Hyperscale data-center next-generation firewall with NP7 + CP9 acceleration, 36 Gbps IPS, 397 Gbps firewall throughput, 6x 100GE QSFP28 and 16x 25GE SFP28 ports, 70 million concurrent sessions, and dual hot-swappable AC power supplies in a 2RU appliance.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 3000F 2RU rack appliance, dual AC power. License not included. | View productFG-3000F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3000F-BDL-809-12 | View productFG-3000F-BDL-809-36 | View productFG-3000F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3000F-BDL-950-12 | View productFG-3000F-BDL-950-36 | View productFG-3000F-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F3K0F-809-02-12 | View productFC-10-F3K0F-809-02-36 | View productFC-10-F3K0F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F3K0F-950-02-12 | View productFC-10-F3K0F-950-02-36 | View productFC-10-F3K0F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F3K0F-928-02-12 | View productFC-10-F3K0F-928-02-36 | View productFC-10-F3K0F-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 3000F is Fortinet’s hyperscale data-center next-generation firewall, powered by the NP7 network processor and CP9 content processor. It delivers 33 Gbps of threat protection, 36 Gbps IPS throughput, 397 Gbps firewall throughput, and 70 million concurrent sessions in a 2RU rack appliance — with six 100GE QSFP28 uplinks, sixteen 25GE SFP28 slots, and sixteen multi-rate 10GE / GE RJ45 ports. Built for the largest enterprise data centers, service-provider cores, and hyperscale edges that need very high session capacity, 100GE density, and deep threat inspection in a compact footprint.

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 397 / 389 / 221 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 397 / 389 / 221 Gbps |
| Firewall latency (64 byte, UDP) | 3.92 µs |
| Firewall throughput (packets/sec) | 331.5 Mpps |
| Concurrent sessions (TCP) | 70 Million / 230 Million* |
| New sessions/second (TCP) | 870,000 / 3 Million* |
| Firewall policies | 200,000 |
| IPS throughput | 36 Gbps |
| NGFW throughput | 34 Gbps |
| Threat protection throughput | 33 Gbps |
| IPsec VPN throughput (512 byte) | 105 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 40,000 |
| Client-to-gateway IPsec VPN tunnels | 200,000 |
| SSL-VPN throughput | 11 Gbps |
| SSL inspection throughput (IPS, avg. HTTPS) | 29 Gbps |
| SSL inspection concurrent sessions | 7.5 Million |
| Application control throughput (HTTP 64K) | 115 Gbps |
| CAPWAP throughput (HTTP 64K) | 65 Gbps |
| Virtual domains (default / max) | 10 / 500 |
| Managed FortiAPs (total / tunnel) | 4,096 / 2,048 |
| Managed FortiSwitches | 300 |
| Maximum FortiTokens | 20,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 + CP9 |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 16x 10GE / 5GE / 2.5GE / GE RJ45, 16x 25GE SFP28 / 10GE SFP+ / GE SFP (incl. 2x HA), 6x 100GE QSFP28 / 40GE QSFP+, 2x 10GE / GE RJ45 MGMT, 1x USB, 1x RJ45 console |
| Included transceivers | 2x 10GE SFP+ SR |
| Onboard storage | None |
| Power supply | Dual AC (100–240VAC, 50/60 Hz, 1+1 redundancy, hot-swappable) |
| Power consumption (avg / max) | 425 W / 680 W |
| Form factor | Rack Mount, 2RU |
| Dimensions (H x W x L) | 3.5 x 17.44 x 21.89 in (88.9 x 443 x 556 mm) |
| Weight | 37.3 lbs (16.9 kg) |
Source: Fortinet FortiGate 3000F Series datasheet (FG-3000F column) + Fortinet Product Matrix (May 2026). * Requires Hyperscale Firewall License.
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The 3000F, 3000F-DC, and 3001F variants share the same NP7 + CP9 platform and performance. The -DC models use dual −48V to −60V DC power; the 3001F/3001F-DC add 2x 960 GB onboard SSD.
| Model | Power | Onboard SSD | Best for | |
|---|---|---|---|---|
| FortiGate 3000F | Dual AC | — | Base 2RU rack, dual AC, no on-box logging | Viewing |
| FortiGate 3000F-DC | Dual DC | — | Same platform on -48V DC power | — |
| FortiGate 3001F | Dual AC | ✓ 2x 960 GB | AC + SSD for local logs | — |
| FortiGate 3001F-DC | Dual DC | ✓ 2x 960 GB | DC power + onboard SSD logging | — |
The 3000F sits above the 2600F in the FortiGate F-series data-center lineup. Step down to the 2600F for 24 million sessions at lower cost, or up to the 3200F/3500F for even higher throughput. Same FortiOS and FortiGuard services across the range.
Every available SKU for the FG-3000F: hardware, protection bundles, subscriptions, services, cloud, support and RMA. In stock, brand new, shipped from Canada; licensing delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 3000F 2RU rack appliance, dual AC power. License not included. | View productFG-3000F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3000F-BDL-809-12 | View productFG-3000F-BDL-809-36 | View productFG-3000F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3000F-BDL-950-12 | View productFG-3000F-BDL-950-36 | View productFG-3000F-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F3K0F-809-02-12 | View productFC-10-F3K0F-809-02-36 | View productFC-10-F3K0F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F3K0F-950-02-12 | View productFC-10-F3K0F-950-02-36 | View productFC-10-F3K0F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F3K0F-928-02-12 | View productFC-10-F3K0F-928-02-36 | View productFC-10-F3K0F-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-F3K0F-189-02-12 | View productFC-10-F3K0F-189-02-36 | View productFC-10-F3K0F-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-F3K0F-247-02-12 | View productFC-10-F3K0F-247-02-36 | View productFC-10-F3K0F-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-F3K0F-284-02-12 | View productFC-10-F3K0F-284-02-36 | View productFC-10-F3K0F-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-F3K0F-204-02-12 | View productFC-10-F3K0F-204-02-36 | View productFC-10-F3K0F-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-F3K0F-100-02-12 | View productFC-10-F3K0F-100-02-36 | View productFC-10-F3K0F-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-F3K0F-577-02-12 | View productFC-10-F3K0F-577-02-36 | View productFC-10-F3K0F-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-F3K0F-108-02-12 | View productFC-10-F3K0F-108-02-36 | View productFC-10-F3K0F-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-F3K0F-112-02-12 | View productFC-10-F3K0F-112-02-36 | View productFC-10-F3K0F-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-F3K0F-159-02-12 | View productFC-10-F3K0F-159-02-36 | View productFC-10-F3K0F-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-F3K0F-589-02-12 | View productFC-10-F3K0F-589-02-36 | View productFC-10-F3K0F-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-F3K0F-1329-02-12 | View productFC-10-F3K0F-1329-02-36 | View productFC-10-F3K0F-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-F3K0F-1389-02-12 | View productFC-10-F3K0F-1389-02-36 | View productFC-10-F3K0F-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-F3K0F-131-02-12 | View productFC-10-F3K0F-131-02-36 | View productFC-10-F3K0F-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-F3K0F-585-02-12 | View productFC-10-F3K0F-585-02-36 | View productFC-10-F3K0F-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-F3K0F-464-02-12 | View productFC-10-F3K0F-464-02-36 | View productFC-10-F3K0F-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-F3K0F-660-02-12 | View productFC-10-F3K0F-660-02-36 | View productFC-10-F3K0F-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-F3K0F-210-02-12 | View productFC-10-F3K0F-210-02-36 | View productFC-10-F3K0F-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-F3K0F-211-02-12 | View productFC-10-F3K0F-211-02-36 | View productFC-10-F3K0F-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-F3K0F-212-02-12 | View productFC-10-F3K0F-212-02-36 | View productFC-10-F3K0F-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-F3K0F-301-02-12 | View productFC-10-F3K0F-301-02-36 | View productFC-10-F3K0F-301-02-60 |
The 3000F is a 2RU rack appliance with six 100GE QSFP28 ports, sixteen 25GE SFP28 slots and dual hot-swappable AC power.
The FortiGate 3000F is a current-generation model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
The 3000F roughly triples the session capacity of the 2600F (70 million vs 24 million concurrent sessions) and doubles firewall throughput to 397 Gbps, with six 100GE QSFP28 uplinks instead of four. Both run on the NP7 + CP9 platform. Choose the 3000F for the largest hyperscale data-center cores.
Performance is identical — both run on the same NP7 + CP9 platform. The FortiGate 3001F adds 2x 960 GB onboard NVMe SSD storage for local logging and reporting. Choose the 3000F when on-box storage is not required.
Yes. The FortiGate 3000F-DC is the dual −48V to −60V DC variant for telco central offices and DC-powered racks. Performance, interfaces, and licensing are identical to the AC FortiGate 3000F. Contact us for a 3000F-DC quote.
The FortiGate 3000F uses Fortinet’s NP7 network processor for firewall and VPN acceleration, and the CP9 content processor for IPS, SSL inspection, and application control. Both ASICs are custom silicon designed by Fortinet.