- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
More models in this series
Fortinet FortiGate 4201F
The FortiGate 4200F with 2 x 2 TB of internal storage - the same 800 Gbps, keeping its own log history.
- Two 2 TB SSDs for local logging
- 52 Gbps IPS and 45 Gbps threat protection throughput
- 800 Gbps firewall throughput and 210 million concurrent sessions
- Eight 100 GE QSFP28 and sixteen 25 GE SFP28 slots
- 450 million sessions with the hyperscale licence
Hardware & subscription options
Every orderable Fortinet part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The FortiGate hardware on its own, with no FortiCare or FortiGuard contract attached.
Fortinet FortiGate 4201F Appliance
-
Fortinet FortiGate 4201F Base Appliance FortiGate-4201F 8 x 100GE/40GE QSFP28 slots and 18 x 25GE/10GE SFP28 slots, 2 x GE RJ45 management ports, 2 x 1.92 TB storage, SPU NP7 and CP9 hardware accelerated, dual AC power supplies, hot swappable. #FG-4201FGet a Quote
Hardware Bundle - Enterprise Protection
The appliance supplied with FortiCare Premium support and the Enterprise service bundle - the widest set of FortiGuard services.
Fortinet Hardware Bundle - Enterprise Protection (Hardware and Services Together)
-
Fortinet FortiGate 4201F with FortiCare Premium and FortiGuard Enterprise Protection - 1 Year #FG-4201F-BDL-809-12Get a Quote
-
Fortinet FortiGate 4201F with FortiCare Premium and FortiGuard Enterprise Protection - 3 Year #FG-4201F-BDL-809-36Get a Quote
-
Fortinet FortiGate 4201F with FortiCare Premium and FortiGuard Enterprise Protection - 5 Year #FG-4201F-BDL-809-60Get a Quote
Hardware Bundle - Unified Threat Protection (UTP)
The appliance supplied with FortiCare Premium support and the UTP service bundle - the usual starting point for a new unit.
Fortinet Hardware Bundle - Unified Threat Protection (UTP) (Hardware and Services Together)
-
Fortinet FortiGate 4201F with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 1 Year #FG-4201F-BDL-950-12Get a Quote
-
Fortinet FortiGate 4201F with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 3 Year #FG-4201F-BDL-950-36Get a Quote
-
Fortinet FortiGate 4201F with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 5 Year #FG-4201F-BDL-950-60Get a Quote
Enterprise Protection
The Enterprise service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Enterprise Protection (Service Subscription - Hardware Required)
-
Fortinet Enterprise Protection for FortiGate 4201F - 1 Year #FC-10-F421F-809-02-12Get a Quote
-
Fortinet Enterprise Protection for FortiGate 4201F - 3 Year #FC-10-F421F-809-02-36Get a Quote
-
Fortinet Enterprise Protection for FortiGate 4201F - 5 Year #FC-10-F421F-809-02-60Get a Quote
Unified Threat Protection (UTP)
The UTP service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Unified Threat Protection (UTP) (Service Subscription - Hardware Required)
-
Fortinet Unified Threat Protection (UTP) for FortiGate 4201F - 1 Year #FC-10-F421F-950-02-12Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 4201F - 3 Year #FC-10-F421F-950-02-36Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 4201F - 5 Year #FC-10-F421F-950-02-60Get a Quote
Advanced Threat Protection (ATP)
The lightest of the three bundles: IPS, antivirus, sandboxing and application control, without the web filtering and antispam that UTP adds.
Fortinet Advanced Threat Protection (ATP) (Service Subscription - Hardware Required)
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 4201F - 1 Year #FC-10-F421F-928-02-12Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 4201F - 3 Year #FC-10-F421F-928-02-36Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 4201F - 5 Year #FC-10-F421F-928-02-60Get a Quote
FortiCare Support
Support contracts on their own: ticket handling, hardware replacement and firmware upgrades.
Fortinet FortiCare Support (Service Subscription - Hardware Required)
-
Fortinet FortiCare Premium Support for FortiGate 4201F - 1 Year #FC-10-F421F-247-02-12Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 4201F - 3 Year #FC-10-F421F-247-02-36Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 4201F - 5 Year #FC-10-F421F-247-02-60Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 4201F - 1 Year #FC-10-F421F-284-02-12Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 4201F - 3 Year #FC-10-F421F-284-02-36Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 4201F - 5 Year #FC-10-F421F-284-02-60Get a Quote
Fortinet FortiCare Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 4201F (existing FortiCare Premium contract required) - 1 Year #FC-10-F421F-204-02-12Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 4201F (existing FortiCare Premium contract required) - 3 Year #FC-10-F421F-204-02-36Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 4201F (existing FortiCare Premium contract required) - 5 Year #FC-10-F421F-204-02-60Get a Quote
Individual Security Services
Single FortiGuard services, for adding one capability rather than a whole bundle.
Fortinet Individual Security Services (Service Subscription - Hardware Required)
-
Fortinet FortiGuard IPS Service for FortiGate 4201F - 1 Year #FC-10-F421F-108-02-12Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 4201F - 3 Year #FC-10-F421F-108-02-36Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 4201F - 5 Year #FC-10-F421F-108-02-60Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 4201F - 1 Year #FC-10-F421F-112-02-12Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 4201F - 3 Year #FC-10-F421F-112-02-36Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 4201F - 5 Year #FC-10-F421F-112-02-60Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 4201F - antivirus, mobile malware and FortiGate Cloud Sandbox - 1 Year #FC-10-F421F-100-02-12Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 4201F - antivirus, mobile malware and FortiGate Cloud Sandbox - 3 Year #FC-10-F421F-100-02-36Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 4201F - antivirus, mobile malware and FortiGate Cloud Sandbox - 5 Year #FC-10-F421F-100-02-60Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 4201F - 1 Year #FC-10-F421F-577-02-12Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 4201F - 3 Year #FC-10-F421F-577-02-36Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 4201F - 5 Year #FC-10-F421F-577-02-60Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 4201F - 1 Year #FC-10-F421F-589-02-12Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 4201F - 3 Year #FC-10-F421F-589-02-36Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 4201F - 5 Year #FC-10-F421F-589-02-60Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 4201F - 1 Year #FC-10-F421F-159-02-12Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 4201F - 3 Year #FC-10-F421F-159-02-36Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 4201F - 5 Year #FC-10-F421F-159-02-60Get a Quote
-
Fortinet FortiConverter Service for FortiGate 4201F - one-time configuration migration - 1 Year #FC-10-F421F-189-02-12Get a Quote
-
Fortinet Hyperscale Firewall Licence for the FortiGate 4201F - Perpetual #LIC-FG42F-HYPSCGet a Quote
Cloud and Managed Services
Cloud logging, SD-WAN orchestration and services run by Fortinet on your behalf.
Fortinet Cloud and Managed Services (Service Subscription - Hardware Required)
-
Fortinet FortiAnalyzer Cloud for FortiGate 4201F - cloud-based central logging and analytics - 1 Year #FC-10-F421F-585-02-12Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 4201F - cloud-based central logging and analytics - 3 Year #FC-10-F421F-585-02-36Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 4201F - cloud-based central logging and analytics - 5 Year #FC-10-F421F-585-02-60Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 4201F - 24x7 setup, network and policy change management - 1 Year #FC-10-F421F-660-02-12Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 4201F - 24x7 setup, network and policy change management - 3 Year #FC-10-F421F-660-02-36Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 4201F - 24x7 setup, network and policy change management - 5 Year #FC-10-F421F-660-02-60Get a Quote
-
Fortinet SOCaaS for FortiGate 4201F - 24x7 managed log monitoring, incident triage and SOC escalation - 1 Year #FC-10-F421F-464-02-12Get a Quote
-
Fortinet SOCaaS for FortiGate 4201F - 24x7 managed log monitoring, incident triage and SOC escalation - 3 Year #FC-10-F421F-464-02-36Get a Quote
-
Fortinet SOCaaS for FortiGate 4201F - 24x7 managed log monitoring, incident triage and SOC escalation - 5 Year #FC-10-F421F-464-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 4201F - 1 Year #FC-10-F421F-1329-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 4201F - 3 Year #FC-10-F421F-1329-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 4201F - 5 Year #FC-10-F421F-1329-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 4201F - 1 Year #FC-10-F421F-1389-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 4201F - 3 Year #FC-10-F421F-1389-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 4201F - 5 Year #FC-10-F421F-1389-02-60Get a Quote
What each FortiCare and FortiGuard option includes
Fortinet licensing separates the hardware, the support contract and the security services. These are the combinations you will see in the part numbers above.
Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle - IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service - for the term of the contract.
Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle - IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam - for the term of the contract.
Enterprise Protection
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle: IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service.
Unified Threat Protection (UTP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam.
Advanced Threat Protection (ATP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Advanced Threat Protection bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, and application control.
FortiCare Essential Support
FortiCare Essential ticket handling, hardware replacement, firmware and general upgrades, and application control.
FortiCare Premium Support
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and application control.
FortiCare Elite Support
FortiCare Premium support with FortiCare Elite ticket handling.
Fortinet Licensing Explained — how the appliance, the support contract and the security services fit together.
Some services are sold on annual contracts only, with no multi-year part number available. We confirm the available terms when we quote.
Upgrading or extending an existing FortiCare contract is quoted separately - send us the serial number and we will price the upgrade.
Fortinet FortiGate 4201F Specifications
Fortinet published maximums, measured under the test conditions noted below.
Interfaces and Modules
| 100 GE QSFP28 / 40 GE QSFP+ Slots | 8 |
|---|---|
| 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 |
| 25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots | 2 |
| 25 GE SFP28 / 10 GE SFP+ / GE SFP AUX Slots | 2 |
| GE RJ45 Management Ports | 2 |
| USB Ports | 1 |
| Console Port | 1 |
| Included Transceivers | 2 x SFP+ (SR 10 GE) |
| Internal Storage | 2 x 2 TB SSD |
System Performance - Enterprise Traffic Mix
| IPS Throughput | 52 Gbps |
|---|---|
| NGFW Throughput | 47 Gbps |
| Threat Protection Throughput | 45 Gbps |
System Performance and Capacity
| Firewall Throughput (1518 / 512 / 64 byte, UDP) | 800 / 788 / 400 Gbps |
|---|---|
| IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) | 800 / 788 / 400 Gbps |
| Firewall Latency (64 byte, UDP) | 3.02 µs |
| Firewall Throughput (Packet per Second) | 600 Mpps |
| Concurrent Sessions (TCP) | 210 Million / 450 Million with the hyperscale licence |
| New Sessions/Second (TCP) | 1 Million / 7 Million with the hyperscale licence |
| Firewall Policies | 200,000 |
| IPsec VPN Throughput (512 byte) | 210 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 40,000 |
| Client-to-Gateway IPsec VPN Tunnels | 200,000 |
| SSL-VPN Throughput | 16 Gbps |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg HTTPS) | 50 Gbps |
| SSL Inspection CPS (IPS, avg HTTPS) | 23,000 |
| SSL Inspection Concurrent Session (IPS, avg HTTPS) | 9 Million |
| Application Control Throughput (HTTP 64K) | 135 Gbps |
| CAPWAP Throughput (HTTP 64K) | 47 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 300 |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 8,192 / 4,096 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of Registered FortiClients | 50,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
Dimensions and Power
| Height x Width x Length (mm) | 132.5 x 437 x 664.8 |
|---|---|
| Height x Width x Length (inches) | 5.22 x 17.20 x 26.17 |
| Form Factor (supports EIA/non-EIA standards) | Rack Mount, 3 RU |
| Redundant Power Supplies | Default 1+1 Redundant, Hot Swappable |
| Weight | 61.07 lbs (27.7 kg) |
| Power Consumption (Average / Maximum) | 940 W / 1306 W |
| Heat Dissipation | 4456 BTU/h |
| AC Power Input | 100-240V AC, 50/60 Hz |
| AC Current (Maximum) | 13.5A@120V, 5.5A@240V |
Operating Environment and Certifications
| Operating Temperature | 32°-104°F (0°-40°C) |
|---|---|
| Storage Temperature | -31°-158°F (-35°-70°C) |
| Humidity | 20%-90% non-condensing |
| Noise Level | 57 dBA |
| Operating Altitude | Up to 7,400 ft (2,250 m) |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN; USGv6/IPv6 |
All performance figures are stated by Fortinet as maximums and vary with system configuration.
IPS, application control, NGFW and threat protection figures are measured with logging enabled. NGFW is firewall, IPS and application control; threat protection adds malware protection.
IPsec VPN performance is tested with AES256-SHA256. SSL inspection figures are an average across HTTPS cipher suites.
The datasheet gives the internal storage as 2 x 2 TB SSD and the vendor catalogue as 2 x 1.92 TB. We have not been able to reconcile the two and have reported both rather than pick one - confirm at quote if the exact capacity matters.
The AC variants take 100-240 V. Fortinet also builds 4200F-DC and 4201F-DC for a rack fed from a 48-60 V plant, and both are listed here with their own part numbers.
The 210 million concurrent sessions and 1 million new sessions a second are the figures without the hyperscale licence. LIC-FG42F-HYPSC raises them to 450 million and 7 million by moving session setup, session logging and NAT into the NP7.
Two 10 GE SFP+ SR transceivers are included with the appliance. Any other optics, QSFP28 modules and direct attach cables are quoted separately.
The four variants on this datasheet - AC or DC power, with or without internal storage - share every performance figure. Only the storage, the weight, the power draw and the input differ.
Part numbers are Fortinet catalogue SKUs listed for reference. Availability, term and lead time are confirmed at quote.
FortiGate 4201F
The FortiGate 4200F with 2 x 2 TB of internal storage - the same 800 Gbps, keeping its own log history.
The 4200F With Storage Fitted
Every performance figure here is identical to the FortiGate 4200F. The 4201F adds two internal SSDs, so a firewall carrying 210 million concurrent sessions holds its own log history rather than depending on a reachable FortiAnalyzer. At this session rate that is usually the deciding factor.
What the Hyperscale Licence Buys
LIC-FG42F-HYPSC is perpetual rather than a subscription, and it moves hardware session setup, firewall session logging and NAT into the NP7. On this platform the effect is dramatic: 210 million concurrent sessions becomes 450 million, and one million new sessions a second becomes seven. That is carrier-grade NAT territory - the number that decides whether this box or a rack of smaller ones.
Twenty-Eight Interfaces, Three Rack Units
Eight 100 GE QSFP28 that also take 40 GE, sixteen 25 GE SFP28 that step down to 10 GE and GE, two 25 GE HA slots and two 25 GE AUX slots, plus two management ports. Power is 1+1 redundant and hot-swappable as standard, in AC or DC.
Interested in the Fortinet FortiGate 4201F?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote