- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
More models in this series
Fortinet FortiGate 121G
The FortiGate 120G with a 480 GB SSD fitted - rackmount scale, keeping its own logs.
- 480 GB onboard SSD for local log retention
- 5.3 Gbps IPS and 2.8 Gbps threat protection throughput
- 39 Gbps firewall throughput and 35 Gbps IPsec VPN
- 16 x GE RJ45 switch ports, 8 x GE SFP and 4 x 10GE SFP+ FortiLink
- 3 million concurrent sessions and 16,000 client VPN tunnels
Hardware & subscription options
Every orderable Fortinet part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The FortiGate hardware on its own, with no FortiCare or FortiGuard contract attached.
Fortinet FortiGate 121G Appliance
-
Fortinet FortiGate 121G Base Appliance FortiGate-121G 18 x GE RJ45 ports (including 1 x MGMT port, 1 x HA port, 16 x switch ports), 8 x GE SFP slots, 4 x 10GE SFP+ slots, SP5 hardware accelerated, 480GB onboard SSD storage, dual AC power supplies. #FG-121GGet a Quote
Hardware Bundle - Enterprise Protection
The appliance supplied with FortiCare Premium support and the Enterprise service bundle - the widest set of FortiGuard services.
Fortinet Hardware Bundle - Enterprise Protection (Hardware and Services Together)
-
Fortinet FortiGate 121G with FortiCare Premium and FortiGuard Enterprise Protection - 1 Year #FG-121G-BDL-809-12Get a Quote
-
Fortinet FortiGate 121G with FortiCare Premium and FortiGuard Enterprise Protection - 3 Year #FG-121G-BDL-809-36Get a Quote
-
Fortinet FortiGate 121G with FortiCare Premium and FortiGuard Enterprise Protection - 5 Year #FG-121G-BDL-809-60Get a Quote
Hardware Bundle - Unified Threat Protection (UTP)
The appliance supplied with FortiCare Premium support and the UTP service bundle - the usual starting point for a new unit.
Fortinet Hardware Bundle - Unified Threat Protection (UTP) (Hardware and Services Together)
-
Fortinet FortiGate 121G with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 1 Year #FG-121G-BDL-950-12Get a Quote
-
Fortinet FortiGate 121G with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 3 Year #FG-121G-BDL-950-36Get a Quote
-
Fortinet FortiGate 121G with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 5 Year #FG-121G-BDL-950-60Get a Quote
Enterprise Protection
The Enterprise service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Enterprise Protection (Service Subscription - Hardware Required)
-
Fortinet Enterprise Protection for FortiGate 121G - 1 Year #FC-10-F121G-809-02-12Get a Quote
-
Fortinet Enterprise Protection for FortiGate 121G - 3 Year #FC-10-F121G-809-02-36Get a Quote
-
Fortinet Enterprise Protection for FortiGate 121G - 5 Year #FC-10-F121G-809-02-60Get a Quote
Unified Threat Protection (UTP)
The UTP service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Unified Threat Protection (UTP) (Service Subscription - Hardware Required)
-
Fortinet Unified Threat Protection (UTP) for FortiGate 121G - 1 Year #FC-10-F121G-950-02-12Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 121G - 3 Year #FC-10-F121G-950-02-36Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 121G - 5 Year #FC-10-F121G-950-02-60Get a Quote
Advanced Threat Protection (ATP)
The lightest of the three bundles: IPS, antivirus, sandboxing and application control, without the web filtering and antispam that UTP adds.
Fortinet Advanced Threat Protection (ATP) (Service Subscription - Hardware Required)
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 121G - 1 Year #FC-10-F121G-928-02-12Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 121G - 3 Year #FC-10-F121G-928-02-36Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 121G - 5 Year #FC-10-F121G-928-02-60Get a Quote
FortiCare Support
Support contracts on their own: ticket handling, hardware replacement and firmware upgrades.
Fortinet FortiCare Support (Service Subscription - Hardware Required)
-
Fortinet FortiCare Premium Support for FortiGate 121G - 1 Year #FC-10-F121G-247-02-12Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 121G - 3 Year #FC-10-F121G-247-02-36Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 121G - 5 Year #FC-10-F121G-247-02-60Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 121G - 1 Year #FC-10-F121G-284-02-12Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 121G - 3 Year #FC-10-F121G-284-02-36Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 121G - 5 Year #FC-10-F121G-284-02-60Get a Quote
Fortinet FortiCare Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 121G (existing FortiCare Premium contract required) - 1 Year #FC-10-F121G-204-02-12Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 121G (existing FortiCare Premium contract required) - 3 Year #FC-10-F121G-204-02-36Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 121G (existing FortiCare Premium contract required) - 5 Year #FC-10-F121G-204-02-60Get a Quote
Individual Security Services
Single FortiGuard services, for adding one capability rather than a whole bundle.
Fortinet Individual Security Services (Service Subscription - Hardware Required)
-
Fortinet FortiGuard IPS Service for FortiGate 121G - 1 Year #FC-10-F121G-108-02-12Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 121G - 3 Year #FC-10-F121G-108-02-36Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 121G - 5 Year #FC-10-F121G-108-02-60Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 121G - antivirus, mobile malware and FortiSandbox Cloud - 1 Year #FC-10-F121G-100-02-12Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 121G - antivirus, mobile malware and FortiSandbox Cloud - 3 Year #FC-10-F121G-100-02-36Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 121G - antivirus, mobile malware and FortiSandbox Cloud - 5 Year #FC-10-F121G-100-02-60Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 121G - 1 Year #FC-10-F121G-577-02-12Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 121G - 3 Year #FC-10-F121G-577-02-36Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 121G - 5 Year #FC-10-F121G-577-02-60Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 121G - 1 Year #FC-10-F121G-589-02-12Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 121G - 3 Year #FC-10-F121G-589-02-36Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 121G - 5 Year #FC-10-F121G-589-02-60Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 121G - 1 Year #FC-10-F121G-112-02-12Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 121G - 3 Year #FC-10-F121G-112-02-36Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 121G - 5 Year #FC-10-F121G-112-02-60Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 121G - 1 Year #FC-10-F121G-159-02-12Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 121G - 3 Year #FC-10-F121G-159-02-36Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 121G - 5 Year #FC-10-F121G-159-02-60Get a Quote
-
Fortinet FortiConverter Service for FortiGate 121G - one-time configuration migration - 1 Year #FC-10-F121G-189-02-12Get a Quote
Cloud and Managed Services
Cloud logging, SD-WAN orchestration and services run by Fortinet on your behalf.
Fortinet Cloud and Managed Services (Service Subscription - Hardware Required)
-
Fortinet FortiAnalyzer Cloud for FortiGate 121G - cloud-based central logging and analytics - 1 Year #FC-10-F121G-585-02-12Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 121G - cloud-based central logging and analytics - 3 Year #FC-10-F121G-585-02-36Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 121G - cloud-based central logging and analytics - 5 Year #FC-10-F121G-585-02-60Get a Quote
-
Fortinet SOCaaS for FortiGate 121G - 24x7 managed log monitoring, incident triage and SOC escalation - 1 Year #FC-10-F121G-464-02-12Get a Quote
-
Fortinet SOCaaS for FortiGate 121G - 24x7 managed log monitoring, incident triage and SOC escalation - 3 Year #FC-10-F121G-464-02-36Get a Quote
-
Fortinet SOCaaS for FortiGate 121G - 24x7 managed log monitoring, incident triage and SOC escalation - 5 Year #FC-10-F121G-464-02-60Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 121G - 24x7 setup, network and policy change management - 1 Year #FC-10-F121G-660-02-12Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 121G - 24x7 setup, network and policy change management - 3 Year #FC-10-F121G-660-02-36Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 121G - 24x7 setup, network and policy change management - 5 Year #FC-10-F121G-660-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 121G - 1 Year #FC-10-F121G-1329-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 121G - 3 Year #FC-10-F121G-1329-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 121G - 5 Year #FC-10-F121G-1329-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 121G - 1 Year #FC-10-F121G-1389-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 121G - 3 Year #FC-10-F121G-1389-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 121G - 5 Year #FC-10-F121G-1389-02-60Get a Quote
Accessories and Spares
Power adapters, rack trays and other hardware sold alongside the appliance.
Fortinet Accessories and Spares
-
Fortinet 1 GE SFP SX transceiver module for systems with SFP and SFP/SFP+ slots #FN-TRAN-SXGet a Quote
-
Fortinet 1 GE SFP LX transceiver module for systems with SFP and SFP/SFP+ slots #FN-TRAN-LXGet a Quote
-
Fortinet 1 GE SFP RJ45 transceiver module for systems with SFP and SFP/SFP+ slots #FN-TRAN-GCGet a Quote
-
Fortinet 10 GE SFP+ RJ45 transceiver module for systems with SFP+ slots #FN-TRAN-SFP+GCGet a Quote
-
Fortinet 10 GE SFP+ transceiver module, long range, for systems with SFP+ and SFP/SFP+ slots #FN-TRAN-SFP+LRGet a Quote
-
Fortinet 10 GE SFP+ transceiver module, extended range, for systems with SFP+ and SFP/SFP+ slots #FN-TRAN-SFP+ERGet a Quote
-
Fortinet 10 GE SFP+ transceiver module, 30 km long range single BiDi - pairs with FN-TRAN-SFP+BD33, ordered separately #FN-TRAN-SFP+BD27Get a Quote
-
Fortinet 10 GE SFP+ transceiver module, 30 km long range single BiDi - pairs with FN-TRAN-SFP+BD27, ordered separately #FN-TRAN-SFP+BD33Get a Quote
-
Fortinet 10 GE SFP+ passive direct attach cable, 5 m, for systems with SFP+ and SFP/SFP+ slots #FN-CABLE-SFP+5Get a Quote
What each FortiCare and FortiGuard option includes
Fortinet licensing separates the hardware, the support contract and the security services. These are the combinations you will see in the part numbers above.
Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle - IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service - for the term of the contract.
Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle - IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam - for the term of the contract.
Enterprise Protection
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle: IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service.
Unified Threat Protection (UTP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam.
Advanced Threat Protection (ATP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Advanced Threat Protection bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, and application control.
FortiCare Essential Support
FortiCare Essential ticket handling, hardware replacement, firmware and general upgrades, and application control.
FortiCare Premium Support
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and application control.
FortiCare Elite Support
FortiCare Premium support with FortiCare Elite ticket handling.
Some services are sold on annual contracts only, with no multi-year part number available. We confirm the available terms when we quote.
Upgrading or extending an existing FortiCare contract is quoted separately - send us the serial number and we will price the upgrade.
Fortinet FortiGate 121G Specifications
Fortinet published maximums, measured under the test conditions noted below.
Hardware
| Hardware Accelerated GE RJ45 Ports | 16 |
|---|---|
| Hardware Accelerated GE RJ45 Management / HA Ports | 2 |
| Hardware Accelerated GE SFP Slots | 8 |
| Hardware Accelerated 10 GE SFP+ FortiLink Slots (default) | 4 |
| USB Ports | 1 |
| Console Port (RJ45) | 1 |
| Internal Storage | 1 x 480 GB SSD |
| Trusted Platform Module (TPM) | Yes |
| Bluetooth Low Energy (BLE) | Yes |
| Hardware Acceleration | SP5 security processor |
System Performance - Enterprise Traffic Mix
| IPS Throughput | 5.3 Gbps |
|---|---|
| NGFW Throughput | 3.1 Gbps |
| Threat Protection Throughput | 2.8 Gbps |
System Performance
| Firewall Throughput (1518 / 512 / 64 byte UDP) | 39 / 39 / 28 Gbps |
|---|---|
| Firewall Latency (64 byte UDP) | 3.17 microseconds |
| Firewall Throughput (packets per second) | 42 Mpps |
| Concurrent Sessions (TCP) | 3 million |
| New Sessions per Second (TCP) | 140,000 |
| Firewall Policies | 10,000 |
| IPsec VPN Throughput (512 byte) | 35 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 2,000 |
| Client-to-Gateway IPsec VPN Tunnels | 16,000 |
| SSL-VPN Throughput | 1.5 Gbps |
| Concurrent SSL-VPN Users (recommended maximum, tunnel mode) | 500 |
| SSL Inspection Throughput (IPS, average HTTPS) | 3 Gbps |
| SSL Inspection Connections per Second (IPS, average HTTPS) | 2,100 |
| SSL Inspection Concurrent Sessions (IPS, average HTTPS) | 315,000 |
| Application Control Throughput (HTTP 64K) | 6.7 Gbps |
| CAPWAP Throughput (HTTP 64K) | 35 Gbps |
| Virtual Domains (VDOMs) | 10 default / 10 maximum |
| Maximum Number of FortiSwitches Supported | 32 |
| Maximum Number of FortiAPs (total / tunnel mode) | 128 / 64 |
| Maximum Number of FortiTokens | 5,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
Dimensions
| Height x Width x Length | 1.73 x 17 x 10 in (44 x 432 x 254 mm) |
|---|---|
| Weight | 12.17 lbs (5.52 kg) |
| Form Factor | Rack mount, 1 RU (supports EIA / non-EIA standards) |
| Rack Mount Type | 1 RU |
Power and Environment
| Power Rating | 100-120 V AC, 1 A to 5 A maximum, 50-60 Hz |
|---|---|
| Redundant Power Supplies | Yes - dual non-swappable AC PSUs fitted by default for 1+1 redundancy |
| Power Supply Efficiency Rating | Not published |
| Maximum Current | 100 V AC @ 1 A, 120 V @ 0.5 A |
| Power Consumption (average / maximum) | 43 W / 47 W |
| Heat Dissipation | 159 BTU/hr |
| Operating Temperature | 32-104 F (0-40 C) |
| Storage Temperature | -31-158 F (-35-70 C) |
| Humidity | 10% to 90% non-condensing |
| Noise Level | 49 dBA |
| Air Flow | Side to back |
| Operating Altitude | Up to 10,000 ft (3,048 m) |
Compliance and Certifications
| Compliance | FCC Part 15B Class A, CE, RCM, VCCI, UL/cUL, CB, BSMI |
|---|---|
| Certifications | USGv6 / IPv6 |
All performance figures are stated by Fortinet as maximums and vary with system configuration. The 120G and 121G share every throughput, session and VPN figure - the SSD and the power draw are the differences.
IPS, application control, NGFW and threat protection figures are measured with logging enabled. NGFW is firewall, IPS and application control; threat protection adds malware protection.
IPsec VPN performance is tested with AES256-SHA256. SSL inspection figures are an average across HTTPS cipher suites, and the SSL-VPN figure uses an RSA-2048 certificate.
The dual AC power supplies are fitted by default and are not hot-swappable. They give 1+1 redundancy, not field-replaceable modules.
Transceivers and direct attach cables are not included and are quoted separately.
Part numbers are Fortinet catalogue SKUs listed for reference. Availability, term and lead time are confirmed at quote.
The datasheet gives the 120G a 20-90% humidity range and the 121G 10-90%. Both are listed as published.
FortiGate 121G
The FortiGate 120G with a 480 GB SSD fitted - rackmount scale, keeping its own logs.
What the 121G Adds
The 121G is the 120G with a 480 GB SSD fitted - enough local storage to keep meaningful log history on the appliance rather than shipping every event to FortiAnalyzer. At this scale that matters: 3 million sessions generate a lot of records, and a site that loses its WAN still needs its own history to diagnose why. Throughput, interfaces and session capacity are identical to the 120G.
Rackmount Scale in 1 RU
The FortiGate 120G series is the first rackmount step out of the desktop range: 28 RJ45 and SFP interfaces including four 10 GE SFP+ FortiLink slots, 39 Gbps of firewall throughput and 35 Gbps of IPsec VPN, in a single rack unit with dual power supplies fitted as standard. It suits a campus or a large branch that has outgrown a desktop box but does not need a chassis.
Built on the SP5 Security Processor
The 120G runs on Fortinet’s SP5 ASIC, which moves firewall, VPN and inspection work off the general-purpose CPU. That is what lets a 1 RU appliance carry 3 million concurrent sessions, 16,000 client VPN tunnels and 10,000 firewall policies while drawing under 50 W. It manages up to 32 FortiSwitches and 128 FortiAPs from the same FortiOS console.
Interested in the Fortinet FortiGate 121G?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote