FortiGate 3800G
250 Gbps of IPS, four 400 GE QSFP-DD ports and 200 million concurrent sessions - 450 million with the hyperscale licence.
Full specs and SKUsFortinet · FortiGate High-End
FortiGate 3800G vs FortiGate 4200F
Of the 67 specifications Fortinet publishes across these two models, 54 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 4200F
800 Gbps of firewall throughput, 210 million concurrent sessions and eight 100 GE QSFP28 slots in 3 RU.
Full specs and SKUsKey differences
The rows most buyers check first. All 54 differences are in the full table below.
-
IPS Throughput
FortiGate 3800G250 Gbps
FortiGate 4200F52 Gbps
-
NGFW Throughput
FortiGate 3800G210 Gbps
FortiGate 4200F47 Gbps
-
Threat Protection Throughput
FortiGate 3800G200 Gbps
FortiGate 4200F45 Gbps
-
IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP)
FortiGate 3800G795 / 793 / 453 Gbps
FortiGate 4200F800 / 788 / 400 Gbps
-
Firewall Latency (64 byte, UDP)
FortiGate 3800G3.53 µs
FortiGate 4200F3.02 µs
-
Firewall Throughput (Packet per Second)
FortiGate 3800G679.5 Mpps
FortiGate 4200F600 Mpps
Which one fits
The FortiGate 4200F is not a straight step up from the FortiGate 3800G: it publishes less threat-protection throughput (45 Gbps against 200 Gbps) and IPS throughput (52 Gbps against 250 Gbps). On the headline figures it gains nothing. Neither choice moves the concurrent session table (200 Million / 450 Million with the hyperscale licence against 210 Million / 450 Million with the hyperscale licence) or IPsec VPN throughput (both 210 Gbps), so a site held back by how many flows can be live at once gains nothing from the FG-4200F.
Choose the FortiGate 3800G if
- Firewall latency is already enough at 3.53 µs: the FG-4200F adds +17% you will not use.
- The FG-3800G is ahead on threat-protection throughput: 200 Gbps against 45 Gbps.
- The FG-3800G is ahead on IPS throughput: 250 Gbps against 52 Gbps.
- Your limit is how many flows can be live at once, which the step up does not move: 200 Million / 450 Million with the hyperscale licence against 210 Million / 450 Million with the hyperscale licence.
Choose the FortiGate 4200F if
- Firewall latency has to go past 3.53 µs: the FG-4200F publishes 3.02 µs.
- Power draw has to go past 1496 W / 1950 W: the FG-4200F publishes 931 W / 1291 W.
13 of the 67 published rows are identical — Concurrent SSL-VPN Users at 30,000, Virtual Domains at 10 / 500, Gateway-to-Gateway IPsec VPN Tunnels at 40,000 and Client-to-Gateway IPsec VPN Tunnels at 200,000 among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 3800G | FortiGate 4200F |
|---|---|---|
| Interfaces and Modules | ||
| Hardware Accelerated 400 GE QSFP-DD / 200 GE QSFP56 / 100 GE QSFP28 / 40 GE QSFP+ Ports | 4 | Not published |
| Hardware Accelerated 200 GE QSFP56 / 100 GE QSFP28 / 40 GE QSFP+ Slots | 6 | Not published |
| Hardware Accelerated 50 GE SFP56 / 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 18 | Not published |
| 10 GE / GE RJ45 Management Ports | 2 | Not published |
| 100 GE QSFP28 / 40 GE QSFP+ Slots | Not published | 8 |
| 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | Not published | 16 |
| 25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots | Not published | 2 |
| 25 GE SFP28 / 10 GE SFP+ / GE SFP AUX Slots | Not published | 2 |
| Hardware | ||
| USB Ports | 1 | 1 |
| Console Port (RJ45) | 1 | 1 |
| Trusted Platform Module (TPM) | Yes | Not published |
| Signed Firmware Hardware Switch | Yes | Not published |
| FortiSentry | Yes | Not published |
| Included Transceivers | 2 x SFP+ (SR 10 GE) | 2 x SFP+ (SR 10 GE) |
| Onboard Storage | None | None |
| GE RJ45 Management Ports | Not published | 2 |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 250 Gbps | 52 Gbps |
| NGFW Throughput | 210 Gbps | 47 Gbps |
| Threat Protection Throughput | 200 Gbps | 45 Gbps |
| System Performance and Capacity | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte, UDP) | 795 / 793 / 453 Gbps | Not published |
| IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) | 795 / 793 / 453 Gbps | 800 / 788 / 400 Gbps |
| Firewall Latency (64 byte, UDP) | 3.53 µs | 3.02 µs |
| Firewall Throughput (Packet per Second) | 679.5 Mpps | 600 Mpps |
| New Sessions/Second (TCP) | 1.11 Million / 7 Million with the hyperscale licence | 1 Million / 7 Million with the hyperscale licence |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 30,000 | 30,000 |
| SSL Inspection Throughput (IPS, avg HTTPS) | 120 Gbps | 50 Gbps |
| SSL Inspection CPS (IPS, avg HTTPS) | 114,000 | 23,000 |
| SSL Inspection Concurrent Session (IPS, avg HTTPS) | 18 Million | 9 Million |
| Virtual Domains (Default / Maximum) | 10 / 500 | 10 / 500 |
| Maximum Number of FortiAPs (Total / Tunnel) | 8,192 / 4,096 | Not published |
| Maximum Number of FortiClients | 50,000 | Not published |
| Firewall Throughput (1518 / 512 / 64 byte, UDP) | Not published | 800 / 788 / 400 Gbps |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | Not published | 8,192 / 4,096 |
| Maximum Number of Registered FortiClients | Not published | 50,000 |
| System Performance | ||
| Concurrent Sessions (TCP) | 200 Million / 450 Million with the hyperscale licence | 210 Million / 450 Million with the hyperscale licence |
| Firewall Policies | 400,000 | 200,000 |
| IPsec VPN Throughput (512 byte) | 210 Gbps | 210 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 40,000 | 40,000 |
| Client-to-Gateway IPsec VPN Tunnels | 200,000 | 200,000 |
| SSL-VPN Throughput | 27 Gbps | 16 Gbps |
| Application Control Throughput (HTTP 64K) | 315 Gbps | 135 Gbps |
| CAPWAP Throughput (HTTP 64K) | Not yet published by Fortinet | 47 Gbps |
| Maximum Number of FortiSwitches Supported | 300 | 300 |
| Maximum Number of FortiTokens | 20,000 | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| Dimensions and Power | ||
| Height x Width x Length (mm) | 132.5 x 437 x 663.7 | 132.5 x 437 x 664.8 |
| Height x Width x Length (inches) | 5.22 x 17.2 x 26.13 | 5.22 x 17.20 x 26.17 |
| Form Factor (supports EIA/non-EIA standards) | Rack Mount, 3 RU | Rack Mount, 3 RU |
| AC Current (Maximum) | 10A@200-240VAC | 13.5A@120V, 5.5A@240V |
| Power Consumption (Average / Maximum) | 1496 W / 1950 W | 931 W / 1291 W |
| DC Current (Maximum) | 12A@100V, 9A@240V | Not published |
| Fan Tray | Hot Swappable | Not published |
| Dimensions | ||
| Weight | 71.65 lbs (32.5 kg) | 59.75 lbs (27.10 kg) |
| Power and Environment | ||
| AC Power Supply | 200-240V AC, 60/50 Hz | Not published |
| DC Power Supply | -48VDC to -60VDC, 23A | Not published |
| Heat Dissipation | 6654 BTU/h | 4406 BTU/h |
| Redundant Power Supplies | Hot Swappable, 2+2 | Default 1+1 Redundant, Hot Swappable |
| Power Supply Efficiency Rating | 80+ Platinum | Not published |
| Noise Level | 70.4 dBA | 57 dBA |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) | 32°-104°F (0°-40°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) | -31°-158°F (-35°-70°C) |
| Humidity | 20% to 90% non-condensing | 20%-90% non-condensing |
| Forced Airflow | Front to Back | Not published |
| Operating Altitude | Up to 10 000 ft (3048 m) | Up to 7,400 ft (2,250 m) |
| AC Power Input | Not published | 100-240V AC, 50/60 Hz |
| Compliance and Certifications | ||
| Compliance | Not yet published by Fortinet | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6 |
Other comparisons in this range
Each step of the FortiGate High-End ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote