Fortinet list prices · datasheet specs
Part numbers and list prices ↓
For a mid-size office that has outgrown a desktop firewall: 1RU, dual power, a dedicated HA port, and enough GE, SFP and 10G ports to terminate the core switch stack directly.
Buy it by part number. We can move you onto it for a fixed fee: $8,900 for this class or an HA pair; see firewall migration.
Updated 2026-10-21 · prices as of 2026-09-07
Fortinet datasheet figures, enterprise traffic mix. Threat protection is the throughput with IPS, application control and malware protection all on. Size on that figure and on SSL inspection, not on the raw firewall number. Source: Fortinet FortiGate 120G Series datasheet, FG-120G-DAT-R19-20260929 (2026-09-29).
Port map
FG-120G / FG-121G (front)
Swipe sideways to see the whole panel.
Every part number we would put on a quote for this model, grouped the way you buy: the box alone, the box with a security bundle, or a renewal for a box you already own. Terms are 1, 3 or 5 years.
Fortinet list price (as of 2026-09-07), from the Fortinet Americas 2026 MidQ3 Price List. Your quote confirms current pricing, tax and shipping.
No DC model in the 120G line. The 120G and 121G use different bundle and renewal part numbers (F120G and F121G), so tell us which one is installed when you renew. The price list also carries an FG-121G-LENC appliance with no matching bundles; the datasheet does not cover it, so it is not listed here.
FG-120G FortiGate 120GDual built-in AC power supplies (not hot-swappable)
| Part number | What it includes | Term | Fortinet list price |
|---|---|---|---|
| Appliance onlyHardware with Fortinet’s standard 1 year hardware and 90 day firmware/ticket coverage. We pair it with FortiCare. | |||
FG-120G | FortiGate 120G appliance only: 16x GE RJ45, 8x GE SFP, 4x 10GE SFP+, HA and MGMT ports, dual AC power, no internal storage. Includes Fortinet's 1 year hardware coverage and 90 days of firmware and ticket support, no FortiGuard services. | Hardware | $5,511 |
| UTP bundleAppliance + FortiCare Premium (ticket support, next-business-day advance hardware replacement, firmware) + FortiGuard Unified Threat Protection (IPS, antivirus and sandbox, application control, URL/DNS/video filtering, antispam). | |||
FG-120G-BDL-950-12 | Appliance + FortiCare Premium + UTP, 1 year | 1 year | $8,283 |
FG-120G-BDL-950-36 | Appliance + FortiCare Premium + UTP, 3 years | 3 years | $13,827 |
FG-120G-BDL-950-60 | Appliance + FortiCare Premium + UTP, 5 years | 5 years | $19,371 |
| Enterprise Protection bundleAppliance + FortiCare Premium + FortiGuard Enterprise Protection: UTP’s IPS and filtering plus AI-based inline malware prevention, inline CASB database, data loss prevention and attack surface security. | |||
FG-120G-BDL-809-12 | Appliance + FortiCare Premium + Enterprise Protection, 1 year | 1 year | $8,877 |
FG-120G-BDL-809-36 | Appliance + FortiCare Premium + Enterprise Protection, 3 years | 3 years | $15,609 |
FG-120G-BDL-809-60 | Appliance + FortiCare Premium + Enterprise Protection, 5 years | 5 years | $22,341 |
| Renewals for a unit already in serviceTied to the serial number. These SKUs fit a FortiGate 120G only. | |||
FC-10-F120G-950-02-12 | UTP + FortiCare Premium renewal, 1 year | 1 year | $2,772 |
FC-10-F120G-950-02-36 | UTP + FortiCare Premium renewal, 3 years | 3 years | $8,316 |
FC-10-F120G-950-02-60 | UTP + FortiCare Premium renewal, 5 years | 5 years | $13,860 |
FC-10-F120G-809-02-12 | Enterprise Protection + FortiCare Premium renewal, 1 year | 1 year | $3,366 |
FC-10-F120G-809-02-36 | Enterprise Protection + FortiCare Premium renewal, 3 years | 3 years | $10,098 |
FC-10-F120G-809-02-60 | Enterprise Protection + FortiCare Premium renewal, 5 years | 5 years | $16,830 |
FC-10-F120G-247-02-12 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 1 year | 1 year | $792 |
FC-10-F120G-247-02-36 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 3 years | 3 years | $2,376 |
FC-10-F120G-247-02-60 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 5 years | 5 years | $3,960 |
| Add-on: FortiAnalyzer CloudPrice list description: “cloud-based central logging & analytics. Include all FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service.” Per serial number. | |||
FC-10-F120G-585-02-12 | FortiGate 120G FortiAnalyzer Cloud, 1 year | 1 year | $1,188 |
FC-10-F120G-585-02-36 | FortiGate 120G FortiAnalyzer Cloud, 3 years | 3 years | $3,564 |
FC-10-F120G-585-02-60 | FortiGate 120G FortiAnalyzer Cloud, 5 years | 5 years | $5,940 |
Request a quoteName the part number and quantity in your message.
FG-121G FortiGate 121GDual built-in AC power supplies (not hot-swappable)
Show FG-121G part numbers| Part number | What it includes | Term | Fortinet list price |
|---|---|---|---|
| Appliance onlyHardware with Fortinet’s standard 1 year hardware and 90 day firmware/ticket coverage. We pair it with FortiCare. | |||
FG-121G | FortiGate 121G appliance only: same ports and power as the 120G plus a 480 GB SSD. Same 1 year hardware and 90 day firmware/ticket coverage, no FortiGuard services. | Hardware | $6,337 |
| UTP bundleAppliance + FortiCare Premium (ticket support, next-business-day advance hardware replacement, firmware) + FortiGuard Unified Threat Protection (IPS, antivirus and sandbox, application control, URL/DNS/video filtering, antispam). | |||
FG-121G-BDL-950-12 | Appliance + FortiCare Premium + UTP, 1 year | 1 year | $9,386.20 |
FG-121G-BDL-950-36 | Appliance + FortiCare Premium + UTP, 3 years | 3 years | $15,484.60 |
FG-121G-BDL-950-60 | Appliance + FortiCare Premium + UTP, 5 years | 5 years | $21,583 |
| Enterprise Protection bundleAppliance + FortiCare Premium + FortiGuard Enterprise Protection: UTP’s IPS and filtering plus AI-based inline malware prevention, inline CASB database, data loss prevention and attack surface security. | |||
FG-121G-BDL-809-12 | Appliance + FortiCare Premium + Enterprise Protection, 1 year | 1 year | $10,039.60 |
FG-121G-BDL-809-36 | Appliance + FortiCare Premium + Enterprise Protection, 3 years | 3 years | $17,444.80 |
FG-121G-BDL-809-60 | Appliance + FortiCare Premium + Enterprise Protection, 5 years | 5 years | $24,850 |
| Renewals for a unit already in serviceTied to the serial number. These SKUs fit a FortiGate 121G only. | |||
FC-10-F121G-950-02-12 | UTP + FortiCare Premium renewal, 1 year | 1 year | $3,049.20 |
FC-10-F121G-950-02-36 | UTP + FortiCare Premium renewal, 3 years | 3 years | $9,147.60 |
FC-10-F121G-950-02-60 | UTP + FortiCare Premium renewal, 5 years | 5 years | $15,246 |
FC-10-F121G-809-02-12 | Enterprise Protection + FortiCare Premium renewal, 1 year | 1 year | $3,702.60 |
FC-10-F121G-809-02-36 | Enterprise Protection + FortiCare Premium renewal, 3 years | 3 years | $11,107.80 |
FC-10-F121G-809-02-60 | Enterprise Protection + FortiCare Premium renewal, 5 years | 5 years | $18,513 |
FC-10-F121G-247-02-12 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 1 year | 1 year | $871.20 |
FC-10-F121G-247-02-36 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 3 years | 3 years | $2,613.60 |
FC-10-F121G-247-02-60 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 5 years | 5 years | $4,356 |
| Add-on: FortiAnalyzer CloudPrice list description: “cloud-based central logging & analytics. Include all FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service.” Per serial number. | |||
FC-10-F121G-585-02-12 | FortiGate 121G FortiAnalyzer Cloud, 1 year | 1 year | $1,306.80 |
FC-10-F121G-585-02-36 | FortiGate 121G FortiAnalyzer Cloud, 3 years | 3 years | $3,920.40 |
FC-10-F121G-585-02-60 | FortiGate 121G FortiAnalyzer Cloud, 5 years | 5 years | $6,534 |
Request a quoteName the part number and quantity in your message.
| Interfaces | |
|---|---|
| GE RJ45 ports | 16 |
| GE RJ45 management / HA | 1 / 1 |
| GE SFP slots | 8 |
| 10GE SFP+ slots (FortiLink by default) | 4 |
| USB / console | 1x USB, 1x RJ45 console |
| Internal storage | None (the 121G has 1x 480 GB SSD) |
| Performance (enterprise traffic mix) | |
| Threat protection throughput | 2.8 Gbps |
| NGFW throughput | 3.1 Gbps |
| IPS throughput | 5.3 Gbps |
| SSL inspection throughput (IPS, avg. HTTPS) | 3 Gbps |
| SSL inspection connections per second | 2,100 |
| SSL inspection concurrent sessions | 315,000 |
| Application control throughput (HTTP 64K) | 6.7 Gbps |
| IPsec VPN throughput (512 byte) | 35 Gbps |
| IPsec tunnels, gateway-to-gateway / client-to-gateway | 2,000 / 16,000 |
| Firewall throughput (1518 / 512 / 64 byte UDP) | 39 / 39 / 28 Gbps |
| Firewall latency (64 byte UDP) | 3.17 μs |
| Firewall throughput (packets per second) | 42 Mpps |
| Concurrent sessions (TCP) | 3 M |
| New sessions per second (TCP) | 140,000 |
| Firewall policies | 10,000 |
| Virtual domains (default / max) | 10 / 10 |
| Max FortiSwitches | 48 on FortiOS 7.6.1+ (32 on earlier releases) |
| Max FortiAPs (total / tunnel) | 128 / 64 |
| HA modes | Active-Active, Active-Passive, Clustering |
| Physical and power | |
| Form factor | 1RU rack mount |
| Dimensions (H x W x L) | 1.73 x 17 x 10 in (44 x 432 x 254 mm) |
| Weight | 12.17 lb (5.52 kg) |
| Power supplies | Dual non-swappable AC PSU, 1+1 redundancy |
| AC input | 100–240 V AC, 50/60 Hz; 1.0 A max at 100 V, 0.5 A at 240 V |
| Power draw (avg / max) | 120G: 38 / 40 W; 121G: 43 / 47 W |
| Heat dissipation | 120G: 138 BTU/h; 121G: 159 BTU/h |
| Airflow / noise | Front to back; 49 dBA |
| Operating temperature | 32–104 °F (0–40 °C) |
Source: Fortinet FortiGate 120G Series datasheet, FG-120G-DAT-R19-20260929 (2026-09-29). Fortinet states all performance values as “up to”. IPS, application control, NGFW and threat protection are measured with logging enabled; NGFW with firewall, IPS and application control on; threat protection adds malware protection. IPsec uses AES256-SHA256. SSL inspection uses an average of HTTPS sessions across cipher suites. The datasheet still lists SSL-VPN tunnel-mode figures; those do not apply on FortiOS 7.6.3 and later, so they are left out here.
SSL-VPN status. SSL-VPN tunnel mode was removed from every FortiGate in FortiOS 7.6.3, the 120G included. The datasheet still prints tunnel-mode figures, but they do not apply to current firmware. Full-tunnel remote access is IPsec (IKEv2); ZTNA covers access to individual applications. Fortinet: FortiOS 7.6.3 release notes. Background: FortiGate SSL-VPN migration.
The neighbouring models, compared on the same datasheet figures.
Against the 90G ($3,638 list), the 120G is only modestly faster (2.8 Gbps threat protection against 2.2, 5.3 Gbps IPS against 4.5) but moves to 1RU with dual built-in power, a dedicated HA port, 16 GE RJ45, 8 GE SFP and four 10G SFP+ cages instead of eight GE ports and two shared-media 10G WANs.
The 200G ($11,477 list) roughly doubles inspection: 6 Gbps threat protection, 7 Gbps SSL inspection and 11 M sessions against 2.8, 3 and 3 M. It also adds eight 5G copper ports, eight 10G cages and up to 25 VDOMs. Pick it when most traffic is inspected or the site is a regional hub.
| Datasheet figure | 90G | 120G | 200G |
|---|---|---|---|
| Threat protection | 2.2 Gbps | 2.8 Gbps | 6 Gbps |
| NGFW | 2.5 Gbps | 3.1 Gbps | 7 Gbps |
| IPS | 4.5 Gbps | 5.3 Gbps | 9 Gbps |
| SSL inspection (IPS, avg. HTTPS) | 2.6 Gbps | 3 Gbps | 7 Gbps |
| IPsec VPN (512 byte) | 25 Gbps | 35 Gbps | 36 Gbps |
| Firewall (1518 byte UDP) | 28 Gbps | 39 Gbps | 39 Gbps |
| Concurrent sessions | 3 M | 3 M | 11 M |
| New sessions per second | 124,000 | 140,000 | 400,000 |
| Ports | 8x GE RJ45, 2x 10GE RJ45/SFP+ shared-media WAN | 16x GE RJ45, 8x GE SFP, 4x 10GE SFP+, HA, MGMT | 8x GE RJ45, 8x 5GE RJ45, 8x 10GE SFP+, 4x GE SFP, HA, MGMT |
| Storage | None (90G); 1 x 120 GB SSD (91G) | None (121G: 480 GB SSD) | None (201G: 480 GB SSD) |
| VDOMs (default / max) | 10 / 10 | 10 / 10 | 10 / 25 |
| SSL-VPN | Only FortiOS 7.0.12–7.0.15 | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ |
| Appliance list price | $3,638 FG-90G | $5,511 FG-120G | $11,477 FG-200G |
Sources: Fortinet FortiGate 90G Series datasheet (FG-90G-DAT-R18-20260929); Fortinet FortiGate 120G Series datasheet (FG-120G-DAT-R19-20260929); Fortinet FortiGate 200G Series datasheet (FG-200G-DAT-R12-20260929). Values “up to”, enterprise traffic mix, logging enabled. Appliance list price from the Fortinet Americas 2026 MidQ3 Price List, effective 2026-09-07.
What we check before this model goes on a quote, from the engineer who sizes, stages and installs it.
Fortinet's datasheet does not name a predecessor for the 120G series, and we do not publish a guessed mapping. We check your current unit's lifecycle dates and Trade-Up eligibility per serial number, then size on measured traffic with inspection on. See FortiGate end-of-life replacement.
Sixteen GE RJ45, eight GE SFP and four 10G SFP+, plus separate HA and management ports. The four 10G cages are FortiLink ports by default and can be reconfigured as regular interfaces. The datasheet lists no included transceivers, so SFP and SFP+ optics or DACs go on the quote. There are no 2.5G or 5G copper ports; for a multi-gig handoff, look at the 200G.
The dedicated GE HA port carries heartbeat without using a data port; Fortinet recommends at least two heartbeat links, so add one GE port cabled directly between the units. Each unit needs its own bundle, and the current price list has no 120G HA SKU: an HA pair on 3-year UTP comes to $27,654 on Fortinet's price list, shown for reference. Each unit has two built-in supplies; feed them from separate circuits. They are not hot-swappable, so a failed supply is an RMA, not a field swap.
New units are created in FortiManager as model devices by serial number and staged before shipping, so the config installs when the box first connects. Replacements go through config conversion plus a hand check of interface mapping, removed features and policies.
Inspection figures are close to the 90G's: 2.8 Gbps threat protection and 3 Gbps SSL inspection at 2,100 new inspected sessions per second. The 120G buys ports, rack mounting, dual power and an HA port more than raw inspection headroom. If most traffic is deep-inspected above 2 to 3 Gbps, size the 200G. No local disk on the 120G: logs go to FortiAnalyzer, FortiAnalyzer Cloud or FortiGate Cloud.
The only datasheet differences are the 121G's 480 GB SSD and slightly higher power draw. The FG-121G lists at $6,337 against $5,511. If logs go to FortiAnalyzer and disk-based features are not required, the 120G is usually the better buy.
Fortinet references for the notes above: Fortinet best practices: HA heartbeat interfaces; Fortinet Community: HA cluster license requirements; FortiManager administration guide: adding a model device by serial number; Fortinet service contract activation grace period policy; part numbers and list prices from the Fortinet Americas 2026 MidQ3 Price List.
Every line on the quote is an exact Fortinet part number and term, sized to your circuit and the services you run. Your written quote confirms current pricing, tax and shipping.
Payment clears before the distributor order. The unit ships from distribution to your site; freight is billed at actual cost.
Hardware and subscriptions go on your FortiCare account, not ours. Serials and contract dates are on the invoice.
We watch the expiry for every serial we sell and contact you at 120, 90, 60 and 30 days out.
Full terms, special-order rules and what to send for a quote: how buying from us works. Want it run after it ships? We are based in Sacramento: see Sacramento Fortinet MSP.
Fortinet list price is $5,511 for the appliance alone, $8,283 with 1 year of FortiCare Premium and UTP, $13,827 for 3 years and $19,371 for 5 years (price list effective 2026-09-07). Your quote confirms current pricing, tax and shipping.
Same ports and performance figures. The 121G adds a 480 GB SSD for local logging and disk-based features. If logs are centralized in FortiAnalyzer, the 120G is usually enough.
No. The datasheet lists dual built-in, non-swappable AC supplies for 1+1 redundancy. The unit keeps running on one supply, but replacing a failed one means an RMA.
Not in tunnel mode on FortiOS 7.6.3 or later; Fortinet removed it from all models. Full-tunnel remote access is IPsec (IKEv2); ZTNA covers access to individual applications.
You can buy the appliance alone, but every FortiGate we sell carries at least FortiCare ($792 per year list for FortiCare Premium on a 120G), because the bare unit gets only 90 days of firmware. A bundle adds FortiGuard UTP or Enterprise Protection, and each member of an HA pair needs its own.
We buy through Fortinet’s authorized U.S. distribution. Every unit is new, in-channel and registered to your own FortiCare account. Our Fortinet partner ID goes on every quote so you can verify it.
Fortinet, FortiGate, FortiCare, FortiGuard, FortiManager, FortiAnalyzer, FortiOS, FortiSwitch, FortiAP and FortiLink are trademarks or registered trademarks of Fortinet, Inc. Ambio Edge Networks is an independent company and a Fortinet Engage partner; Fortinet does not endorse or sponsor this page.
Automated monitoring and alerting to your Slack, Teams or email and to us, configuration backups, a monthly report, and next-business-day response from a senior engineer (Mon–Fri, 8 AM–5 PM Pacific). Up to 10 managed devices.
No change hours are included. Standard remote changes you ask for bill at $225/hr, 30-minute minimum; larger engineering work is quoted first. Hardware, licensing and migration are quoted separately.
One-time monitoring launch: $1,950 on Essential; other plans pay twice the monthly fee for the first site, up to $3,500, and $1,500 for each additional full site (dashboard, alert routing, baseline, runbook). Only one firewall to look after? Edge Firewall Watch is $199 a month. Faster response and included change hours are on the Secure and Compliance plans.
Start with a fixed-fee network risk assessment, or read how managed network monitoring works.
Request a Quote
For a renewal or replacement, send the serial number and expiry. For a new install, send the circuit speed, user count, switches and access points, and the ship-to address. You get a written quote with exact Fortinet part numbers and terms. Not sure what to buy yet? A Network Risk Assessment audits the firewall, switches and Wi-Fi and gives you a ranked roadmap with budget ranges before you spend on hardware: $3,500 for a single small site; larger networks are priced on the assessment pricing page. See a sample report (PDF).
A senior engineer reads your request and replies within 1 business day.
If anything is missing for an exact quote, we ask before guessing.
You get a written quote with part numbers, terms, shipping and tax lines.
Nothing is ordered until you accept and payment clears.