FortiGate 200G
11 million concurrent sessions, 400,000 new sessions a second and eight 10 GE SFP+ slots, accelerated by NP7Lite and CP10.
Full specs and SKUsFortinet · FortiGate Mid-Range
FortiGate 200G vs FortiGate 400F
Of the 61 specifications Fortinet publishes across these two models, 40 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 400F
79.5 Gbps of firewall throughput, 7.8 million sessions and four ultra low latency ports, accelerated by NP7 and CP9.
Full specs and SKUsKey differences
The rows most buyers check first. All 40 differences are in the full table below.
-
IPS Throughput
FortiGate 200G9 Gbps
FortiGate 400F12 Gbps
-
NGFW Throughput
FortiGate 200G7 Gbps
FortiGate 400F10 Gbps
-
Threat Protection Throughput
FortiGate 200G6 Gbps
FortiGate 400F9 Gbps
-
IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP)
FortiGate 200G39 / 39 / 26.5 Gbps
FortiGate 400F79.5 / 78.5 / 70 Gbps
-
IPv6 Firewall Throughput
FortiGate 200G39 / 39 / 26.5 Gbps 1518 / 512 / 64 byte UDP
FortiGate 400F79.5 / 78.5 / 70 Gbps 1518 / 512 / 64 byte UDP
-
Firewall Throughput (packets per second)
FortiGate 200G39.75 Mpps
FortiGate 400F105 Mpps
Which one fits
Stepping up from the FortiGate 200G to the FortiGate 400F moves threat-protection throughput from 6 Gbps to 9 Gbps (1.5×), IPS throughput from 9 Gbps to 12 Gbps (+33%) and NGFW throughput from 7 Gbps to 10 Gbps (+43%). Neither choice moves application control throughput (27.8 Gbps against 28 Gbps) or the site-to-site tunnel count (both 2,000), so a site held back by traffic run with application identification on gains nothing from the FG-400F. The FortiGate 200G is in fact ahead on the concurrent session table: 11 million against 7.8 million.
Choose the FortiGate 200G if
- Threat-protection throughput is already enough at 6 Gbps: the FG-400F adds 1.5× you will not use.
- The FG-200G is ahead on the concurrent session table: 11 million against 7.8 million.
- The FG-200G is ahead on the TLS inspection session table: 900,000 against 800,000.
- Your limit is traffic run with application identification on, which the step up does not move: 27.8 Gbps against 28 Gbps.
Choose the FortiGate 400F if
- Threat-protection throughput has to go past 6 Gbps: the FG-400F publishes 9 Gbps.
- IPS throughput has to go past 9 Gbps: the FG-400F publishes 12 Gbps.
- NGFW throughput has to go past 7 Gbps: the FG-400F publishes 10 Gbps.
- The FG-400F has 8 × GE SFP Slots against 4.
21 of the 61 published rows are identical — Trusted Platform Module at Yes, Firewall Policies at 10,000, Gateway-to-Gateway IPsec VPN Tunnels at 2,000 and Virtual Domains at 10 default / 10 maximum among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 200G | FortiGate 400F |
|---|---|---|
| Hardware | ||
| GE RJ45 Ports | 8 | Not published |
| GE RJ45 Management / HA Ports | 1 / 1 | Not published |
| 5/2.5/1 GE RJ45 Ports | 8 | Not published |
| GE SFP Slots | 4 | 8 |
| 10 GE SFP+ FortiLink Slots (default) | 8 | Not published |
| USB Ports | 1 | 1 |
| Console Port (RJ45) | 1 | 1 |
| Onboard Storage | Not fitted - see the FortiGate 201G for the model with a 480 GB SSD | Not fitted - see the FortiGate 401F for the model with two 480 GB SSDs |
| Included Transceivers | None | 2 x SFP (SX, 1 GE) |
| Trusted Platform Module (TPM) | Yes | Yes |
| Bluetooth Low Energy (BLE) | Yes | Not published |
| Signed Firmware Hardware Switch | Not fitted | Not published |
| Hardware Acceleration | NP7Lite and CP10 security processors | NP7 and CP9 security processors |
| Hardware Accelerated GE RJ45 Interfaces | Not published | 16 |
| Hardware Accelerated 10 GE SFP+ Slots | Not published | 4 |
| Ultra Low Latency Slots | Not published | 4 10 GE SFP+ |
| GE RJ45 Management Ports | Not published | 2 |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 9 Gbps | 12 Gbps |
| NGFW Throughput | 7 Gbps | 10 Gbps |
| Threat Protection Throughput | 6 Gbps | 9 Gbps |
| System Performance | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP) | 39 / 39 / 26.5 Gbps | 79.5 / 78.5 / 70 Gbps |
| IPv6 Firewall Throughput | 39 / 39 / 26.5 Gbps 1518 / 512 / 64 byte UDP | 79.5 / 78.5 / 70 Gbps 1518 / 512 / 64 byte UDP |
| Firewall Latency (64 byte UDP) | 4.36 microseconds | 4.19 microseconds, or 2.5 microseconds on the ultra low latency ports |
| Firewall Throughput (packets per second) | 39.75 Mpps | 105 Mpps |
| Concurrent Sessions (TCP) | 11 million | 7.8 million |
| New Sessions per Second (TCP) | 400,000 | 500,000 |
| Firewall Policies | 10,000 | 10,000 |
| IPsec VPN Throughput (512 byte) | 36 Gbps | 55 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 2,000 | 2,000 |
| Client-to-Gateway IPsec VPN Tunnels | 16,000 | 50,000 |
| SSL-VPN Throughput | 3 Gbps | 3.6 Gbps |
| Concurrent SSL-VPN Users (recommended maximum, tunnel mode) | 500 | 5,000 |
| SSL Inspection Throughput (IPS, average HTTPS) | 7 Gbps | 8 Gbps |
| SSL Inspection Connections per Second (IPS, average HTTPS) | 7,100 | 6,000 |
| SSL Inspection Concurrent Sessions (IPS, average HTTPS) | 900,000 | 800,000 |
| Application Control Throughput (HTTP 64K) | 27.8 Gbps | 28 Gbps |
| CAPWAP Throughput (HTTP 64K) | 37.5 Gbps | 65 Gbps |
| Virtual Domains (VDOMs) | 10 default / 10 maximum | 10 default / 10 maximum |
| Maximum Number of FortiSwitches Supported | 64 | 72 |
| Maximum Number of FortiAPs (total / tunnel mode) | 256 / 128 | 512 / 256 |
| Maximum Number of FortiTokens | 5,000 | 5,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| Dimensions | ||
| Height x Width x Length | 1.75 x 17.0 x 15.0 in (44.45 x 432 x 380 mm) | 1.75 x 17.0 x 15.0 in (44.45 x 432 x 380 mm) |
| Weight | 14.11 lbs (6.4 kg) | 14.11 lbs (6.4 kg) |
| Form Factor | Rack mount, 1 RU (supports EIA / non-EIA standards) | Rack mount, 1 RU (supports EIA / non-EIA standards) |
| Rack Mount Type | 1 RU | 1 RU |
| Power and Environment | ||
| AC Power Input | 100-240 V AC, 50/60 Hz | 100-240 V AC, 50/60 Hz |
| Redundant Power Supplies | Yes - dual non-swappable AC PSUs fitted by default for 1+1 redundancy | Yes - dual power supplies fitted by default for 1+1 redundancy, hot swappable |
| Power Supply Efficiency Rating | 80 Plus compliant | 80 Plus compliant |
| AC Current (maximum) | 2 A @ 100 V AC, 1.2 A @ 240 V AC | 6 A |
| Power Consumption | 145 W / 175 W AC, average / maximum | 154.8 W / 189.2 W average / maximum |
| Heat Dissipation | 597.12 BTU/hr | 645.58 BTU/hr |
| Operating Temperature | 32-104 F (0-40 C) | 32-104 F (0-40 C) |
| Storage Temperature | -31-158 F (-35-70 C) | -31-158 F (-35-70 C) |
| Humidity | 5% to 90% non-condensing | 5% to 90% non-condensing |
| Noise Level | LPA 48 dBA / LWA 55 dBA | LPA 48 dBA / LWA 55 dBA |
| Forced Airflow | Side and front to back | Not published |
| Operating Altitude | Up to 10,000 ft (3,048 m) | Up to 10,000 ft (3,048 m) |
| Airflow | Not published | Side and front to back |
| Compliance and Certifications | ||
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6 / IPv6 | USGv6 / IPv6 |
Other comparisons in this range
Each step of the FortiGate Mid-Range ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote