Low-encryption (FG-121G-LENC) build of the FortiGate 121G-LENC for mid-range campus and branch deployments in export-restricted markets. Identical hardware, ports and FortiGuard inspection to the standard FortiGate 121G-LENC - the difference is a reduced-strength VPN cryptographic module, which is what makes the unit exportable where the full-crypto model is not.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 121G-LENC low-encryption appliance. License not included. | View productFG-121G-LENC |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-121G-BDL-809-12 | View productFG-121G-BDL-809-36 | View productFG-121G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-121G-BDL-950-12 | View productFG-121G-BDL-950-36 | View productFG-121G-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F121G-809-02-12 | View productFC-10-F121G-809-02-36 | View productFC-10-F121G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F121G-950-02-12 | View productFC-10-F121G-950-02-36 | View productFC-10-F121G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F121G-928-02-12 | View productFC-10-F121G-928-02-36 | View productFC-10-F121G-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 121G-LENC (FG-121G-LENC) is Fortinet's low-encryption variant of the FortiGate 121G. LENC models exist for one reason: export control. Some destinations and some customers cannot lawfully receive a firewall carrying full-strength VPN cryptography, so Fortinet ships the same appliance with a reduced-strength cryptographic module.
Everything else is the standard FortiGate 121G: identical chassis, identical interfaces, identical FortiASIC hardware, and the same FortiOS. Threat inspection is unaffected - IPS, antivirus, application control, web filtering and sandboxing all behave exactly as they do on the full-crypto model, because those services do not depend on the restricted VPN cipher suite.
What you give up is site-to-site and client VPN performance and cipher strength. If the deployment terminates a lot of IPsec or SSL VPN, the standard FortiGate 121G is the correct choice unless export rules force your hand.

A quick guide to choosing the right enterprise FortiGate.
| Firewall throughput (1518 / 512 / 64 byte, UDP) | 39 / 39 / 28 Gbps |
| Firewall latency (64 byte, UDP) | 3.17 µs |
| Firewall throughput (packets/sec) | 42 Mpps |
| Concurrent sessions (TCP) | 3,000,000 |
| New sessions/second (TCP) | 140,000 |
| Firewall policies | 10,000 |
| IPS throughput | 5.3 Gbps |
| NGFW throughput | 3.1 Gbps |
| Threat protection throughput | 2.8 Gbps |
| Application control throughput (HTTP 64K) | 6.7 Gbps |
| CAPWAP throughput (HTTP 64K) | 35 Gbps |
| Virtual domains (default / max) | 10 / 10 |
| Managed FortiAPs (total / tunnel) | 128 / 64 |
| Managed FortiSwitches | 32 |
| Maximum FortiTokens | 5,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | SP5 SoC (Security Processing Unit) |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 16x GE RJ45 switch, 2x GE RJ45 MGMT/HA, 8x GE SFP, 4x 10GE SFP+ FortiLink, 1x USB, 1x RJ45 console |
| Onboard storage | 1x 480 GB SSD |
| Power supply | Dual AC (100–240V AC, 50/60Hz, non-hot-swappable 1+1 redundancy) |
| Power consumption (avg / max) | 43 W / 47 W |
| Form factor | Rack Mount, 1RU |
| Dimensions (H x W x L) | 1.73 x 17.0 x 10.0 in (44 x 432 x 254 mm) |
| Weight | 12.17 lbs (5.52 kg) |
Source: Fortinet FortiGate 120G Series datasheet (FG-121G column) + Fortinet Product Matrix (May 2026).
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
LENC appliances sit alongside their standard siblings in the FortiGate line. Inspection performance is shared; only VPN cryptography differs.
| Model | VPN cryptography | Export restricted | |
|---|---|---|---|
| FortiGate 121G-LENC | Reduced strength | Yes - export licence required | Viewing |
| FortiGate 121G | Full strength | No | View → |
| Low-end crypto licence key upgrade | Field upgrade to full strength | Licence key | LENC-99005 |
The FortiGate 121G-LENC is the export-controlled build. Use the comparison below before you commit.
Every available SKU for the FG-121G-LENC: the low-encryption appliance plus the standard FG-121G FortiGuard bundles and renewals it is entitled to, with live Canadian pricing.
| Configuration | Price & action |
|---|---|
| FortiGate 121G-LENC low-encryption appliance. License not included. | View productFG-121G-LENC |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-121G-BDL-809-12 | View productFG-121G-BDL-809-36 | View productFG-121G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-121G-BDL-950-12 | View productFG-121G-BDL-950-36 | View productFG-121G-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F121G-809-02-12 | View productFC-10-F121G-809-02-36 | View productFC-10-F121G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F121G-950-02-12 | View productFC-10-F121G-950-02-36 | View productFC-10-F121G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F121G-928-02-12 | View productFC-10-F121G-928-02-36 | View productFC-10-F121G-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-F121G-189-02-12 | — | — |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-F121G-247-02-12 | View productFC-10-F121G-247-02-36 | View productFC-10-F121G-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-F121G-284-02-12 | View productFC-10-F121G-284-02-36 | View productFC-10-F121G-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-F121G-204-02-12 | View productFC-10-F121G-204-02-36 | View productFC-10-F121G-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-F121G-100-02-12 | View productFC-10-F121G-100-02-36 | View productFC-10-F121G-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-F121G-577-02-12 | View productFC-10-F121G-577-02-36 | View productFC-10-F121G-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-F121G-108-02-12 | View productFC-10-F121G-108-02-36 | View productFC-10-F121G-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-F121G-112-02-12 | View productFC-10-F121G-112-02-36 | View productFC-10-F121G-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-F121G-159-02-12 | View productFC-10-F121G-159-02-36 | View productFC-10-F121G-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-F121G-589-02-12 | View productFC-10-F121G-589-02-36 | View productFC-10-F121G-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-F121G-1329-02-12 | View productFC-10-F121G-1329-02-36 | View productFC-10-F121G-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-F121G-1389-02-12 | View productFC-10-F121G-1389-02-36 | View productFC-10-F121G-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-F121G-131-02-12 | View productFC-10-F121G-131-02-36 | View productFC-10-F121G-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-F121G-585-02-12 | View productFC-10-F121G-585-02-36 | View productFC-10-F121G-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-F121G-464-02-12 | View productFC-10-F121G-464-02-36 | View productFC-10-F121G-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-F121G-660-02-12 | View productFC-10-F121G-660-02-36 | View productFC-10-F121G-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-F121G-210-02-12 | View productFC-10-F121G-210-02-36 | View productFC-10-F121G-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-F121G-211-02-12 | View productFC-10-F121G-211-02-36 | View productFC-10-F121G-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-F121G-212-02-12 | View productFC-10-F121G-212-02-36 | View productFC-10-F121G-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-F121G-301-02-12 | View productFC-10-F121G-301-02-36 | View productFC-10-F121G-301-02-60 |
Transceivers and rack hardware for the FortiGate 121G-LENC are identical to the standard FortiGate 121G.
LENC stands for low encryption. It is Fortinet’s export-controlled build of the FortiGate 121G: same hardware and same FortiOS, but with a reduced-strength VPN cryptographic module so the appliance can lawfully ship to destinations and customers that cannot receive full-strength cryptography.
No. IPS, antivirus, application control, web and DNS filtering, and inline sandboxing run exactly as they do on the standard FortiGate 121G. Those FortiGuard services do not rely on the restricted VPN cipher suite. Only IPsec and SSL VPN performance and cipher strength are affected.
The same ones as the non-LENC model. Fortinet’s price list directs resellers to use the standard FG-121G SKUs and pricing for bundle renewal, FortiCare and FortiGuard, which is exactly what the purchasing tables on this page list.
Yes, subject to export approval. Fortinet sells a cryptographic licence key upgrade (LENC-99005) that raises a low-encryption unit to full crypto in the field, so you do not have to replace the appliance if your export restriction is lifted. Ask us to quote it.
In most cases yes – Fortinet notes that an export licence is normally required to obtain the cryptographic licence key for a LENC appliance. Build that approval time into your schedule. Hardware ships within Canada; licence and subscription delivery is electronic and available worldwide.