Fortinet list prices · datasheet specs
Part numbers and list prices ↓
For a data-center or service-provider edge, or a large enterprise core, that needs 400G uplinks and 25G density in 2RU, as an HA pair. We size it on your measured traffic with inspection on and quote it by exact part number.
Buy it by part number. We can move you onto it for a fixed fee quoted on the call; see firewall migration.
Updated 2026-10-21 · prices as of 2026-09-07
Fortinet datasheet figures, enterprise traffic mix. Threat protection is the throughput with IPS, application control and malware protection all on. Size on that figure and on SSL inspection, not on the raw firewall number. Source: Fortinet FortiGate 3500G Series datasheet, FG-3500G-DAT-R03-20260929 (2026-09-29).
Port map
FG-3500G / FG-3501G (front)
Swipe sideways to see the whole panel.
Every part number we would put on a quote for this model, grouped the way you buy: the box alone, the box with a security bundle, or a renewal for a box you already own. Terms are 1, 3 or 5 years.
Fortinet list price (as of 2026-09-07), from the Fortinet Americas 2026 MidQ3 Price List. Your quote confirms current pricing, tax and shipping.
The 3501G is the 3500G plus 2x 1.92 TB SSD; ports and performance figures are the same. Both are AC only: the price list has no DC version. Renewals differ by model (G3K5G for the 3500G, G35G1 for the 3501G). Sovereign SASE bundles exist for some 3500G quotes; we confirm the exact SKU and term before quoting.
FG-3500G FortiGate 3500GTwo AC power supplies included (1+1), hot-swappable
| Part number | What it includes | Term | Fortinet list price |
|---|---|---|---|
| Appliance onlyHardware with Fortinet’s standard 1 year hardware and 90 day firmware/ticket coverage. We pair it with FortiCare. | |||
FG-3500G | FortiGate 3500G appliance only, 2 AC power supplies, no onboard storage. Includes Fortinet’s standard 1 year hardware coverage and 90 days of firmware and ticket support, no FortiGuard services. | Hardware | $302,702 |
| UTP bundleAppliance + FortiCare Premium (ticket support, next-business-day advance hardware replacement, firmware) + FortiGuard Unified Threat Protection (IPS, antivirus and sandbox, application control, URL/DNS/video filtering, antispam). | |||
FG-3500G-BDL-950-12 | Appliance + FortiCare Premium + UTP, 1 year | 1 year | $504,503.60 |
FG-3500G-BDL-950-36 | Appliance + FortiCare Premium + UTP, 3 years | 3 years | $908,106.80 |
FG-3500G-BDL-950-60 | Appliance + FortiCare Premium + UTP, 5 years | 5 years | $1,311,710 |
| Enterprise Protection bundleAppliance + FortiCare Premium + FortiGuard Enterprise Protection: UTP’s IPS and filtering plus AI-based inline malware prevention, inline CASB database, data loss prevention and attack surface security. | |||
FG-3500G-BDL-809-12 | Appliance + FortiCare Premium + Enterprise Protection, 1 year | 1 year | $547,746.80 |
FG-3500G-BDL-809-36 | Appliance + FortiCare Premium + Enterprise Protection, 3 years | 3 years | $1,037,836.40 |
FG-3500G-BDL-809-60 | Appliance + FortiCare Premium + Enterprise Protection, 5 years | 5 years | $1,527,926 |
| Renewals for a unit already in serviceTied to the serial number. These SKUs fit a FortiGate 3500G only. | |||
FC-10-G3K5G-950-02-12 | UTP + FortiCare Premium renewal, 1 year | 1 year | $201,801.60 |
FC-10-G3K5G-950-02-36 | UTP + FortiCare Premium renewal, 3 years | 3 years | $605,404.80 |
FC-10-G3K5G-950-02-60 | UTP + FortiCare Premium renewal, 5 years | 5 years | $1,009,008 |
FC-10-G3K5G-809-02-12 | Enterprise Protection + FortiCare Premium renewal, 1 year | 1 year | $245,044.80 |
FC-10-G3K5G-809-02-36 | Enterprise Protection + FortiCare Premium renewal, 3 years | 3 years | $735,134.40 |
FC-10-G3K5G-809-02-60 | Enterprise Protection + FortiCare Premium renewal, 5 years | 5 years | $1,225,224 |
FC-10-G3K5G-247-02-12 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 1 year | 1 year | $57,657.60 |
FC-10-G3K5G-247-02-36 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 3 years | 3 years | $172,972.80 |
FC-10-G3K5G-247-02-60 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 5 years | 5 years | $288,288 |
| Add-on: FortiAnalyzer CloudPrice list description: “cloud-based central logging & analytics. Include all FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service.” Per serial number. | |||
FC-10-G3K5G-585-02-12 | FortiGate 3500G FortiAnalyzer Cloud, 1 year | 1 year | $86,486.40 |
FC-10-G3K5G-585-02-36 | FortiGate 3500G FortiAnalyzer Cloud, 3 years | 3 years | $259,459.20 |
FC-10-G3K5G-585-02-60 | FortiGate 3500G FortiAnalyzer Cloud, 5 years | 5 years | $432,432 |
Request a quoteName the part number and quantity in your message.
FG-3501G FortiGate 3501GTwo AC power supplies included (1+1), hot-swappable
Show FG-3501G part numbers| Part number | What it includes | Term | Fortinet list price |
|---|---|---|---|
| Appliance onlyHardware with Fortinet’s standard 1 year hardware and 90 day firmware/ticket coverage. We pair it with FortiCare. | |||
FG-3501G | FortiGate 3501G appliance only, 2 AC power supplies, 2x 1.92 TB SSD. Same 1 year hardware and 90 day firmware/ticket coverage, no FortiGuard services. | Hardware | $317,702 |
| UTP bundleAppliance + FortiCare Premium (ticket support, next-business-day advance hardware replacement, firmware) + FortiGuard Unified Threat Protection (IPS, antivirus and sandbox, application control, URL/DNS/video filtering, antispam). | |||
FG-3501G-BDL-950-12 | Appliance + FortiCare Premium + UTP, 1 year | 1 year | $523,620.30 |
FG-3501G-BDL-950-36 | Appliance + FortiCare Premium + UTP, 3 years | 3 years | $935,456.90 |
FG-3501G-BDL-950-60 | Appliance + FortiCare Premium + UTP, 5 years | 5 years | $1,347,293.50 |
| Enterprise Protection bundleAppliance + FortiCare Premium + FortiGuard Enterprise Protection: UTP’s IPS and filtering plus AI-based inline malware prevention, inline CASB database, data loss prevention and attack surface security. | |||
FG-3501G-BDL-809-12 | Appliance + FortiCare Premium + Enterprise Protection, 1 year | 1 year | $567,745.65 |
FG-3501G-BDL-809-36 | Appliance + FortiCare Premium + Enterprise Protection, 3 years | 3 years | $1,067,832.95 |
FG-3501G-BDL-809-60 | Appliance + FortiCare Premium + Enterprise Protection, 5 years | 5 years | $1,567,920.25 |
| Renewals for a unit already in serviceTied to the serial number. These SKUs fit a FortiGate 3501G only. | |||
FC-10-G35G1-950-02-12 | UTP + FortiCare Premium renewal, 1 year | 1 year | $205,918.30 |
FC-10-G35G1-950-02-36 | UTP + FortiCare Premium renewal, 3 years | 3 years | $617,754.90 |
FC-10-G35G1-950-02-60 | UTP + FortiCare Premium renewal, 5 years | 5 years | $1,029,591.50 |
FC-10-G35G1-809-02-12 | Enterprise Protection + FortiCare Premium renewal, 1 year | 1 year | $250,043.65 |
FC-10-G35G1-809-02-36 | Enterprise Protection + FortiCare Premium renewal, 3 years | 3 years | $750,130.95 |
FC-10-G35G1-809-02-60 | Enterprise Protection + FortiCare Premium renewal, 5 years | 5 years | $1,250,218.25 |
FC-10-G35G1-247-02-12 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 1 year | 1 year | $58,833.80 |
FC-10-G35G1-247-02-36 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 3 years | 3 years | $176,501.40 |
FC-10-G35G1-247-02-60 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 5 years | 5 years | $294,169 |
| Add-on: FortiAnalyzer CloudPrice list description: “cloud-based central logging & analytics. Include all FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service.” Per serial number. | |||
FC-10-G35G1-585-02-12 | FortiGate 3501G FortiAnalyzer Cloud, 1 year | 1 year | $88,250.70 |
FC-10-G35G1-585-02-36 | FortiGate 3501G FortiAnalyzer Cloud, 3 years | 3 years | $264,752.10 |
FC-10-G35G1-585-02-60 | FortiGate 3501G FortiAnalyzer Cloud, 5 years | 5 years | $441,253.50 |
Request a quoteName the part number and quantity in your message.
| Interfaces | |
|---|---|
| 400GE QSFP-DD / 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ ports | 2 |
| 100GE QSFP28 / 40GE QSFP+ slots | 4 |
| 25GE SFP28 / 10GE SFP+ / GE SFP slots | 30 (26 data ports, 2 WAN, 2 HA) |
| 10GE / GE RJ45 management ports | 2 |
| USB / console | 1 / 1 |
| Included transceivers | 2x SFP+ (SR 10 GE) |
| Onboard storage | None on the 3500G; 2x 1.92 TB SSD on the 3501G |
| Performance (enterprise traffic mix) | |
| Threat protection throughput | 105 Gbps |
| NGFW throughput | 115 Gbps |
| IPS throughput | 125 Gbps |
| SSL inspection throughput (IPS, avg. HTTPS) | 112 Gbps |
| SSL inspection connections per second | 112,345 |
| SSL inspection concurrent sessions | 18 M |
| Application control throughput (HTTP 64K) | 197 Gbps |
| IPsec VPN throughput (512 byte) | 163 Gbps |
| IPsec tunnels, gateway-to-gateway / client-to-gateway | 40,000 / 200,000 |
| IPv4 firewall throughput (1518 / 512 / 64 byte UDP) | 595 / 590 / 420 Gbps |
| Firewall throughput (packets per second) | 630 Mpps |
| Firewall latency (64 byte UDP) | 2.96 μs |
| Concurrent sessions (TCP) | 179 M |
| New sessions per second (TCP) | 1.1 M |
| Firewall policies | 200,000 |
| Virtual domains (default / max) | 10 / 500 |
| Max FortiSwitches | 300 |
| Max FortiAPs (total / tunnel) | 4,096 / 2,048 |
| HA modes | Active-Active, Active-Passive, Clustering |
| Physical and power | |
| Form factor | 2RU rack mount |
| Dimensions (H x W x L) | 3.5 x 17.4 x 20.8 in (88.5 x 442.5 x 529.3 mm) |
| Weight | 36.7 lb (16.65 kg); 3501G 37 lb (16.8 kg) |
| Power supplies | Dual AC included for 1+1 redundancy, hot-swappable, 80+ compliant |
| AC input | 100–240 V AC, 60–50 Hz; 12 A at 100 V, 9 A at 240 V max |
| Power draw (avg / max) | 678 / 973 W; 3501G 688 / 993 W |
| Heat dissipation | 3,318 BTU/h; 3501G 3,386 BTU/h |
| Airflow / noise | Front to back; 70.4 dBA |
| Operating temperature | 32–113 °F (0–45 °C) |
Source: Fortinet FortiGate 3500G Series datasheet, FG-3500G-DAT-R03-20260929 (2026-09-29). Fortinet states all performance values as “up to”. IPS, application control, NGFW and threat protection are measured with logging enabled; NGFW with firewall, IPS and application control on; threat protection adds malware protection. IPsec uses AES256-SHA256. SSL inspection uses an average of HTTPS sessions across cipher suites. The datasheet still lists SSL-VPN tunnel-mode figures; those do not apply on FortiOS 7.6.3 and later, so they are left out here. The datasheet lists CAPWAP throughput as TBA, so it is left out.
SSL-VPN status. SSL-VPN tunnel mode was removed from every FortiGate in FortiOS 7.6.3, the 3500G included. Browser-based web mode is still available on models that support it; tunnel mode is gone on every model. Full-tunnel remote access is IPsec (IKEv2); ZTNA covers access to individual applications. Fortinet: FortiOS 7.6.3 release notes. Background: FortiGate SSL-VPN migration.
The neighbouring models, compared on the same datasheet figures.
The 3000G ($197,789 list) rates 80 Gbps threat protection and 75 Gbps SSL inspection against 105 and 112 Gbps, and 88 M sessions against 179 M. Its fastest ports are six 100G QSFP28 and it has no 400G, but it keeps sixteen 10G RJ45 data ports, which the 3500G does not have. Both are 2RU.
The 3800G ($494,471 list) roughly doubles threat protection (200 against 105 Gbps) and IPS (250 against 125 Gbps), and moves to 50G SFP56, 200G QSFP56 and four 400G QSFP-DD cages. SSL inspection barely moves: 120 against 112 Gbps. It is 3RU with four supplies on 200–240 V AC, or DC.
| Datasheet figure | 3000G | 3500G | 3800G |
|---|---|---|---|
| Threat protection | 80 Gbps | 105 Gbps | 200 Gbps |
| NGFW | 85 Gbps | 115 Gbps | 210 Gbps |
| IPS | 90 Gbps | 125 Gbps | 250 Gbps |
| SSL inspection (IPS, avg. HTTPS) | 75 Gbps | 112 Gbps | 120 Gbps |
| IPsec VPN (512 byte) | 105 Gbps | 163 Gbps | 210 Gbps |
| Firewall (1518 byte UDP) | 397 Gbps | 595 Gbps | 795 Gbps |
| Concurrent sessions | 88 M | 179 M | 200 M |
| New sessions per second | 1.1 M | 1.1 M | 1.11 M |
| Ports | 6x 100GE QSFP28, 16x 25GE SFP28 (2 HA), 16x 10GE RJ45 (2 WAN), 2x 10GE MGMT | 2x 400GE QSFP-DD, 4x 100GE QSFP28, 30x 25GE SFP28 (2 HA, 2 WAN), 2x 10GE MGMT | 4x 400GE QSFP-DD, 6x 200GE QSFP56 (2 HA), 18x 50GE SFP56 (2 HA, 2 WAN), 2x 10GE MGMT |
| Storage | None (3001G: 2x 960 GB SSD) | None (3501G: 2x 1.92 TB SSD) | None (3801G: 2x 1.92 TB SSD) |
| VDOMs (default / max) | 10 / 500 | 10 / 500 | 10 / 500 |
| SSL-VPN | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ |
| Appliance list price | $197,789 FG-3000G | $302,702 FG-3500G | $494,471 FG-3800G |
Sources: Fortinet FortiGate 3000G Series datasheet (FG-3000G-DAT-R04-20260929); Fortinet FortiGate 3500G Series datasheet (FG-3500G-DAT-R03-20260929); Fortinet FortiGate 3800G Series datasheet (FG-3800G-DAT-R06-20260414). Values “up to”, enterprise traffic mix, logging enabled. Appliance list price from the Fortinet Americas 2026 MidQ3 Price List, effective 2026-09-07.
What we check before this model goes on a quote, from the engineer who sizes, stages and installs it.
Fortinet’s datasheet does not name a predecessor for the 3500G series, and we do not publish a guessed mapping. We check your current unit’s lifecycle dates and Trade-Up eligibility per serial number, then size the 3500G (or 3501G) on your measured traffic with inspection on.
The 3500G has two dedicated 25G SFP28 HA slots (HA1, HA2) and two 10G RJ45 management ports, so heartbeat and out-of-band management do not use data ports. Fortinet recommends at least two heartbeat links: cable HA1 and HA2 directly between the units. Both units need their own bundle, and the current price list has no 3500G HA SKU, so an HA pair on 3-year UTP comes to $1,816,213.60 on Fortinet’s price list, shown for reference; we quote by exact part number. Each unit ships with two hot-swap AC supplies (1+1); feed them from separate PDUs.
Two 400G QSFP-DD ports (they also take 200G QSFP56, 100G QSFP28 and 40G QSFP+), four 100G QSFP28, thirty 25G SFP28 (two marked WAN, two HA) and two 10G RJ45 management ports. There are no copper data ports, so any RJ45 hand-off needs an SFP RJ45 module. Only two 10G SR SFP+ optics come in the box. The datasheet’s transceiver list stops at 100G QSFP28 (FN-TRAN-QSFP28-SR and others); 400G and 200G optics are confirmed with Fortinet by part number before we quote.
Both members are added in FortiManager as model devices by serial number and staged before they ship. For a migration from an existing FortiGate or another vendor, we convert the config, rebuild interface mapping onto the new port layout, and run the old and new units side by side in a cutover window with a rollback path. VDOMs: 10 by default, up to 500.
Threat protection is 105 Gbps and SSL inspection 112 Gbps, with 112,345 new inspected sessions per second. A design that deep-inspects most traffic should be sized on those two numbers, not the 595 Gbps firewall figure. Unlike the 3000G and 3800G datasheets, the 3500G datasheet lists no Hyperscale Firewall License figures. Log volume at this size needs FortiAnalyzer.
The only datasheet differences are the 3501G’s 2x 1.92 TB SSD and slightly higher weight and power. The FG-3500G lists at $302,702 against $317,702. If logs go to FortiAnalyzer and disk-based features are not required, the 3500G may be the better fit.
Fortinet references for the notes above: Fortinet best practices: HA heartbeat interfaces; Fortinet Community: HA cluster license requirements; FortiManager administration guide: adding a model device by serial number; Fortinet service contract activation grace period policy; part numbers and list prices from the Fortinet Americas 2026 MidQ3 Price List.
Every line on the quote is an exact Fortinet part number and term, sized to your circuit and the services you run. Your written quote confirms current pricing, tax and shipping.
Payment clears before the distributor order. The unit ships from distribution to your site; freight is billed at actual cost.
Hardware and subscriptions go on your FortiCare account, not ours. Serials and contract dates are on the invoice.
We watch the expiry for every serial we sell and contact you at 120, 90, 60 and 30 days out.
Full terms, special-order rules and what to send for a quote: how buying from us works. Want it run after it ships? We are based in Sacramento: see Sacramento Fortinet MSP.
Fortinet list price is $302,702 for the appliance alone, $504,503.60 with 1 year of FortiCare Premium and UTP, $908,106.80 for 3 years and $1,311,710 for 5 years (price list effective 2026-09-07). Your quote confirms current pricing, tax and shipping.
Two units, each with its own bundle. At Fortinet list prices (for reference), two FG-3500G-BDL-950-36 (3 years UTP) come to $1,816,213.60, plus 25G, 100G and 400G optics, which are quoted separately. The current price list has no shared-license HA SKU for the 3500G.
Same ports and performance figures. The 3501G adds 2x 1.92 TB SSD for local logging and disk-based features and lists at $317,702 against $302,702 for the 3500G.
You can buy the appliance alone, but every FortiGate we sell carries at least FortiCare ($57,657.60 per year list for FortiCare Premium on a 3500G), because the bare unit gets only 90 days of firmware. A bundle adds FortiGuard UTP or Enterprise Protection, and each member of an HA pair needs its own.
Not in tunnel mode on FortiOS 7.6.3 or later; Fortinet removed it from all models. Browser-based web mode is still available on models that support it; tunnel mode is gone on every model. Full-tunnel remote access is IPsec (IKEv2); ZTNA covers access to individual applications.
We buy through Fortinet’s authorized U.S. distribution. Every unit is new, in-channel and registered to your own FortiCare account. Our Fortinet partner ID goes on every quote so you can verify it.
Fortinet, FortiGate, FortiCare, FortiGuard, FortiManager, FortiAnalyzer, FortiOS, FortiSwitch and FortiAP are trademarks or registered trademarks of Fortinet, Inc. Ambio Edge Networks is an independent company and a Fortinet Engage partner; Fortinet does not endorse or sponsor this page.
Automated monitoring and alerting to your Slack, Teams or email and to us, configuration backups, a monthly report, and next-business-day response from a senior engineer (Mon–Fri, 8 AM–5 PM Pacific). Up to 10 managed devices.
No change hours are included. Standard remote changes you ask for bill at $225/hr, 30-minute minimum; larger engineering work is quoted first. Hardware, licensing and migration are quoted separately.
One-time monitoring launch: $1,950 on Essential; other plans pay twice the monthly fee for the first site, up to $3,500, and $1,500 for each additional full site (dashboard, alert routing, baseline, runbook). Only one firewall to look after? Edge Firewall Watch is $199 a month. Faster response and included change hours are on the Secure and Compliance plans.
Start with a fixed-fee network risk assessment, or read how managed network monitoring works.
Request a Quote
For a renewal or replacement, send the serial number and expiry. For a new install, send the circuit speed, user count, switches and access points, and the ship-to address. You get a written quote with exact Fortinet part numbers and terms. Not sure what to buy yet? A Network Risk Assessment audits the firewall, switches and Wi-Fi and gives you a ranked roadmap with budget ranges before you spend on hardware: $3,500 for a single small site; larger networks are priced on the assessment pricing page. See a sample report (PDF).
A senior engineer reads your request and replies within 1 business day.
If anything is missing for an exact quote, we ask before guessing.
You get a written quote with part numbers, terms, shipping and tax lines.
Nothing is ordered until you accept and payment clears.