High-performance data-center next-generation firewall with NP6 + CP9 ASIC acceleration, 160 Gbps firewall throughput, 17 Gbps threat protection, 50 million concurrent sessions, and 4x 40GE QSFP+ plus 16x 25GE SFP28 slots with 4x 10GE RJ45 ports in a 2RU chassis.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 3300E 2RU appliance. License not included. | View productFG-3300E |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3300E-BDL-809-12 | View productFG-3300E-BDL-809-36 | View productFG-3300E-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3300E-BDL-950-12 | View productFG-3300E-BDL-950-36 | View productFG-3300E-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F33HE-809-02-12 | View productFC-10-F33HE-809-02-36 | View productFC-10-F33HE-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F33HE-950-02-12 | View productFC-10-F33HE-950-02-36 | View productFC-10-F33HE-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F33HE-928-02-12 | View productFC-10-F33HE-928-02-36 | View productFC-10-F33HE-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 3300E is a high-performance data-center next-generation firewall built on Fortinet’s NP6 network processor and CP9 content processor. It delivers 160 Gbps of firewall throughput, 27 Gbps IPS, 23 Gbps NGFW, and 17 Gbps threat protection alongside 50 million concurrent sessions and 700,000 new sessions per second.
The 3300E provides 4x 40GE QSFP+ slots, 16x 25GE SFP28 / 10GE SFP+ / GE SFP slots (14 data + 2 HA), 4x 10GE RJ45 ports, and 12x GE RJ45 ports in a 2RU chassis with dual redundant hot-swappable AC power supplies. It is designed for large enterprise and service-provider data-center deployments that demand the highest session capacity and throughput in the E-series range, with 200,000 firewall policies and 21 Gbps SSL inspection throughput.

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 160 / 158 / 100 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 160 / 158 / 100 Gbps |
| Firewall latency (64 byte, UDP) | 3.17 µs |
| Firewall throughput (packets/sec) | 150 Mpps |
| Concurrent sessions (TCP) | 50 Million |
| New sessions/second (TCP) | 700,000 |
| Firewall policies | 200,000 |
| IPS throughput (enterprise mix) | 27 Gbps |
| NGFW throughput | 23 Gbps |
| Threat protection throughput | 17 Gbps |
| IPsec VPN throughput (512 byte) | 98 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 40,000 |
| Client-to-gateway IPsec VPN tunnels | 200,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 21 Gbps |
| SSL inspection CPS (IPS, avg. HTTPS) | 11,000 |
| SSL inspection concurrent sessions | 4 Million |
| Application control throughput (HTTP 64K) | 70 Gbps |
| CAPWAP throughput (HTTP 64K) | 55 Gbps |
| SSL-VPN throughput | 10 Gbps |
| Concurrent SSL-VPN users (tunnel mode) | 30,000 |
| Virtual domains (default / max) | 10 / 500 |
| Managed FortiSwitches | 300 |
| Managed FortiAPs (total / tunnel) | 4,096 / 2,048 |
| Maximum FortiTokens | 20,000 |
| Hardware acceleration | SPU NP6 + CP9 |
| Onboard storage | None (3301E: 2x 1 TB SSD) |
| Interfaces | 4x 40GE QSFP+ slots, 16x 25GE SFP28 / 10GE SFP+ / GE SFP slots (14 ports + 2 HA), 4x 10GE RJ45 ports, 12x GE RJ45 ports, 2x GE RJ45 management ports |
| Included transceivers | 2x SFP+ (SR 10 GE) |
| Power supply | 100–240 VAC, 50/60 Hz (dual redundant, hot-swappable, 80Plus) |
| Power consumption (avg / max) | 492 W / 610 W |
| High availability | Active-Active, Active-Passive, Clustering |
| Form factor | Rack Mount, 2 RU |
| Dimensions (H x W x L) | 3.5 x 17.44 x 21.89 in (88.9 x 443 x 556 mm) |
| Weight | 42.9 lbs (19.5 kg) |
Source: official Fortinet FortiGate 3300E Series datasheet (FG-3300E-DAT-R30-20260415). All performance values are “up to” and vary with system configuration.

Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The FortiGate 3300E and 3301E share the same NP6 + CP9 platform and performance. Choose the 3301E for larger onboard SSD storage (2x 1 TB vs none on the 3300E).
| Model | Storage | Best for | |
|---|---|---|---|
| FortiGate 3300E | — | Standard deployment | Viewing |
| FortiGate 3301E | ✓ 2x 1 TB SSD | Extended onboard storage | — |
The 3300E is the top of the E-series data-center lineup. For higher throughput, step up to the FortiGate 3500F (F-series, NP7). For lower cost with 24M sessions, consider the FortiGate 2200E.
Every available SKU for the FG-3300E: hardware, hardware+bundle packages, protection subscriptions, services, cloud management, FortiCare support, and RMA. In stock, brand new, shipped from Canada; licensing delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 3300E 2RU appliance. License not included. | View productFG-3300E |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3300E-BDL-809-12 | View productFG-3300E-BDL-809-36 | View productFG-3300E-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3300E-BDL-950-12 | View productFG-3300E-BDL-950-36 | View productFG-3300E-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F33HE-809-02-12 | View productFC-10-F33HE-809-02-36 | View productFC-10-F33HE-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F33HE-950-02-12 | View productFC-10-F33HE-950-02-36 | View productFC-10-F33HE-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F33HE-928-02-12 | View productFC-10-F33HE-928-02-36 | View productFC-10-F33HE-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-F33HE-189-02-12 | — | — |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-F33HE-247-02-12 | View productFC-10-F33HE-247-02-36 | View productFC-10-F33HE-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-F33HE-284-02-12 | View productFC-10-F33HE-284-02-36 | View productFC-10-F33HE-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-F33HE-204-02-12 | View productFC-10-F33HE-204-02-36 | View productFC-10-F33HE-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-F33HE-100-02-12 | View productFC-10-F33HE-100-02-36 | View productFC-10-F33HE-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-F33HE-577-02-12 | View productFC-10-F33HE-577-02-36 | View productFC-10-F33HE-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-F33HE-108-02-12 | View productFC-10-F33HE-108-02-36 | View productFC-10-F33HE-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-F33HE-112-02-12 | View productFC-10-F33HE-112-02-36 | View productFC-10-F33HE-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-F33HE-159-02-12 | View productFC-10-F33HE-159-02-36 | View productFC-10-F33HE-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-F33HE-589-02-12 | View productFC-10-F33HE-589-02-36 | View productFC-10-F33HE-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-F33HE-1337-02-12 | View productFC-10-F33HE-1337-02-36 | View productFC-10-F33HE-1337-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-F33HE-1387-02-12 | View productFC-10-F33HE-1387-02-36 | View productFC-10-F33HE-1387-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-F33HE-131-02-12 | View productFC-10-F33HE-131-02-36 | View productFC-10-F33HE-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-F33HE-585-02-12 | View productFC-10-F33HE-585-02-36 | View productFC-10-F33HE-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-F33HE-464-02-12 | View productFC-10-F33HE-464-02-36 | View productFC-10-F33HE-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-F33HE-660-02-12 | View productFC-10-F33HE-660-02-36 | View productFC-10-F33HE-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-F33HE-210-02-12 | View productFC-10-F33HE-210-02-36 | View productFC-10-F33HE-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-F33HE-211-02-12 | View productFC-10-F33HE-211-02-36 | View productFC-10-F33HE-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-F33HE-212-02-12 | View productFC-10-F33HE-212-02-36 | View productFC-10-F33HE-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-F33HE-301-02-12 | View productFC-10-F33HE-301-02-36 | View productFC-10-F33HE-301-02-60 |
The 3300E is a 2RU rack appliance with 4x 40GE QSFP+, 16x 25GE SFP28 / 10GE SFP+ / GE SFP, 4x 10GE RJ45, 12x GE RJ45, and dual AC PSUs.
The FortiGate 3300E is a high-performance data-center next-generation firewall built on Fortinet’s NP6 network processor and CP9 content processor. It delivers 160 Gbps of firewall throughput, 27 Gbps IPS, 23 Gbps NGFW, and 17 Gbps threat protection with 50 million concurrent sessions in a 2RU chassis.
Performance is identical. The 3301E adds 2x 1 TB onboard SSD storage for extended local log and report retention. Choose the 3301E when on-appliance log storage capacity is a priority.
The 3300E delivers higher session capacity (50M vs 24M), higher threat protection (17 Gbps vs 11 Gbps), higher IPS (27 Gbps vs 21.8 Gbps), and more firewall policies (200K vs 100K). It also adds 4x 10GE RJ45 ports not present on the 2200E. Firewall throughput is comparable (160 vs 158 Gbps). Choose the 3300E for data-center deployments needing the highest session capacity in the E-series range.
The FortiGate 3300E uses Fortinet’s NP6 network processor for firewall, IPsec VPN, and session acceleration, and the CP9 content processor for IPS, SSL/TLS inspection (including TLS 1.3), application control, and antivirus offload. Both are custom Fortinet ASICs.
Most enterprise sites choose UTP (Unified Threat Protection) for the complete web, DNS, antispam, and IPS stack. ATP covers core threat prevention only. Enterprise adds DLP, AI inline malware prevention, CASB, and SASE connectors for the full security-service set.