Fortinet list prices · datasheet specs
Part numbers and list prices ↓
For a data-center edge, service-provider edge or large enterprise core that needs 100G and 25G uplinks plus 10G copper in 2RU, as an HA pair. We size it on your measured traffic with inspection on and quote it by exact part number.
Buy it by part number. We can move you onto it for a fixed fee quoted on the call; see firewall migration.
Updated 2026-10-21 · prices as of 2026-09-07
Fortinet datasheet figures, enterprise traffic mix. Threat protection is the throughput with IPS, application control and malware protection all on. Size on that figure and on SSL inspection, not on the raw firewall number. Source: Fortinet FortiGate 3000G Series datasheet, FG-3000G-DAT-R04-20260929 (2026-09-29).
Port map
FG-3000G / FG-3001G (front)
Swipe sideways to see the whole panel.
Every part number we would put on a quote for this model, grouped the way you buy: the box alone, the box with a security bundle, or a renewal for a box you already own. Terms are 1, 3 or 5 years.
Fortinet list price (as of 2026-09-07), from the Fortinet Americas 2026 MidQ3 Price List. Your quote confirms current pricing, tax and shipping.
The 3001G is the 3000G plus 2x 960 GB SSD; ports and performance figures are the same. Both are AC only: the price list has no DC version. Sovereign SASE bundles exist for some 3000G quotes; we confirm the exact SKU and term before quoting.
FG-3000G FortiGate 3000GTwo AC power supplies included, hot-swappable
| Part number | What it includes | Term | Fortinet list price |
|---|---|---|---|
| Appliance onlyHardware with Fortinet’s standard 1 year hardware and 90 day firmware/ticket coverage. We pair it with FortiCare. | |||
FG-3000G | FortiGate 3000G appliance only, 2 AC power supplies, no onboard storage. Includes Fortinet’s standard 1 year hardware coverage and 90 days of firmware and ticket support, no FortiGuard services. | Hardware | $197,789 |
| UTP bundleAppliance + FortiCare Premium (ticket support, next-business-day advance hardware replacement, firmware) + FortiGuard Unified Threat Protection (IPS, antivirus and sandbox, application control, URL/DNS/video filtering, antispam). | |||
FG-3000G-BDL-950-12 | Appliance + FortiCare Premium + UTP, 1 year | 1 year | $312,449 |
FG-3000G-BDL-950-36 | Appliance + FortiCare Premium + UTP, 3 years | 3 years | $541,769 |
FG-3000G-BDL-950-60 | Appliance + FortiCare Premium + UTP, 5 years | 5 years | $771,089 |
| Enterprise Protection bundleAppliance + FortiCare Premium + FortiGuard Enterprise Protection: UTP’s IPS and filtering plus AI-based inline malware prevention, inline CASB database, data loss prevention and attack surface security. | |||
FG-3000G-BDL-809-12 | Appliance + FortiCare Premium + Enterprise Protection, 1 year | 1 year | $337,019 |
FG-3000G-BDL-809-36 | Appliance + FortiCare Premium + Enterprise Protection, 3 years | 3 years | $615,479 |
FG-3000G-BDL-809-60 | Appliance + FortiCare Premium + Enterprise Protection, 5 years | 5 years | $893,939 |
| Renewals for a unit already in serviceTied to the serial number. These SKUs fit a FortiGate 3000G only. | |||
FC-10-G3K0G-950-02-12 | UTP + FortiCare Premium renewal, 1 year | 1 year | $114,660 |
FC-10-G3K0G-950-02-36 | UTP + FortiCare Premium renewal, 3 years | 3 years | $343,980 |
FC-10-G3K0G-950-02-60 | UTP + FortiCare Premium renewal, 5 years | 5 years | $573,300 |
FC-10-G3K0G-809-02-12 | Enterprise Protection + FortiCare Premium renewal, 1 year | 1 year | $139,230 |
FC-10-G3K0G-809-02-36 | Enterprise Protection + FortiCare Premium renewal, 3 years | 3 years | $417,690 |
FC-10-G3K0G-809-02-60 | Enterprise Protection + FortiCare Premium renewal, 5 years | 5 years | $696,150 |
FC-10-G3K0G-247-02-12 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 1 year | 1 year | $32,760 |
FC-10-G3K0G-247-02-36 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 3 years | 3 years | $98,280 |
FC-10-G3K0G-247-02-60 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 5 years | 5 years | $163,800 |
| Add-on: FortiAnalyzer CloudPrice list description: “cloud-based central logging & analytics. Include all FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service.” Per serial number. | |||
FC-10-G3K0G-585-02-12 | FortiGate 3000G FortiAnalyzer Cloud, 1 year | 1 year | $49,140 |
FC-10-G3K0G-585-02-36 | FortiGate 3000G FortiAnalyzer Cloud, 3 years | 3 years | $147,420 |
FC-10-G3K0G-585-02-60 | FortiGate 3000G FortiAnalyzer Cloud, 5 years | 5 years | $245,700 |
Request a quoteName the part number and quantity in your message.
FG-3001G FortiGate 3001GTwo AC power supplies included, hot-swappable
Show FG-3001G part numbers| Part number | What it includes | Term | Fortinet list price |
|---|---|---|---|
| Appliance onlyHardware with Fortinet’s standard 1 year hardware and 90 day firmware/ticket coverage. We pair it with FortiCare. | |||
FG-3001G | FortiGate 3001G appliance only, 2 AC power supplies, 2x 960 GB SSD. Same 1 year hardware and 90 day firmware/ticket coverage, no FortiGuard services. | Hardware | $212,789 |
| UTP bundleAppliance + FortiCare Premium (ticket support, next-business-day advance hardware replacement, firmware) + FortiGuard Unified Threat Protection (IPS, antivirus and sandbox, application control, URL/DNS/video filtering, antispam). | |||
FG-3001G-BDL-950-12 | Appliance + FortiCare Premium + UTP, 1 year | 1 year | $332,718.60 |
FG-3001G-BDL-950-36 | Appliance + FortiCare Premium + UTP, 3 years | 3 years | $572,577.80 |
FG-3001G-BDL-950-60 | Appliance + FortiCare Premium + UTP, 5 years | 5 years | $812,437 |
| Enterprise Protection bundleAppliance + FortiCare Premium + FortiGuard Enterprise Protection: UTP’s IPS and filtering plus AI-based inline malware prevention, inline CASB database, data loss prevention and attack surface security. | |||
FG-3001G-BDL-809-12 | Appliance + FortiCare Premium + Enterprise Protection, 1 year | 1 year | $358,417.80 |
FG-3001G-BDL-809-36 | Appliance + FortiCare Premium + Enterprise Protection, 3 years | 3 years | $649,675.40 |
FG-3001G-BDL-809-60 | Appliance + FortiCare Premium + Enterprise Protection, 5 years | 5 years | $940,933 |
| Renewals for a unit already in serviceTied to the serial number. These SKUs fit a FortiGate 3001G only. | |||
FC-10-G3K1G-950-02-12 | UTP + FortiCare Premium renewal, 1 year | 1 year | $119,929.60 |
FC-10-G3K1G-950-02-36 | UTP + FortiCare Premium renewal, 3 years | 3 years | $359,788.80 |
FC-10-G3K1G-950-02-60 | UTP + FortiCare Premium renewal, 5 years | 5 years | $599,648 |
FC-10-G3K1G-809-02-12 | Enterprise Protection + FortiCare Premium renewal, 1 year | 1 year | $145,628.80 |
FC-10-G3K1G-809-02-36 | Enterprise Protection + FortiCare Premium renewal, 3 years | 3 years | $436,886.40 |
FC-10-G3K1G-809-02-60 | Enterprise Protection + FortiCare Premium renewal, 5 years | 5 years | $728,144 |
FC-10-G3K1G-247-02-12 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 1 year | 1 year | $34,265.60 |
FC-10-G3K1G-247-02-36 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 3 years | 3 years | $102,796.80 |
FC-10-G3K1G-247-02-60 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 5 years | 5 years | $171,328 |
| Add-on: FortiAnalyzer CloudPrice list description: “cloud-based central logging & analytics. Include all FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service.” Per serial number. | |||
FC-10-G3K1G-585-02-12 | FortiGate 3001G FortiAnalyzer Cloud, 1 year | 1 year | $51,398.40 |
FC-10-G3K1G-585-02-36 | FortiGate 3001G FortiAnalyzer Cloud, 3 years | 3 years | $154,195.20 |
FC-10-G3K1G-585-02-60 | FortiGate 3001G FortiAnalyzer Cloud, 5 years | 5 years | $256,992 |
Request a quoteName the part number and quantity in your message.
| Interfaces | |
|---|---|
| 100GE QSFP28 / 40GE QSFP+ slots | 6 |
| 25GE SFP28 / 10GE SFP+ / GE SFP slots | 16 (14 data ports, 2 HA ports) |
| 10GE / 5GE / 2.5GE / GE RJ45 ports | 16 (includes 2x WAN ports) |
| 10GE / GE RJ45 management ports | 2 |
| USB / console | 1 / 1 |
| Included transceivers | 2x SFP+ (SR 10 GE) |
| Onboard storage | None on the 3000G; 2x 960 GB SSD on the 3001G |
| Performance (enterprise traffic mix) | |
| Threat protection throughput | 80 Gbps |
| NGFW throughput | 85 Gbps |
| IPS throughput | 90 Gbps |
| SSL inspection throughput (IPS, avg. HTTPS) | 75 Gbps |
| SSL inspection connections per second | 50,800 |
| SSL inspection concurrent sessions | 9.9 M |
| Application control throughput (HTTP 64K) | 159 Gbps |
| IPsec VPN throughput (512 byte) | 105 Gbps |
| IPsec tunnels, gateway-to-gateway / client-to-gateway | 40,000 / 200,000 |
| IPv4 firewall throughput (1518 / 512 / 64 byte UDP) | 397 / 394 / 234 Gbps |
| Firewall throughput (packets per second) | 351 Mpps |
| Firewall latency (64 byte UDP) | 3.7 μs |
| Concurrent sessions (TCP) | 88 M; 230 M with the Hyperscale Firewall License |
| New sessions per second (TCP) | 1.1 M; 3 M with the Hyperscale Firewall License |
| Firewall policies | 200,000 |
| CAPWAP throughput (HTTP 64K) | 148 Gbps |
| Virtual domains (default / max) | 10 / 500 |
| Max FortiSwitches | 300 |
| Max FortiAPs (total / tunnel) | 4,096 / 2,048 |
| HA modes | Active-Active, Active-Passive, Clustering |
| Physical and power | |
| Form factor | 2RU rack mount |
| Dimensions (H x W x L) | 3.48 x 17.20 x 19.52 in (88.5 x 437 x 495.75 mm) |
| Weight | 33.73 lb (15.3 kg); 3001G 34.1 lb (15.45 kg) |
| Power supplies | 2 AC included, hot-swappable (datasheet: “Hot Swappable, 2+2”), 80+ Platinum |
| AC input | 100–240 V AC, 60–50 Hz; 12 A at 100 V, 9 A at 240 V max |
| Power draw (avg / max) | 550 / 808 W; 3001G 560 / 828 W |
| Heat dissipation | 2,755 BTU/h; 3001G 2,823 BTU/h |
| Airflow / noise | Front to back; 70.4 dBA |
| Operating temperature | 32–113 °F (0–45 °C) |
Source: Fortinet FortiGate 3000G Series datasheet, FG-3000G-DAT-R04-20260929 (2026-09-29). Fortinet states all performance values as “up to”. IPS, application control, NGFW and threat protection are measured with logging enabled; NGFW with firewall, IPS and application control on; threat protection adds malware protection. IPsec uses AES256-SHA256. SSL inspection uses an average of HTTPS sessions across cipher suites. The datasheet still lists SSL-VPN tunnel-mode figures; those do not apply on FortiOS 7.6.3 and later, so they are left out here. The 230 M session and 3 M new-session figures require the Hyperscale Firewall License, which the datasheet lists as “Coming Soon” for the 3000G.
SSL-VPN status. SSL-VPN tunnel mode was removed from every FortiGate in FortiOS 7.6.3, the 3000G included. Browser-based web mode is still available on models that support it; tunnel mode is gone on every model. Full-tunnel remote access is IPsec (IKEv2); ZTNA covers access to individual applications. Fortinet: FortiOS 7.6.3 release notes. Background: FortiGate SSL-VPN migration.
The neighbouring models, compared on the same datasheet figures.
The 901G ($49,411 list) is the next model down: 30 Gbps threat protection against 80 Gbps, 16.7 against 75 Gbps SSL inspection, 28 M against 88 M concurrent sessions, and 25G as its fastest port against six 100G QSFP28 cages. It is 1RU; the 3000G is 2RU. Move up when measured inspected traffic or uplink speed outgrows the 901G.
The 3500G ($302,702 list) rates 105 Gbps threat protection and 112 Gbps SSL inspection against 80 and 75 Gbps, holds 179 M sessions, and adds two 400G QSFP-DD cages and has thirty SFP28 against sixteen. It has no 10G copper data ports; the 3000G has sixteen. Both are 2RU.
| Datasheet figure | 901G | 3000G | 3500G |
|---|---|---|---|
| Threat protection | 30 Gbps | 80 Gbps | 105 Gbps |
| NGFW | 31 Gbps | 85 Gbps | 115 Gbps |
| IPS | 42 Gbps | 90 Gbps | 125 Gbps |
| SSL inspection (IPS, avg. HTTPS) | 16.7 Gbps | 75 Gbps | 112 Gbps |
| IPsec VPN (512 byte) | 55 Gbps | 105 Gbps | 163 Gbps |
| Firewall (1518 byte UDP) | 164 Gbps | 397 Gbps | 595 Gbps |
| Concurrent sessions | 28 M | 88 M | 179 M |
| New sessions per second | 720,000 | 1.1 M | 1.1 M |
| Ports | 16x GE RJ45, 8x GE SFP, 4x 10GE SFP+, 4x 25GE SFP28, HA, MGMT | 6x 100GE QSFP28, 16x 25GE SFP28 (2 HA), 16x 10GE RJ45 (2 WAN), 2x 10GE MGMT | 2x 400GE QSFP-DD, 4x 100GE QSFP28, 30x 25GE SFP28 (2 HA, 2 WAN), 2x 10GE MGMT |
| Storage | None (900G); 2x 480 GB SSD (901G) | None (3001G: 2x 960 GB SSD) | None (3501G: 2x 1.92 TB SSD) |
| VDOMs (default / max) | 10 / 50 | 10 / 500 | 10 / 500 |
| SSL-VPN | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ |
| Appliance list price | $49,411 FG-901G | $197,789 FG-3000G | $302,702 FG-3500G |
Sources: Fortinet FortiGate 900G Series datasheet (FG-900G-DAT-R23-20260929); Fortinet FortiGate 3000G Series datasheet (FG-3000G-DAT-R04-20260929); Fortinet FortiGate 3500G Series datasheet (FG-3500G-DAT-R03-20260929). Values “up to”, enterprise traffic mix, logging enabled. Appliance list price from the Fortinet Americas 2026 MidQ3 Price List, effective 2026-09-07.
What we check before this model goes on a quote, from the engineer who sizes, stages and installs it.
Fortinet’s datasheet does not name a predecessor for the 3000G series, and we do not publish a guessed mapping. We check your current unit’s lifecycle dates and Trade-Up eligibility per serial number, then size the 3000G (or 3001G) on your measured traffic with inspection on.
The 3000G has two dedicated 25G SFP28 HA ports (HA1, HA2) and two 10G RJ45 management ports, so heartbeat and out-of-band management do not use data ports. Fortinet recommends at least two heartbeat links: cable HA1 and HA2 directly between the units. Both units need their own bundle, and the current price list has no 3000G HA SKU, so an HA pair on 3-year UTP comes to $1,083,538 on Fortinet’s price list, shown for reference; we quote by exact part number. Each unit ships with two hot-swap AC supplies; feed them from separate PDUs.
Six 100G QSFP28 cages (they also take 40G QSFP+), sixteen 25G SFP28 cages (10G SFP+ and GE SFP also fit; two are the HA ports), sixteen 10G RJ45 ports (two marked WAN) and two 10G RJ45 management ports. Only two 10G SR SFP+ optics come in the box, so 25G and 100G optics go on the quote by part number, for example FN-TRAN-SFP28-SR and FN-TRAN-QSFP28-SR from the datasheet’s transceiver list. Of the 3000G, 3500G and 3800G, only the 3000G and 3001G have 10G copper data ports.
Both members are added in FortiManager as model devices by serial number and staged before they ship. For a migration from an existing FortiGate or another vendor, we convert the config, rebuild interface mapping onto the new port layout, and run the old and new units side by side in a cutover window with a rollback path. VDOMs: 10 by default, up to 500.
Threat protection is 80 Gbps and SSL inspection 75 Gbps, but inspected new sessions top out at 50,800 per second. A design that deep-inspects most traffic or terminates many short TLS sessions should be sized on that figure. The 230 M session and 3 M new-session figures need the Hyperscale Firewall License, which the datasheet lists as coming soon for this model; without it the figures are 88 M and 1.1 M. Log volume at this size needs FortiAnalyzer.
The only datasheet differences are the 3001G’s 2x 960 GB SSD and slightly higher weight and power. The FG-3000G lists at $197,789 against $212,789. If logs go to FortiAnalyzer and disk-based features are not required, the 3000G may be the better fit.
Fortinet references for the notes above: Fortinet best practices: HA heartbeat interfaces; Fortinet Community: HA cluster license requirements; FortiManager administration guide: adding a model device by serial number; Fortinet service contract activation grace period policy; part numbers and list prices from the Fortinet Americas 2026 MidQ3 Price List.
Every line on the quote is an exact Fortinet part number and term, sized to your circuit and the services you run. Your written quote confirms current pricing, tax and shipping.
Payment clears before the distributor order. The unit ships from distribution to your site; freight is billed at actual cost.
Hardware and subscriptions go on your FortiCare account, not ours. Serials and contract dates are on the invoice.
We watch the expiry for every serial we sell and contact you at 120, 90, 60 and 30 days out.
Full terms, special-order rules and what to send for a quote: how buying from us works. Want it run after it ships? We are based in Sacramento: see Sacramento Fortinet MSP.
Fortinet list price is $197,789 for the appliance alone, $312,449 with 1 year of FortiCare Premium and UTP, $541,769 for 3 years and $771,089 for 5 years (price list effective 2026-09-07). Your quote confirms current pricing, tax and shipping.
Two units, each with its own bundle. At Fortinet list prices (for reference), two FG-3000G-BDL-950-36 (3 years UTP) come to $1,083,538, plus 25G and 100G optics, which are quoted separately. The current price list has no shared-license HA SKU for the 3000G.
Same ports and performance figures. The 3001G adds 2x 960 GB SSD for local logging and disk-based features and lists at $212,789 against $197,789 for the 3000G.
Not in tunnel mode on FortiOS 7.6.3 or later; Fortinet removed it from all models. Browser-based web mode is still available on models that support it; tunnel mode is gone on every model. Full-tunnel remote access is IPsec (IKEv2); ZTNA covers access to individual applications.
We buy through Fortinet’s authorized U.S. distribution. Every unit is new, in-channel and registered to your own FortiCare account. Our Fortinet partner ID goes on every quote so you can verify it.
Fortinet, FortiGate, FortiCare, FortiGuard, FortiManager, FortiAnalyzer, FortiOS, FortiSwitch and FortiAP are trademarks or registered trademarks of Fortinet, Inc. Ambio Edge Networks is an independent company and a Fortinet Engage partner; Fortinet does not endorse or sponsor this page.
Automated monitoring and alerting to your Slack, Teams or email and to us, configuration backups, a monthly report, and next-business-day response from a senior engineer (Mon–Fri, 8 AM–5 PM Pacific). Up to 10 managed devices.
No change hours are included. Standard remote changes you ask for bill at $225/hr, 30-minute minimum; larger engineering work is quoted first. Hardware, licensing and migration are quoted separately.
One-time monitoring launch: $1,950 on Essential; other plans pay twice the monthly fee for the first site, up to $3,500, and $1,500 for each additional full site (dashboard, alert routing, baseline, runbook). Only one firewall to look after? Edge Firewall Watch is $199 a month. Faster response and included change hours are on the Secure and Compliance plans.
Start with a fixed-fee network risk assessment, or read how managed network monitoring works.
Request a Quote
For a renewal or replacement, send the serial number and expiry. For a new install, send the circuit speed, user count, switches and access points, and the ship-to address. You get a written quote with exact Fortinet part numbers and terms. Not sure what to buy yet? A Network Risk Assessment audits the firewall, switches and Wi-Fi and gives you a ranked roadmap with budget ranges before you spend on hardware: $3,500 for a single small site; larger networks are priced on the assessment pricing page. See a sample report (PDF).
A senior engineer reads your request and replies within 1 business day.
If anything is missing for an exact quote, we ask before guessing.
You get a written quote with part numbers, terms, shipping and tax lines.
Nothing is ordered until you accept and payment clears.