Fortinet list prices · datasheet specs
Part numbers and list prices ↓
For a large office, campus edge or branch hub: 25G and 10G uplinks, multi-gig copper WAN and a dedicated HA port, in one rack unit.
Buy it by part number. We can move you onto it for a fixed fee quoted on the call; see firewall migration.
Updated 2026-10-21 · prices as of 2026-09-07
Fortinet datasheet figures, enterprise traffic mix. Threat protection is the throughput with IPS, application control and malware protection all on. Size on that figure and on SSL inspection, not on the raw firewall number. Source: Fortinet FortiGate 400G Series datasheet, FG-400G-DAT-R06-20261013 (2026-10-13).
Port map
FG-400G / FG-401G (front)
Swipe sideways to see the whole panel.
Every part number we would put on a quote for this model, grouped the way you buy: the box alone, the box with a security bundle, or a renewal for a box you already own. Terms are 1, 3 or 5 years.
Fortinet list price (as of 2026-09-07), from the Fortinet Americas 2026 MidQ3 Price List. Your quote confirms current pricing, tax and shipping.
The 401G is the 400G plus 2x 480 GB SSD, with its own bundle and renewal part numbers (FG4H1 against FG4H0), so a 400G renewal SKU will not apply to a 401G serial. The current price list has no DC version of either model.
FG-400G FortiGate 400GDual internal AC power supplies (1+1), not hot-swappable
| Part number | What it includes | Term | Fortinet list price |
|---|---|---|---|
| Appliance onlyHardware with Fortinet’s standard 1 year hardware and 90 day firmware/ticket coverage. We pair it with FortiCare. | |||
FG-400G | FortiGate 400G appliance only, dual AC PSU, no onboard storage. Includes Fortinet's 1 year hardware coverage and 90 days of firmware and ticket support, no FortiGuard services. | Hardware | $24,696 |
| UTP bundleAppliance + FortiCare Premium (ticket support, next-business-day advance hardware replacement, firmware) + FortiGuard Unified Threat Protection (IPS, antivirus and sandbox, application control, URL/DNS/video filtering, antispam). | |||
FG-400G-BDL-950-12 | Appliance + FortiCare Premium + UTP, 1 year | 1 year | $40,131 |
FG-400G-BDL-950-36 | Appliance + FortiCare Premium + UTP, 3 years | 3 years | $71,001 |
FG-400G-BDL-950-60 | Appliance + FortiCare Premium + UTP, 5 years | 5 years | $101,871 |
| Enterprise Protection bundleAppliance + FortiCare Premium + FortiGuard Enterprise Protection: UTP’s IPS and filtering plus AI-based inline malware prevention, inline CASB database, data loss prevention and attack surface security. | |||
FG-400G-BDL-809-12 | Appliance + FortiCare Premium + Enterprise Protection, 1 year | 1 year | $43,438.50 |
FG-400G-BDL-809-36 | Appliance + FortiCare Premium + Enterprise Protection, 3 years | 3 years | $80,923.50 |
FG-400G-BDL-809-60 | Appliance + FortiCare Premium + Enterprise Protection, 5 years | 5 years | $118,408.50 |
| Renewals for a unit already in serviceTied to the serial number. These SKUs fit a FortiGate 400G only. | |||
FC-10-FG4H0-950-02-12 | UTP + FortiCare Premium renewal, 1 year | 1 year | $15,435 |
FC-10-FG4H0-950-02-36 | UTP + FortiCare Premium renewal, 3 years | 3 years | $46,305 |
FC-10-FG4H0-950-02-60 | UTP + FortiCare Premium renewal, 5 years | 5 years | $77,175 |
FC-10-FG4H0-809-02-12 | Enterprise Protection + FortiCare Premium renewal, 1 year | 1 year | $18,742.50 |
FC-10-FG4H0-809-02-36 | Enterprise Protection + FortiCare Premium renewal, 3 years | 3 years | $56,227.50 |
FC-10-FG4H0-809-02-60 | Enterprise Protection + FortiCare Premium renewal, 5 years | 5 years | $93,712.50 |
FC-10-FG4H0-247-02-12 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 1 year | 1 year | $4,410 |
FC-10-FG4H0-247-02-36 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 3 years | 3 years | $13,230 |
FC-10-FG4H0-247-02-60 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 5 years | 5 years | $22,050 |
| Add-on: FortiAnalyzer CloudPrice list description: “cloud-based central logging & analytics. Include all FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service.” Per serial number. | |||
FC-10-FG4H0-585-02-12 | FortiGate 400G FortiAnalyzer Cloud, 1 year | 1 year | $6,615 |
FC-10-FG4H0-585-02-36 | FortiGate 400G FortiAnalyzer Cloud, 3 years | 3 years | $19,845 |
FC-10-FG4H0-585-02-60 | FortiGate 400G FortiAnalyzer Cloud, 5 years | 5 years | $33,075 |
Request a quoteName the part number and quantity in your message.
FG-401G FortiGate 401G (2x 480 GB SSD)Dual internal AC power supplies (1+1), not hot-swappable
Show FG-401G part numbers| Part number | What it includes | Term | Fortinet list price |
|---|---|---|---|
| Appliance onlyHardware with Fortinet’s standard 1 year hardware and 90 day firmware/ticket coverage. We pair it with FortiCare. | |||
FG-401G | FortiGate 401G appliance only, dual AC PSU, 2x 480 GB SSD. Same 1 year hardware and 90 day firmware/ticket coverage, no FortiGuard services. | Hardware | $27,773 |
| UTP bundleAppliance + FortiCare Premium (ticket support, next-business-day advance hardware replacement, firmware) + FortiGuard Unified Threat Protection (IPS, antivirus and sandbox, application control, URL/DNS/video filtering, antispam). | |||
FG-401G-BDL-950-12 | Appliance + FortiCare Premium + UTP, 1 year | 1 year | $44,678 |
FG-401G-BDL-950-36 | Appliance + FortiCare Premium + UTP, 3 years | 3 years | $78,488 |
FG-401G-BDL-950-60 | Appliance + FortiCare Premium + UTP, 5 years | 5 years | $112,298 |
| Enterprise Protection bundleAppliance + FortiCare Premium + FortiGuard Enterprise Protection: UTP’s IPS and filtering plus AI-based inline malware prevention, inline CASB database, data loss prevention and attack surface security. | |||
FG-401G-BDL-809-12 | Appliance + FortiCare Premium + Enterprise Protection, 1 year | 1 year | $48,300.50 |
FG-401G-BDL-809-36 | Appliance + FortiCare Premium + Enterprise Protection, 3 years | 3 years | $89,355.50 |
FG-401G-BDL-809-60 | Appliance + FortiCare Premium + Enterprise Protection, 5 years | 5 years | $130,410.50 |
| Renewals for a unit already in serviceTied to the serial number. These SKUs fit a FortiGate 401G (2x 480 GB SSD) only. | |||
FC-10-FG4H1-950-02-12 | UTP + FortiCare Premium renewal, 1 year | 1 year | $16,905 |
FC-10-FG4H1-950-02-36 | UTP + FortiCare Premium renewal, 3 years | 3 years | $50,715 |
FC-10-FG4H1-950-02-60 | UTP + FortiCare Premium renewal, 5 years | 5 years | $84,525 |
FC-10-FG4H1-809-02-12 | Enterprise Protection + FortiCare Premium renewal, 1 year | 1 year | $20,527.50 |
FC-10-FG4H1-809-02-36 | Enterprise Protection + FortiCare Premium renewal, 3 years | 3 years | $61,582.50 |
FC-10-FG4H1-809-02-60 | Enterprise Protection + FortiCare Premium renewal, 5 years | 5 years | $102,637.50 |
FC-10-FG4H1-247-02-12 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 1 year | 1 year | $4,830 |
FC-10-FG4H1-247-02-36 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 3 years | 3 years | $14,490 |
FC-10-FG4H1-247-02-60 | FortiCare Premium only (support, NBD replacement, firmware; no FortiGuard), 5 years | 5 years | $24,150 |
| Add-on: FortiAnalyzer CloudPrice list description: “cloud-based central logging & analytics. Include all FortiGate log types, IOC Service, Security Automation Service and FortiGuard Outbreak Detection Service.” Per serial number. | |||
FC-10-FG4H1-585-02-12 | FortiGate 401G (2x 480 GB SSD) FortiAnalyzer Cloud, 1 year | 1 year | $7,245 |
FC-10-FG4H1-585-02-36 | FortiGate 401G (2x 480 GB SSD) FortiAnalyzer Cloud, 3 years | 3 years | $21,735 |
FC-10-FG4H1-585-02-60 | FortiGate 401G (2x 480 GB SSD) FortiAnalyzer Cloud, 5 years | 5 years | $36,225 |
Request a quoteName the part number and quantity in your message.
| Interfaces | |
|---|---|
| 25GE SFP28 / 10GE SFP+ slots | 4 |
| 10GE SFP+ / GE SFP FortiLink slots | 4 (FortiLink slots, reconfigurable as regular ports) |
| GE SFP slots | 16 |
| 5/2.5/GE RJ45 ports | 8 (WAN1, WAN2, LAN1–LAN6) |
| HA port | 1x 2.5GE / GE RJ45 |
| Management port | 1x GE RJ45 |
| USB ports (client / server) / console | 2, 1x console |
| Included transceivers | 2x SFP SX |
| Onboard storage | None (400G); 2x 480 GB SSD (401G) |
| Hardware security | TPM, signed-firmware hardware switch, FortiSentry |
| Processors | NP7 and CP10 |
| Performance (enterprise traffic mix) | |
| Threat protection throughput | 13 Gbps |
| NGFW throughput | 14 Gbps |
| IPS throughput | 25 Gbps |
| SSL inspection throughput (IPS, avg. HTTPS) | 11.5 Gbps |
| SSL inspection connections per second | 9,700 |
| SSL inspection concurrent sessions | 3 M |
| Application control throughput (HTTP 64K) | 50 Gbps |
| IPsec VPN throughput (512 byte) | 55 Gbps |
| IPsec tunnels, gateway-to-gateway / client-to-gateway | 2,000 / 50,000 |
| IPv4 firewall throughput (1518 / 512 / 64 byte UDP) | 164 / 164 / 145 Gbps |
| Firewall latency (64 byte UDP) | 2.51 μs |
| Firewall throughput (packets per second) | 217.5 Mpps |
| Concurrent sessions (TCP) | 28 M |
| New sessions per second (TCP) | 580,000 |
| Firewall policies | 30,000 |
| CAPWAP throughput (HTTP 64K) | 131 Gbps |
| Virtual domains (default / max) | 10 / 50 |
| Max FortiSwitches | 96 |
| Max FortiAPs (total / tunnel) | 512 / 256 |
| Max FortiTokens | 5,000 |
| HA modes | Active-Active, Active-Passive, Clustering |
| Physical and power | |
| Form factor | 1RU rack mount |
| Dimensions (H x W x L) | 1.75 x 17.0 x 13.5 in (44.45 x 432 x 342 mm) |
| Weight | 7.72 lb (3.5 kg) |
| Power supplies | 2 internal AC supplies, 1+1 redundant, not hot-swappable |
| AC input | 100–240 V AC, 50/60 Hz, 6 A max at 100 V AC |
| Power draw, avg / max (400G) | 230 / 283 W |
| Power draw, avg / max (401G) | 240 / 295 W |
| Heat dissipation (400G / 401G) | 965 / 1,006 BTU/h |
| Airflow / noise | Side and front to back; 59 dBA |
| Operating temperature | 32–113 °F (0–45 °C) |
| Operating altitude | Up to 10,000 ft (3,048 m) |
Source: Fortinet FortiGate 400G Series datasheet, FG-400G-DAT-R06-20261013 (2026-10-13). Fortinet states all performance values as “up to”. IPS, application control, NGFW and threat protection are measured with logging enabled; NGFW with firewall, IPS and application control on; threat protection adds malware protection. IPsec uses AES256-SHA256. SSL inspection uses an average of HTTPS sessions across cipher suites. The datasheet still lists SSL-VPN tunnel-mode figures; those do not apply on FortiOS 7.6.3 and later, so they are left out here.
SSL-VPN status. SSL-VPN tunnel mode was removed from every FortiGate in FortiOS 7.6.3, the 400G included. Browser-based web mode is still available on models that support it; tunnel mode is gone on every model. Full-tunnel remote access is IPsec (IKEv2); ZTNA covers access to individual applications. Fortinet: FortiOS 7.6.3 release notes. Background: FortiGate SSL-VPN migration.
The neighbouring models, compared on the same datasheet figures.
The 200G ($11,477 list) rates 6 Gbps threat protection and 7 Gbps SSL inspection against 13 and 11.5 Gbps on the 400G, and its fastest ports are eight 10G SFP+. The 400G adds four 25G SFP28 cages, sixteen GE SFP against four, 28 M sessions against 11 M, and an NP7 in place of the 200G's NP7Lite. Move up when the core uplinks at 25G or inspected traffic is near the 200G's ceiling.
The 700G ($35,066 list) is the same 1RU chassis with the same ports, power supplies and dimensions. The difference is inspection: 26 Gbps threat protection against 13, 38 Gbps IPS against 25, and 14 Gbps SSL inspection at 13,000 new sessions per second against 11.5 Gbps and 9,700. It also manages more: 128 FortiSwitches and 1,024 FortiAPs against 96 and 512. The 400G lists 3 M concurrent SSL-inspected sessions against 1.6 M on the 700G.
| Datasheet figure | 200G | 400G | 700G |
|---|---|---|---|
| Threat protection | 6 Gbps | 13 Gbps | 26 Gbps |
| NGFW | 7 Gbps | 14 Gbps | 29 Gbps |
| IPS | 9 Gbps | 25 Gbps | 38 Gbps |
| SSL inspection (IPS, avg. HTTPS) | 7 Gbps | 11.5 Gbps | 14 Gbps |
| IPsec VPN (512 byte) | 36 Gbps | 55 Gbps | 55 Gbps |
| Firewall (1518 byte UDP) | 39 Gbps | 164 Gbps | 164 Gbps |
| Concurrent sessions | 11 M | 28 M | 28 M |
| New sessions per second | 400,000 | 580,000 | 700,000 |
| Ports | 8x GE RJ45, 8x 5GE RJ45, 8x 10GE SFP+, 4x GE SFP, HA, MGMT | 8x 5GE RJ45, 16x GE SFP, 4x 10GE SFP+, 4x 25GE SFP28, HA, MGMT | 8x 5GE RJ45, 16x GE SFP, 4x 10GE SFP+, 4x 25GE SFP28, HA, MGMT |
| Storage | None (201G: 480 GB SSD) | None (401G: 2x 480 GB SSD) | None (701G: 2x 480 GB SSD) |
| VDOMs (default / max) | 10 / 25 | 10 / 50 | 10 / 50 |
| SSL-VPN | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ | No tunnel mode on FortiOS 7.6.3+ |
| Appliance list price | $11,477 FG-200G | $24,696 FG-400G | $35,066 FG-700G |
Sources: Fortinet FortiGate 200G Series datasheet (FG-200G-DAT-R12-20260929); Fortinet FortiGate 400G Series datasheet (FG-400G-DAT-R06-20261013); Fortinet FortiGate 700G Series datasheet (FG-700G-DAT-R15-20260929). Values “up to”, enterprise traffic mix, logging enabled. Appliance list price from the Fortinet Americas 2026 MidQ3 Price List, effective 2026-09-07.
What we check before this model goes on a quote, from the engineer who sizes, stages and installs it.
Fortinet's 400G datasheet does not name a predecessor, and we do not publish a guessed mapping. Trade-Up eligibility is per serial number, so we check your current unit's lifecycle dates against the current Trade-Up matrix, then size the 400G on your measured traffic with inspection on. See FortiGate end-of-life replacement.
The 400G has a dedicated 2.5GE HA port and a separate GE management port, so heartbeat and out-of-band management do not use data ports. Fortinet recommends at least two heartbeat links: the HA port plus one data port, cabled directly between the units. The two AC supplies are internal and not hot-swappable (1+1), so feed them from separate PDUs and treat a supply fault as a maintenance-window job while the other unit carries traffic. Each unit needs its own bundle and the current price list has no 400G HA SKU: a pair on 3-year UTP comes to $142,002 on Fortinet's price list, shown for reference.
Four 25G SFP28 cages (they also take 10G SFP+), four 10G SFP+ FortiLink cages for FortiSwitch (reconfigurable as regular ports), sixteen GE SFP and eight 5G/2.5G/GE copper ports, two of them WAN1 and WAN2. Only two 1G SX optics come in the box, so 10G and 25G optics or DAC cables go on the quote as separate line items.
Both members are added in FortiManager as model devices by serial number and staged before they ship. For a migration from an older FortiGate or another vendor, we convert the config, rebuild interface mapping onto the new port layout, and run the old and new units side by side in a cutover window with a rollback path. VDOMs: 10 by default, up to 50.
Size on threat protection (13 Gbps) and SSL inspection (11.5 Gbps at 9,700 new inspected sessions per second), not the 164 Gbps firewall figure. A campus with many wireless clients should also check the controller limits: 96 FortiSwitches and 512 FortiAPs (256 tunnelled). There is no disk on the 400G, so logs go to FortiAnalyzer or FortiAnalyzer Cloud ($6,615 per year list).
Same ports and performance figures. The 401G adds 2x 480 GB SSD for local logging and disk-based features and lists at $27,773 against $24,696. If logs are centralized in FortiAnalyzer and no disk-based feature is needed, the 400G is the usual pick.
Fortinet references for the notes above: Fortinet best practices: HA heartbeat interfaces; Fortinet Community: HA cluster license requirements; FortiManager administration guide: adding a model device by serial number; Fortinet service contract activation grace period policy; part numbers and list prices from the Fortinet Americas 2026 MidQ3 Price List.
Every line on the quote is an exact Fortinet part number and term, sized to your circuit and the services you run. Your written quote confirms current pricing, tax and shipping.
Payment clears before the distributor order. The unit ships from distribution to your site; freight is billed at actual cost.
Hardware and subscriptions go on your FortiCare account, not ours. Serials and contract dates are on the invoice.
We watch the expiry for every serial we sell and contact you at 120, 90, 60 and 30 days out.
Full terms, special-order rules and what to send for a quote: how buying from us works. Want it run after it ships? We are based in Sacramento: see Sacramento Fortinet MSP.
Fortinet list price is $24,696 for the appliance alone, $40,131 with 1 year of FortiCare Premium and UTP, $71,001 for 3 years and $101,871 for 5 years (price list effective 2026-09-07). The 401G with SSD lists at $27,773. Your quote confirms current pricing, tax and shipping.
Two units, each with its own bundle. At Fortinet list prices (for reference), two FG-400G-BDL-950-36 (3 years UTP) come to $142,002, plus 10G/25G optics, which are quoted separately. The current price list has no shared-license HA SKU for the 400G.
Same ports and performance. The 401G adds 2x 480 GB SSD for local logging and disk-based features and lists at $27,773 against $24,696. With central logging in FortiAnalyzer, the 400G is usually enough.
You can buy the appliance alone, but every FortiGate we sell carries at least FortiCare ($4,410 per year list for FortiCare Premium on a 400G), because the bare unit gets only 90 days of firmware. A bundle adds FortiGuard UTP or Enterprise Protection, and each member of an HA pair needs its own.
Not in tunnel mode on FortiOS 7.6.3 or later; Fortinet removed it from all models. Browser-based web mode is still available on models that support it. Full-tunnel remote access is IPsec (IKEv2); ZTNA covers access to individual applications.
We buy through Fortinet’s authorized U.S. distribution. Every unit is new, in-channel and registered to your own FortiCare account. Our Fortinet partner ID goes on every quote so you can verify it.
Fortinet, FortiGate, FortiCare, FortiGuard, FortiManager, FortiAnalyzer, FortiOS, FortiSwitch, FortiAP, FortiLink and FortiToken are trademarks or registered trademarks of Fortinet, Inc. Ambio Edge Networks is an independent company and a Fortinet Engage partner; Fortinet does not endorse or sponsor this page.
Automated monitoring and alerting to your Slack, Teams or email and to us, configuration backups, a monthly report, and next-business-day response from a senior engineer (Mon–Fri, 8 AM–5 PM Pacific). Up to 10 managed devices.
No change hours are included. Standard remote changes you ask for bill at $225/hr, 30-minute minimum; larger engineering work is quoted first. Hardware, licensing and migration are quoted separately.
One-time monitoring launch: $1,950 on Essential; other plans pay twice the monthly fee for the first site, up to $3,500, and $1,500 for each additional full site (dashboard, alert routing, baseline, runbook). Only one firewall to look after? Edge Firewall Watch is $199 a month. Faster response and included change hours are on the Secure and Compliance plans.
Start with a fixed-fee network risk assessment, or read how managed network monitoring works.
Request a Quote
For a renewal or replacement, send the serial number and expiry. For a new install, send the circuit speed, user count, switches and access points, and the ship-to address. You get a written quote with exact Fortinet part numbers and terms. Not sure what to buy yet? A Network Risk Assessment audits the firewall, switches and Wi-Fi and gives you a ranked roadmap with budget ranges before you spend on hardware: $3,500 for a single small site; larger networks are priced on the assessment pricing page. See a sample report (PDF).
A senior engineer reads your request and replies within 1 business day.
If anything is missing for an exact quote, we ask before guessing.
You get a written quote with part numbers, terms, shipping and tax lines.
Nothing is ordered until you accept and payment clears.