Data-center next-generation firewall on the NP7 network processor and CP9 content processor, with 2x 960 GB onboard SSD for local logging.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 3001F 2U rack appliance, 2x 960 GB SSD onboard storage. License not included. | View productFG-3001F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3001F-BDL-809-12 | View productFG-3001F-BDL-809-36 | View productFG-3001F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3001F-BDL-950-12 | View productFG-3001F-BDL-950-36 | View productFG-3001F-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F3K1F-809-02-12 | View productFC-10-F3K1F-809-02-36 | View productFC-10-F3K1F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F3K1F-950-02-12 | View productFC-10-F3K1F-950-02-36 | View productFC-10-F3K1F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F3K1F-928-02-12 | View productFC-10-F3K1F-928-02-36 | View productFC-10-F3K1F-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 3001F is a data-center next-generation firewall on the NP7 network processor and CP9 content processor, with 2x 960 GB onboard SSD for local logging. It is the FortiGate 3000F platform with 2x 960 GB SSD added, so throughput, session capacity and interface layout are unchanged — the difference is that the FortiGate 3001F stores its own logs and reports on the appliance.
Interfaces: 6x 100GE QSFP28 slots, 16x 25GE SFP28 / 10GE SFP+ slots (incl. 2x HA), 16x 10/5/2.5GE RJ45 ports, 2x 10GE/GE management ports. That makes it a fit for data-center cores and campus aggregation points that need on-box log retention without deploying a dedicated FortiAnalyzer.

A quick guide to choosing the right enterprise FortiGate.
| IPS throughput (enterprise mix) | 36 Gbps |
| NGFW throughput | 34 Gbps |
| Threat protection throughput | 33 Gbps |
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 397 / 389 / 221 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 397 / 389 / 221 Gbps |
| Firewall latency (64 byte, UDP) | 3.92 µs |
| Firewall throughput (packets/sec) | 331.5 Mpps |
| Concurrent sessions (TCP) | 70 Million (230 Million with Hyperscale licence) |
| New sessions/second (TCP) | 870,000 (3 Million with Hyperscale licence) |
| Firewall policies | 200,000 |
| IPsec VPN throughput (512 byte) | 105 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 40,000 |
| Client-to-gateway IPsec VPN tunnels | 200,000 |
| SSL-VPN throughput | 11 Gbps |
| Concurrent SSL-VPN users (recommended max) | 30,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 29 Gbps |
| SSL inspection CPS (IPS, avg. HTTPS) | 29,000 |
| SSL inspection concurrent sessions | 7.5 Million |
| Application control throughput (HTTP 64K) | 115 Gbps |
| CAPWAP throughput (HTTP 64K) | 65 Gbps |
| Virtual domains (default / max) | 10 / 500 |
| Managed FortiSwitches | 300 |
| Managed FortiAPs (total / tunnel) | 4,096 / 2,048 |
| Maximum FortiTokens | 20,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | SPU NP7 + CP9 |
| Trusted Platform Module (TPM) | Yes |
| Onboard storage | 2x 960 GB SSD |
| Interfaces | 6x 100GE QSFP28 slots, 16x 25GE SFP28 / 10GE SFP+ slots (incl. 2x HA), 16x 10/5/2.5GE RJ45 ports, 2x 10GE/GE management ports |
| Included transceivers | 2x SFP+ (SR 10GE) |
| Power supply | Dual AC (100–240VAC, 50/60 Hz, hot-swappable, 1+1) |
| Power consumption (avg / max) | 420 W / 690 W |
| Heat dissipation | 2,356 BTU/h |
| Form factor | Rack Mount, 2RU |
| Dimensions (H x W x L) | 3.5 x 17.44 x 21.89 in (88.9 x 443 x 556 mm) |
| Weight | 38.2 lbs (17.3 kg) |
Source: Fortinet FortiGate 3000F Series datasheet (FG-3001F column).

Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The FortiGate 3000F and FortiGate 3001F share the same NP7 + CP9 platform and performance. The FortiGate 3001F adds 2x 960 GB SSD for local logging.
| Model | Onboard SSD | Best for | |
|---|---|---|---|
| FortiGate 3000F | — | Base platform, logging to FortiAnalyzer | View → |
| FortiGate 3001F | ✓ 2x 960 GB SSD | Same platform with local log storage | Viewing |
Step to the FortiGate 3000F if you log to FortiAnalyzer instead, or the FortiGate 3200F for a different tier. Same FortiOS and FortiGuard services across the range.
Every catalogued SKU for the FG-3001F: hardware, protection bundles, subscriptions, services, cloud, support and RMA. Licensing is delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 3001F 2U rack appliance, 2x 960 GB SSD onboard storage. License not included. | View productFG-3001F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3001F-BDL-809-12 | View productFG-3001F-BDL-809-36 | View productFG-3001F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3001F-BDL-950-12 | View productFG-3001F-BDL-950-36 | View productFG-3001F-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F3K1F-809-02-12 | View productFC-10-F3K1F-809-02-36 | View productFC-10-F3K1F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F3K1F-950-02-12 | View productFC-10-F3K1F-950-02-36 | View productFC-10-F3K1F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F3K1F-928-02-12 | View productFC-10-F3K1F-928-02-36 | View productFC-10-F3K1F-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-F3K1F-189-02-12 | View productFC-10-F3K1F-189-02-36 | View productFC-10-F3K1F-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-F3K1F-247-02-12 | View productFC-10-F3K1F-247-02-36 | View productFC-10-F3K1F-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-F3K1F-284-02-12 | View productFC-10-F3K1F-284-02-36 | View productFC-10-F3K1F-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-F3K1F-204-02-12 | View productFC-10-F3K1F-204-02-36 | View productFC-10-F3K1F-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-F3K1F-100-02-12 | View productFC-10-F3K1F-100-02-36 | View productFC-10-F3K1F-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-F3K1F-577-02-12 | View productFC-10-F3K1F-577-02-36 | View productFC-10-F3K1F-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-F3K1F-108-02-12 | View productFC-10-F3K1F-108-02-36 | View productFC-10-F3K1F-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-F3K1F-112-02-12 | View productFC-10-F3K1F-112-02-36 | View productFC-10-F3K1F-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-F3K1F-159-02-12 | View productFC-10-F3K1F-159-02-36 | View productFC-10-F3K1F-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-F3K1F-589-02-12 | View productFC-10-F3K1F-589-02-36 | View productFC-10-F3K1F-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-F3K1F-1329-02-12 | View productFC-10-F3K1F-1329-02-36 | View productFC-10-F3K1F-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-F3K1F-1389-02-12 | View productFC-10-F3K1F-1389-02-36 | View productFC-10-F3K1F-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-F3K1F-131-02-12 | View productFC-10-F3K1F-131-02-36 | View productFC-10-F3K1F-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-F3K1F-585-02-12 | View productFC-10-F3K1F-585-02-36 | View productFC-10-F3K1F-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-F3K1F-464-02-12 | View productFC-10-F3K1F-464-02-36 | View productFC-10-F3K1F-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-F3K1F-660-02-12 | View productFC-10-F3K1F-660-02-36 | View productFC-10-F3K1F-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-F3K1F-210-02-12 | View productFC-10-F3K1F-210-02-36 | View productFC-10-F3K1F-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-F3K1F-211-02-12 | View productFC-10-F3K1F-211-02-36 | View productFC-10-F3K1F-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-F3K1F-212-02-12 | View productFC-10-F3K1F-212-02-36 | View productFC-10-F3K1F-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-F3K1F-301-02-12 | View productFC-10-F3K1F-301-02-36 | View productFC-10-F3K1F-301-02-60 |
The 3001F is a 2RU appliance with 6x 100GE QSFP28 slots, 16x 25GE SFP28 / 10GE SFP+ slots (incl. 2x HA), 16x 10/5/2.5GE RJ45 ports, 2x 10GE/GE management ports, plus 2x 960 GB SSD of onboard storage.
Performance is identical — both run the same NP7 + CP9 platform with 36 Gbps IPS and 397 Gbps firewall throughput. The FortiGate 3001F adds 2x 960 GB onboard SSD for local logging and reporting; the 3000F has no onboard storage. The 3001F also draws slightly more power (420 W average vs 425 W peak profile). Choose the 3001F when you want on-box logs without a dedicated FortiAnalyzer.
The FortiGate 3001F ships with 2x 960 GB SSD for local log storage, so you can retain traffic, security and event logs on the appliance and run FortiView reports locally. For long-term retention or multi-device correlation, pair it with FortiAnalyzer or FortiAnalyzer Cloud.
The FortiGate 3001F is a current-generation model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3 and 5-year terms.
The FortiGate 3001F uses Fortinet’s NP7 + CP9 security processors — the NP7 network processor for firewall and VPN acceleration, and the CP content processor for IPS, SSL inspection and application control. Both are custom silicon designed by Fortinet.
UTP (Unified Threat Protection) is the most common choice: it adds web, DNS and video filtering plus antispam on top of IPS and anti-malware. ATP covers core threat protection only. Enterprise adds DLP, AI-based inline malware prevention and the full SASE service set.