FortiGate 400F
79.5 Gbps of firewall throughput, 7.8 million sessions and four ultra low latency ports, accelerated by NP7 and CP9.
Full specs and SKUsFortinet · FortiGate Mid-Range
FortiGate 400F vs FortiGate 400G
Of the 64 specifications Fortinet publishes across these two models, 48 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 400G
164 Gbps of firewall throughput, 28 million concurrent sessions and 25 GE SFP28 uplinks - a data centre core in 1 RU.
Full specs and SKUsKey differences
The rows most buyers check first. All 48 differences are in the full table below.
-
IPS Throughput
FortiGate 400F12 Gbps
FortiGate 400G25 Gbps
-
NGFW Throughput
FortiGate 400F10 Gbps
FortiGate 400G14 Gbps
-
Threat Protection Throughput
FortiGate 400F9 Gbps
FortiGate 400G13 Gbps
-
IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP)
FortiGate 400F79.5 / 78.5 / 70 Gbps
FortiGate 400G164 / 164 / 145 Gbps
-
IPv6 Firewall Throughput
FortiGate 400F79.5 / 78.5 / 70 Gbps 1518 / 512 / 64 byte UDP
FortiGate 400G164 / 164 / 145 Gbps 1518 / 512 / 86 byte UDP
-
Firewall Throughput (packets per second)
FortiGate 400F105 Mpps
FortiGate 400G217.5 Mpps
Which one fits
Stepping up from the FortiGate 400F to the FortiGate 400G moves threat-protection throughput from 9 Gbps to 13 Gbps (+44%), IPS throughput from 12 Gbps to 25 Gbps (2.1×) and NGFW throughput from 10 Gbps to 14 Gbps (+40%). Neither choice moves IPsec VPN throughput (both 55 Gbps) or the site-to-site tunnel count (both 2,000), so a site held back by site-to-site tunnel capacity gains nothing from the FG-400G. The FortiGate 400F is in fact ahead on power draw: 154.8 W / 189.2 W against 230 W / 283 W.
Choose the FortiGate 400F if
- Threat-protection throughput is already enough at 9 Gbps: the FG-400G adds +44% you will not use.
- The FG-400F is ahead on power draw: 154.8 W / 189.2 W against 230 W / 283 W.
- Your limit is site-to-site tunnel capacity, which the step up does not move: 55 Gbps against 55 Gbps.
Choose the FortiGate 400G if
- Threat-protection throughput has to go past 9 Gbps: the FG-400G publishes 13 Gbps.
- IPS throughput has to go past 12 Gbps: the FG-400G publishes 25 Gbps.
- NGFW throughput has to go past 10 Gbps: the FG-400G publishes 14 Gbps.
- The FG-400G has 16 × GE SFP Slots against 8.
16 of the 64 published rows are identical — Trusted Platform Module at Yes, Firewall Policies at 10,000, Gateway-to-Gateway IPsec VPN Tunnels at 2,000 and Client-to-Gateway IPsec VPN Tunnels at 50,000 among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 400F | FortiGate 400G |
|---|---|---|
| Hardware | ||
| Hardware Accelerated GE RJ45 Interfaces | 16 | Not published |
| GE SFP Slots | 8 | 16 |
| Hardware Accelerated 10 GE SFP+ Slots | 4 | Not published |
| Ultra Low Latency Slots | 4 10 GE SFP+ | Not published |
| GE RJ45 Management Ports | 2 | Not published |
| USB Ports | 1 | 2 client / server |
| Console Port (RJ45) | 1 | 1 |
| Onboard Storage | Not fitted - see the FortiGate 401F for the model with two 480 GB SSDs | Not fitted - see the FortiGate 401G for the model with two 480 GB SSDs |
| Trusted Platform Module (TPM) | Yes | Yes |
| Included Transceivers | 2 x SFP (SX, 1 GE) | 2 x SFP SX |
| Hardware Acceleration | NP7 and CP9 security processors | NP7 and CP10 security processors |
| Hardware Accelerated 25/10 GE SFP28/SFP+ Slots | Not published | 4 |
| Hardware Accelerated 10/1 GE SFP+/SFP FortiLink Slots | Not published | 4 |
| 5/2.5/1 GE RJ45 Ports | Not published | 8 |
| Hardware Accelerated 2.5/1 GE RJ45 HA Port | Not published | 1 |
| Hardware Accelerated GE RJ45 Management Port | Not published | 1 |
| Bluetooth Low Energy (BLE) | Not published | Not fitted |
| Signed Firmware Hardware Switch | Not published | Yes |
| FortiSentry | Not published | Yes |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 12 Gbps | 25 Gbps |
| NGFW Throughput | 10 Gbps | 14 Gbps |
| Threat Protection Throughput | 9 Gbps | 13 Gbps |
| System Performance | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP) | 79.5 / 78.5 / 70 Gbps | 164 / 164 / 145 Gbps |
| IPv6 Firewall Throughput | 79.5 / 78.5 / 70 Gbps 1518 / 512 / 64 byte UDP | 164 / 164 / 145 Gbps 1518 / 512 / 86 byte UDP |
| Firewall Latency (64 byte UDP) | 4.19 microseconds, or 2.5 microseconds on the ultra low latency ports | 2.51 microseconds |
| Firewall Throughput (packets per second) | 105 Mpps | 217.5 Mpps |
| Concurrent Sessions (TCP) | 7.8 million | 28 million |
| New Sessions per Second (TCP) | 500,000 | 580,000 |
| Firewall Policies | 10,000 | 10,000 |
| IPsec VPN Throughput (512 byte) | 55 Gbps | 55 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 2,000 | 2,000 |
| Client-to-Gateway IPsec VPN Tunnels | 50,000 | 50,000 |
| SSL-VPN Throughput | 3.6 Gbps | 6.1 Gbps |
| Concurrent SSL-VPN Users (recommended maximum, tunnel mode) | 5,000 | 5,000 |
| SSL Inspection Throughput (IPS, average HTTPS) | 8 Gbps | 11.5 Gbps |
| SSL Inspection Connections per Second (IPS, average HTTPS) | 6,000 | 9,700 |
| SSL Inspection Concurrent Sessions (IPS, average HTTPS) | 800,000 | 3 million |
| Application Control Throughput (HTTP 64K) | 28 Gbps | 50 Gbps |
| CAPWAP Throughput (HTTP 64K) | 65 Gbps | 131 Gbps |
| Virtual Domains (VDOMs) | 10 default / 10 maximum | 10 default / 50 maximum |
| Maximum Number of FortiSwitches Supported | 72 | 96 |
| Maximum Number of FortiAPs (total / tunnel mode) | 512 / 256 | 512 / 256 |
| Maximum Number of FortiTokens | 5,000 | 5,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| Dimensions | ||
| Height x Width x Length | 1.75 x 17.0 x 15.0 in (44.45 x 432 x 380 mm) | 1.75 x 17.0 x 13.5 in (44.45 x 432 x 342 mm) |
| Weight | 14.11 lbs (6.4 kg) | 7.72 lbs (3.5 kg) |
| Form Factor | Rack mount, 1 RU (supports EIA / non-EIA standards) | Rack mount, 1 RU (supports EIA / non-EIA standards) |
| Rack Mount Type | 1 RU | 1 RU |
| Power and Environment | ||
| Redundant Power Supplies | Yes - dual power supplies fitted by default for 1+1 redundancy, hot swappable | Yes - dual non-swappable AC PSUs fitted by default for 1+1 redundancy |
| Power Supply Efficiency Rating | 80 Plus compliant | Not published |
| Power Consumption | 154.8 W / 189.2 W average / maximum | 230 W / 283 W average / maximum |
| Heat Dissipation | 645.58 BTU/hr | 965 BTU/hr |
| Operating Temperature | 32-104 F (0-40 C) | 32-113 F (0-45 C) |
| Storage Temperature | -31-158 F (-35-70 C) | -31-158 F (-35-70 C) |
| Humidity | 5% to 90% non-condensing | 10% to 90% non-condensing |
| Noise Level | LPA 48 dBA / LWA 55 dBA | 59 dBA |
| Airflow | Side and front to back | Not published |
| Operating Altitude | Up to 10,000 ft (3,048 m) | Up to 10,000 ft (3,048 m) |
| AC Power Input | 100-240 V AC, 50/60 Hz | Not published |
| AC Current (maximum) | 6 A | 6 A @ 100 V AC |
| AC Power Supply | Not published | 100-240 V AC, 50/60 Hz |
| Forced Airflow | Not published | Side and front to back |
| Compliance and Certifications | ||
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6 / IPv6 | USGv6 / IPv6 |
Other comparisons in this range
Each step of the FortiGate Mid-Range ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote