Low-encryption (FG-1000F-LENC) build of the FortiGate 1000F-LENC for high-end data-centre deployments in export-restricted markets. Identical hardware, ports and FortiGuard inspection to the standard FortiGate 1000F-LENC - the difference is a reduced-strength VPN cryptographic module, which is what makes the unit exportable where the full-crypto model is not.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 1000F-LENC low-encryption appliance. License not included. | View productFG-1000F-LENC |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-1000F-BDL-809-12 | View productFG-1000F-BDL-809-36 | View productFG-1000F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-1000F-BDL-950-12 | View productFG-1000F-BDL-950-36 | View productFG-1000F-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F1K0F-809-02-12 | View productFC-10-F1K0F-809-02-36 | View productFC-10-F1K0F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F1K0F-950-02-12 | View productFC-10-F1K0F-950-02-36 | View productFC-10-F1K0F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F1K0F-928-02-12 | View productFC-10-F1K0F-928-02-36 | View productFC-10-F1K0F-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 1000F-LENC (FG-1000F-LENC) is Fortinet's low-encryption variant of the FortiGate 1000F. LENC models exist for one reason: export control. Some destinations and some customers cannot lawfully receive a firewall carrying full-strength VPN cryptography, so Fortinet ships the same appliance with a reduced-strength cryptographic module.
Everything else is the standard FortiGate 1000F: identical chassis, identical interfaces, identical FortiASIC hardware, and the same FortiOS. Threat inspection is unaffected - IPS, antivirus, application control, web filtering and sandboxing all behave exactly as they do on the full-crypto model, because those services do not depend on the restricted VPN cipher suite.
What you give up is site-to-site and client VPN performance and cipher strength. If the deployment terminates a lot of IPsec or SSL VPN, the standard FortiGate 1000F is the correct choice unless export rules force your hand.

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 198 / 196 / 134 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 198 / 196 / 134 Gbps |
| Firewall latency (64 byte, UDP) | 3.45 µs |
| Firewall throughput (packets/sec) | 201 Mpps |
| Concurrent sessions (TCP) | 7.5 Million |
| New sessions/second (TCP) | 650,000 |
| Firewall policies | 100,000 |
| IPS throughput | 19 Gbps |
| NGFW throughput | 15 Gbps |
| Threat protection throughput | 13 Gbps |
| Application control throughput | 44 Gbps |
| Virtual domains (default / max) | 10 / 250 |
| Managed FortiAPs (total / tunnel) | 4,096 / 2,048 |
| Managed FortiSwitches | 196 |
| Maximum FortiTokens | 20,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | Fortinet SPU (NP7 + CP9) |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 2x 100GE QSFP28 / 40GE QSFP+ slots, 8x 25GE SFP28 / 10GE SFP+ slots, 16x 10GE SFP+ / GE SFP slots, 1x 2.5GE/GE HA, 1x GE RJ45 mgmt, 1x console; 2x SFP SX transceivers included |
| Onboard storage | None (FG-1001F adds 2x 480 GB SSD, hot-swappable) |
| Power supply | Dual redundant, 100-240V AC, 50/60 Hz |
| Power consumption (avg / max) | 210 W / 408 W |
| Form factor | Rack mount, 2RU |
| Dimensions (H x W x L) | 3.5 x 17.44 x 17.63 in (88.9 x 443 x 447.4 mm) |
| Weight | 21.94 lbs (9.95 kg) |
Source: official Fortinet FortiGate 1000F-LENC Series datasheet (FG-1000F column).
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
LENC appliances sit alongside their standard siblings in the FortiGate line. Inspection performance is shared; only VPN cryptography differs.
| Model | VPN cryptography | Export restricted | |
|---|---|---|---|
| FortiGate 1000F-LENC | Reduced strength | Yes - export licence required | Viewing |
| FortiGate 1000F | Full strength | No | View → |
| Mid-to-high-end crypto licence key upgrade | Field upgrade to full strength | Licence key | LENC-99006 |
The FortiGate 1000F-LENC is the export-controlled build. Use the comparison below before you commit.
Every available SKU for the FG-1000F-LENC: the low-encryption appliance plus the standard FG-1000F FortiGuard bundles and renewals it is entitled to, with live Canadian pricing.
| Configuration | Price & action |
|---|---|
| FortiGate 1000F-LENC low-encryption appliance. License not included. | View productFG-1000F-LENC |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-1000F-BDL-809-12 | View productFG-1000F-BDL-809-36 | View productFG-1000F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-1000F-BDL-950-12 | View productFG-1000F-BDL-950-36 | View productFG-1000F-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F1K0F-809-02-12 | View productFC-10-F1K0F-809-02-36 | View productFC-10-F1K0F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F1K0F-950-02-12 | View productFC-10-F1K0F-950-02-36 | View productFC-10-F1K0F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F1K0F-928-02-12 | View productFC-10-F1K0F-928-02-36 | View productFC-10-F1K0F-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-F1K0F-189-02-12 | View productFC-10-F1K0F-189-02-36 | View productFC-10-F1K0F-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-F1K0F-247-02-12 | View productFC-10-F1K0F-247-02-36 | View productFC-10-F1K0F-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-F1K0F-284-02-12 | View productFC-10-F1K0F-284-02-36 | View productFC-10-F1K0F-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-F1K0F-204-02-12 | View productFC-10-F1K0F-204-02-36 | View productFC-10-F1K0F-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-F1K0F-100-02-12 | View productFC-10-F1K0F-100-02-36 | View productFC-10-F1K0F-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-F1K0F-577-02-12 | View productFC-10-F1K0F-577-02-36 | View productFC-10-F1K0F-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-F1K0F-108-02-12 | View productFC-10-F1K0F-108-02-36 | View productFC-10-F1K0F-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-F1K0F-112-02-12 | View productFC-10-F1K0F-112-02-36 | View productFC-10-F1K0F-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-F1K0F-159-02-12 | View productFC-10-F1K0F-159-02-36 | View productFC-10-F1K0F-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-F1K0F-589-02-12 | View productFC-10-F1K0F-589-02-36 | View productFC-10-F1K0F-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-F1K0F-1329-02-12 | View productFC-10-F1K0F-1329-02-36 | View productFC-10-F1K0F-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-F1K0F-1389-02-12 | View productFC-10-F1K0F-1389-02-36 | View productFC-10-F1K0F-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-F1K0F-131-02-12 | View productFC-10-F1K0F-131-02-36 | View productFC-10-F1K0F-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-F1K0F-585-02-12 | View productFC-10-F1K0F-585-02-36 | View productFC-10-F1K0F-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-F1K0F-464-02-12 | View productFC-10-F1K0F-464-02-36 | View productFC-10-F1K0F-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-F1K0F-660-02-12 | View productFC-10-F1K0F-660-02-36 | View productFC-10-F1K0F-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-F1K0F-210-02-12 | View productFC-10-F1K0F-210-02-36 | View productFC-10-F1K0F-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-F1K0F-211-02-12 | View productFC-10-F1K0F-211-02-36 | View productFC-10-F1K0F-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-F1K0F-212-02-12 | View productFC-10-F1K0F-212-02-36 | View productFC-10-F1K0F-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-F1K0F-301-02-12 | View productFC-10-F1K0F-301-02-36 | View productFC-10-F1K0F-301-02-60 |
Transceivers and rack hardware for the FortiGate 1000F-LENC are identical to the standard FortiGate 1000F.
LENC stands for low encryption. It is Fortinet’s export-controlled build of the FortiGate 1000F: same hardware and same FortiOS, but with a reduced-strength VPN cryptographic module so the appliance can lawfully ship to destinations and customers that cannot receive full-strength cryptography.
No. IPS, antivirus, application control, web and DNS filtering, and inline sandboxing run exactly as they do on the standard FortiGate 1000F. Those FortiGuard services do not rely on the restricted VPN cipher suite. Only IPsec and SSL VPN performance and cipher strength are affected.
The same ones as the non-LENC model. Fortinet’s price list directs resellers to use the standard FG-1000F SKUs and pricing for bundle renewal, FortiCare and FortiGuard, which is exactly what the purchasing tables on this page list.
Yes, subject to export approval. Fortinet sells a cryptographic licence key upgrade (LENC-99006) that raises a low-encryption unit to full crypto in the field, so you do not have to replace the appliance if your export restriction is lifted. Ask us to quote it.
In most cases yes – Fortinet notes that an export licence is normally required to obtain the cryptographic licence key for a LENC appliance. Build that approval time into your schedule. Hardware ships within Canada; licence and subscription delivery is electronic and available worldwide.