Distributed-enterprise next-generation firewall powered by the SP5 SoC, with 5.3 Gbps IPS, 39 Gbps firewall throughput, 3 million concurrent sessions, dual redundant AC power supplies, and 4x 10GE SFP+ FortiLink uplinks in a 1RU rack appliance.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 120G 1RU rack appliance. License not included. | View productFG-120G |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-120G-BDL-809-12 | View productFG-120G-BDL-809-36 | View productFG-120G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-120G-BDL-950-12 | View productFG-120G-BDL-950-36 | View productFG-120G-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F120G-809-02-12 | View productFC-10-F120G-809-02-36 | View productFC-10-F120G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F120G-950-02-12 | View productFC-10-F120G-950-02-36 | View productFC-10-F120G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F120G-928-02-12 | View productFC-10-F120G-928-02-36 | View productFC-10-F120G-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 120G is Fortinet’s distributed-enterprise next-generation firewall, powered by the patented SP5 SoC that combines a RISC-based CPU with Fortinet’s Security Processing Unit. It delivers 2.8 Gbps of threat protection, 5.3 Gbps IPS throughput, 39 Gbps firewall throughput, and 3 million concurrent sessions in a 1RU rack appliance — with dual redundant AC power supplies, 4x 10GE SFP+ FortiLink uplinks, and 16 hardware-accelerated GE switch ports. Ideal for distributed enterprise branches and mid-size campus edges that need converged SD-WAN, ZTNA, and full FortiGuard protection in a compact rack form factor.

A quick guide to choosing the right enterprise FortiGate.
| Firewall throughput (1518 / 512 / 64 byte, UDP) | 39 / 39 / 28 Gbps |
| Firewall latency (64 byte, UDP) | 3.17 µs |
| Firewall throughput (packets/sec) | 42 Mpps |
| Concurrent sessions (TCP) | 3,000,000 |
| New sessions/second (TCP) | 140,000 |
| Firewall policies | 10,000 |
| IPS throughput | 5.3 Gbps |
| NGFW throughput | 3.1 Gbps |
| Threat protection throughput | 2.8 Gbps |
| IPsec VPN throughput (512 byte) | 35 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 2,000 |
| Client-to-gateway IPsec VPN tunnels | 16,000 |
| SSL-VPN throughput | 1.5 Gbps |
| Concurrent SSL-VPN users (tunnel mode) | 500 |
| SSL inspection throughput (IPS, avg. HTTPS) | 3 Gbps |
| SSL inspection concurrent sessions | 315,000 |
| Application control throughput (HTTP 64K) | 6.7 Gbps |
| CAPWAP throughput (HTTP 64K) | 35 Gbps |
| Virtual domains (default / max) | 10 / 10 |
| Managed FortiAPs (total / tunnel) | 128 / 64 |
| Managed FortiSwitches | 32 |
| Maximum FortiTokens | 5,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | SP5 SoC (Security Processing Unit) |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 16x GE RJ45 switch, 2x GE RJ45 MGMT/HA, 8x GE SFP, 4x 10GE SFP+ FortiLink, 1x USB, 1x RJ45 console |
| Onboard storage | None |
| Power supply | Dual AC (100–240V AC, 50/60Hz, non-hot-swappable 1+1 redundancy) |
| Power consumption (avg / max) | 38 W / 40 W |
| Form factor | Rack Mount, 1RU |
| Dimensions (H x W x L) | 1.73 x 17.0 x 10.0 in (44 x 432 x 254 mm) |
| Weight | 12.17 lbs (5.52 kg) |
Source: Fortinet FortiGate 120G Series datasheet (FG-120G column) + Fortinet Product Matrix (May 2026).
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The 120G and 121G share the same SP5 SoC platform and performance. The 121G adds a 480 GB SSD for local logging and reporting.
| Model | Onboard SSD | Best for | |
|---|---|---|---|
| FortiGate 120G | — | Base 1RU rack, dual AC, no on-box logging | Viewing |
| FortiGate 121G | ✓ 480 GB | Same platform + 480 GB SSD for local logs | View → |
The 120G sits between the 90G and the 200G in the FortiGate lineup. Step up to the 200G for 11M sessions and 6 Gbps threat protection, or step down to the 90G for a lower-cost desktop branch deployment. Same FortiOS and FortiGuard services across the range.
Every available SKU for the FG-120G: hardware, protection bundles, subscriptions, services, cloud, support and RMA. In stock, brand new, shipped from Canada; licensing delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 120G 1RU rack appliance. License not included. | View productFG-120G |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-120G-BDL-809-12 | View productFG-120G-BDL-809-36 | View productFG-120G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-120G-BDL-950-12 | View productFG-120G-BDL-950-36 | View productFG-120G-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F120G-809-02-12 | View productFC-10-F120G-809-02-36 | View productFC-10-F120G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F120G-950-02-12 | View productFC-10-F120G-950-02-36 | View productFC-10-F120G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F120G-928-02-12 | View productFC-10-F120G-928-02-36 | View productFC-10-F120G-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-F120G-189-02-12 | View productFC-10-F120G-189-02-36 | View productFC-10-F120G-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-F120G-247-02-12 | View productFC-10-F120G-247-02-36 | View productFC-10-F120G-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-F120G-284-02-12 | View productFC-10-F120G-284-02-36 | View productFC-10-F120G-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-F120G-204-02-12 | View productFC-10-F120G-204-02-36 | View productFC-10-F120G-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-F120G-100-02-12 | View productFC-10-F120G-100-02-36 | View productFC-10-F120G-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-F120G-577-02-12 | View productFC-10-F120G-577-02-36 | View productFC-10-F120G-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-F120G-108-02-12 | View productFC-10-F120G-108-02-36 | View productFC-10-F120G-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-F120G-112-02-12 | View productFC-10-F120G-112-02-36 | View productFC-10-F120G-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-F120G-159-02-12 | View productFC-10-F120G-159-02-36 | View productFC-10-F120G-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-F120G-589-02-12 | View productFC-10-F120G-589-02-36 | View productFC-10-F120G-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-F120G-1329-02-12 | View productFC-10-F120G-1329-02-36 | View productFC-10-F120G-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-F120G-1389-02-12 | View productFC-10-F120G-1389-02-36 | View productFC-10-F120G-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-F120G-131-02-12 | View productFC-10-F120G-131-02-36 | View productFC-10-F120G-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-F120G-585-02-12 | View productFC-10-F120G-585-02-36 | View productFC-10-F120G-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-F120G-464-02-12 | View productFC-10-F120G-464-02-36 | View productFC-10-F120G-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-F120G-660-02-12 | View productFC-10-F120G-660-02-36 | View productFC-10-F120G-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-F120G-210-02-12 | View productFC-10-F120G-210-02-36 | View productFC-10-F120G-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-F120G-211-02-12 | View productFC-10-F120G-211-02-36 | View productFC-10-F120G-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-F120G-212-02-12 | View productFC-10-F120G-212-02-36 | View productFC-10-F120G-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-F120G-301-02-12 | View productFC-10-F120G-301-02-36 | View productFC-10-F120G-301-02-60 |
The 120G is a 1RU rack appliance with 16 GE switch ports, 8x GE SFP, and 4x 10GE SFP+ FortiLink uplinks.
The FortiGate 120G is a current-generation model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
Performance is identical — both run on the same SP5 SoC platform. The FortiGate 121G adds a 480 GB onboard SSD for local logging and reporting. Choose the 120G when on-box storage is not required.
The FortiGate 120G is powered by Fortinet’s patented SP5 SoC, which combines a RISC-based CPU with a Security Processing Unit on a single chip to accelerate firewall, VPN, and content inspection — custom silicon designed by Fortinet.
Yes. The FortiGate 120G ships with dual built-in non-hot-swappable AC power supplies providing 1+1 redundancy — standard for mission-critical deployments.
UTP (Unified Threat Protection) is the most common choice: it adds web, DNS, and video filtering plus antispam on top of IPS and anti-malware. ATP covers core threat protection only. Enterprise adds DLP, AI-based inline malware prevention, and the full SASE service set.