Fortinet FortiGate 201G
Enterprise-Grade Protection for Smaller Networks
1 GE SFP SX transceiver module for all systems with SFP and SFP/SFP+ slots.
1 GE SFP LX transceiver module for all systems with SFP and SFP/SFP+ slots.
10 GE SFP+ RJ45 transceiver module for systems with SFP+ slots.
10 GE SFP+ transceiver module, short range for all systems with SFP+ and SFP/SFP+ slots.
10 GE SFP+ transceiver module, long range for all systems with SFP+ and SFP/SFP+ slots.
10 GE SFP+ transceiver module, extended range for all systems with SFP+ and SFP/SFP+ slots.
10GE SFP+ transceiver module, 80km extreme long range, for systems with SFP+ and SFP/SFP+ slots.
10GE SFP+ transceiver module, 30km long range single BiDi for systems with SFP+ and SFP/SFP+ slots (connects to FN-TRAN-SFP+BD33, ordered separately).
10GE SFP+ transceiver module, 30km long range single BiDi for systems with SFP+ and SFP/SFP+ slots (connects to FN-TRAN-SFP+BD27, ordered separately).
25 GE SFP28 transceiver module, short range, compatible with 10 GE SFP/SFP+ slots.
10 GE SFP+ passive direct attach cable, 1m for systems with SFP+ and SFP/SFP+ slots.
10 GE SFP+ passive direct attach cable, 3m for systems with SFP+ and SFP/SFP+ slots.
10 GE SFP+ passive direct attach cable, 5m for systems with SFP+ and SFP/SFP+ slots.
Click here to jump to more pricing!
Please Note: All Prices are Inclusive of GST
Overview:
Artificial Intelligence, Machine Learning Security with Deep Visibility
The FortiGate 201G series next-generation firewall (NGFW) combines artificial intelligence (AI)-powered security and machine learning (ML) to deliver threat protection at any scale. Get deeper visibility into your network and see applications, users, and devices before they become threats
Use Cases
Next Generation Firewall (NGFW)
- FortiGuard Labs’ suite of AI-Powered Security Services, natively integrated with your NGFW, secures web, content, and devices and protects networks from ransomware, malware, zero days, and sophisticated AI-powered cyberattacks
- Real-time SSL inspection (including TLS 1.3) provides full visibility into users, devices, and applications across the attack surface
- Fortinet’s patented SPU technology provides industry-leading high-performance protection
Secure SD-WAN
- FortiGate WAN Edge powered by one OS and unified security and management framework and systems transforms and secures WANs
- Delivers superior quality of experience and effective security posture for hybrid working models, SD-Branch, and cloud-first WAN use cases
- Achieve operational efficiencies at any scale through automation, deep analytics, and self-healing
Universal ZTNA
- Control access to applications no matter where the user is and no matter where the application is hosted for universal application of access policies
- Provide extensive authentications, checks, and enforce policy prior to granting application access every time
- Agent-based access with FortiClient or agentless access via proxy portal for guest or BYOD
Segmentation
- Dynamic segmentation adapts to any network topology to deliver true end-to-end security from the branch to the data center and across multi-cloud environments
- Ultra-scalable, low latency, VXLAN segmentation bridges physical and virtual domains with Layer 4 firewall rules
- Prevents lateral movement across the network with advanced, coordinated protection from FortiGuard Security Services, detects and prevents known, zero-day, and unknown attacks
Hardware:
FortiGate 200G/201G
Interfaces
- 2 x GE RJ45 MGMT/HA Ports
- 8 x GE RJ45 Ports
- 8 x 5/2.5/GE RJ45 Ports
- 8 x 10 GE SFP+/SFP FortiLink Slots
- 4 x GE SFP Slots
Hardware Features
Trusted Platform Module (TPM)
The FortiGate 201G series features a dedicated module that hardens physical networking appliances by generating, storing, and authenticating cryptographic keys. Hardware-based security mechanisms protect against malicious software and phishing attacks.
Dual power supply
Power supply redundancy is essential in the operation of mission-critical networks. The FortiGate 201G series offers dual built-in non-hot swappable power supplies.
Access layer security
FortiLink protocol enables you to converge security and network access by integrating the FortiSwitch into the FortiGate as a logical extension of the firewall. These FortiLink-enabled ports can be reconfigured as regular ports as needed.
Signed Firmware Hardware Switch
The signed firmware switch is a physical security switch. It is by default set to the highest security level. The highest security level ensures that only an appropriately validated FortiOS firmware can be loaded on the FortiGate. This feature adds an additional physical layer of security to the FortiGate, acting as a key deterrent to and reducing risk of compromise.
Software:
FortiManager
Centralized management at scale for distributed enterprises
FortiManager, powered by FortiAI, is a centralized management solution for the Fortinet Security Fabric. It streamlines mass provisioning and policy management for FortiGate, FortiGate VM, cloud security, SD-WAN, SD-Branch, FortiSASE, and ZTNA in hybrid environments. Additionally, FortiManager provides real-time monitoring of the entire managed infrastructure and automates network operation workflows. Leveraging GenAI in FortiAI, it further enhances Day 0–1 configurations and provisioning, and Day N troubleshooting and maintenance, unlocking the full potential of the Fortinet Security Fabric and significantly boosting operational efficiency.
GenAI in FortiManager helps manage networks effortlessly—generates configuration and policy scripts, troubleshoots issues, and executes recommended actions.
Services:
FortiConverter Service
Migration to FortiGate NGFW made easy
The FortiConverter Service provides hassle-free migration to help organizations transition quickly and easily from a wide range of legacy firewalls to FortiGate NGFWs. The service eliminates errors and redundancy by employing best practices with advanced methodologies and automated processes. Organizations can accelerate their network protection with the latest FortiOS technology
FortiCare Services
Expertise at your service
Fortinet prioritizes customer success through FortiCare Services, optimizing the Fortinet Security Fabric solution. Our comprehensive life-cycle services include Design, Deploy, Operate, Optimize, and Evolve. The FortiCare Elite, one of the service offerings, provides heightened SLAs and swift issue resolution with a dedicated support team. This advanced support option includes an extended end-of-engineering support of 18 months, providing flexibility and access to the intuitive FortiCare Elite portal for a unified view of device and security health, streamlining operational efficiency and maximizing Fortinet deployment performance.
Specifications:
| FortiGate 200G | FortiGate 201G | |
|---|---|---|
| Hardware Specifications | ||
| GE RJ45 Management/HA Ports | 1/1 | 1/1 |
| GE RJ45 Ports | 8 | 8 |
| GE SFP Slots | 4 | 4 |
| 10/GE SFP/+ FortiLink Slots (default) | 8 | 8 |
| USB (Client / Server) | 1 / 1 | 1 / 1 |
| Console (RJ45) | 1 | 1 |
| Onboard Storage | 0 | 1 x 480 GB SSD |
| Trusted Platform Module (TPM) | ✔ | ✔ |
| Bluetooth Low Energy (BLE) | ✔ | ✔ |
| Signed Firmware Hardware Switch | ✔ | ✔ |
| Included Transceivers | 0 | 0 |
| System Performance | ||
| IPS Throughput | 9 Gbps | |
| NGFW Throughput | 7 Gbps | |
| Threat Protection Throughput | 6 Gbps | |
| System Performance and Capacity | ||
| IPv4 / IPv6 Firewall Throughput (1518 / 512 / 64 byte UDP packets) | 39 / 39 / 26.5 Gbps | |
| Firewall Latency (64 byte UDP packets) | 4.36 μs | |
| Firewall Throughput (Packets Per Second) | 39.75 Mpps | |
| Concurrent Sessions (TCP) | 11 Million | |
| New Sessions/Second (TCP) | 400,000 | |
| Firewall Policies | 10,000 | |
| IPsec VPN Throughput (512 byte packets) | 36 Gbps | |
| Gateway-to-Gateway IPsec VPN Tunnels | 2,000 | |
| Client-to-Gateway IPsec VPN Tunnels | 16,000 | |
| SSL-VPN Throughput | 3 Gbps | |
| Concurrent SSL-VPN Users (Recommended Maximum) | 500 | |
| IPS Throughput (HTTP / Enterprise Mix) 1 | 6 Gbps / 2.2 Gbps | |
| SSL Inspection Throughput 2 | 7 Gbps | |
| SSL Inspection CPS (IPS, avg. HTTPS) 2 | 7100 | |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) 2 | 900,000 | |
| Application Control Throughput 3 | 27.8 Gbps | |
| CAPWAP Throughput 6 | 37.5 Gbps | |
| Virtual Domains (Default / Maximum) | 10 / 25 | |
| Maximum Number of FortiSwitches Supported | 64 | |
| Maximum Number of FortiTokens | 5,000 | |
| High Availability Configurations | Active / Active, Active / Passive, Clustering | |
| Dimensions and Power | Height x Width x Length (inches) | 1.75 x 17.0 x 15.0 |
| Height x Width x Length (mm) | 44.45 x 432 x 380 | |
| Weight | 14.11 lbs (6.4 kg) | 14.33 lbs (6.5 kg) |
| Form Factor (supports EIA/non-EIA standards) |
Rack Mount, 1 RU | |
| AC Power Consumption (Average / Maximum) |
145 W / 175 W | 145 W / 176 W |
| AC Power Input | 100–240V AC, 50/60Hz | |
| AC Current (Maximum) | 2A @100VAC, 1.2A @240VAC | |
| Heat Dissipation | 597.12 BTU/h | 600.54 BTU/h |
| Power Supply Efficiency Rating | 80Plus Compliant | |
| Redundant Power Supplies | ✔ (Default dual non-swappable AC PSU for 1+1 Redundancy) | |
| Operating Environment and Certifications | ||
| Operating Temperature | 32°F to 104°F (0°C to 40°C) | |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) | |
| Humidity | 5% to 90% non-condensing | |
| Noise Level | LPA 48 dBA / LWA 55 dBA | |
| Forced Airflow | Side and Front to Back | |
| Operating Altitude | Up to 10,000 ft (3048 m) | |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB | |
| Certification | USGv6/IPv6 | |
Note: All performance values are "up to" and vary depending on system configuration. IPsec VPN performance is based on 512 byte UDP packets using AES-256+SHA1.
1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix.
2. SSL Inspection is measured with IPS enabled and HTTP traffic, using TLS v1.2 with AES256-SHA.
3. Application Control performance is measured with 64 Kbytes HTTP traffic.
4. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix.
5. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.
6. CAPWAP performance is based on 1444 byte UDP packets.
Documentation:
Download the Fortinet FortiGate 201G Series Data Sheet (PDF).
Pricing Notes:
- All Prices are Inclusive of GST
- Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) plus term of contract - Hardware plus FortiCare Premium and FortiGuard SMB Protection
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, SMB Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering , Antispam and FortiGate Cloud subscription service) plus term of contract - Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) plus term of contract - Enterprise Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) - SMB Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, plus FortiGate Cloud subscription and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, SMB Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam and FortiGate Cloud subscription service) - Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam Service, and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) - Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control) - FortiCare Essential Support
FortiCare Essential Ticket Handling, Hardware Replacement, Firmware and General Upgrades, Application Control - FortiCare Premium Support
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control - FortiCare Elite Support
FortiCare Premium Support with FortiCare Elite Ticket Handling. - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.