Fortinet FortiGate 71G
Overview:
The FortiGate FortiWiFi 70G series integrate firewalling, SD-WAN, and security in one appliance, making them perfect for building secure networks at distributed enterprise sites and transforming WAN architecture at any scale.
The 70G series is powered by FortiOS, the industry’s first converged networking and security operating system. This convergence enables businesses to efficiently and optimally secure today’s dynamic digital infrastructures.
As a cornerstone of the Fortinet Security Fabric platform, the FortiGate NGFW works seamlessly with FortiGuard AI-Powered Security Services to deliver coordinated, automated, end-to-end threat protection in real time.
The 70G family is built on the patented SD-WAN-based ASIC, which delivers unmatched performance over traditional CPUs with lower cost and reduced power consumption. This application-specific design and embedded multi-core processor further accelerate the convergence of networking and security functions in the 70G family to optimize secure connections and deliver a robust user experience at branch locations.
Highlights:
- Gartner Magic Quadrant Leader for both Network Firewalls and SD-WAN.
- Unparalleled Performance enabled by Fortinet’s patented ASIC and the FortiOS operating system.
- Enterprise-grade protection with FortiGuard AI-Powered Security Services.
- Simplified Operations with centralized management for networking and security, automation, deep analytics, and self-healing.
- Inclusive SD-WAN and wireless controller in every FortiGate appliance at no extra cost.
- Rich portfolio for any business budget and need.
| IPS | NGFW | Threat Protection | Interfaces |
|---|---|---|---|
| 2.5 Gbps | 1.5 Gbps | 1.3 Gbps | Multiple GE RJ45 | Variants with Wifi and internal storage |
Features:
FortiGuard AI-Powered Security Services
- Network and File Security
- Web/DNS Security
- SaaS and Data Security
- Zero-Day Threat Prevention
- OT Security
FortiOS Everywhere
FortiOS is the operating system that powers Fortinet Security Fabric platform, enabling enforcement of security policies and holistic visibility across the entire attack surface. FortiOS provides a unified framework for managing and securing networks, cloud-based, hybrid, or a convergence of IT, OT, and IoT. FortiOS enables seamless and efficient interoperation across Fortinet products with consistent and consolidated AI-powered protection across today’s hybrid environments. Unlike traditional point solutions, Fortinet adopts a holistic approach to cybersecurity, aiming to reduce complexities, eliminate security silos, and improve operational efficiencies. By consolidating security functions into a single platform, FortiOS simplifies management, reduces costs, and enhances overall security posture. Together, FortiGate and FortiOS create intelligent, adaptive protection to help organizations reduce complexity, eliminate security silos, and optimize user experience. By integrating generative AI (GenAI), FortiOS further enhances the ability to analyze network traffic and threat intelligence, detects deviations or anomalies more effectively, and provides more precise remediation recommendations, ensuring minimum performance impact without compromising security.
Available in:
Fortinet ASICs: Unrivaled Security, Unprecedented Performance
Traditional firewalls cannot protect against today’s content and connection-based threats because they rely on off-the-shelf general-purpose central processing units (CPUs), leaving a dangerous security gap. Fortinet’s custom SPUs deliver the power you need to radically increase speed, scale, and efficiency while greatly improving user experience and reducing footprint and power requirements. Fortinet’s SPUs deliver up to 520 Gbps of protected throughput to detect emerging threats and block malicious content while ensuring your network security solution does not become a performance bottleneck. Fortinet ASICs are designed to be energy-efficient, leading to lower power consumption and improved TCO. They deliver industry-leading throughput, handle more traffic and perform security inspections faster, reduce latency for quicker packet processing and minimize network delays. Fortinet SPUs are designed with integrated security functions like zero trust, SSL, IPS, and VXLAN to name but a few, dramatically improving the performance of these functions that competitors traditionally implement in software. Secure SD-WAN ASIC SP5
- Combines a RISC-based CPU with Fortinet’s proprietary SPU content and network processors for unmatched performance
- Delivers the industry’s fastest application identification and steering for efficient business operations
- Accelerates IPsec VPN performance for the best user experience on direct internet access
- Enables best-of-breed NGFW security and deep SSL inspection with high performance
- Extends security to the access layer to enable SD-Branch transformation with accelerated and integrated switch and access point connectivity
Unified Management for Optimal Security and Efficiency
FortiManager, powered by FortiAI, is a centralized management solution for the Fortinet Security Fabric. It streamlines mass provisioning and policy management for FortiGate, FortiGate VM, cloud security, SD-WAN, SD-Branch, FortiSASE, and ZTNA in hybrid environments. Additionally, FortiManager provides real-time monitoring of the entire managed infrastructure and automates network operation workflows. Leveraging GenAI in FortiAI, it further enhances Day 0–1 configurations and provisioning, and Day N troubleshooting and maintenance, unlocking the full potential of the Fortinet Security Fabric and significantly boosting operational efficiency. FortiGate Cloud: Simplified management for small and mid-size businesses
FortiGate Cloud is a SaaS service offering simplified management, security analytics, and reporting for Fortinet FortiGate NGFWs to help you more efficiently manage your devices and reduce cyber risk. It simplifies the initial deployment, setup, and ongoing management of FortiGates and downstream connected devices such as FortiAP, FortiSwitch, and FortiExtender, with zero-touch provisioning. It provides real-time and historical visibility into traffic analytics and security threats to reduce risks and improve security posture. View various threats, web traffic, and system events stored in the cloud for up to a year, with predefined reports to meet compliance and deliver actionable insights.
FortiConverter Service
The FortiConverter Service provides hassle-free migration to help organizations transition quickly and easily from a wide range of legacy firewalls to FortiGate NGFWs. The service eliminates errors and redundancy by employing best practices with advanced methodologies and automated processes. Organizations can accelerate their network protection with the latest FortiOS technology.
Use Cases:
Perimeter Protection
- Protect networks from malicious traffic, guard against file-based threats, block web-based attacks, and secure applications and data with natively integrated FortiGuard AI-Powered Security Services
- Inspect and control incoming and outgoing traffic based on defined security policies
- Perform real-time SSL inspection (including TLS 1.3) with full visibility into users, devices, and applications across the attack surface
- Accelerate performance, protection, and energy efficiency with Fortinet’s patented SPU with converged security and networking technologies
Secure SD-WAN
- FortiGate enables best-of-breed WAN edge with integrated SD-WAN, WAN optimization, security, and unified management from a single FortiOS operating system
- FortiGate, built on a patented SD-WAN-based ASIC, delivers faster application identification to avoid delays in accessing applications and accelerates overlay performance regardless of location
- Enhances hybrid working with a comprehensive SASE solution by integrating cloud-delivered SD-WAN with security service edge (SSE)
- Achieves operational efficiencies at any scale through automation, deep analytics, and selfhealing
Secure Branch
- The Fortinet Security Fabric platform enables FortiGate NGFWs to automatically discover and secure IoT devices for faster branch onboarding
- Fully integrated with FortiSwitch secure Ethernet switches and FortiAP access points, FortiGate easily extends security to WAN, LAN, and WLAN at branch offices for unified protection and reliable connectivity
- FortiGate and Fortinet products work seamlessly with FortiManager to centralize visibility and simplify management across locations for IT teams
- FortiGate HA support ensures continuous network protection and minimizes downtime in the event of hardware failures or network disruptions.
Universal ZTNA
Control access to applications no matter where the user is and no matter where the application is hosted for universal application of access policies
- Provide extensive authentications, checks, and enforce policy prior to granting application access every time
- Agent-based access with FortiClient or agentless access via proxy portal for guest or BYOD
Specifications:
| FG-70G | FG-71G | FG-70G-POE | FG-71G-POE | |
|---|---|---|---|---|
| Hardware Specifications | ||||
| Hardware Accelerated GE WAN Port | 2 | 2 | 2 | 2 |
| Hardware Accelerated GE RJ45 Ports | 6 | 6 | 2 | 2 |
| Hardware Accelerated GE RJ45 FortiLink Port (Default) | 2 | 2 | 2 | 2 |
| Hardware Accelerated GE RJ45 POE/+Ports | — | — | 4 | 4 |
| USB Ports | 1 | 1 | 1 | 1 |
| Console Port (RJ45) | 1 | 1 | 1 | 1 |
| Internal Storage | — | 64GB SSD | — | 64GB SSD |
| Trusted Platform Module (TPM) | ||||
| Bluetooth Low Energy (BLE) | ||||
| Signed Firmware Hardware Switch | ||||
| System Performance* — Enterprise Traffic Mix | ||||
| IPS Throughput2 | 2.5 Gbps | |||
| NGFW Throughput2,4 | 1.5 Gbps | |||
| Threat Protection Throughput2,5 | 1.3 Gbps | |||
| System Performance and Capacity | ||||
| Firewall Throughput (1518/512/64 byte UDP packets) | 10 / 10 / 10 Gbps | |||
| Firewall Latency (64 byte UDP packets) | 2.46 μs | |||
| Firewall Throughput (Packets Per Second) | 15 Mpps | |||
| Concurrent Sessions (TCP) | 1.4M | |||
| New Sessions/Second (TCP) | 100,000 | |||
| Firewall Policies | 5000 | |||
| IPsec VPN Throughput (512 byte)1 | 7.1 Gbps | |||
| Gateway-to-Gateway IPsec VPN Tunnels | 200 | |||
| Client-to-Gateway IPsec VPN Tunnels | 500 | |||
| SSL-VPN Throughput | N/A | |||
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | N/A | |||
| SSL Inspection Throughput (IPS, avg. HTTPS)3 | 1.4 Gbps | |||
| SSL Inspection CPS (IPS, avg. HTTPS)3 | 715 | |||
| SSL Inspection Concurrent Session (IPS, avg. HTTPS)3 | 140,000 | |||
| Application Control Throughput (HTTP 64K)2 | 3.6 Gbps | |||
| CAPWAP Throughput (HTTP 64K) | 6.8 Gbps | |||
| Virtual Domains (Default / Maximum) | 10/10 | |||
| Maximum Number of FortiSwitches Supported | 24 | |||
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 96 / 48 | |||
| Maximum Number of FortiTokens | 500 | |||
| High Availability Configurations | Active-Active, Active-Passive, Clustering | |||
| Dimensions | ||||
| Height x Width x Length (inches) | 1.6 x 8.5 x 6.3 | |||
| Height x Width x Length (mm) | 40.5 x 216 x 160 | |||
| Weight | 2.01 lbs (0.91 kg) | 2.05 lbs (0.93 kg) | 2.145 lbs (0.973 kg) | 2.19 lbs (0.993 kg) |
| Form Factor (supports EIA/non-EIA standards) | Desktop | |||
| Operating Environment and Certifications | ||||
| Input Rating | 12VDC, 3A | |||
| Power Supply Efficiency Rating | 80Plus Compliant | |||
| Maximum Current | 100V/0.4A ,240V/0.2A | |||
| Total Available PoE Power Budget* | — | — | 60 W | 60 W |
| Power Required | Powered by External DC Power Adapter, 100–240V AC, 50/60 Hz | |||
| Power Consumption (Average / Maximum) | 12.3 W / 12.8 W | 13.4 W / 14.1 W | 70.3 W / 72.5 W | 76 W / 79 W |
| Heat Dissipation | 43.65 BTU/hr | 48.08 BTU/hr | 247.23 BTU/hr | 269.39 BTU/hr |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) | |||
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) | |||
| Humidity | 10% to 90% non-condensing | |||
| Noise Level | Fanless | |||
| Operating Altitude | Up to 10,000 ft (3048 m) | |||
| Compliance | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB | |||
| Certifications | USGv6/IPv6 | |||
Note: All performance values are “up to” and vary depending on system configuration.
1 IPsec VPN performance test uses AES256-SHA256.
2 IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured with Logging enabled.
3 SSL Inspection performance values use an average of HTTPS sessions of different cipher suites.
4 NGFW performance is measured with Firewall, IPS and Application Control enabled.
5 Threat Protection performance is measured with Firewall, IPS, Application Control and Malware Protection enabled.
Hardware:
- Signed Firmware Switch
- 1x Console Port
1x USB Port - 2x GE RJ45 WAN Ports
- 2x GE RJ45 FortiLink Ports
- 6x GE RJ45 Ethernet Ports
Superior wireless coverage
Trusted Platform Module (TPM)
Access Layer Security
Compact and reliable form factor
Signed Firmware Hardware Switch
Documentation:
Pricing Notes:
- Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AI-based Inline Malware Prevention, Advanced Malware Protection, Inline CASB Database, Data Loss Prevention, Application Control, URL, DNS & Video Filtering, Antispam, Attack Surface Security, and FortiConverter Service) plus term of contract - Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, URL, DNS & Video Filtering and Antispam Service) plus term of contract - Enterprise Protection (IPS, AI-based Inline Malware Prevention, Inline CASB Database, DLP, App Control, Adv Malware Protection, URL/DNS/Video Filtering, Anti-spam, Attack Surface Security, Converter Svc, FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AI-based Inline Malware Prevention, Advanced Malware Protection, Inline CASB Database, Data Loss Prevention, Application Control, URL, DNS & Video Filtering, Antispam, Attack Surface Security, and FortiConverter Service) - Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, URL, DNS & Video Filtering and Antispam Service) - Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control) - FortiCare Essential Support
FortiCare Essential Ticket Handling, Hardware Replacement, Firmware and General Upgrades, Application Control - FortiCare Premium Support
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control - FortiCare Elite Support
FortiCare Premium Support with FortiCare Elite Ticket Handling. - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.
Fortinet Products
FortiGate-71G Base Appliance
FortiGate-71G 10 x GE RJ45 ports (including 7 x Internal Ports, 2 x WAN Ports, 1 x DMZ Port). 64GB SSD storage.
#FG-71G
FortiGate-71G Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Includes: Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AI-based Inline Malware Prevention, Advanced Malware Protection, Inline CASB Database, Data Loss Prevention, Application Control, URL, DNS & Video Filtering, Antispam, Attack Surface Security, and FortiConverter Service) plus term of contract
FortiGate-71G Hardware plus 1 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
#FG-71G-BDL-950-12
FortiGate-71G Hardware plus 3 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
#FG-71G-BDL-950-36
FortiGate-71G Hardware plus 5 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
#FG-71G-BDL-950-60
FortiGate-71G Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
FortiGate-71G 1 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
#FC-10-GT71G-928-02-12
FortiGate-71G 3 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
#FC-10-GT71G-928-02-36
FortiGate-71G 5 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
#FC-10-GT71G-928-02-60
FortiGate-71G Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
FortiGate-71G 1 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
#FC-10-GT71G-950-02-12
FortiGate-71G 3 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
#FC-10-GT71G-950-02-36
FortiGate-71G 5 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
#FC-10-GT71G-950-02-60












