Overview:
Converged Next-Generation Firewall (NGFW) and SD-WAN
The FortiGate and FortiWiFi 30G series integrate firewalling, SD-WAN, and security in one appliance, making them perfect for building secure networks at distributed enterprise sites and transforming WAN architecture at any scale.
The 30G series runs on FortiOS, the industry’s first converged networking and security operating system. This single OS approach enables businesses to gain benefits of operational efficiency and unified protection from the seamless integration of Fortinet Solutions within a Hybrid Mesh Firewall architecture.
As a cornerstone of the Fortinet Security Fabric platform, the FortiGate NGFW works seamlessly with FortiGuard AI-Powered Security Services to deliver coordinated, automated, end-to-end threat protection in real time.
The 30G family is built on the patented SD-WAN-based ASIC, which delivers unmatched performance over traditional CPUs with lower cost and reduced power consumption. This application-specific design and embedded multi-core processor further accelerate the convergence of networking and security functions in the 30G family to optimize secure connections and deliver a robust user experience at branch locations.
| IPS | NGFW | Threat Protection | Interfaces |
|---|---|---|---|
| 800 Mbps | 570 Mbps | 500 Mbps | 4x GE RJ45 ports (including 3x internal ports and 1x WAN port) | Wireless Variant |
Highlights:
- Gartner Magic Quadrant Leader for both Network Firewalls and SD-WAN.
- Unparalleled Performance enabled by Fortinet’s patented ASIC and the FortiOS operating system.
- Enterprise-grade protection with FortiGuard AI-Powered Security Services.
- Simplified Operations with centralized management for networking and security, automation, deep analytics, and self-healing.
- Inclusive SD-WAN and wireless controller in every FortiGate appliance at no extra cost.
- Rich portfolio for any business budget and need.
Features:
FortiGuard AI-Powered Security Services
FortiGuard AI-Powered Security Services is part of Fortinet’s layered defense and tightly integrated into our FortiGate NGFWs and other products. Infused with the latest threat intelligence from FortiGuard Labs, these services protect organizations against modern attack vectors and threats, including zero-day and sophisticated AI-powered attacks.
FortiOS Everywhere
FortiOS, Fortinet’s Real-Time Network Security Operating System
FortiOS is the operating system that powers Fortinet Security Fabric platform, enabling enforcement of security policies and holistic visibility across the entire attack surface. FortiOS provides a unified framework for managing and securing networks, cloud-based, hybrid, or a convergence of IT, OT, and IoT. FortiOS enables seamless and efficient interoperation across Fortinet products with consistent and consolidated AI-powered protection across today’s hybrid environments.
Unlike traditional point solutions, Fortinet adopts a holistic approach to cybersecurity, aiming to reduce complexities, eliminate security silos, and improve operational efficiencies. By consolidating security functions into a single platform, FortiOS simplifies management, reduces costs, and enhances overall security posture. Together, FortiGate and FortiOS create intelligent, adaptive protection to help organizations reduce complexity, eliminate security silos, and optimize user experience.
By integrating generative AI (GenAI), FortiOS further enhances the ability to analyze network traffic and threat intelligence, detects deviations or anomalies more effectively, and provides more precise remediation recommendations, ensuring minimum performance impact without compromising security.
Available in:
Fortinet ASICs: Unrivaled Security, Unprecedented Performance
Powered by the only purpose-built SPU
Traditional firewalls cannot protect against today’s content and connection-based threats because they rely on off-the-shelf general-purpose central processing units (CPUs), leaving a dangerous security gap. Fortinet’s custom SPUs deliver the power you need to radically increase speed, scale, and efficiency while greatly improving user experience and reducing footprint and power requirements. Fortinet’s SPUs deliver up to 520 Gbps of protected throughput to detect emerging threats and block malicious content while ensuring your network security solution does not become a performance bottleneck.
Fortinet ASICs are designed to be energy-efficient, leading to lower power consumption and improved TCO. They deliver industry-leading throughput, handle more traffic and perform security inspections faster, reduce latency for quicker packet processing and minimize network delays.
Fortinet SPUs are designed with integrated security functions like zero trust, SSL, IPS, and VXLAN to name but a few, dramatically improving the performance of these functions that competitors traditionally implement in software.
Secure SD-WAN ASIC SP4
Combines a RISC-based CPU with Fortinet’s proprietary SPU content and network processors for unmatched performance
Delivers the industry’s fastest application identification and steering for efficient business operations
Accelerates IPsec VPN performance for the best user experience on direct internet access
Enables best-of-breed NGFW security and deep SSL inspection with high performance
Extends security to the access layer to enable SD-Branch transformation with accelerated
and integrated switch and access point connectivity
Unified Management for Optimal Security and Efficiency
FortiManager: Centralized management at scale for distributed enterprises
FortiManager, powered by FortiAI, is a centralized management solution for the Fortinet Security Fabric. It streamlines mass provisioning and policy management for FortiGate, FortiGate VM, cloud security, SD-WAN, SD-Branch, FortiSASE, and ZTNA in hybrid environments. Additionally, FortiManager provides real-time monitoring of the entire managed infrastructure and automates network operation workflows. Leveraging GenAI in FortiAI, it further enhances Day 0–1 configurations and provisioning, and Day N troubleshooting and maintenance, unlocking the full potential of the Fortinet Security Fabric and significantly boosting operational efficiency.
FortiGate Cloud: Simplified management for small and mid-size businesses
FortiGate Cloud is a SaaS service offering simplified management, security analytics, and reporting for Fortinet FortiGate NGFWs to help you more efficiently manage your devices and reduce cyber risk. It simplifies the initial deployment, setup, and ongoing management of FortiGates and downstream connected devices such as FortiAP, FortiSwitch, and FortiExtender, with zero-touch provisioning. It provides real-time and historical visibility into traffic analytics and security threats to reduce risks and improve security posture. View various threats, web traffic, and system events stored in the cloud for up to a year, with predefined reports to meet compliance and deliver actionable insights.
FortiConverter Service
Migration to FortiGate NGFW made easy
The FortiConverter Service provides hassle-free migration to help organizations transition quickly and easily from a wide range of legacy firewalls to FortiGate NGFWs. The service eliminates errors and redundancy by employing best practices with advanced methodologies and automated processes. Organizations can accelerate their network protection with the latest FortiOS technology.
Use Cases:
secure-branch-icon
- Protect networks from malicious traffic, guard against file-based threats, block web-based attacks, and secure applications and data with natively integrated FortiGuard AI-Powered Security Services
- Inspect and control incoming and outgoing traffic based on defined security policies
- Perform real-time SSL inspection (including TLS 1.3) with full visibility into users, devices, and applications across the attack surface
- Accelerate performance, protection, and energy efficiency with Fortinet’s patented SPU with converged security and networking technologies
Secure SD-WAN
- FortiGate enables best-of-breed WAN edge with integrated SD-WAN, WAN optimization, security, and unified management from a single FortiOS operating system
- FortiGate, built on a patented SD-WAN-based ASIC, delivers faster application identification to avoid delays in accessing applications and accelerates overlay performance regardless of location
- Enhances hybrid working with a comprehensive SASE solution by integrating cloud-delivered SD-WAN with security service edge (SSE)
- Achieves operational efficiencies at any scale through automation, deep analytics, and selfhealing
Secure Branch
- The Fortinet Security Fabric platform enables FortiGate NGFWs to automatically discover and secure IoT devices for faster branch onboarding
- Fully integrated with FortiSwitch secure Ethernet switches and FortiAP access points, FortiGate easily extends security to WAN, LAN, and WLAN at branch offices for unified protection and reliable connectivity
- FortiGate and Fortinet products work seamlessly with FortiManager to centralize visibility and simplify management across locations for IT teams
- FortiGate HA support ensures continuous network protection and minimizes downtime in the event of hardware failures or network disruptions.
Specifications:
| FortiGate 30G | FortiGate 31G | |
|---|---|---|
| Hardware Specifications | ||
| Hardware Accelerated GE WAN Port | 1 | 1 |
| Hardware Accelerated GE RJ45 Ports | 2 | 2 |
| Hardware Accelerated GE RJ45 FortiLink Port (Default) | 1 | 1 |
| USB Ports | — | — |
| Console Port (RJ45) | 1 | 1 |
| Storage Capacity | — | 30 GB |
| Trusted Platform Module (TPM) | ||
| Bluetooth Low Energy (BLE) | — | — |
| Signed Firmware Hardware Switch | — | — |
| Wireless Interface | — | — |
| System Performance* — Enterprise Traffic Mix | ||
| IPS Throughput2 | 800 Mbps | |
| NGFW Throughput2,4 | 570 Mbps | |
| Threat Protection Throughput2,5 | 500 Mbps | |
| System Performance | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte, UDP) |
4/ 4/ 3.9 Gbps | |
| IPv6 Firewall Throughput (1518 / 512 / 86 byte, UDP) |
4/ 4/ 3.9 Gbps | |
| Firewall Latency (64 byte UDP packets) |
2.87 μs | |
| Firewall Throughput (Packets Per Second) |
5.85 Mpps | |
| Concurrent Sessions (TCP) | 600,000 | |
| New Sessions/Second (TCP) | 30,000 | |
| Firewall Policies | 2,000 | |
| IPsec VPN Throughput (512 byte)1 | 3.5 Gbps | |
| Gateway-to-Gateway IPsec VPN Tunnels | 200 | |
| Client-to-Gateway IPsec VPN Tunnels | 250 | |
| SSL-VPN Throughput | — | |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) |
— | |
| SSL Inspection Throughput (IPS, avg. HTTPS)3 |
400 Mbps | |
| SSL Inspection CPS (IPS, avg. HTTPS)3 | 260 | |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS)3 | 55,000 | |
| Application Control Throughput (HTTP 64K)2 | 830 Mbps | |
| CAPWAP Throughput (HTTP 64K) | TBA Gbps | |
| Virtual Domains (Default / Maximum) | Not Supported | |
| Maximum Number of FortiSwitches Supported | 8 | |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 16/8 | |
| Maximum Number of FortiTokens | 500 | |
| High Availability Configurations | Active-Passive, Active-Active | |
| Dimensions | ||
| Height x Width x Length (inches) | 1.6 x 5.6 x 6.3 | |
| Height x Width x Length (mm) | 40.5 x 142 x 160 | |
| Weight | 1.3 lbs (0.6 kg) | |
| Rack Mount Type | NA | |
| Wall Mountable | Optional | |
| Form Factor (supports EIA/non‑EIA standards) | Desktop | |
| Operating Environment and Certifications | ||
| Power Rating | 12VDC, 2A | |
| Power Source Powered by external DC power adapter | 100-240V AC, 50/60 Hz | |
| Maximum Current | 100V/0.11A, 240V/0.055A | 110V/0.17A, 240V/0.085A |
| Power Consumption (Average / Maximum) | 6.8 W / 8.2 W | 8.1 W / 9.3 W |
| Heat Dissipation | 28 BTU/hr | 31.713 BTU/hr |
| Operating Temperature | 32° to 104°F (0° to 40°C) | |
| Storage Temperature | -31° to 158°F (-35° to 70°C) | |
| Humidity | 20% to 90% non-condensing | |
| Noise Level | N/A | |
| Operating Altitude | 10,000 ft (3048 m) | |
| Compliance | FCC, IC, CE, UL/cUL, CB, VCCI, BSMI, RCM, UKCA | |
| Certifications | USGv6/IPv6 | |
Note: All performance values are “up to” and vary depending on system configuration.
1 IPsec VPN performance test uses AES256-SHA256.
2 IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured with Logging enabled.
3 SSL Inspection performance values use an average of HTTPS sessions of different cipher suites.
4 NGFW performance is measured with Firewall, IPS and Application Control enabled.
5 Threat Protection performance is measured with Firewall, IPS, Application Control and Malware Protection enabled.
Hardware:
Interfaces
- 1 x Console Port
- 1 x GE RJ45 WAN Port
- 2 x GE RJ45 Ports
- 1 x GE RJ45 FortiLink Port
Superior wireless coverage
A built-in dual-band, dual-stream access point is integrated on the FortiWiFi 30G series, which provides the industry’s high-speed WiFi-6 (802.11ax) wireless access.
Trusted Platform Module (TPM)
The FortiGate 30G series features a dedicated module that hardens physical networking appliances by generating, storing, and authenticating cryptographic keys. Hardware-based security mechanisms protect against malicious software and phishing attacks.
Access Layer Security
FortiLink protocol enables you to converge security and network access by integrating the FortiSwitch into the FortiGate as a logical extension of the firewall. These FortiLink-enabled ports can be reconfigured as regular ports as needed.
Compact and reliable form factor
Designed for small environments, the FortiGate can be on a desktop or wall-mounted. It is small, lightweight, yet highly reliable with superior meantime between failures, minimizing the chance of network disruption.
Documentation:
Download the
Fortinet FortiGate FortiWiFi 30G Series Data Sheet
(PDF).
Pricing Notes:
- Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AI-based Inline Malware Prevention, Advanced Malware Protection, Inline CASB Database, Data Loss Prevention, Application Control, URL, DNS & Video Filtering, Antispam, Attack Surface Security, and FortiConverter Service) plus term of contract - Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, URL, DNS & Video Filtering and Antispam Service) plus term of contract - Enterprise Protection (IPS, AI-based Inline Malware Prevention, Inline CASB Database, DLP, App Control, Adv Malware Protection, URL/DNS/Video Filtering, Anti-spam, Attack Surface Security, Converter Svc, FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AI-based Inline Malware Prevention, Advanced Malware Protection, Inline CASB Database, Data Loss Prevention, Application Control, URL, DNS & Video Filtering, Antispam, Attack Surface Security, and FortiConverter Service) - Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, URL, DNS & Video Filtering and Antispam Service) - Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control) - FortiCare Essential Support
FortiCare Essential Ticket Handling, Hardware Replacement, Firmware and General Upgrades, Application Control - FortiCare Premium Support
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control - FortiCare Elite Support
FortiCare Premium Support with FortiCare Elite Ticket Handling. - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.
Fortinet Products
FortiGate 30G Base Appliance
Fortigate-30G Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
FortiGate-30G Hardware plus 1 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
#FG-30G-BDL-950-12
FortiGate-30G Hardware plus 3 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
#FG-30G-BDL-950-36
FortiGate-30G Hardware plus 5 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
#FG-30G-BDL-950-60
FortiGate-30G Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
FortiGate-30G 1 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
#FC-10-FG30G-928-02-12
FortiGate-30G 3 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
#FC-10-FG30G-928-02-36
FortiGate-30G 5 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
#FC-10-FG30G-928-02-60
FortiGate-30G Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
FortiGate-30G 1 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
#FC-10-FG30G-950-02-12
FortiGate-30G 3 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
#FC-10-FG30G-950-02-36
FortiGate-30G 5 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
#FC-10-FG30G-950-02-60