Fortinet · Firewalls
FortiGate 50G
NGFW for branch offices and compact edge deployments.

Overview
FortiGate 50G integrates network security and connectivity through FortiOS. Model selection should consider actual traffic, SSL inspection, FortiGuard services, VPN, high availability and environment growth.
Key features
- Published performanceMaximum figures from the official Fortinet matrix for July 2026.
- Engineering-based sizingFinal sizing accounts for active services, topology, redundancy and expansion.
- Security FabricIntegration with the Fortinet ecosystem according to the defined architecture.
Technical specifications
| Accelerated ports — GE WAN ports | 1 |
|---|---|
| Accelerated ports — GE RJ45 ports | 3 |
| Accelerated ports — GE RJ45 FortiLink port (default) | 1 |
| USB | 1 |
| Console RJ45 | 1 |
| Local storage | FG-50G: no local data SSD is listed. Variant FG-51G: 64 GB SSD. |
| Dedicated TPM | Yes |
| Bluetooth Low Energy (BLE) | Yes |
| Physical signed-firmware switch | Yes |
| SMA antenna connectors | Dash in the datasheet: feature not listed for this SKU |
| Nano SIM slots | Dash in the datasheet: feature not listed for this SKU |
| Integrated Wi-Fi | Dash in the datasheet: feature not listed for this SKU |
| Hardware acceleration | SP5 |
| SFP/SFP+/QSFP and DAC on the base SKU | No optical slot is listed for the FG-50G; RJ45 GE data ports (1 Gbps). |
| Dedicated Ethernet management | No dedicated Ethernet management port is listed; separate console. |
| PoE, Wi-Fi and cellular connectivity | No PoE, Wi-Fi, DSL or cellular modem on the FG-50G. |
| Data ports — configuration | 5 × RJ45 GE (1 Gbps): 1 WAN, 3 LAN and 1 FortiLink. |
| PoE+ variant — power budget | FG-50G-SFP-POE / FG-51G-SFP-POE: 60 W total; up to 30 W per PoE+ port (802.3at). |
| 5G variant — modem and SIM | FG-50G-5G / FG-51G-5G: Telit Cinterion FN990A28-HP, 2 Nano SIMs (active/passive), 5 SMA connectors. |
| FortiWiFi variant — Wi-Fi 6 | FWF-50G/51G: 802.11a/b/g/n/ac/ax, 2×2 MU-MIMO; up to 1201 Mbps at 5 GHz and 574 Mbps at 2.4 GHz. |
| IPS | 2,25 GbpsEnterprise Traffic Mix; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to). |
|---|---|
| NGFW | 1,25 GbpsEnterprise Traffic Mix; firewall, IPS and Application Control enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to). |
| Threat Protection | 1,1 GbpsEnterprise Traffic Mix; firewall, IPS, Application Control and Malware Protection enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to). |
| Firewall — UDP 1518/512/64 bytes | 5 / 5 / 4 GbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric. |
| Firewall latency — UDP 64 bytes | 2.42 μsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric. |
| Packet forwarding | 6 MppsLaboratory results; actual performance varies with configuration and traffic. |
| IPsec VPN — throughput (512 bytes) | 4,5 Gbps512-byte packets; AES256-SHA256 encryption. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to). |
| SSL-VPN — historical throughput | Dash in the datasheet: feature not listed for this SKUPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function. |
| SSL inspection — throughput | 1,3 GbpsIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to). |
| SSL inspection — new connections/s | 699IPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to). |
| SSL inspection — concurrent sessions | 74 000IPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to). |
| Application control — HTTP 64 KB | 2,8 GbpsHTTP 64 KB; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to). |
| CAPWAP — throughput (HTTP 64 KB) | 3,8 GbpsHTTP 64 KB. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to). |
| IPv6 firewall — performance | No separate IPv6 value is published in the datasheet consulted. |
| Concurrent TCP sessions | 720 000 |
|---|---|
| New TCP sessions per second | 85 000 |
| Firewall policies | 2000 |
| Site-to-site IPsec tunnels | 200 |
| Client-to-gateway IPsec tunnels | 250 |
| SSL-VPN — historical concurrent users (recommended maximum) | Dash in the datasheet: feature not listed for this SKUPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function. |
| VDOMs — default / maximum | 5/5 |
| Managed FortiSwitches — maximum | 8 |
| Managed FortiAPs — total / tunnel | 16 / 8 |
| FortiTokens — maximum | 500 |
| High availability | Active-Active, Active-Passive, Clustering |
| Dimensions (H × W × D), inches | 1.6 x 8.5 x 6.3 |
|---|---|
| Dimensions (H × W × D), mm | 40.5 x 216 x 160 |
| Weight | 2.2 lbs (1.0 kg) |
| Form factor and mounting | Desktop |
| Power input | 12VDC, 3A |
| Power supply | External DC adapter, 100–240V AC, 50/60 Hz |
| Maximum current | 100V/0.4A, 240V/0.2A |
| Power consumption — average / maximum | 8.3 W / 8.9 W |
| Heat dissipation | 30.35 BTU/h |
| Operating temperature | 32°F to 104°F (0°C to 40°C) |
| Storage temperature | -31°F to 158°F (-35°C to 70°C) |
| Humidity | 10% to 90%, non-condensing |
| Noise | Sem ventoinha 0 dBA |
| Operating altitude | Up to 10 000 ft (3048 m) |
| Compliance | FCC, ISED, CE, UL/cUL, CB |
| Certifications | USGv6/IPv6 |
| Power supply redundancy | The datasheet describes an external DC adapter; it does not specify a redundant power supply configuration for the base SKU. |
| FortiGuard licensing and support | FortiGuard services and FortiCare support depend on the purchased bundle or subscription; hardware alone does not imply that all services are included. |
|---|---|
| SSL-VPN and FortiOS version | Published historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function. |
| Lifecycle and document review | End of Order / End of Support are not stated in this datasheet; confirm the official milestones for each SKU before purchasing. |
| Service restrictions by model | CDR, Video Filtering and Inline CASB are unavailable on the 50G series in any FortiOS version. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.