- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
More models in this series
Fortinet FortiGate 4401F
The FortiGate 4400F with 4 TB of SSD fitted - the same 1.15 Tbps, keeping its own log history.
- Two 2 TB SSDs for local logging
- 94 Gbps IPS and 75 Gbps threat protection throughput
- 1.15 Tbps firewall throughput and 210 million concurrent sessions
- Twelve 100 GE QSFP28 and twenty 25 GE SFP28 slots
- 310 Gbps IPsec VPN and 86 Gbps SSL inspection
Hardware & subscription options
Every orderable Fortinet part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The FortiGate hardware on its own, with no FortiCare or FortiGuard contract attached.
Fortinet FortiGate 4401F Appliance
-
Fortinet FortiGate 4401F Base Appliance FortiGate-4401F 12 x 100GE/40GE QSFP28 slots and 18 x 25GE/10GE SFP28 slots, 2 x GE RJ45 management ports, SPU NP7 and CP9 hardware accelerated, 2 x 2TB storage and AC power supplies. #FG-4401FGet a Quote
Hardware Bundle - Enterprise Protection
The appliance supplied with FortiCare Premium support and the Enterprise service bundle - the widest set of FortiGuard services.
Fortinet Hardware Bundle - Enterprise Protection (Hardware and Services Together)
-
Fortinet FortiGate 4401F with FortiCare Premium and FortiGuard Enterprise Protection - 1 Year #FG-4401F-BDL-809-12Get a Quote
-
Fortinet FortiGate 4401F with FortiCare Premium and FortiGuard Enterprise Protection - 3 Year #FG-4401F-BDL-809-36Get a Quote
-
Fortinet FortiGate 4401F with FortiCare Premium and FortiGuard Enterprise Protection - 5 Year #FG-4401F-BDL-809-60Get a Quote
Hardware Bundle - Unified Threat Protection (UTP)
The appliance supplied with FortiCare Premium support and the UTP service bundle - the usual starting point for a new unit.
Fortinet Hardware Bundle - Unified Threat Protection (UTP) (Hardware and Services Together)
-
Fortinet FortiGate 4401F with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 1 Year #FG-4401F-BDL-950-12Get a Quote
-
Fortinet FortiGate 4401F with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 3 Year #FG-4401F-BDL-950-36Get a Quote
-
Fortinet FortiGate 4401F with FortiCare Premium and FortiGuard Unified Threat Protection (UTP) - 5 Year #FG-4401F-BDL-950-60Get a Quote
Enterprise Protection
The Enterprise service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Enterprise Protection (Service Subscription - Hardware Required)
-
Fortinet Enterprise Protection for FortiGate 4401F - 1 Year #FC-10-F441F-809-02-12Get a Quote
-
Fortinet Enterprise Protection for FortiGate 4401F - 3 Year #FC-10-F441F-809-02-36Get a Quote
-
Fortinet Enterprise Protection for FortiGate 4401F - 5 Year #FC-10-F441F-809-02-60Get a Quote
Unified Threat Protection (UTP)
The UTP service bundle bought against hardware you already own,
or renewed at the end of a term.
Fortinet Unified Threat Protection (UTP) (Service Subscription - Hardware Required)
-
Fortinet Unified Threat Protection (UTP) for FortiGate 4401F - 1 Year #FC-10-F441F-950-02-12Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 4401F - 3 Year #FC-10-F441F-950-02-36Get a Quote
-
Fortinet Unified Threat Protection (UTP) for FortiGate 4401F - 5 Year #FC-10-F441F-950-02-60Get a Quote
Advanced Threat Protection (ATP)
The lightest of the three bundles: IPS, antivirus, sandboxing and application control, without the web filtering and antispam that UTP adds.
Fortinet Advanced Threat Protection (ATP) (Service Subscription - Hardware Required)
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 4401F - 1 Year #FC-10-F441F-928-02-12Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 4401F - 3 Year #FC-10-F441F-928-02-36Get a Quote
-
Fortinet Advanced Threat Protection (ATP) for FortiGate 4401F - 5 Year #FC-10-F441F-928-02-60Get a Quote
FortiCare Support
Support contracts on their own: ticket handling, hardware replacement and firmware upgrades.
Fortinet FortiCare Support (Service Subscription - Hardware Required)
-
Fortinet FortiCare Premium Support for FortiGate 4401F - 1 Year #FC-10-F441F-247-02-12Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 4401F - 3 Year #FC-10-F441F-247-02-36Get a Quote
-
Fortinet FortiCare Premium Support for FortiGate 4401F - 5 Year #FC-10-F441F-247-02-60Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 4401F - 1 Year #FC-10-F441F-284-02-12Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 4401F - 3 Year #FC-10-F441F-284-02-36Get a Quote
-
Fortinet FortiCare Elite Support for FortiGate 4401F - 5 Year #FC-10-F441F-284-02-60Get a Quote
Fortinet FortiCare Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 4401F (existing FortiCare Premium contract required) - 1 Year #FC-10-F441F-204-02-12Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 4401F (existing FortiCare Premium contract required) - 3 Year #FC-10-F441F-204-02-36Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiGate 4401F (existing FortiCare Premium contract required) - 5 Year #FC-10-F441F-204-02-60Get a Quote
Individual Security Services
Single FortiGuard services, for adding one capability rather than a whole bundle.
Fortinet Individual Security Services (Service Subscription - Hardware Required)
-
Fortinet FortiGuard IPS Service for FortiGate 4401F - 1 Year #FC-10-F441F-108-02-12Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 4401F - 3 Year #FC-10-F441F-108-02-36Get a Quote
-
Fortinet FortiGuard IPS Service for FortiGate 4401F - 5 Year #FC-10-F441F-108-02-60Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 4401F - 1 Year #FC-10-F441F-112-02-12Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 4401F - 3 Year #FC-10-F441F-112-02-36Get a Quote
-
Fortinet FortiGuard URL, DNS and Video Filtering Service for FortiGate 4401F - 5 Year #FC-10-F441F-112-02-60Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 4401F - antivirus, mobile malware and FortiGate Cloud Sandbox - 1 Year #FC-10-F441F-100-02-12Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 4401F - antivirus, mobile malware and FortiGate Cloud Sandbox - 3 Year #FC-10-F441F-100-02-36Get a Quote
-
Fortinet Advanced Malware Protection (AMP) for FortiGate 4401F - antivirus, mobile malware and FortiGate Cloud Sandbox - 5 Year #FC-10-F441F-100-02-60Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 4401F - 1 Year #FC-10-F441F-577-02-12Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 4401F - 3 Year #FC-10-F441F-577-02-36Get a Quote
-
Fortinet FortiGuard AI-based Inline Malware Prevention Service for FortiGate 4401F - 5 Year #FC-10-F441F-577-02-60Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 4401F - 1 Year #FC-10-F441F-589-02-12Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 4401F - 3 Year #FC-10-F441F-589-02-36Get a Quote
-
Fortinet FortiGuard Data Loss Prevention Service for FortiGate 4401F - 5 Year #FC-10-F441F-589-02-60Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 4401F - 1 Year #FC-10-F441F-159-02-12Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 4401F - 3 Year #FC-10-F441F-159-02-36Get a Quote
-
Fortinet FortiGuard OT Security Service for FortiGate 4401F - 5 Year #FC-10-F441F-159-02-60Get a Quote
-
Fortinet FortiConverter Service for FortiGate 4401F - one-time configuration migration - 1 Year #FC-10-F441F-189-02-12Get a Quote
-
Fortinet Hyperscale Firewall Licence for the FortiGate 4401F - Perpetual #LIC-FG44F-HYPSCGet a Quote
Cloud and Managed Services
Cloud logging, SD-WAN orchestration and services run by Fortinet on your behalf.
Fortinet Cloud and Managed Services (Service Subscription - Hardware Required)
-
Fortinet FortiAnalyzer Cloud for FortiGate 4401F - cloud-based central logging and analytics - 1 Year #FC-10-F441F-585-02-12Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 4401F - cloud-based central logging and analytics - 3 Year #FC-10-F441F-585-02-36Get a Quote
-
Fortinet FortiAnalyzer Cloud for FortiGate 4401F - cloud-based central logging and analytics - 5 Year #FC-10-F441F-585-02-60Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 4401F - 24x7 setup, network and policy change management - 1 Year #FC-10-F441F-660-02-12Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 4401F - 24x7 setup, network and policy change management - 3 Year #FC-10-F441F-660-02-36Get a Quote
-
Fortinet Managed FortiGate Service for FortiGate 4401F - 24x7 setup, network and policy change management - 5 Year #FC-10-F441F-660-02-60Get a Quote
-
Fortinet SOCaaS for FortiGate 4401F - 24x7 managed log monitoring, incident triage and SOC escalation - 1 Year #FC-10-F441F-464-02-12Get a Quote
-
Fortinet SOCaaS for FortiGate 4401F - 24x7 managed log monitoring, incident triage and SOC escalation - 3 Year #FC-10-F441F-464-02-36Get a Quote
-
Fortinet SOCaaS for FortiGate 4401F - 24x7 managed log monitoring, incident triage and SOC escalation - 5 Year #FC-10-F441F-464-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 4401F - 1 Year #FC-10-F441F-1329-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 4401F - 3 Year #FC-10-F441F-1329-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle with FortiCare Premium for FortiGate 4401F - 5 Year #FC-10-F441F-1329-02-60Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 4401F - 1 Year #FC-10-F441F-1389-02-12Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 4401F - 3 Year #FC-10-F441F-1389-02-36Get a Quote
-
Fortinet SD-WAN Service Bundle for FortiGate 4401F - 5 Year #FC-10-F441F-1389-02-60Get a Quote
What each FortiCare and FortiGuard option includes
Fortinet licensing separates the hardware, the support contract and the security services. These are the combinations you will see in the part numbers above.
Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle - IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service - for the term of the contract.
Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle - IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam - for the term of the contract.
Enterprise Protection
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle: IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service.
Unified Threat Protection (UTP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam.
Advanced Threat Protection (ATP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Advanced Threat Protection bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, and application control.
FortiCare Essential Support
FortiCare Essential ticket handling, hardware replacement, firmware and general upgrades, and application control.
FortiCare Premium Support
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and application control.
FortiCare Elite Support
FortiCare Premium support with FortiCare Elite ticket handling.
Fortinet Licensing Explained — how the appliance, the support contract and the security services fit together.
Some services are sold on annual contracts only, with no multi-year part number available. We confirm the available terms when we quote.
Upgrading or extending an existing FortiCare contract is quoted separately - send us the serial number and we will price the upgrade.
Fortinet FortiGate 4401F Specifications
Fortinet published maximums, measured under the test conditions noted below.
Interfaces and Modules
| Hardware Accelerated 100 GE QSFP28 / 40 GE QSFP+ Slots | 12 |
|---|---|
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots | 16 |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots | 2 |
| Hardware Accelerated 25 GE SFP28 / 10 GE SFP+ / GE SFP AUX Slots | 2 |
| GE RJ45 Management Ports | 2 |
| USB Ports | 1 (USB 3.0) |
| Console Port | 1 |
| Internal Storage | 2 x 2 TB SSD |
| Trusted Platform Module (TPM) | Yes |
| Included Transceivers | 2 x SFP+ (SR 10 GE) |
System Performance - Enterprise Traffic Mix
| IPS Throughput | 94 Gbps |
|---|---|
| NGFW Throughput | 82 Gbps |
| Threat Protection Throughput | 75 Gbps |
System Performance and Capacity
| Firewall Throughput (1518 / 512 / 64 byte, UDP) | 1.15 / 1.14 / 0.50 Tbps |
|---|---|
| IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) | 1.15 / 1.14 / 0.50 Tbps |
| Firewall Latency (64 byte, UDP) | 2.98 µs |
| Firewall Throughput (Packet per Second) | 750 Mpps |
| Concurrent Sessions (TCP) | 210 Million / 700 Million with the hyperscale licence |
| New Sessions/Second (TCP) | 1 Million / 10 Million with the hyperscale licence |
| Firewall Policies | 400,000 |
| IPsec VPN Throughput (512 byte) | 310 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 40,000 |
| Client-to-Gateway IPsec VPN Tunnels | 200,000 |
| SSL-VPN Throughput | 16 Gbps |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 30,000 |
| SSL Inspection Throughput (IPS, avg HTTPS) | 86 Gbps |
| SSL Inspection CPS (IPS, avg HTTPS) | 70,000 |
| SSL Inspection Concurrent Session (IPS, avg HTTPS) | 9 Million |
| Application Control Throughput (HTTP 64K) | 140 Gbps |
| CAPWAP Throughput (HTTP 64K) | 63 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 500 |
| Maximum Number of FortiSwitches Supported | 300 |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 8,192 / 4,096 |
| Maximum Number of FortiTokens | 20,000 |
| Maximum Number of Registered FortiClients | 20,000 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering |
Dimensions and Power
| Height x Width x Length (mm) | 177 x 437 x 665 |
|---|---|
| Height x Width x Length (inches) | 6.97 x 17.20 x 26.17 |
| Weight | 83.1 lbs (37.7 kg) |
| Form Factor (supports EIA/non-EIA standards) | Rack Mount, 4 RU |
| AC Power Input | 100-240V AC, 50/60 Hz |
| AC Current (Maximum) | 20A@100V, 9A@240V |
| Power Consumption (Average / Maximum) | 1539 W / 1881 W |
| Heat Dissipation | 6418.24 BTU/h |
| Redundant Power Supplies | Yes, Hot Swappable, 2+2 |
| Power Supply Efficiency Rating | 80 Plus Compliant |
| Fan Tray | Hot Swappable |
Operating Environment and Certifications
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
|---|---|
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 20% to 90% non-condensing |
| Noise Level | 68.9 dBA |
| Forced Airflow | Front to Back |
| Operating Altitude | Up to 7,400 ft (2250 m) - derate 1.5°C per 1,000 ft above it |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 |
All performance figures are stated by Fortinet as maximums and vary with system configuration.
IPS, application control, NGFW and threat protection figures are measured with logging enabled. NGFW is firewall, IPS and application control; threat protection adds malware protection.
IPsec VPN performance is tested with AES256-SHA256. SSL inspection figures are an average across HTTPS cipher suites.
Internal storage is 2 x 2 TB SSD. The 4400F is the same appliance without it.
The AC variants take 100-240 V. Fortinet also builds 4400F-DC and 4401F-DC for a rack fed from a 48-60 V plant, and both are listed here with their own part numbers.
The 210 million concurrent sessions and 1 million new sessions a second are the figures without the hyperscale licence. LIC-FG44F-HYPSC raises them to 700 million and 10 million by moving session setup, session logging and NAT into the NP7.
Two 10 GE SFP+ SR transceivers are included with the appliance. Any other optics, QSFP28 modules and direct attach cables are quoted separately.
The four variants on this datasheet - AC or DC power, with or without internal storage - share every performance figure. Only the storage, the weight, the power draw and the input differ.
The maximum operating temperature derates by 1.5°C for every 1,000 ft above 7,400 ft, so a high-altitude site needs the airflow checked.
Part numbers are Fortinet catalogue SKUs listed for reference. Availability, term and lead time are confirmed at quote.
FortiGate 4401F
The FortiGate 4400F with 4 TB of SSD fitted - the same 1.15 Tbps, keeping its own log history.
Twelve 100 GE Slots and 1.15 Tbps of Firewall
The 4400F sits a clear step above the 4200F: twelve 100 GE QSFP28 slots instead of eight, 1.15 Tbps of firewall throughput instead of 800 Gbps, and ninety-four Gbps of IPS once inspection is on. Three hundred and ten Gbps of IPsec VPN is enough to terminate a national WAN on a single pair.
What the Hyperscale Licence Buys
LIC-FG44F-HYPSC is perpetual rather than a subscription, and it moves hardware session setup, firewall session logging and NAT into the NP7. Two hundred and ten million concurrent sessions becomes seven hundred million, and one million new sessions a second becomes ten. That is the number that decides between this box and a rack of smaller ones.
Thirty-Two Interfaces, Four Rack Units
Two 2 TB SSDs are fitted, so the unit keeps its own log history rather than depending on a reachable FortiAnalyzer. Twelve 100 GE QSFP28 that also take 40 GE, sixteen 25 GE SFP28 that step down to 10 GE and GE, two 25 GE HA slots and two 25 GE AUX slots, plus two management ports. The fan tray and the power supplies are hot-swappable.
Interested in the Fortinet FortiGate 4401F?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote