FortiGate 4400F
1.15 Tbps of firewall throughput, 210 million concurrent sessions and twelve 100 GE QSFP28 slots in 4 RU.
Full specs and SKUsFortinet · FortiGate High-End
FortiGate 4400F vs FortiGate 4800F
Of the 60 specifications Fortinet publishes across these two models, 33 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 4800F
3.1 Tbps of firewall throughput, 800 Gbps of IPsec VPN and eight 400 GE QSFP-DD slots in 4 RU.
Full specs and SKUsKey differences
The rows most buyers check first. All 33 differences are in the full table below.
-
IPS Throughput
FortiGate 4400F94 Gbps
FortiGate 4800F87 Gbps
-
NGFW Throughput
FortiGate 4400F82 Gbps
FortiGate 4800F77 Gbps
-
Firewall Throughput (1518 / 512 / 64 byte, UDP)
FortiGate 4400F1.15 / 1.14 / 0.50 Tbps
FortiGate 4800F3.1 / 3.1 / 0.93 Tbps
-
IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP)
FortiGate 4400F1.15 / 1.14 / 0.50 Tbps
FortiGate 4800F3.1 / 3.1 / 0.93 Tbps
-
Firewall Latency (64 byte, UDP)
FortiGate 4400F2.98 µs
FortiGate 4800F3.6 µs
-
Firewall Throughput (Packet per Second)
FortiGate 4400F750 Mpps
FortiGate 4800F1,396 Mpps
Which one fits
Stepping up from the FortiGate 4400F to the FortiGate 4800F moves the concurrent session table from 210 Million / 700 Million with the hyperscale licence to 280 Million / 1.8 Billion with the hyperscale licence (+33%), the session setup rate from 1 Million / 10 Million with the hyperscale licence to 915,000 / 25 Million with the hyperscale licence (915000×) and the TLS inspection session table from 9 Million to 30 Million (3.3×). Neither choice moves threat-protection throughput (both 75 Gbps) or IPS throughput (94 Gbps against 87 Gbps), so a site held back by traffic run through the whole inspection stack gains nothing from the FG-4800F. The FortiGate 4400F is in fact ahead on TLS inspection throughput: 86 Gbps against 63 Gbps.
Choose the FortiGate 4400F if
- The concurrent session table is already enough at 210 Million / 700 Million with the hyperscale licence: the FG-4800F adds +33% you will not use.
- The FG-4400F is ahead on TLS inspection throughput: 86 Gbps against 63 Gbps.
- The FG-4400F is ahead on the TLS handshake rate: 70,000 against 60,000.
- Your limit is traffic run through the whole inspection stack, which the step up does not move: 75 Gbps against 75 Gbps.
Choose the FortiGate 4800F if
- The concurrent session table has to go past 210 Million / 700 Million with the hyperscale licence: the FG-4800F publishes 280 Million / 1.8 Billion with the hyperscale licence.
- The session setup rate has to go past 1 Million / 10 Million with the hyperscale licence: the FG-4800F publishes 915,000 / 25 Million with the hyperscale licence.
- The TLS inspection session table has to go past 9 Million: the FG-4800F publishes 30 Million.
- IPsec VPN throughput has to go past 310 Gbps: the FG-4800F publishes 800 Gbps.
27 of the 60 published rows are identical — Trusted Platform Module at Yes, Concurrent SSL-VPN Users at 30,000, Virtual Domains at 10 / 500 and Maximum Number of FortiAPs at 8,192 / 4,096 among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 4400F | FortiGate 4800F |
|---|---|---|
| Interfaces and Modules | ||
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 12 | Not published |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 | Not published |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots | 2 | Not published |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP AUX Slots | 2 | Not published |
| Hardware Accelerated 400 GE / 200 GE QSFP-DD Slots | Not published | 8 |
| Hardware Accelerated 200 GE / 100 GE / 40 GE QSFP56 / QSFP28 / SFP28 Slots | Not published | 12 |
| Hardware Accelerated 50 GE / 25 GE / 10 GE SFP56 / SFP28 / SFP+ Slots | Not published | 8 |
| Hardware Accelerated 50 GE / 25 GE / 10 GE SFP56 / SFP28 / SFP+ HA and AUX Slots | Not published | 4 |
| 10 GE / GE RJ45 Management Ports | Not published | 2 |
| Hardware | ||
| GE RJ45 Management Ports | 2 | Not published |
| USB Ports | 1 (USB 3.0) | 1 (USB 3.0) |
| Console Port (RJ45) | 1 | 1 |
| Onboard Storage | Not fitted | Not fitted |
| Trusted Platform Module (TPM) | Yes | Yes |
| Included Transceivers | 2 x SFP+ (SR 10 GE) | 2 x SFP+ (SR 10 GE) |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 94 Gbps | 87 Gbps |
| NGFW Throughput | 82 Gbps | 77 Gbps |
| Threat Protection Throughput | 75 Gbps | 75 Gbps |
| System Performance and Capacity | ||
| Firewall Throughput (1518 / 512 / 64 byte, UDP) | 1.15 / 1.14 / 0.50 Tbps | 3.1 / 3.1 / 0.93 Tbps |
| IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) | 1.15 / 1.14 / 0.50 Tbps | 3.1 / 3.1 / 0.93 Tbps |
| Firewall Latency (64 byte, UDP) | 2.98 µs | 3.6 µs |
| Firewall Throughput (Packet per Second) | 750 Mpps | 1,396 Mpps |
| New Sessions/Second (TCP) | 1 Million / 10 Million with the hyperscale licence | 915,000 / 25 Million with the hyperscale licence |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 30,000 | 30,000 |
| SSL Inspection Throughput (IPS, avg HTTPS) | 86 Gbps | 63 Gbps |
| SSL Inspection CPS (IPS, avg HTTPS) | 70,000 | 60,000 |
| SSL Inspection Concurrent Session (IPS, avg HTTPS) | 9 Million | 30 Million |
| Virtual Domains (Default / Maximum) | 10 / 500 | 10 / 500 |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 8,192 / 4,096 | 8,192 / 4,096 |
| Maximum Number of Registered FortiClients | 20,000 | Not published |
| System Performance | ||
| Concurrent Sessions (TCP) | 210 Million / 700 Million with the hyperscale licence | 280 Million / 1.8 Billion with the hyperscale licence |
| Firewall Policies | 400,000 | 200,000 |
| IPsec VPN Throughput (512 byte) | 310 Gbps | 800 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 40,000 | 40,000 |
| Client-to-Gateway IPsec VPN Tunnels | 200,000 | 200,000 |
| SSL-VPN Throughput | 16 Gbps | 18 Gbps (RSA-2048 certificate) |
| Application Control Throughput (HTTP 64K) | 140 Gbps | 180 Gbps |
| CAPWAP Throughput (HTTP 64K) | 63 Gbps | 112 Gbps |
| Maximum Number of FortiSwitches Supported | 300 | 300 |
| Maximum Number of FortiTokens | 20,000 | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| Dimensions and Power | ||
| Height x Width x Length (mm) | 177 x 437 x 665 | 175 x 435 x 663 |
| Height x Width x Length (inches) | 6.97 x 17.20 x 26.17 | 6.89 x 17.13 x 26.10 |
| Form Factor (supports EIA/non-EIA standards) | Rack Mount, 4 RU | Rack Mount, 4 RU |
| AC Current (Maximum) | 20A@100V, 9A@240V | 7.99A@240VAC |
| Power Consumption (Average / Maximum) | 1533 W / 1875 W | 1602 W / 1918.2 W |
| Fan Tray | Hot Swappable | Hot Swappable |
| Dimensions | ||
| Weight | 81.8 lbs (37.1 kg) | 90.83 lbs (41.2 kg) |
| Power and Environment | ||
| AC Power Input | 100-240V AC, 50/60 Hz | 100-240V AC, 50/60 Hz |
| Heat Dissipation | 6397.77 BTU/h | 6544.9 BTU/h |
| Redundant Power Supplies | Yes, Hot Swappable, 2+2 | Yes, Hot Swappable, 2+2 |
| Power Supply Efficiency Rating | 80 Plus Compliant | 80 Plus Compliant |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) | 32°F to 104°F (0°C to 40°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 20% to 90% non-condensing | 20% to 90% non-condensing |
| Noise Level | 68.9 dBA | 68.9 dBA |
| Forced Airflow | Front to Back | Front to Back |
| Operating Altitude | Up to 7,400 ft (2250 m) - derate 1.5°C per 1,000 ft above it | Up to 7,400 ft (2250 m) - derate 1.5°C per 1,000 ft above it |
| Compliance and Certifications | ||
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 | USGv6/IPv6 |
Other comparisons in this range
Each step of the FortiGate High-End ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote