1U rackmount next-generation firewall built on Fortinet's NP7 and CP9 SPUs, with 16 hardware-accelerated GE RJ45 ports, 8 GE SFP and eight 10GbE SFP+ slots (four ultra-low-latency), 2x 480 GB onboard SSDs and dual hot-swappable -48V to -60V DC power, delivering 79.5 Gbps firewall throughput and integrated SD-WAN for DC-powered data-center and telco racks.
The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
Item | |
|---|---|
| Bundle includes | Enterprise | UTP | ATP |
|---|---|---|---|
| Firewall hardware | ✓ | ✓ | ✓ |
| IPS, malicious/botnet URL | ✓ | ✓ | ✓ |
| Anti-malware (AMP, sandbox, CDR) | ✓ | ✓ | ✓ |
| URL, DNS & video filtering | ✓ | ✓ | — |
| Anti-spam | ✓ | ✓ | — |
| AI-based inline malware prevention | ✓ | — | — |
| Data loss prevention (DLP) | ✓ | — | — |
| Attack surface security | ✓ | — | — |
| FortiCare Premium support | ✓ | ✓ | ✓ |
Item | |
|---|---|
| Bundle includes | Enterprise | UTP | ATP |
|---|---|---|---|
| Firewall hardware | ✓ | ✓ | ✓ |
| IPS, malicious/botnet URL | ✓ | ✓ | ✓ |
| Anti-malware (AMP, sandbox, CDR) | ✓ | ✓ | ✓ |
| URL, DNS & video filtering | ✓ | ✓ | — |
| Anti-spam | ✓ | ✓ | — |
| AI-based inline malware prevention | ✓ | — | — |
| Data loss prevention (DLP) | ✓ | — | — |
| Attack surface security | ✓ | — | — |
| FortiCare Premium support | ✓ | ✓ | ✓ |
Item | |
|---|---|
The FortiGate 401F-DC is the DC-powered, onboard-storage member of the 400F Series — a 1U rackmount next-generation firewall for telco central offices and data-center power plants that run on -48V DC. It is the same platform as the 400F — 16 hardware-accelerated Gigabit RJ45 ports, eight GE SFP slots, four 10GbE SFP+ slots and four 10GbE SFP+ ultra-low-latency slots, Fortinet's NP7 and CP9 SPUs, 79.5 Gbps firewall throughput, 7.8 million concurrent sessions and 55 Gbps of IPsec VPN — and adds two 480 GB onboard SSDs for local logging plus dual hot-swappable -48V to -60V DC power supplies for 1+1 redundancy. It runs FortiOS with built-in SD-WAN and ZTNA enforcement, with no add-on license needed for those features, and includes a Trusted Platform Module. For AC power with the same SSDs choose the 401F; for a DC rack without onboard storage choose the 400F-DC; step down to the 200F for campus and branch sites, or up to the 600F for data-center-core throughput.
A quick guide to choosing the right enterprise FortiGate.
| Firewall throughput (1518 / 512 / 64 byte, UDP) | 79.5 / 78.5 / 70 Gbps |
| IPv6 firewall throughput (1518 / 512 / 64 byte, UDP) | 79.5 / 78.5 / 70 Gbps |
| Firewall latency (64 byte, UDP) | 4.19 µs (2.5 µs ultra-low-latency ports) |
| Firewall throughput (packets/sec) | 105 Mpps |
| Concurrent sessions (TCP) | 7,800,000 |
| New sessions/second (TCP) | 500,000 |
| Firewall policies | 10,000 |
| IPS throughput (Enterprise mix) | 12 Gbps |
| NGFW throughput | 10 Gbps |
| Threat protection throughput | 9 Gbps |
| IPsec VPN throughput (512 byte) | 55 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 2,000 |
| Client-to-gateway IPsec VPN tunnels | 50,000 |
| SSL-VPN throughput | 3.6 Gbps |
| Concurrent SSL-VPN users (tunnel mode, rec. max) | 5,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 8 Gbps |
| SSL inspection CPS (IPS, avg. HTTPS) | 6,000 |
| SSL inspection concurrent sessions | 800,000 |
| Application control throughput (HTTP 64K) | 28 Gbps |
| CAPWAP throughput (HTTP 64K) | 65 Gbps |
| Virtual domains (default / max) | 10 / 10 |
| Managed FortiAPs (total / tunnel) | 512 / 256 |
| Managed FortiSwitches | 72 |
| Maximum FortiTokens | 5,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | Fortinet SPU (NP7 + CP9) |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 16x hardware-accelerated GE RJ45, 8x GE SFP, 4x 10 GE SFP+, 4x 10 GE SFP+ ultra-low-latency, 2x GE RJ45 MGMT, 1x USB, 1x console (RJ45); 2x SFP (1 GE SX) transceivers included |
| Onboard storage | 2x 480 GB SSD (960 GB) |
| Form factor | Rack mount, 1 RU |
| Dimensions (H x W x L) | 1.75 x 17 x 15 in (44.45 x 432 x 380 mm) |
| Weight | 14.33 lbs (6.5 kg) |
| Power supply | Dual hot-swappable -48V to -60V DC, 1+1 redundancy (SP-FG400F-DC-PS, 3 m DC cable included) |
| Power consumption (avg / max) | 161.1 W / 196.9 W |
| Heat dissipation | 671.85 BTU/h |
| Operating temperature | 32°F to 104°F (0°C to 40°C) |
| Humidity | 5% to 90% non-condensing |
| Forced airflow | Side and front to back |
| Operating altitude | Up to 10,000 ft (3,048 m) |
| Noise level | LpA 48 dBA / LwA 55 dBA |
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB |
| Certifications | USGv6 / IPv6 |
Source: official Fortinet FortiGate 400F Series datasheet (FG-401F-DC column); headline and lineup figures cross-checked against the Fortinet Product Matrix (May 2026).
Download the full datasheetThe 400F family shares the same NP7 + CP9 platform, ports and 400F-class performance. They differ by onboard storage and power input: the 401F and 401F-DC add two 480 GB SSDs for local logging, and the -DC models take -48V to -60V DC for telco and data-center power plants.
The 401F-DC sits in the upper-mid range of the FortiGate F-series. Step down to the 200F for campus and branch sites, or up to the 600F for data-center-core throughput and higher session capacity. Same FortiOS and FortiGuard services across the range.
Every available SKU for the FG-401F-DC: hardware, protection bundles, subscriptions, services, cloud, support and RMA. In stock, brand new, shipped from Canada; licensing delivered electronically worldwide.
Item | |
|---|---|
| Bundle includes | Enterprise | UTP | ATP |
|---|---|---|---|
| Firewall hardware | ✓ | ✓ | ✓ |
| IPS, malicious/botnet URL | ✓ | ✓ | ✓ |
| Anti-malware (AMP, sandbox, CDR) | ✓ | ✓ | ✓ |
| URL, DNS & video filtering | ✓ | ✓ | — |
| Anti-spam | ✓ | ✓ | — |
| AI-based inline malware prevention | ✓ | — | — |
| Data loss prevention (DLP) | ✓ | — | — |
| Attack surface security | ✓ | — | — |
| FortiCare Premium support | ✓ | ✓ | ✓ |
Item | |
|---|---|
| Bundle includes | Enterprise | UTP | ATP |
|---|---|---|---|
| Firewall hardware | ✓ | ✓ | ✓ |
| IPS, malicious/botnet URL | ✓ | ✓ | ✓ |
| Anti-malware (AMP, sandbox, CDR) | ✓ | ✓ | ✓ |
| URL, DNS & video filtering | ✓ | ✓ | — |
| Anti-spam | ✓ | ✓ | — |
| AI-based inline malware prevention | ✓ | — | — |
| Data loss prevention (DLP) | ✓ | — | — |
| Attack surface security | ✓ | — | — |
| FortiCare Premium support | ✓ | ✓ | ✓ |
Item | |
|---|---|
Item | |
|---|---|
Item | |
|---|---|
Item | |
|---|---|
Item | |
|---|---|
Add SFP/SFP+ optics or a DAC for the 401F-DC fiber slots, or a spare DC power supply. The appliance ships as a 1U rack unit with mounting rails and two 1GbE SX transceivers included.
The 401F-DC is a shipping, fully supported FortiGate ‘F’ series next-generation firewall built on the NP7 and CP9 security processors, with active FortiGuard and FortiCare subscriptions available. It is the DC-powered, onboard-SSD model of the 400F line.
The 401F-DC delivers 79.5 Gbps firewall throughput, 12 Gbps IPS, 10 Gbps NGFW, 9 Gbps threat protection and 8 Gbps SSL inspection, with 7.8 million concurrent sessions and 500,000 new sessions per second — identical to the AC 400F.
It uses dual hot-swappable -48V to -60V DC power supplies (SP-FG400F-DC-PS, shipped with a 3 m DC cable) in 1+1 redundancy, designed for telco central offices and data-center DC power plants.
Performance, ports, NP7 + CP9 SPUs and FortiOS features are identical across the line. The 401F-DC combines two 480 GB onboard SSDs for local logging with -48V DC power; the 401F has the same SSDs on AC power; the 400F-DC is DC-powered with no onboard storage.
In-stock units ship from Canada with free shipping, usually delivered in 0-1 business days. FortiGuard and FortiCare licensing is delivered electronically worldwide.
