Fortinet · Firewalls

FortiGate 900G

NGFW for campus networks and enterprise edges.

Category
Firewalls
Family
FortiGate
FortiGate 900G — official front and rear technical views

Overview

FortiGate 900G integrates network security and connectivity through FortiOS. Model selection should consider actual traffic, SSL inspection, FortiGuard services, VPN, high availability and environment growth.

Key features

Technical specifications

Interfaces and hardware
Accelerated ports — 25 GE SFP28 / 10 GE SFP+ ultra-low-latency slots4
Accelerated ports — 10 GE SFP+ / GE SFP slots4
Accelerated ports — GE SFP slots8
Accelerated ports — GE RJ45 slots16
2.5 GE / GE HA port1
GE management port1
USB (client / server)2 / 2
Console1
Local storageFG-900G: no local data SSD is listed. Variant FG-901G: 2 × 480 GB.
Dedicated TPMYes
Bluetooth Low Energy (BLE)Yes
Physical signed-firmware switchDash in the datasheet: feature not listed for this SKU
Included transceivers2x SFP SX
Hardware accelerationNP7 / CP9
Documented optional DAC cables10 GE SFP+ active DAC cable, 10m / 32.8 ft (SP-CABLE-ADASFP+); 25 GE SFP28 passive DAC cable (FN-CABLE-SFP28-1); 25 GE SFP28 passive DAC cable (FN-CABLE-SFP28-3); 25 GE SFP28 passive DAC cable (FN-CABLE-SFP28-5)
PoE, Wi-Fi and cellular connectivityPoE output, a Wi-Fi radio and a 5G cellular modem are not listed for this SKU in the datasheet consulted.
Performance
IPS42 GbpsEnterprise Traffic Mix; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
NGFW31 GbpsEnterprise Traffic Mix; firewall, IPS and Application Control enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Threat Protection30 GbpsEnterprise Traffic Mix; firewall, IPS, Application Control and Malware Protection enabled; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Firewall IPv4 — UDP 1518/512/64 bytes164 / 163 / 153 GbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Firewall IPv6 — UDP 1518/512/86 bytes164 / 163 / 153 GbpsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric.
Firewall latency — UDP 64 bytes3.78 / 2.5 μsLaboratory results; actual performance varies with configuration and traffic. UDP packets of the sizes specified in the metric. The ULL value is separate from the value for standard ports.
Packet forwarding229.5 MppsLaboratory results; actual performance varies with configuration and traffic.
IPsec VPN — throughput (512 bytes)55 Gbps512-byte packets; AES256-SHA256 encryption. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL-VPN — historical throughput10 GbpsPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
SSL inspection — throughput16,7 GbpsIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — new connections/s18 000IPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
SSL inspection — concurrent sessions1.6 millionIPS; average across HTTPS sessions with different cipher suites. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Application control — HTTP 64 KB74,8 GbpsHTTP 64 KB; logging enabled. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
CAPWAP — throughput (HTTP 64 KB)133 GbpsHTTP 64 KB. Manufacturer laboratory results; actual performance varies with configuration and traffic. Throughput is advertised as a maximum (up to).
Capacity and VPN
Concurrent TCP sessions28 million
New TCP sessions per second720 000
Firewall policies50 000
Site-to-site IPsec tunnels2000
Client-to-gateway IPsec tunnels50 000
SSL-VPN — historical concurrent users (recommended maximum)10 000Published historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
VDOMs — default / maximum10 / 50
Managed FortiSwitches — maximum196 with FortiOS 7.6.1+; 96 in earlier versions
Managed FortiAPs — total / tunnel2048 / 1024
FortiTokens — maximum5000
High availabilityActive-Active, Active-Passive, Clustering
Installation and power
Dimensions (H × W × D), inches1.5 x 17.0 x 15.0
Dimensions (H × W × D), mm44.45 x 432 x 380
Weight15.98 lbs (7.25 kg)
Form factor and mountingRack, 1RU
AC power supply100–240VAC, 50/60 Hz
Maximum AC current6A@100VAC
DC power supply (DC variant)48-60VDC
Maximum DC current (DC variant)7A@48V
Power consumption — average / maximum170 W / 313 W
Heat dissipation1069 BTU/h
Power supply efficiency80Plus-compatible
Redundant power supplies (hot-swap)Yes (2 power supplies included from the factory)
Operating temperature32°F to 113°F (0°C to 45°C)
Storage temperature-31°F to 158°F (-35°C to 70°C)
Humidity10% to 90%, non-condensing
Noise58 dBA
AirflowSide/front-to-rear airflow
Operating altitudeUp to 10 000 ft (3048 m)
ComplianceFCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB
CertificationsUSGv6/IPv6
Licensing and lifecycle
FortiGuard licensing and supportFortiGuard services and FortiCare support depend on the purchased bundle or subscription; hardware alone does not imply that all services are included.
SSL-VPN and FortiOS versionPublished historical capacity; SSL-VPN tunnel mode was removed from all models as of FortiOS 7.6.3 and replaced by IPsec VPN. SSL inspection is a separate function.
Lifecycle and document reviewEnd of Order / End of Support are not stated in this datasheet; confirm the official milestones for each SKU before purchasing.

Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.

Documents and references