G-series data-center next-generation firewall with NP7 + CP10 acceleration, 90 Gbps IPS, 397 Gbps firewall throughput, 6x 100GE QSFP28 ports, 88 million concurrent sessions, and dual hot-swappable AC power in a 2RU appliance.
The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3000G-BDL-809-12 | View productFG-3000G-BDL-809-36 | View productFG-3000G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3000G-BDL-950-12 | View productFG-3000G-BDL-950-36 | View productFG-3000G-BDL-950-60 |
| Appliance + bundle | View productFG-3000G-BDL-1082-12 | View productFG-3000G-BDL-1082-36 | View productFG-3000G-BDL-1082-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-G3K0G-809-02-12 | View productFC-10-G3K0G-809-02-36 | View productFC-10-G3K0G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-G3K0G-950-02-12 | View productFC-10-G3K0G-950-02-36 | View productFC-10-G3K0G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-G3K0G-928-02-12 | View productFC-10-G3K0G-928-02-36 | View productFC-10-G3K0G-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 3000G is Fortinet’s G-series data-center next-generation firewall, powered by the NP7 network processor and the tenth-generation CP10 content processor. It delivers 80 Gbps of threat protection, 90 Gbps IPS throughput, 397 Gbps firewall throughput, and 88 million concurrent sessions in a 2RU rack appliance — with six 100GE QSFP28 uplinks, sixteen 25GE SFP28 slots, and sixteen multi-gig RJ45 ports. Built for enterprise data centers and campus cores that want next-generation CP10 inspection performance with an optional Hyperscale Firewall license.
Ask AI about the FortiGate 3000GA quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 397 / 394 / 234 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 397 / 394 / 234 Gbps |
| Firewall latency (64 byte, UDP) | 3.7 µs |
| Firewall throughput (packets/sec) | 351 Mpps |
| Concurrent sessions (TCP) | 88 Million (230 Million with Hyperscale Firewall license) |
| New sessions/second (TCP) | 1.1 Million (3 Million with Hyperscale Firewall license) |
| Firewall policies | 200,000 |
| IPS throughput | 90 Gbps |
| NGFW throughput | 85 Gbps |
| Threat protection throughput | 80 Gbps |
| IPsec VPN throughput (512 byte) | 105 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 40,000 |
| Client-to-gateway IPsec VPN tunnels | 200,000 |
| SSL-VPN throughput | 9 Gbps |
| Concurrent SSL-VPN users (tunnel mode) | 30,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 75 Gbps |
| SSL inspection concurrent sessions | 9.9 Million |
| Application control throughput (HTTP 64K) | 159 Gbps |
| CAPWAP throughput (HTTP 64K) | 148 Gbps |
| Virtual domains (default / max) | 10 / 500 |
| Managed FortiAPs (total / tunnel) | 4,096 / 2,048 |
| Managed FortiSwitches | 300 |
| Maximum FortiTokens | 20,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 + CP10 |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 6x 100GE QSFP28 / 40GE QSFP+ slots, 16x 25GE SFP28 / 10GE SFP+ / GE SFP slots, 16x 10GE / 5GE / 2.5GE / GE RJ45 (incl. 2x WAN), 2x 10GE / GE RJ45 management, 1x USB, 1x RJ45 console |
| Included transceivers | 2x 10GE SFP+ SR |
| Onboard storage | None (FG-3001G: 2x 960 GB SSD) |
| Power supply | Dual AC (100–240VAC, 60/50 Hz, 1+1 redundancy, hot-swappable) |
| Power consumption (avg / max) | 550 W / 808 W |
| Form factor | Rack Mount, 2RU |
| Dimensions (H x W x L) | 3.48 x 17.20 x 19.52 in (88.4 x 436.9 x 495.8 mm) |
| Weight | 33.73 lbs (15.3 kg) |
Source: Fortinet FortiGate 3000G Series datasheet (FG-3000G column) + Fortinet Product Matrix (May 2026).
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The 3000G and 3001G variants share the same NP7 + CP10 platform and performance. The 3001G adds 2x 960 GB onboard SSD for local logging; both use dual hot-swappable AC power.
| Model | Power | Onboard SSD | Best for | |
|---|---|---|---|---|
| FortiGate 3000G | Dual AC | — | Base 2RU rack, no on-box logging | Viewing |
| FortiGate 3001G | Dual AC | ✓ 2x 960 GB | AC + SSD for local logging | — |
The 3000G is the entry point of the FortiGate 3000-G data-center line. Step up to the 3500G or 3800G for higher throughput and 400GE density. Same FortiOS and FortiGuard services across the range.
Every catalogued SKU for the FG-3000G: hardware, protection bundles, subscriptions, services, cloud, support and RMA. Contact us for current pricing and lead time; licensing delivered electronically worldwide.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3000G-BDL-809-12 | View productFG-3000G-BDL-809-36 | View productFG-3000G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3000G-BDL-950-12 | View productFG-3000G-BDL-950-36 | View productFG-3000G-BDL-950-60 |
| Appliance + bundle | View productFG-3000G-BDL-1082-12 | View productFG-3000G-BDL-1082-36 | View productFG-3000G-BDL-1082-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-G3K0G-809-02-12 | View productFC-10-G3K0G-809-02-36 | View productFC-10-G3K0G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-G3K0G-950-02-12 | View productFC-10-G3K0G-950-02-36 | View productFC-10-G3K0G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-G3K0G-928-02-12 | View productFC-10-G3K0G-928-02-36 | View productFC-10-G3K0G-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-G3K0G-189-02-12 | View productFC-10-G3K0G-189-02-36 | View productFC-10-G3K0G-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-G3K0G-247-02-12 | View productFC-10-G3K0G-247-02-36 | View productFC-10-G3K0G-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-G3K0G-284-02-12 | View productFC-10-G3K0G-284-02-36 | View productFC-10-G3K0G-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-G3K0G-204-02-12 | View productFC-10-G3K0G-204-02-36 | View productFC-10-G3K0G-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-G3K0G-100-02-12 | View productFC-10-G3K0G-100-02-36 | View productFC-10-G3K0G-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-G3K0G-577-02-12 | View productFC-10-G3K0G-577-02-36 | View productFC-10-G3K0G-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-G3K0G-108-02-12 | View productFC-10-G3K0G-108-02-36 | View productFC-10-G3K0G-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-G3K0G-112-02-12 | View productFC-10-G3K0G-112-02-36 | View productFC-10-G3K0G-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-G3K0G-159-02-12 | View productFC-10-G3K0G-159-02-36 | View productFC-10-G3K0G-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-G3K0G-589-02-12 | View productFC-10-G3K0G-589-02-36 | View productFC-10-G3K0G-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-G3K0G-1329-02-12 | View productFC-10-G3K0G-1329-02-36 | View productFC-10-G3K0G-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-G3K0G-1389-02-12 | View productFC-10-G3K0G-1389-02-36 | View productFC-10-G3K0G-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-G3K0G-131-02-12 | View productFC-10-G3K0G-131-02-36 | View productFC-10-G3K0G-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-G3K0G-585-02-12 | View productFC-10-G3K0G-585-02-36 | View productFC-10-G3K0G-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-G3K0G-464-02-12 | View productFC-10-G3K0G-464-02-36 | View productFC-10-G3K0G-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-G3K0G-660-02-12 | View productFC-10-G3K0G-660-02-36 | View productFC-10-G3K0G-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-G3K0G-210-02-12 | View productFC-10-G3K0G-210-02-36 | View productFC-10-G3K0G-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-G3K0G-211-02-12 | View productFC-10-G3K0G-211-02-36 | View productFC-10-G3K0G-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-G3K0G-212-02-12 | View productFC-10-G3K0G-212-02-36 | View productFC-10-G3K0G-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-G3K0G-301-02-12 | View productFC-10-G3K0G-301-02-36 | View productFC-10-G3K0G-301-02-60 |
The 3000G is a 2RU rack appliance with six 100GE QSFP28 ports, sixteen 25GE SFP28 slots, sixteen multi-gig RJ45 ports and dual hot-swappable AC power.
The FortiGate 3000G is a current-generation G-series model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
The 3000G is the newer G-series generation using the NP7 + CP10 platform, with 90 Gbps IPS and 6x 100GE QSFP28 ports. The 3200F is the F-series (NP7 + CP9) with 400GE QSFP-DD density and higher raw firewall throughput. Choose the 3000G for the latest CP10 inspection engine and 100GE connectivity.
Performance is identical — both run on the same NP7 + CP10 platform. The FortiGate 3001G adds 2x 960 GB onboard SSD storage for local logging and reporting.
The optional Hyperscale Firewall license unlocks additional NP7 acceleration, raising concurrent sessions from 88 million to 230 million and new sessions/second from 1.1 million to 3 million. It is a perpetual license for carrier and hyperscale deployments.
The FortiGate 3000G uses Fortinet’s NP7 network processor for firewall and VPN acceleration, and the tenth-generation CP10 content processor for IPS, SSL inspection, and application control. Both ASICs are custom silicon designed by Fortinet.
