- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
More models in this series
Fortinet FortiGate 3501G
The FortiGate 3500G with 3.84 TB of SSD fitted - the same 400 GE ports, keeping its own log history.
- Two 1.92 TB SSDs for local logging
- 125 Gbps IPS and 105 Gbps threat protection throughput
- Two 400 GE QSFP-DD ports and four 100 GE QSFP28 slots
- 595 Gbps firewall throughput and 179 million concurrent sessions
- 112 Gbps SSL inspection across 18 million sessions
Hardware & subscription options
Every orderable Fortinet part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The FortiGate hardware on its own, with no FortiCare or FortiGuard contract attached.
Fortinet FortiGate 3501G Appliance
-
Fortinet FortiGate 3501G Base Appliance FortiGate-3501G 2 x 400 GE QSFP-DD slots, 4 x 100 GE QSFP28 ports and 30 x 25 GE SFP28 slots (including 28 ports and 2 HA ports), 2 x 10GE RJ45 management ports, 2 x 1.92 TB onboard SSD storage, SPU NP7 and CP10 hardware accelerated, dual AC power supplies. #FG-3501GGet a Quote
Hardware Bundle - Enterprise Protection
The appliance supplied with FortiCare Premium support and the Enterprise service bundle - the widest set of FortiGuard services.
Fortinet Hardware Bundle - Enterprise Protection (Hardware and Services Together)
-
Fortinet FortiGate 3501G with FortiCare Premium and FortiGuard Enterprise Protection - 1 Year #FG-3501G-BDL-809-12Get a Quote
-
Fortinet FortiGate 3501G with FortiCare Premium and FortiGuard Enterprise Protection - 3 Year #FG-3501G-BDL-809-36Get a Quote
-
Fortinet FortiGate 3501G with FortiCare Premium and FortiGuard Enterprise Protection - 5 Year #FG-3501G-BDL-809-60Get a Quote
Hardware Bundle - Unified Threat Protection (UTP)
The appliance supplied with FortiCare Premium support and the UTP service bundle - the usual starting point for a new unit.
Fortinet Hardware Bundle - Unified Threat Protection (UTP) (Hardware and Services Together)
-
Fortinet FortiGate 3501G with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 1 Year #FG-3501G-BDL-950-12Get a Quote
-
Fortinet FortiGate 3501G with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 3 Year #FG-3501G-BDL-950-36Get a Quote
-
Fortinet FortiGate 3501G with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 5 Year #FG-3501G-BDL-950-60Get a Quote
Hardware Bundle - Sovereign SASE
The appliance supplied with FortiCare Premium support and the Sovereign SASE Security Inspection Service, for an inspection estate that has to stay inside a jurisdiction.
Fortinet Hardware Bundle - Sovereign SASE (Hardware and Services Together)
-
Fortinet FortiGate 3501G with FortiCare Premium and the Sovereign SASE Security Inspection Service - 1 Year #FG-3501G-BDL-1082-12Get a Quote
-
Fortinet FortiGate 3501G with FortiCare Premium and the Sovereign SASE Security Inspection Service - 3 Year #FG-3501G-BDL-1082-36Get a Quote
-
Fortinet FortiGate 3501G with FortiCare Premium and the Sovereign SASE Security Inspection Service - 5 Year #FG-3501G-BDL-1082-60Get a Quote
Enterprise Protection
The Enterprise service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Enterprise Protection (Service Subscription - Hardware Required)
-
Fortinet Enterprise Protection for FortiGate 3501G - 1 Year #FC-10-G35G1-809-02-12Get a Quote
-
Fortinet Enterprise Protection for FortiGate 3501G - 3 Year #FC-10-G35G1-809-02-36Get a Quote
-
Fortinet Enterprise Protection for FortiGate 3501G - 5 Year #FC-10-G35G1-809-02-60Get a Quote
Unified Threat Protection (UTP)
The UTP service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Unified Threat Protection (UTP) (Service Subscription - Hardware Required)
-
Fortinet Unified Threat Protection (UTP) for FortiGate 3501G - 1 Year #FC-10-G35G1-950-02-12Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 3501G - 3 Year #FC-10-G35G1-950-02-36Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 3501G - 5 Year #FC-10-G35G1-950-02-60Get a Quote
Advanced Threat Protection (ATP)
The lightest of the three bundles: IPS, antivirus, sandboxing and application control, without the web filtering and antispam that UTP adds.
Fortinet Advanced Threat Protection (ATP) (Service Subscription - Hardware Required)
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 3501G - 1 Year #FC-10-G35G1-928-02-12Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 3501G - 3 Year #FC-10-G35G1-928-02-36Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 3501G - 5 Year #FC-10-G35G1-928-02-60Get a Quote
FortiCare Support
Support contracts on their own: ticket handling, hardware replacement and firmware upgrades.
Fortinet FortiCare Support (Service Subscription - Hardware Required)
-
Fortinet FortiCare Premium Support for FortiGate 3501G - 1 Year #FC-10-G35G1-247-02-12Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 3501G - 3 Year #FC-10-G35G1-247-02-36Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 3501G - 5 Year #FC-10-G35G1-247-02-60Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 3501G - 1 Year #FC-10-G35G1-284-02-12Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 3501G - 3 Year #FC-10-G35G1-284-02-36Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 3501G - 5 Year #FC-10-G35G1-284-02-60Get a Quote
Fortinet FortiCare Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 3501G (existing FortiCare Premium contract required) - 1 Year #FC-10-G35G1-204-02-12Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 3501G (existing FortiCare Premium contract required) - 3 Year #FC-10-G35G1-204-02-36Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 3501G (existing FortiCare Premium contract required) - 5 Year #FC-10-G35G1-204-02-60Get a Quote
Individual Security Services
Single FortiGuard services, for adding one capability rather than a whole bundle.
Fortinet Individual Security Services (Service Subscription - Hardware Required)
-
Fortinet FortiGuard IPS Service for FortiGate 3501G - 1 Year #FC-10-G35G1-108-02-12Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 3501G - 3 Year #FC-10-G35G1-108-02-36Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 3501G - 5 Year #FC-10-G35G1-108-02-60Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 3501G - 1 Year #FC-10-G35G1-112-02-12Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 3501G - 3 Year #FC-10-G35G1-112-02-36Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 3501G - 5 Year #FC-10-G35G1-112-02-60Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 3501G - antivirus, mobile malware and FortiGate Cloud Sandbox - 1 Year #FC-10-G35G1-100-02-12Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 3501G - antivirus, mobile malware and FortiGate Cloud Sandbox - 3 Year #FC-10-G35G1-100-02-36Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 3501G - antivirus, mobile malware and FortiGate Cloud Sandbox - 5 Year #FC-10-G35G1-100-02-60Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 3501G - 1 Year #FC-10-G35G1-577-02-12Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 3501G - 3 Year #FC-10-G35G1-577-02-36Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 3501G - 5 Year #FC-10-G35G1-577-02-60Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 3501G - 1 Year #FC-10-G35G1-589-02-12Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 3501G - 3 Year #FC-10-G35G1-589-02-36Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 3501G - 5 Year #FC-10-G35G1-589-02-60Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 3501G - 1 Year #FC-10-G35G1-159-02-12Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 3501G - 3 Year #FC-10-G35G1-159-02-36Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 3501G - 5 Year #FC-10-G35G1-159-02-60Get a Quote
-
Fortinet FortiConverter Service for FortiGate 3501G - one-time configuration migration - 1 Year #FC-10-G35G1-189-02-12Get a Quote
Cloud and Managed Services
Cloud logging, SD-WAN orchestration and services run by Fortinet on your behalf.
Fortinet Cloud and Managed Services (Service Subscription - Hardware Required)
-
Fortinet FortiAnalyzer Cloud for FortiGate 3501G - cloud-based central logging and analytics - 1 Year #FC-10-G35G1-585-02-12Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 3501G - cloud-based central logging and analytics - 3 Year #FC-10-G35G1-585-02-36Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 3501G - cloud-based central logging and analytics - 5 Year #FC-10-G35G1-585-02-60Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 3501G - 24x7 setup, network and policy change management - 1 Year #FC-10-G35G1-660-02-12Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 3501G - 24x7 setup, network and policy change management - 3 Year #FC-10-G35G1-660-02-36Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 3501G - 24x7 setup, network and policy change management - 5 Year #FC-10-G35G1-660-02-60Get a Quote
-
Fortinet SOCaaS for FortiGate 3501G - 24x7 managed log monitoring, incident triage and SOC escalation - 1 Year #FC-10-G35G1-464-02-12Get a Quote
-
Fortinet SOCaaS for FortiGate 3501G - 24x7 managed log monitoring, incident triage and SOC escalation - 3 Year #FC-10-G35G1-464-02-36Get a Quote
-
Fortinet SOCaaS for FortiGate 3501G - 24x7 managed log monitoring, incident triage and SOC escalation - 5 Year #FC-10-G35G1-464-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 3501G - 1 Year #FC-10-G35G1-1329-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 3501G - 3 Year #FC-10-G35G1-1329-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 3501G - 5 Year #FC-10-G35G1-1329-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 3501G - 1 Year #FC-10-G35G1-1389-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 3501G - 3 Year #FC-10-G35G1-1389-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 3501G - 5 Year #FC-10-G35G1-1389-02-60Get a Quote
-
Fortinet Sovereign SASE Security Inspection Service for FortiGate 3501G with FortiCare Premium (requires a Sovereign SASE Cloud Orchestrator subscription) - 1 Year #FC-10-G35G1-1082-02-12Get a Quote
-
Fortinet Sovereign SASE Security Inspection Service for FortiGate 3501G with FortiCare Premium (requires a Sovereign SASE Cloud Orchestrator subscription) - 3 Year #FC-10-G35G1-1082-02-36Get a Quote
-
Fortinet Sovereign SASE Security Inspection Service for FortiGate 3501G with FortiCare Premium (requires a Sovereign SASE Cloud Orchestrator subscription) - 5 Year #FC-10-G35G1-1082-02-60Get a Quote
What each FortiCare and FortiGuard option includes
Fortinet licensing separates the hardware, the support contract and the security services. These are the combinations you will see in the part numbers above.
Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle - IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service - for the term of the contract.
Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle - IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam - for the term of the contract.
Enterprise Protection
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle: IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service.
Unified Threat Protection (UTP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam.
Advanced Threat Protection (ATP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Advanced Threat Protection bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, and application control.
FortiCare Essential Support
FortiCare Essential ticket handling, hardware replacement, firmware and general upgrades, and application control.
FortiCare Premium Support
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and application control.
FortiCare Elite Support
FortiCare Premium support with FortiCare Elite ticket handling.
Fortinet Licensing Explained — how the appliance, the support contract and the security services fit together.
Some services are sold on annual contracts only, with no multi-year part number available. We confirm the available terms when we quote.
Upgrading or extending an existing FortiCare contract is quoted separately - send us the serial number and we will price the upgrade.
Fortinet FortiGate 3501G Specifications
Fortinet published maximums, measured under the test conditions noted below.
Interfaces and Modules
| Hardware Accelerated 400 GE QSFP-DD / 200 GE QSFP56 / 100 GE QSFP28 / 40 GE QSFP+ Ports | 2 |
|---|---|
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 4 |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 30 |
| 10 GE / GE RJ45 Management Ports | 2 |
| USB Ports (Client / Server) | 1 |
| Console Port | 1 |
| Trusted Platform Module (TPM) | Yes |
| Signed Firmware Hardware Switch | Yes |
| FortiSentry | Yes |
| Included Transceivers | 2 x SFP+ (SR 10 GE) |
| Onboard Storage | 2 x 1.92 TB SSD |
System Performance - Enterprise Traffic Mix
| IPS Throughput | 125 Gbps |
|---|---|
| NGFW Throughput | 115 Gbps |
| Threat Protection Throughput | 105 Gbps |
System Performance and Capacity
| IPv4 Firewall Throughput (1518 / 512 / 64 byte, UDP) | 595 / 590 / 420 Gbps |
|---|---|
| IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) | 595 / 590 / 420 Gbps |
| Firewall Latency (64 byte, UDP) | 2.96 µs |
| Firewall Throughput (Packet per Second) | 630 Mpps |
| Concurrent Sessions (TCP) | 179 Million |
| New Sessions/Second (TCP) | 1.1 Million |
| Firewall Policies | 200,000 |
| IPsec VPN Throughput (512 byte) | 163 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 40,000 |
| Client-to-Gateway IPsec VPN Tunnels | 200,000 |
| SSL-VPN Throughput | 9.8 Gbps |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg HTTPS) | 112 Gbps |
| SSL Inspection CPS (IPS, avg HTTPS) | 112,345 |
| SSL Inspection Concurrent Session (IPS, avg HTTPS) | 18 Million |
| Application Control Throughput (HTTP 64K) | 197 Gbps |
| CAPWAP Throughput (HTTP 64K) | Not yet published by Fortinet |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 300 |
| Maximum Number of FortiAPs (Total / Tunnel) | 4,096 / 2,048 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of FortiClients | 50,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
Dimensions and Power
| Height x Width x Length (mm) | 88.5 x 442.5 x 529.3 |
|---|---|
| Height x Width x Length (inches) | 3.5 x 17.4 x 20.8 |
| Weight | 37 lbs (16.8 kg) |
| Form Factor (supports EIA/non-EIA standards) | Rack Mount, 2 RU |
| AC Power Supply | 100-240V AC, 60-50 Hz |
| AC Current (Maximum) | 12A@100V, 9A@240V |
| Power Consumption (Average / Maximum) | 688 W / 993 W |
| Heat Dissipation | 3386 BTU/h |
| Redundant Power Supplies | Hot Swappable, default dual AC PSU for 1+1 redundancy |
| Power Supply Efficiency Rating | 80+ Compliant |
Operating Environment and Certifications
| Noise Level | 70.4 dBA |
|---|---|
| Operating Temperature | 32°F to 113°F (0°C to 45°C) |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 5% to 90% non-condensing |
| Forced Airflow | Front to Back |
| Operating Altitude | Up to 10 000 ft (3048 m) |
| Compliance | FCC Part 15 Class A, ISED, CE, VCCI, PSE, BSMI, ANATEL, UL/cUL |
| Certifications | USGv6/IPv6 |
All performance figures are stated by Fortinet as maximums and vary with system configuration.
IPS, application control, NGFW and threat protection figures are measured with logging enabled. NGFW is firewall, IPS and application control; threat protection adds malware protection.
IPsec VPN performance is tested with AES256-SHA256. SSL inspection figures are an average across HTTPS cipher suites.
Onboard storage is 2 x 1.92 TB SSD, 3.84 TB in total, which both the datasheet and the catalogue agree on.
Fortinet has not yet published a CAPWAP throughput figure for this series, so the row is marked rather than filled with a guess.
The G-series platforms also carry a Sovereign SASE tier - as a hardware bundle and as a subscription - which the F-series models do not.
Two 10 GE SFP+ SR transceivers are included with the appliance. Any other optics, QSFP modules and direct attach cables are quoted separately.
Part numbers are Fortinet catalogue SKUs listed for reference. Availability, term and lead time are confirmed at quote.
FortiGate 3501G
The FortiGate 3500G with 3.84 TB of SSD fitted - the same 400 GE ports, keeping its own log history.
The 3500G With Storage Fitted
Every performance figure here matches the FortiGate 3500G. The 3501G adds two 1.92 TB SSDs - 3.84 TB in total - so a core firewall running 179 million concurrent sessions holds its own log history rather than depending on a reachable FortiAnalyzer.
Where the SSL Numbers Matter
A hundred and twelve Gbps of SSL inspection across eighteen million concurrent inspected sessions, at 112,345 connections a second. On a platform doing internal segmentation that is usually the binding constraint rather than raw firewall throughput.
FortiSentry and the Signed Firmware Switch
FortiSentry is an out-of-band module that watches the FortiOS filesystem for unauthorised change, physically isolated from the operating system it monitors. A signed firmware hardware switch and a TPM sit alongside it.
Interested in the Fortinet FortiGate 3501G?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote