FortiGate 3800G integrates network security and connectivity through FortiOS. Model selection should consider actual traffic, SSL inspection, FortiGuard services, VPN, high availability and environment growth.
Key features
Published performanceMaximum figures from the official Fortinet matrix for July 2026.
Engineering-based sizingFinal sizing accounts for active services, topology, redundancy and expansion.
Security FabricIntegration with the Fortinet ecosystem according to the defined architecture.
Accelerated ports — 50GE SFP56/ 25 GE SFP28/ 10 GE SFP+/ GE SFP slots
18
10GE/ GE RJ45 management ports
2
USB
1
Console
1
Local storage
FG-3800G: no local data SSD is listed. Variant FG-3801G: 2 × 1.92 TB SSD.
Dedicated TPM
Yes
Bluetooth Low Energy (BLE)
Dash in the datasheet: feature not listed for this SKU
Physical signed-firmware switch
Yes
FortiSentry
Yes
Included transceivers
2x SFP56 (SR 10 GE)
Hardware acceleration
NP7 / CP10
Documented optional DAC cables
40 GE QSFP+ passive DAC cable, 1 m (SP-CABLE-FS-QSFP+1); 40 GE QSFP+ passive DAC cable, 3 m (SP-CABLE-FS-QSFP+3); 40 GE QSFP+ passive DAC cable, 5 m (SP-CABLE-FS-QSFP+5); 400 GE QSFPDD passive Direct Attach Cable, 2.5m (FN-CABLE-QSFPDD-DAC-B5)
PoE, Wi-Fi and cellular connectivity
PoE output, a Wi-Fi radio and a 5G cellular modem are not listed for this SKU in the datasheet consulted.
Performance
IPS
250 GbpsEnterprise Traffic Mix; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
NGFW
210 GbpsEnterprise Traffic Mix; firewall, IPS and Application Control enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Threat Protection
200 GbpsEnterprise Traffic Mix; firewall, IPS, Application Control and Malware Protection enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Firewall IPv4 — UDP 1518/512/64 bytes
795 / 793 / 453 GbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Firewall IPv6 — UDP 1518/512/86 bytes
795 / 793 / 453 GbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Firewall latency — UDP 64 bytes
3.53 μsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Packet forwarding
679.5 MppsLaboratory results; actual performance varies with configuration and traffic.
IPsec VPN — throughput (512 bytes)
210 Gbps512-byte packets; AES256-SHA256 encryption. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL-VPN — historical throughput
27 GbpsPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
SSL inspection — throughput
120 GbpsIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — new connections/s
114 000IPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — concurrent sessions
18 millionIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Application control — HTTP 64 KB
315 GbpsHTTP 64 KB; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
CAPWAP — throughput (HTTP 64 KB)
Not published (TBA in the datasheet)HTTP 64 KB. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Capacity and VPN
Concurrent TCP sessions
200 million / 450 million (with a licence for Hyperscale)Capacity is conditional on the Hyperscale licence specified in the datasheet; the figures do not represent automatically included capabilities.
New TCP sessions per second
1.11 million / 7 million (with a licence for Hyperscale)Capacity is conditional on the Hyperscale licence specified in the datasheet; the figures do not represent automatically included capabilities.
30 000Published historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
VDOMs — default / maximum
10 / 500
Managed FortiSwitches — maximum
300
Managed FortiAPs — total / tunnel
8192 / 4096
FortiTokens — maximum
20 000
FortiClients — maximum
50 000
High availability
Active-Active, Active-Passive, Clustering
Installation and power
Dimensions (H × W × D), inches
5.22 x 17.2 x 26.13
Dimensions (H × W × D), mm
132.5 x 437 x 663.7
Weight
71.65 lbs (32.5 kg)
Form factor and mounting
Rack, 3 RU
AC power supply
200–240 VAC, 60/50 Hz
Maximum AC current
10A@200-240VAC
Power consumption — average / maximum
1496 W / 1950 W
DC power supply (DC variant)
-48VDC to -60VDC, 23A
Maximum DC current (DC variant)
Not confirmed: the datasheet shows AC current/voltage values in this DC row.
Heat dissipation
6654 BTU/h
Redundant power supplies
Hot-swap, 2+2
Power supply efficiency
80+ Platinum
Fan module
Hot-swap
Operating temperature
32°F to 104°F (0°C to 40°C)
Storage temperature
-31°F to 158°F (-35°C to 70°C)
Humidity
20% to 90%, non-condensing
Noise
70.4 dBA
Airflow
Front-to-rear airflow
Operating altitude
Up to 10 000 ft (3048 m)
Compliance
Not published (TBA in the datasheet)
Certifications
USGv6/IPv6
Licensing and lifecycle
FortiGuard licensing and support
FortiGuard services and FortiCare support depend on the purchased bundle or subscription; hardware alone does not imply that all services are included.
Hyperscale licensing
The datasheet lists a separate Hyperscale licence for session acceleration functions; confirm the SKU and availability.
SSL-VPN and FortiOS version
Published historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
Lifecycle and document review
End of Order / End of Support are not stated in this datasheet; confirm the official milestones for each SKU before purchasing.
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
