FortiGate 30G
Converged next-generation firewall and SD-WAN in one fanless desktop appliance, with 800 Mbps IPS throughput and the SD-WAN and wireless controller included at no extra cost.
Full specs and SKUsFortinet · FortiGate Entry Level
FortiGate 30G vs FortiGate 40F
Of the 57 specifications Fortinet publishes across these two models, 40 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 40F
A step up from the 30G: 1 Gbps IPS, five GE ports, SSL-VPN and virtual domains, in the same fanless desktop footprint.
Full specs and SKUsKey differences
The rows most buyers check first. All 40 differences are in the full table below.
-
IPS Throughput
FortiGate 30G800 Mbps
FortiGate 40F1 Gbps
-
NGFW Throughput
FortiGate 30G570 Mbps
FortiGate 40F800 Mbps
-
Threat Protection Throughput
FortiGate 30G500 Mbps
FortiGate 40F600 Mbps
-
IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP)
FortiGate 30G4 / 4 / 3.9 Gbps
FortiGate 40F5 / 5 / 5 Gbps
-
Firewall Latency (64 byte UDP)
FortiGate 30G2.87 microseconds
FortiGate 40F2.97 microseconds
-
Firewall Throughput (packets per second)
FortiGate 30G5.85 Mpps
FortiGate 40F7.5 Mpps
Which one fits
Stepping up from the FortiGate 30G to the FortiGate 40F moves threat-protection throughput from 500 Mbps to 600 Mbps (+20%), IPS throughput from 800 Mbps to 1 Gbps (+25%) and NGFW throughput from 570 Mbps to 800 Mbps (+40%). Neither choice moves the TLS inspection session table (both 55,000) or the site-to-site tunnel count (both 200), so a site held back by how many decrypted sessions can be live at once gains nothing from the FG-40F. The FortiGate 30G is in fact ahead on TLS inspection throughput: 400 Mbps against 310 Mbps.
Choose the FortiGate 30G if
- Threat-protection throughput is already enough at 500 Mbps: the FG-40F adds +20% you will not use.
- The FG-30G is ahead on TLS inspection throughput: 400 Mbps against 310 Mbps.
- The FG-30G is ahead on power draw: 6.8 W / 8.2 W against 7.74 W / 9.46 W.
- Your limit is how many decrypted sessions can be live at once, which the step up does not move: 55,000 against 55,000.
Choose the FortiGate 40F if
- Threat-protection throughput has to go past 500 Mbps: the FG-40F publishes 600 Mbps.
- IPS throughput has to go past 800 Mbps: the FG-40F publishes 1 Gbps.
- NGFW throughput has to go past 570 Mbps: the FG-40F publishes 800 Mbps.
- Only the FG-40F has Virtual Domains (10 default / 10 maximum).
17 of the 57 published rows are identical — Firewall Policies at 2,000, Gateway-to-Gateway IPsec VPN Tunnels at 200, Client-to-Gateway IPsec VPN Tunnels at 250 and Maximum Number of FortiSwitches Supported at 8 among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 30G | FortiGate 40F |
|---|---|---|
| Hardware | ||
| GE RJ45 WAN Ports | 1 | 1 (WAN / DMZ) |
| GE RJ45 Internal Ports | 2 | 3 internal |
| GE RJ45 FortiLink Ports (default) | 1 | 1 |
| Console Port (RJ45) | 1 | 1 |
| USB Ports | Not fitted | 1 |
| Onboard Storage | Not fitted | Not fitted |
| Trusted Platform Module (TPM) | Yes | Not fitted |
| Bluetooth Low Energy (BLE) | Not fitted | Not fitted |
| Wireless Interface | Not fitted - see the FortiWiFi 30G for the wireless variant | Not fitted - see the FortiWiFi 40F for the wireless variant |
| Signed Firmware Hardware Switch | Not fitted | Not fitted |
| GE RJ45 PoE/PoE+ Ports | Not published | Not fitted |
| Included Transceivers | Not published | None |
| Cellular Modem | Not published | Not fitted - see the FortiGate 40F-3G4G for the LTE variant |
| Antenna Ports (SMA) | Not published | Not fitted |
| SIM Slots (nano SIM) | Not published | Not fitted |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 800 Mbps | 1 Gbps |
| NGFW Throughput | 570 Mbps | 800 Mbps |
| Threat Protection Throughput | 500 Mbps | 600 Mbps |
| System Performance | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP) | 4 / 4 / 3.9 Gbps | 5 / 5 / 5 Gbps |
| IPv6 Firewall Throughput | 4 / 4 / 3.9 Gbps 1518 / 512 / 86 byte UDP | Not published |
| Firewall Latency (64 byte UDP) | 2.87 microseconds | 2.97 microseconds |
| Firewall Throughput (packets per second) | 5.85 Mpps | 7.5 Mpps |
| Concurrent Sessions (TCP) | 600,000 | 700,000 |
| New Sessions per Second (TCP) | 30,000 | 35,000 |
| Firewall Policies | 2,000 | 2,000 |
| IPsec VPN Throughput (512 byte) | 3.5 Gbps | 4.4 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 200 | 200 |
| Client-to-Gateway IPsec VPN Tunnels | 250 | 250 |
| SSL Inspection Throughput (IPS, average HTTPS) | 400 Mbps | 310 Mbps |
| SSL Inspection Connections per Second (IPS, average HTTPS) | 260 | 320 |
| SSL Inspection Concurrent Sessions (IPS, average HTTPS) | 55,000 | 55,000 |
| Application Control Throughput (HTTP 64K) | 830 Mbps | 990 Mbps |
| CAPWAP Throughput (HTTP 64K) | Not yet published | 3.5 Gbps |
| Virtual Domains (VDOMs) | Not supported | 10 default / 10 maximum |
| Maximum Number of FortiSwitches Supported | 8 | 8 |
| Maximum Number of FortiAPs (total / tunnel mode) | 16 / 8 | 16 / 8 |
| Maximum Number of FortiTokens | 500 | 500 |
| High Availability Configurations | Active-Passive, Active-Active | Active-Active, Active-Passive, Clustering |
| Concurrent SSL-VPN Users (recommended maximum, tunnel mode) | Not supported | 200 |
| SSL-VPN Throughput | Not supported | 490 Mbps |
| Dimensions | ||
| Height x Width x Length | 1.6 x 5.6 x 6.3 in (40.5 x 142 x 160 mm) | 1.5 x 8.5 x 6.3 in (38.5 x 216 x 160 mm) |
| Weight | 1.3 lbs (0.6 kg) | 2.2 lbs (1 kg) |
| Form Factor | Desktop (supports EIA / non-EIA standards) | Desktop (supports EIA / non-EIA standards) |
| Wall Mountable | Optional | Not published |
| Rack Mount Type | Not applicable | Not applicable - optional rack tray, SP-RACKTRAY-02 |
| Power and Environment | ||
| Power Rating | 12 VDC, 2 A | 12 VDC, 3 A |
| Power Source | 100-240 V AC, 50/60 Hz via external DC adapter | 100-240 V AC, 50/60 Hz via external DC adapter |
| Maximum Current | 100 V / 0.11 A, 240 V / 0.055 A | 100 V / 0.2 A, 240 V / 0.1 A |
| Power Consumption | 6.8 W / 8.2 W average / maximum | 7.74 W / 9.46 W average / maximum |
| Heat Dissipation | 28 BTU/hr | 52.55 BTU/hr |
| Operating Temperature | 32-104 F (0-40 C) | 32-104 F (0-40 C) |
| Storage Temperature | -31-158 F (-35-70 C) | -31-158 F (-35-70 C) |
| Humidity | 20% to 90% non-condensing | 10% to 90% non-condensing |
| Operating Altitude | Up to 10,000 ft (3,048 m) | Up to 7,400 ft (2,250 m) |
| Noise Level | Fanless - no rated noise level | Fanless, 0 dBA |
| Compliance and Certifications | ||
| Compliance | FCC, IC, CE, UL/cUL, CB, VCCI, BSMI, RCM, UKCA | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB |
| Certifications | USGv6 / IPv6 | USGv6 / IPv6 |
Other comparisons in this range
Each step of the FortiGate Entry Level ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote