Fortinet · Firewalls

FortiGate 50G

NGFW for branch offices and compact edge deployments.

Category
Firewalls
Family
FortiGate
FortiGate 50G — official front and rear technical views

Overview

FortiGate 50G integrates network security and connectivity through FortiOS. Model selection should consider actual traffic, SSL inspection, FortiGuard services, VPN, high availability and environment growth.

Key features

Technical specifications

Interfaces and hardware
Accelerated ports — GE WAN ports1
Accelerated ports — GE RJ45 ports3
Accelerated ports — GE RJ45 FortiLink port (default)1
USB1
Console RJ451
Local storageFG-50G: no local data SSD is listed. Variant FG-51G: 64 GB SSD.
Dedicated TPMYes
Bluetooth Low Energy (BLE)Yes
Physical signed-firmware switchYes
SMA antenna connectorsDash in the datasheet: feature not listed for this SKU
Nano SIM slotsDash in the datasheet: feature not listed for this SKU
Integrated Wi-FiDash in the datasheet: feature not listed for this SKU
Hardware accelerationSP5
SFP/SFP+/QSFP and DAC on the base SKUNo optical slot is listed for the FG-50G; RJ45 GE data ports (1 Gbps).
Dedicated Ethernet managementNo dedicated Ethernet management port is listed; separate console.
PoE, Wi-Fi and cellular connectivityNo PoE, Wi-Fi, DSL or cellular modem on the FG-50G.
Data ports — configuration5 × RJ45 GE (1 Gbps): 1 WAN, 3 LAN and 1 FortiLink.
PoE+ variant — power budgetFG-50G-SFP-POE / FG-51G-SFP-POE: 60 W total; up to 30 W per PoE+ port (802.3at).
5G variant — modem and SIMFG-50G-5G / FG-51G-5G: Telit Cinterion FN990A28-HP, 2 Nano SIMs (active/passive), 5 SMA connectors.
FortiWiFi variant — Wi-Fi 6FWF-50G/51G: 802.11a/b/g/n/ac/ax, 2×2 MU-MIMO; up to 1201 Mbps at 5 GHz and 574 Mbps at 2.4 GHz.
Performance
IPS2,25 GbpsEnterprise Traffic Mix; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
NGFW1,25 GbpsEnterprise Traffic Mix; firewall, IPS and Application Control enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Threat Protection1,1 GbpsEnterprise Traffic Mix; firewall, IPS, Application Control and Malware Protection enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Firewall — UDP 1518/512/64 bytes5 / 5 / 4 GbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Firewall latency — UDP 64 bytes2.42 μsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Packet forwarding6 MppsLaboratory results; actual performance varies with configuration and traffic.
IPsec VPN — throughput (512 bytes)4,5 Gbps512-byte packets; AES256-SHA256 encryption. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL-VPN — historical throughputDash in the datasheet: feature not listed for this SKUPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
SSL inspection — throughput1,3 GbpsIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — new connections/s699IPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — concurrent sessions74 000IPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Application control — HTTP 64 KB2,8 GbpsHTTP 64 KB; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
CAPWAP — throughput (HTTP 64 KB)3,8 GbpsHTTP 64 KB. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
IPv6 firewall — performanceNo separate IPv6 value is published in the datasheet consulted.
Capacity and VPN
Concurrent TCP sessions720 000
New TCP sessions per second85 000
Firewall policies2000
Site-to-site IPsec tunnels200
Client-to-gateway IPsec tunnels250
SSL-VPN — historical concurrent users (recommended maximum)Dash in the datasheet: feature not listed for this SKUPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
VDOMs — default / maximum5/5
Managed FortiSwitches — maximum8
Managed FortiAPs — total / tunnel16 / 8
FortiTokens — maximum500
High availabilityActive-Active, Active-Passive, Clustering
Installation and power
Dimensions (H × W × D), inches1.6 x 8.5 x 6.3
Dimensions (H × W × D), mm40.5 x 216 x 160
Weight2.2 lbs (1.0 kg)
Form factor and mountingDesktop
Power input12VDC, 3A
Power supplyExternal DC adapter, 100–240V AC, 50/60 Hz
Maximum current100V/0.4A, 240V/0.2A
Power consumption — average / maximum8.3 W / 8.9 W
Heat dissipation30.35 BTU/h
Operating temperature32°F to 104°F (0°C to 40°C)
Storage temperature-31°F to 158°F (-35°C to 70°C)
Humidity10% to 90%, non-condensing
NoiseSem ventoinha 0 dBA
Operating altitudeUp to 10 000 ft (3048 m)
ComplianceFCC, ISED, CE, UL/cUL, CB
CertificationsUSGv6/IPv6
Power supply redundancyThe datasheet describes an external DC adapter; it does not specify a redundant power supply configuration for the base SKU.
Licensing and lifecycle
FortiGuard licensing and supportFortiGuard services and FortiCare support depend on the purchased bundle or subscription; hardware alone does not imply that all services are included.
SSL-VPN and FortiOS versionPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
Lifecycle and document reviewEnd of Order / End of Support are not stated in this datasheet; confirm the official milestones for each SKU before purchasing.
Service restrictions by modelCDR, Video Filtering and Inline CASB are unavailable on the 50G series in any FortiOS version.

Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.

Documents and references