- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
More models in this series
Fortinet FortiGate 3000G
90 Gbps of IPS, 88 million concurrent sessions and six 100 GE QSFP28 slots, with FortiSentry watching the firmware.
- 90 Gbps IPS and 80 Gbps threat protection throughput
- 88 million concurrent sessions, 230 million with the hyperscale licence
- Six 100 GE QSFP28 and sixteen 25 GE SFP28 slots
- 75 Gbps SSL inspection across 9.9 million sessions
- FortiSentry watches the FortiOS filesystem out of band
Hardware & subscription options
Every orderable Fortinet part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The FortiGate hardware on its own, with no FortiCare or FortiGuard contract attached.
Fortinet FortiGate 3000G Appliance
-
Fortinet FortiGate 3000G Base Appliance FortiGate-3000G 6 x 100GE QSFP28 slots, 16 x 10GE SFP+/25GE SFP28 slots (including 14 ports and 2 HA ports), 18 x 10G Base-T ports, SPU NP7 and CP10 hardware accelerated, dual AC power supplies. #FG-3000GGet a Quote
Hardware Bundle - Enterprise Protection
The appliance supplied with FortiCare Premium support and the Enterprise service bundle - the widest set of FortiGuard services.
Fortinet Hardware Bundle - Enterprise Protection (Hardware and Services Together)
-
Fortinet FortiGate 3000G with FortiCare Premium and FortiGuard Enterprise Protection - 1 Year #FG-3000G-BDL-809-12Get a Quote
-
Fortinet FortiGate 3000G with FortiCare Premium and FortiGuard Enterprise Protection - 3 Year #FG-3000G-BDL-809-36Get a Quote
-
Fortinet FortiGate 3000G with FortiCare Premium and FortiGuard Enterprise Protection - 5 Year #FG-3000G-BDL-809-60Get a Quote
Hardware Bundle - Unified Threat Protection (UTP)
The appliance supplied with FortiCare Premium support and the UTP service bundle - the usual starting point for a new unit.
Fortinet Hardware Bundle - Unified Threat Protection (UTP) (Hardware and Services Together)
-
Fortinet FortiGate 3000G with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 1 Year #FG-3000G-BDL-950-12Get a Quote
-
Fortinet FortiGate 3000G with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 3 Year #FG-3000G-BDL-950-36Get a Quote
-
Fortinet FortiGate 3000G with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 5 Year #FG-3000G-BDL-950-60Get a Quote
Hardware Bundle - Sovereign SASE
The appliance supplied with FortiCare Premium support and the Sovereign SASE Security Inspection Service, for an inspection estate that has to stay inside a jurisdiction.
Fortinet Hardware Bundle - Sovereign SASE (Hardware and Services Together)
-
Fortinet FortiGate 3000G with FortiCare Premium and the Sovereign SASE Security Inspection Service - 1 Year #FG-3000G-BDL-1082-12Get a Quote
-
Fortinet FortiGate 3000G with FortiCare Premium and the Sovereign SASE Security Inspection Service - 3 Year #FG-3000G-BDL-1082-36Get a Quote
-
Fortinet FortiGate 3000G with FortiCare Premium and the Sovereign SASE Security Inspection Service - 5 Year #FG-3000G-BDL-1082-60Get a Quote
Enterprise Protection
The Enterprise service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Enterprise Protection (Service Subscription - Hardware Required)
-
Fortinet Enterprise Protection for FortiGate 3000G - 1 Year #FC-10-G3K0G-809-02-12Get a Quote
-
Fortinet Enterprise Protection for FortiGate 3000G - 3 Year #FC-10-G3K0G-809-02-36Get a Quote
-
Fortinet Enterprise Protection for FortiGate 3000G - 5 Year #FC-10-G3K0G-809-02-60Get a Quote
Unified Threat Protection (UTP)
The UTP service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Unified Threat Protection (UTP) (Service Subscription - Hardware Required)
-
Fortinet Unified Threat Protection (UTP) for FortiGate 3000G - 1 Year #FC-10-G3K0G-950-02-12Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 3000G - 3 Year #FC-10-G3K0G-950-02-36Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 3000G - 5 Year #FC-10-G3K0G-950-02-60Get a Quote
Advanced Threat Protection (ATP)
The lightest of the three bundles: IPS, antivirus, sandboxing and application control, without the web filtering and antispam that UTP adds.
Fortinet Advanced Threat Protection (ATP) (Service Subscription - Hardware Required)
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 3000G - 1 Year #FC-10-G3K0G-928-02-12Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 3000G - 3 Year #FC-10-G3K0G-928-02-36Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 3000G - 5 Year #FC-10-G3K0G-928-02-60Get a Quote
FortiCare Support
Support contracts on their own: ticket handling, hardware replacement and firmware upgrades.
Fortinet FortiCare Support (Service Subscription - Hardware Required)
-
Fortinet FortiCare Premium Support for FortiGate 3000G - 1 Year #FC-10-G3K0G-247-02-12Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 3000G - 3 Year #FC-10-G3K0G-247-02-36Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 3000G - 5 Year #FC-10-G3K0G-247-02-60Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 3000G - 1 Year #FC-10-G3K0G-284-02-12Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 3000G - 3 Year #FC-10-G3K0G-284-02-36Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 3000G - 5 Year #FC-10-G3K0G-284-02-60Get a Quote
Fortinet FortiCare Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 3000G (existing FortiCare Premium contract required) - 1 Year #FC-10-G3K0G-204-02-12Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 3000G (existing FortiCare Premium contract required) - 3 Year #FC-10-G3K0G-204-02-36Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 3000G (existing FortiCare Premium contract required) - 5 Year #FC-10-G3K0G-204-02-60Get a Quote
Individual Security Services
Single FortiGuard services, for adding one capability rather than a whole bundle.
Fortinet Individual Security Services (Service Subscription - Hardware Required)
-
Fortinet FortiGuard IPS Service for FortiGate 3000G - 1 Year #FC-10-G3K0G-108-02-12Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 3000G - 3 Year #FC-10-G3K0G-108-02-36Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 3000G - 5 Year #FC-10-G3K0G-108-02-60Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 3000G - 1 Year #FC-10-G3K0G-112-02-12Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 3000G - 3 Year #FC-10-G3K0G-112-02-36Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 3000G - 5 Year #FC-10-G3K0G-112-02-60Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 3000G - antivirus, mobile malware and FortiGate Cloud Sandbox - 1 Year #FC-10-G3K0G-100-02-12Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 3000G - antivirus, mobile malware and FortiGate Cloud Sandbox - 3 Year #FC-10-G3K0G-100-02-36Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 3000G - antivirus, mobile malware and FortiGate Cloud Sandbox - 5 Year #FC-10-G3K0G-100-02-60Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 3000G - 1 Year #FC-10-G3K0G-577-02-12Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 3000G - 3 Year #FC-10-G3K0G-577-02-36Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 3000G - 5 Year #FC-10-G3K0G-577-02-60Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 3000G - 1 Year #FC-10-G3K0G-589-02-12Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 3000G - 3 Year #FC-10-G3K0G-589-02-36Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 3000G - 5 Year #FC-10-G3K0G-589-02-60Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 3000G - 1 Year #FC-10-G3K0G-159-02-12Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 3000G - 3 Year #FC-10-G3K0G-159-02-36Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 3000G - 5 Year #FC-10-G3K0G-159-02-60Get a Quote
-
Fortinet FortiConverter Service for FortiGate 3000G - one-time configuration migration - 1 Year #FC-10-G3K0G-189-02-12Get a Quote
Cloud and Managed Services
Cloud logging, SD-WAN orchestration and services run by Fortinet on your behalf.
Fortinet Cloud and Managed Services (Service Subscription - Hardware Required)
-
Fortinet FortiAnalyzer Cloud for FortiGate 3000G - cloud-based central logging and analytics - 1 Year #FC-10-G3K0G-585-02-12Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 3000G - cloud-based central logging and analytics - 3 Year #FC-10-G3K0G-585-02-36Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 3000G - cloud-based central logging and analytics - 5 Year #FC-10-G3K0G-585-02-60Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 3000G - 24x7 setup, network and policy change management - 1 Year #FC-10-G3K0G-660-02-12Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 3000G - 24x7 setup, network and policy change management - 3 Year #FC-10-G3K0G-660-02-36Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 3000G - 24x7 setup, network and policy change management - 5 Year #FC-10-G3K0G-660-02-60Get a Quote
-
Fortinet SOCaaS for FortiGate 3000G - 24x7 managed log monitoring, incident triage and SOC escalation - 1 Year #FC-10-G3K0G-464-02-12Get a Quote
-
Fortinet SOCaaS for FortiGate 3000G - 24x7 managed log monitoring, incident triage and SOC escalation - 3 Year #FC-10-G3K0G-464-02-36Get a Quote
-
Fortinet SOCaaS for FortiGate 3000G - 24x7 managed log monitoring, incident triage and SOC escalation - 5 Year #FC-10-G3K0G-464-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 3000G - 1 Year #FC-10-G3K0G-1329-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 3000G - 3 Year #FC-10-G3K0G-1329-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 3000G - 5 Year #FC-10-G3K0G-1329-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 3000G - 1 Year #FC-10-G3K0G-1389-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 3000G - 3 Year #FC-10-G3K0G-1389-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 3000G - 5 Year #FC-10-G3K0G-1389-02-60Get a Quote
-
Fortinet Sovereign SASE Security Inspection Service for FortiGate 3000G with FortiCare Premium (requires a Sovereign SASE Cloud Orchestrator subscription) - 1 Year #FC-10-G3K0G-1082-02-12Get a Quote
-
Fortinet Sovereign SASE Security Inspection Service for FortiGate 3000G with FortiCare Premium (requires a Sovereign SASE Cloud Orchestrator subscription) - 3 Year #FC-10-G3K0G-1082-02-36Get a Quote
-
Fortinet Sovereign SASE Security Inspection Service for FortiGate 3000G with FortiCare Premium (requires a Sovereign SASE Cloud Orchestrator subscription) - 5 Year #FC-10-G3K0G-1082-02-60Get a Quote
What each FortiCare and FortiGuard option includes
Fortinet licensing separates the hardware, the support contract and the security services. These are the combinations you will see in the part numbers above.
Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle - IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service - for the term of the contract.
Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle - IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam - for the term of the contract.
Enterprise Protection
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle: IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service.
Unified Threat Protection (UTP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam.
Advanced Threat Protection (ATP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Advanced Threat Protection bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, and application control.
FortiCare Essential Support
FortiCare Essential ticket handling, hardware replacement, firmware and general upgrades, and application control.
FortiCare Premium Support
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and application control.
FortiCare Elite Support
FortiCare Premium support with FortiCare Elite ticket handling.
Fortinet Licensing Explained — how the appliance, the support contract and the security services fit together.
Some services are sold on annual contracts only, with no multi-year part number available. We confirm the available terms when we quote.
Upgrading or extending an existing FortiCare contract is quoted separately - send us the serial number and we will price the upgrade.
Fortinet FortiGate 3000G Specifications
Fortinet published maximums, measured under the test conditions noted below.
Interfaces and Modules
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 6 |
|---|---|
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 |
| Hardware Accelerated 10 GE / 5 GE / 2.5 GE / GE RJ45 Ports | 16 (including 2 x WAN ports) |
| 10 GE / GE RJ45 Management Ports | 2 |
| USB Port | 1 |
| Console Port | 1 |
| Trusted Platform Module (TPM) | Yes |
| Signed Firmware Hardware Switch | Yes |
| FortiSentry | Yes |
| Included Transceivers | 2 x SFP+ (SR 10 GE) |
| Onboard Storage | None |
System Performance - Enterprise Traffic Mix
| IPS Throughput | 90 Gbps |
|---|---|
| NGFW Throughput | 85 Gbps |
| Threat Protection Throughput | 80 Gbps |
System Performance and Capacity
| IPv4 Firewall Throughput (1518 / 512 / 64 byte, UDP) | 397 / 394 / 234 Gbps |
|---|---|
| IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) | 397 / 394 / 234 Gbps |
| Firewall Latency (64 byte, UDP) | 3.7 µs |
| Firewall Throughput (Packet per Second) | 351 Mpps |
| Concurrent Sessions (TCP) | 88 Million / 230 Million with the hyperscale licence |
| New Sessions/Second (TCP) | 1.1 Million / 3 Million with the hyperscale licence |
| Firewall Policies | 200,000 |
| IPsec VPN Throughput (512 byte) | 105 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 40,000 |
| Client-to-Gateway IPsec VPN Tunnels | 200,000 |
| SSL-VPN Throughput | 9 Gbps |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg HTTPS) | 75 Gbps |
| SSL Inspection CPS (IPS, avg HTTPS) | 50,800 |
| SSL Inspection Concurrent Session (IPS, avg HTTPS) | 9.9 Million |
| Application Control Throughput (HTTP 64K) | 159 Gbps |
| CAPWAP Throughput (HTTP 64K) | 148 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 300 |
| Maximum Number of FortiAPs (Total / Tunnel) | 4,096 / 2,048 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of FortiClients | 50,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
Dimensions and Power
| Height x Width x Length (mm) | 88.5 x 437 x 495.75 |
|---|---|
| Height x Width x Length (inches) | 3.48 x 17.20 x 19.52 |
| Weight | 33.73 lbs (15.3 kg) |
| Form Factor (supports EIA/non-EIA standards) | Rack Mount, 2 RU |
| AC Power Supply | 100-240V AC, 60-50 Hz |
| AC Current (Maximum) | 12A@100V, 9A@240V |
| Power Consumption (Average / Maximum) | 550 W / 808 W |
| Heat Dissipation | 2755 BTU/h |
| Redundant Power Supplies | Hot Swappable, 2+2 |
| Power Supply Efficiency Rating | 80+ Platinum |
Operating Environment and Certifications
| Noise Level | 70.4 dBA |
|---|---|
| Operating Temperature | 32°F to 113°F (0°C to 45°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 5% to 90% non-condensing |
| Forced Airflow | Front to Back |
| Operating Altitude | Up to 10 000 ft (3048 m) |
| Compliance | FCC Part 15 Class A, ISED, CE, VCCI, PSE, BSMI, ANATEL, UL/cUL |
| Certifications | USGv6/IPv6 |
All performance figures are stated by Fortinet as maximums and vary with system configuration.
IPS, application control, NGFW and threat protection figures are measured with logging enabled. NGFW is firewall, IPS and application control; threat protection adds malware protection.
IPsec VPN performance is tested with AES256-SHA256. SSL inspection figures are an average across HTTPS cipher suites.
There is no onboard storage on the 3000G. The FortiGate 3001G is the same appliance with 2 x 960 GB SSD fitted.
The 88 million concurrent sessions and 1.1 million new sessions a second are the figures without the hyperscale licence, which moves session setup, session logging and NAT into the NP7.
The G-series platforms also carry a Sovereign SASE tier - as a hardware bundle and as a subscription - which the F-series models do not.
Two 10 GE SFP+ SR transceivers are included with the appliance. Any other optics, QSFP modules and direct attach cables are quoted separately.
Part numbers are Fortinet catalogue SKUs listed for reference. Availability, term and lead time are confirmed at quote.
FortiGate 3000G
90 Gbps of IPS, 88 million concurrent sessions and six 100 GE QSFP28 slots, with FortiSentry watching the firmware.
The G-Series Step Up
Ninety Gbps of IPS and eighty of full threat protection, on 397 Gbps of firewall throughput and eighty-eight million concurrent sessions. The 3000G is a generation on from the F-series boxes below it - CP10 rather than CP9, and a hardware root of trust that the earlier platforms do not have.
FortiSentry and the Signed Firmware Switch
FortiSentry is an out-of-band module that watches the FortiOS filesystem for unauthorised change. It is physically isolated from the operating system it monitors, so an attacker who reaches FortiOS does not reach the thing watching it. A signed firmware hardware switch and a TPM sit alongside it.
Thirty-Eight Interfaces, Two Rack Units
Six 100 GE QSFP28 that also take 40 GE, sixteen 25 GE SFP28, sixteen 10 GE RJ45 including two WAN ports, and two management ports. Power is 2+2 hot-swappable at 80 Plus Platinum.
Interested in the Fortinet FortiGate 3000G?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote