FortiGate 120G
The first rackmount step out of the desktop range: 28 interfaces, 39 Gbps firewall throughput and dual power supplies in 1 RU.
Full specs and SKUsFortinet · FortiGate Mid-Range
FortiGate 120G vs FortiGate 200G
Of the 60 specifications Fortinet publishes across these two models, 42 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 200G
11 million concurrent sessions, 400,000 new sessions a second and eight 10 GE SFP+ slots, accelerated by NP7Lite and CP10.
Full specs and SKUsKey differences
The rows most buyers check first. All 42 differences are in the full table below.
-
IPS Throughput
FortiGate 120G5.3 Gbps
FortiGate 200G9 Gbps
-
NGFW Throughput
FortiGate 120G3.1 Gbps
FortiGate 200G7 Gbps
-
Threat Protection Throughput
FortiGate 120G2.8 Gbps
FortiGate 200G6 Gbps
-
IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP)
FortiGate 120G39 / 39 / 28 Gbps
FortiGate 200G39 / 39 / 26.5 Gbps
-
Firewall Latency (64 byte UDP)
FortiGate 120G3.17 microseconds
FortiGate 200G4.36 microseconds
-
Firewall Throughput (packets per second)
FortiGate 120G42 Mpps
FortiGate 200G39.75 Mpps
Which one fits
Stepping up from the FortiGate 120G to the FortiGate 200G moves threat-protection throughput from 2.8 Gbps to 6 Gbps (2.1×), IPS throughput from 5.3 Gbps to 9 Gbps (1.7×) and NGFW throughput from 3.1 Gbps to 7 Gbps (2.3×). Neither choice moves IPsec VPN throughput (35 Gbps against 36 Gbps) or raw firewall throughput (39 / 39 / 28 Gbps against 39 / 39 / 26.5 Gbps), so a site held back by site-to-site tunnel capacity gains nothing from the FG-200G. The FortiGate 120G is in fact ahead on firewall latency: 3.17 microseconds against 4.36 microseconds.
Choose the FortiGate 120G if
- Threat-protection throughput is already enough at 2.8 Gbps: the FG-200G adds 2.1× you will not use.
- The FG-120G is ahead on firewall latency: 3.17 microseconds against 4.36 microseconds.
- The FG-120G is ahead on power draw: 38 W / 40 W against 145 W / 175 W.
- Your limit is site-to-site tunnel capacity, which the step up does not move: 35 Gbps against 36 Gbps.
Choose the FortiGate 200G if
- Threat-protection throughput has to go past 2.8 Gbps: the FG-200G publishes 6 Gbps.
- IPS throughput has to go past 5.3 Gbps: the FG-200G publishes 9 Gbps.
- NGFW throughput has to go past 3.1 Gbps: the FG-200G publishes 7 Gbps.
- TLS inspection throughput has to go past 3 Gbps: the FG-200G publishes 7 Gbps.
18 of the 60 published rows are identical — Trusted Platform Module at Yes, Firewall Policies at 10,000, Gateway-to-Gateway IPsec VPN Tunnels at 2,000 and Client-to-Gateway IPsec VPN Tunnels at 16,000 among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 120G | FortiGate 200G |
|---|---|---|
| Hardware | ||
| GE RJ45 Internal Ports | 16 | Not published |
| GE RJ45 Management / HA Ports | 2 | 1 / 1 |
| GE SFP Slots | 8 | 4 |
| 10 GE SFP+ FortiLink Slots (default) | 4 | 8 |
| USB Ports | 1 | 1 |
| Console Port (RJ45) | 1 | 1 |
| Onboard Storage | Not fitted - see the FortiGate 121G for the model with a 480 GB SSD | Not fitted - see the FortiGate 201G for the model with a 480 GB SSD |
| Trusted Platform Module (TPM) | Yes | Yes |
| Bluetooth Low Energy (BLE) | Yes | Yes |
| Hardware Acceleration | SP5 security processor | NP7Lite and CP10 security processors |
| GE RJ45 Ports | Not published | 8 |
| 5/2.5/1 GE RJ45 Ports | Not published | 8 |
| Included Transceivers | Not published | None |
| Signed Firmware Hardware Switch | Not published | Not fitted |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 5.3 Gbps | 9 Gbps |
| NGFW Throughput | 3.1 Gbps | 7 Gbps |
| Threat Protection Throughput | 2.8 Gbps | 6 Gbps |
| System Performance | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP) | 39 / 39 / 28 Gbps | 39 / 39 / 26.5 Gbps |
| Firewall Latency (64 byte UDP) | 3.17 microseconds | 4.36 microseconds |
| Firewall Throughput (packets per second) | 42 Mpps | 39.75 Mpps |
| Concurrent Sessions (TCP) | 3 million | 11 million |
| New Sessions per Second (TCP) | 140,000 | 400,000 |
| Firewall Policies | 10,000 | 10,000 |
| IPsec VPN Throughput (512 byte) | 35 Gbps | 36 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 2,000 | 2,000 |
| Client-to-Gateway IPsec VPN Tunnels | 16,000 | 16,000 |
| SSL-VPN Throughput | 1.5 Gbps | 3 Gbps |
| Concurrent SSL-VPN Users (recommended maximum, tunnel mode) | 500 | 500 |
| SSL Inspection Throughput (IPS, average HTTPS) | 3 Gbps | 7 Gbps |
| SSL Inspection Connections per Second (IPS, average HTTPS) | 2,100 | 7,100 |
| SSL Inspection Concurrent Sessions (IPS, average HTTPS) | 315,000 | 900,000 |
| Application Control Throughput (HTTP 64K) | 6.7 Gbps | 27.8 Gbps |
| CAPWAP Throughput (HTTP 64K) | 35 Gbps | 37.5 Gbps |
| Virtual Domains (VDOMs) | 10 default / 10 maximum | 10 default / 10 maximum |
| Maximum Number of FortiSwitches Supported | 32 | 64 |
| Maximum Number of FortiAPs (total / tunnel mode) | 128 / 64 | 256 / 128 |
| Maximum Number of FortiTokens | 5,000 | 5,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| IPv6 Firewall Throughput | Not published | 39 / 39 / 26.5 Gbps 1518 / 512 / 64 byte UDP |
| Dimensions | ||
| Height x Width x Length | 1.73 x 17 x 10 in (44 x 432 x 254 mm) | 1.75 x 17.0 x 15.0 in (44.45 x 432 x 380 mm) |
| Weight | 12.17 lbs (5.52 kg) | 14.11 lbs (6.4 kg) |
| Form Factor | Rack mount, 1 RU (supports EIA / non-EIA standards) | Rack mount, 1 RU (supports EIA / non-EIA standards) |
| Rack Mount Type | 1 RU | 1 RU |
| Power and Environment | ||
| Power Rating | 100-120 V AC, 1 A to 5 A maximum, 50-60 Hz | Not published |
| Redundant Power Supplies | Yes - dual non-swappable AC PSUs fitted by default for 1+1 redundancy | Yes - dual non-swappable AC PSUs fitted by default for 1+1 redundancy |
| Power Supply Efficiency Rating | Not published | 80 Plus compliant |
| Maximum Current | 100 V AC @ 1 A, 120 V @ 0.5 A | Not published |
| Power Consumption | 38 W / 40 W average / maximum | 145 W / 175 W AC, average / maximum |
| Heat Dissipation | 138 BTU/hr | 597.12 BTU/hr |
| Operating Temperature | 32-104 F (0-40 C) | 32-104 F (0-40 C) |
| Storage Temperature | -31-158 F (-35-70 C) | -31-158 F (-35-70 C) |
| Humidity | 20% to 90% non-condensing | 5% to 90% non-condensing |
| Noise Level | 49 dBA | LPA 48 dBA / LWA 55 dBA |
| Air Flow | Side to back | Not published |
| Operating Altitude | Up to 10,000 ft (3,048 m) | Up to 10,000 ft (3,048 m) |
| AC Power Input | Not published | 100-240 V AC, 50/60 Hz |
| AC Current (maximum) | Not published | 2 A @ 100 V AC, 1.2 A @ 240 V AC |
| Forced Airflow | Not published | Side and front to back |
| Compliance and Certifications | ||
| Compliance | FCC Part 15B Class A, CE, RCM, VCCI, UL/cUL, CB, BSMI | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6 / IPv6 | USGv6 / IPv6 |
Other comparisons in this range
Each step of the FortiGate Mid-Range ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote