Fortinet FortiGate 51G
Converged Next-Generation Firewall and SD-WAN
Overview:
The FortiGate and FortiWiFi 50G series integrate firewalling, SD-WAN, and security in one appliance, making them perfect for building secure networks at distributed enterprise sites and transforming WAN architecture at any scale.
The 50G series is powered by FortiOS, the industry’s first converged networking and security operating system. This convergence enables businesses to efficiently and optimally secure today’s dynamic digital infrastructures.
As a cornerstone of the Fortinet Security Fabric platform, the FortiGate NGFW works seamlessly with FortiGuard AI-Powered Security Services to deliver coordinated, automated, end-to-end threat protection in real time.
The 50G family is built on the patented SD-WAN-based ASIC, which delivers unmatched performance over traditional CPUs with lower cost and reduced power consumption. This application-specific design and embedded multi-core processor further accelerate the convergence of networking and security functions in the 50G family to optimize secure connections and deliver a robust user experience at branch locations.
- Gartner® Magic Quadrant™ Leaders for both Network Firewalls and SD‑WAN
- Unparalleled performance enabled by Fortinet’s patented ASIC and the FortiOS operating system
- Enterprise-grade protection with FortiGuard AI-Powered Security Services
- Simplified operations with centralized management for networking and security, automated workflows, deep analytics, and self-healing
- Inclusive SD-WAN and wireless controller in every FortiGate appliance at no extra cost
- Rich portfolio for any business budget and need
| IPS | NGFW | Threat Protection | Interfaces |
|---|---|---|---|
| 2.25 Gbps | 1.25 Gbps | 1.1 Gbps | Multiple GE RJ45 | Variants with 5G, PoE, DSL, SFP, WiFi, and/or storage |
Features:
FortiGuard AI-Powered Security Services
FortiGuard AI-Powered Security Services is part of Fortinet’s layered defense and tightly integrated into our FortiGate NGFWs and other products. Infused with the latest threat intelligence from FortiGuard Labs, these services protect organizations against modern attack vectors and threats, including zero-day and sophisticated AI-powered attacks.
- Network and file security
- Web/DNS security
- SaaS and data security
- Zero-Day threat prevention
- OT security
FortiOS Everywhere
FortiOS, Fortinet’s Real-Time Network Security Operating System
FortiOS is the operating system that powers Fortinet Security Fabric platform, enabling enforcement of security policies and holistic visibility across the entire attack surface. FortiOS provides a unified framework for managing and securing networks, cloud-based, hybrid, or a convergence of IT, OT, and IoT. FortiOS enables seamless and efficient interoperation across Fortinet products with consistent and consolidated AI-powered protection across today’s hybrid environments. Unlike traditional point solutions, Fortinet adopts a holistic approach to cybersecurity, aiming to reduce complexities, eliminate security silos, and improve operational efficiencies. By consolidating security functions into a single platform, FortiOS simplifies management, reduces costs, and enhances overall security posture. Together, FortiGate and FortiOS create intelligent, adaptive protection to help organizations reduce complexity, eliminate security silos, and optimize user experience. By integrating generative AI (GenAI), FortiOS further enhances the ability to analyze network traffic and threat intelligence, detects deviations or anomalies more effectively, and provides more precise remediation recommendations, ensuring minimum performance impact without compromising security.
FortiOS is the operating system that powers Fortinet Security Fabric platform, enabling enforcement of security policies and holistic visibility across the entire attack surface. FortiOS provides a unified framework for managing and securing networks, cloud-based, hybrid, or a convergence of IT, OT, and IoT. FortiOS enables seamless and efficient interoperation across Fortinet products with consistent and consolidated AI-powered protection across today’s hybrid environments. Unlike traditional point solutions, Fortinet adopts a holistic approach to cybersecurity, aiming to reduce complexities, eliminate security silos, and improve operational efficiencies. By consolidating security functions into a single platform, FortiOS simplifies management, reduces costs, and enhances overall security posture. Together, FortiGate and FortiOS create intelligent, adaptive protection to help organizations reduce complexity, eliminate security silos, and optimize user experience. By integrating generative AI (GenAI), FortiOS further enhances the ability to analyze network traffic and threat intelligence, detects deviations or anomalies more effectively, and provides more precise remediation recommendations, ensuring minimum performance impact without compromising security.
Available in:
Fortinet ASICs: Unrivaled Security, Unprecedented Performance
Powered by the only purpose-built SPU
Traditional firewalls cannot protect against today’s content and connection-based threats because they rely on off-the-shelf general-purpose central processing units (CPUs), leaving a dangerous security gap. Fortinet’s custom SPUs deliver the power you need to radically increase speed, scale, and efficiency while greatly improving user experience and reducing footprint and power requirements. Fortinet’s SPUs deliver up to 520 Gbps of protected throughput to detect emerging threats and block malicious content while ensuring your network security solution does not become a performance bottleneck.
Fortinet ASICs are designed to be energy-efficient, leading to lower power consumption and improved TCO. They deliver industry-leading throughput, handle more traffic and perform security inspections faster, reduce latency for quicker packet processing and minimize network delays.
Fortinet SPUs are designed with integrated security functions like zero trust, SSL, IPS, and VXLAN to name but a few, dramatically improving the performance of these functions that competitors traditionally implement in software.
Secure SD-WAN ASIC SP5
- Combines a RISC-based CPU with Fortinet’s proprietary SPU content and network processors for unmatched performance
- Delivers the industry’s fastest application identification and steering for efficient business operations
- Accelerates IPsec VPN performance for the best user experience on direct internet access
- Enables best-of-breed NGFW security and deep SSL inspection with high performance
- Extends security to the access layer to enable SD-Branch transformation with accelerated and integrated switch and access point connectivity
Unified Management for Optimal Security and Efficiency
Whether you are a small business or a large enterprise, Fortinet provides centralized control, visibility, and automation for your security infrastructure.
- FortiManager: Centralized management at scale for distributed enterprises
- FortiGate Cloud: Simplified management for small and mid-size businesses
FortiConverter Service
Migration to FortiGate NGFW made easy
The FortiConverter Service provides hassle-free migration to help organizations transition quickly and easily from a wide range of legacy firewalls to FortiGate NGFWs. The service eliminates errors and redundancy by employing best practices with advanced methodologies and automated processes. Organizations can accelerate their network protection with the latest FortiOS technology.
Use Cases:
Perimeter Protection
- Protect networks from malicious traffic, guard against file-based threats, block web-based attacks, and secure applications and data with natively integrated FortiGuard AI-Powered Security Services
- Inspect and control incoming and outgoing traffic based on defined security policies
- Perform real-time SSL inspection (including TLS 1.3) with full visibility into users, devices, and applications across the attack surface
- Accelerate performance, protection, and energy efficiency with Fortinet’s patented SPU with converged security and networking technologies
Secure SD-WAN
- FortiGate enables best-of-breed WAN edge with integrated SD-WAN, WAN optimization, security, and unified management from a single FortiOS operating system
- FortiGate, built on a patented SD-WAN-based ASIC, delivers faster application identification to avoid delays in accessing applications and accelerates overlay performance regardless of location
- Enhances hybrid working with a comprehensive SASE solution by integrating cloud-delivered SD-WAN with security service edge (SSE)
- Achieves operational efficiencies at any scale through automation, deep analytics, and selfhealing
Secure Branch
- The Fortinet Security Fabric platform enables FortiGate NGFWs to automatically discover and secure IoT devices for faster branch onboarding
- Fully integrated with FortiSwitch secure Ethernet switches and FortiAP access points, FortiGate easily extends security to WAN, LAN, and WLAN at branch offices for unified protection and reliable connectivity
- FortiGate and Fortinet products work seamlessly with FortiManager to centralize visibility and simplify management across locations for IT teams
- FortiGate HA support ensures continuous network protection and minimizes downtime in the event of hardware failures or network disruptions.
Specifications:
| FG-50G/51G | FWF-50G/-51G | |
|---|---|---|
| Hardware Specifications | ||
| Hardware Accelerated GE WAN Port | 1 | 1 |
| Hardware Accelerated GE RJ45 Ports | 3 | 3 |
| Hardware Accelerated GE RJ45 FortiLink Port (Default) | 1 | 1 |
| USB Ports | 1 | 1 |
| Console Port (RJ45) | 1 | 1 |
| Trusted Platform Module (TPM) | ||
| Bluetooth Low Energy (BLE) | ||
| Signed Firmware Hardware Switch | ||
| Antenna Ports (SMA) | — | 3 |
| SIM Slots (Nano SIM) | — | 2 |
| Wireless Interface | — | Dual Radio (2.4 GHz/ 5 GHz), 802.11 a/b/g/n/ac/ax |
| System Performance — Enterprise Traffic Mix | ||
| IPS Throughput2 | 2.25 Gbps | 2.25 Gbps |
| NGFW Throughput2,4 | 1.25 Gbps | 1.25 Gbps |
| Threat Protection Throughput2,5 | 1.1 Gbps | 1.1 Gbps |
| System Performance | ||
| Firewall Throughput (1518/512/64 byte UDP packets) | 5 / 5 / 4 Gbps | 5 / 5 / 4 Gbps |
| Firewall Latency (64 byte UDP packets) | 2.42 μs | 2.42 μs |
| Firewall Throughput (Packets Per Second) | 6 Mpps | 6 Mpps |
| Concurrent Sessions (TCP) | 720 000 | 720 000 |
| New Sessions/Second (TCP) | 85 000 | 85 000 |
| Firewall Policies | 2000 | 2000 |
| IPsec VPN Throughput (512 byte)1 | 4.5 Gbps | 4.5 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 200 | 200 |
| Client-to-Gateway IPsec VPN Tunnels | 250 | 250 |
| SSL-VPN Throughput | — | — |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | — | — |
| SSL Inspection Throughput (IPS, avg. HTTPS)3 | 1.3 Gbps | 1.3 Gbps |
| SSL Inspection CPS (IPS, avg. HTTPS)3 | 699 | 699 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS)3 | 74,000 | 74,000 |
| Application Control Throughput (HTTP 64K)2 | 2.8 Gbps | 2.8 Gbps |
| CAPWAP Throughput (HTTP 64K) | 3.8 Gbps | 3.8 Gbps |
| Virtual Domains (Default / Maximum) | 5/5 | 5/5 |
| Maximum Number of FortiSwitches Supported | 8 | 8 |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 16 / 8 | 16 / 8 |
| Maximum Number of FortiTokens | 500 | 500 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| Dimensions | ||
| Height x Width x Length (inches) | 1.6 x 8.5 x 6.3 | 1.7 x 8.5 x 7.0 |
| Height x Width x Length (mm) | 40.5 x 216 x 160 | 42 x 216 x 178 |
| Weight | 2.2 lbs (1.0 kg) | 2.4 lbs (1.1 kg) |
| Form Factor (supports EIA/non-EIA standards) | Desktop | Desktop |
| Operating Environment and Certifications | ||
| Power Rating | 12VDC, 3A | 12VDC, 3A |
| Power Required | Powered by External DC Power Adapter, 100–240V AC, 50/60 Hz | |
| Maximum Current | 100V/0.4A, 240V/0.2A | TBA |
| Power Consumption (Average / Maximum) | 8.3 W / 8.9 W | TBA |
| Heat Dissipation | 30.35 BTU/h | TBA |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) | |
| Storage Temperature | -31°F to 158°F (-35°C to 70°C) | |
| Humidity | 10% to 90% non-condensing | |
| Noise Level | Fanless 0 dBA | |
| Operating Altitude | Up to 10 000 ft (3048 m) | |
| Compliance | FCC, ISED, CE, UL/cUL, CB | |
| Certifications | USGv6/IPv6 | |
| Radio Specifications | ||
| Multiple User (MU) MIMO | — | 2 x 2 |
| Maximum Wi-Fi Speeds | — | 1201 Mbps @ 5 GHz 574 Mbps @ 2.4 GHz |
| Maximum Tx Power | — | 21.0 dBm per chain @ 2.4GHz 19.5 dBm per chain @ 5GHz |
Note: All performance values are “up to” and vary depending on system configuration.
1 IPsec VPN performance test uses AES256-SHA256.
2 IPS (Enterprise Mix), Application Control, NGFW and Threat Protection are measured with Logging enabled.
3 SSL Inspection performance values use an average of HTTPS sessions of different cipher suites.
4 NGFW performance is measured with Firewall, IPS and Application Control enabled.
5 Threat Protection performance is measured with Firewall, IPS, Application Control and Malware Protection enabled.
Hardware:
Interfaces
- 1 x Console Port
- 1 x GE RJ45 WAN Port
- 2 x GE RJ45 Ports
- 1 x GE RJ45 FortiLink Port
Superior wireless coverage
A built-in dual-band, dual-stream access point is integrated on the FortiWiFi 30G series, which provides the industry’s high-speed WiFi-6 (802.11ax) wireless access.
Trusted Platform Module (TPM)
The FortiGate 30G series features a dedicated module that hardens physical networking appliances by generating, storing, and authenticating cryptographic keys. Hardware-based security mechanisms protect against malicious software and phishing attacks.
Access Layer Security
FortiLink protocol enables you to converge security and network access by integrating the FortiSwitch into the FortiGate as a logical extension of the firewall. These FortiLink-enabled ports can be reconfigured as regular ports as needed.
Compact and reliable form factor
Designed for small environments, the FortiGate can be on a desktop or wall-mounted. It is small, lightweight, yet highly reliable with superior meantime between failures, minimizing the chance of network disruption.
Signed Firmware Hardware Switch
The signed firmware switch is a physical security switch. It is by default set to the highest security level. The highest security level ensures that only an appropriately validated FortiOS firmware can be loaded on the FortiGate. This feature adds an additional physical layer of security to the FortiGate, acting as a key deterrent to and reducing risk of compromise.
Documentation:
Download the
Fortinet FortiGate and FortiWiFi 50G Series Datasheet
(PDF).
Pricing Notes:
- Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AI-based Inline Malware Prevention, Advanced Malware Protection, Inline CASB Database, Data Loss Prevention, Application Control, URL, DNS & Video Filtering, Antispam, Attack Surface Security, and FortiConverter Service) plus term of contract - Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, URL, DNS & Video Filtering and Antispam Service) plus term of contract - Enterprise Protection (IPS, AI-based Inline Malware Prevention, Inline CASB Database, DLP, App Control, Adv Malware Protection, URL/DNS/Video Filtering, Anti-spam, Attack Surface Security, Converter Svc, FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AI-based Inline Malware Prevention, Advanced Malware Protection, Inline CASB Database, Data Loss Prevention, Application Control, URL, DNS & Video Filtering, Antispam, Attack Surface Security, and FortiConverter Service) - Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, URL, DNS & Video Filtering and Antispam Service) - Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control) - FortiCare Essential Support
FortiCare Essential Ticket Handling, Hardware Replacement, Firmware and General Upgrades, Application Control - FortiCare Premium Support
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control - FortiCare Elite Support
FortiCare Premium Support with FortiCare Elite Ticket Handling. - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.
Fortinet Products
FortiGate-51G Base Appliance
FortiGate-51G 5 x GE RJ45 ports (including 4 x Internal Ports, 1 x WAN Ports), 64GB SSD.
#FG-51G
FortiGate-51G Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
FortiGate-51G Hardware plus 1 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
#FG-51G-BDL-950-12
FortiGate-51G Hardware plus 3 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
#FG-51G-BDL-950-36
FortiGate-51G Hardware plus 5 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
#FG-51G-BDL-950-60
FortiGate-51G Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
FortiGate-51G 1 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
#FC-10-GT51G-928-02-12
FortiGate-51G 3 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
#FC-10-GT51G-928-02-36
FortiGate-51G 5 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
#FC-10-GT51G-928-02-60
FortiGate-51G Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
FortiGate-51G 1 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
#FC-10-GT51G-950-02-12
FortiGate-51G 3 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
#FC-10-GT51G-950-02-36
FortiGate-51G 5 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium)
#FC-10-GT51G-950-02-60