BTU/h |
| Power Supply Efficiency Rating | 80Plus Compliant | Not published |
| Operating Temperature | 32°-104°F (0°-40°C) | 32°-104°F (0°-40°C) |
| Storage Temperature | -31°-158°F (-35°-70°C) | -31°-158°F (-35°-70°C) |
| Humidity | 10%-90% non-condensing | 10%-90% non-condensing |
| Noise Level | 66.7 dBA | 62.74 dBA |
| Forced Airflow | Front to Back | Not published |
| Operating Altitude | Up to 10 000 ft (3048 m) | Up to 7,400 ft (2,250 m) |
| AC Power Input | Not published | 100-240V AC, 50-60 Hz |
| Redundant Power Supplies | Not published | Yes, Hot swappable |
| Power Consumption | Not published | 543.6 W maximum |
| Compliance and Certifications | ||
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6 | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6 |
| Hardware Specifications | ||
| Hardware Accelerated 40 GE QSFP+ Slots | Not published | 4 |
| 10 GE SFP+ / GE SFP HA Slots | Not published | 2 |
| USB 3.0 Port | Not published | 1 |
| Console RJ45 Port | Not published | 1 |
Other comparisons in this range
Each step of the FortiGate High-End ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote