G-series data-center next-generation firewall with NP7 + CP10 acceleration, 125 Gbps IPS, 595 Gbps firewall throughput, 2x 400GE QSFP-DD and 30x 25GE SFP28 ports, 179 million concurrent sessions, and dual hot-swappable AC power in a 2RU appliance.
The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3500G-BDL-809-12 | View productFG-3500G-BDL-809-36 | View productFG-3500G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3500G-BDL-950-12 | View productFG-3500G-BDL-950-36 | View productFG-3500G-BDL-950-60 |
| Appliance + bundle | View productFG-3500G-BDL-1082-12 | View productFG-3500G-BDL-1082-36 | View productFG-3500G-BDL-1082-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-G3K5G-809-02-12 | View productFC-10-G3K5G-809-02-36 | View productFC-10-G3K5G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-G3K5G-950-02-12 | View productFC-10-G3K5G-950-02-36 | View productFC-10-G3K5G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-G3K5G-928-02-12 | View productFC-10-G3K5G-928-02-36 | View productFC-10-G3K5G-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 3500G is Fortinet’s G-series data-center next-generation firewall, powered by the NP7 network processor and the tenth-generation CP10 content processor. It delivers 105 Gbps of threat protection, 125 Gbps IPS throughput, 595 Gbps firewall throughput, and 179 million concurrent sessions in a 2RU rack appliance — with two 400GE QSFP-DD uplinks, four 100GE QSFP28 slots, and thirty 25GE SFP28 slots. Built for enterprise data centers and service-provider cores that want 400GE density and next-generation CP10 inspection in a compact 2RU footprint.
Ask AI about the FortiGate 3500GA quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 595 / 590 / 420 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 595 / 590 / 420 Gbps |
| Firewall latency (64 byte, UDP) | 2.96 µs |
| Firewall throughput (packets/sec) | 630 Mpps |
| Concurrent sessions (TCP) | 179 Million |
| New sessions/second (TCP) | 1.1 Million |
| Firewall policies | 200,000 |
| IPS throughput | 125 Gbps |
| NGFW throughput | 115 Gbps |
| Threat protection throughput | 105 Gbps |
| IPsec VPN throughput (512 byte) | 163 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 40,000 |
| Client-to-gateway IPsec VPN tunnels | 200,000 |
| SSL-VPN throughput | 9.8 Gbps |
| Concurrent SSL-VPN users (tunnel mode) | 30,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 112 Gbps |
| SSL inspection concurrent sessions | 18 Million |
| Application control throughput (HTTP 64K) | 197 Gbps |
| Virtual domains (default / max) | 10 / 500 |
| Managed FortiAPs (total / tunnel) | 4,096 / 2,048 |
| Managed FortiSwitches | 300 |
| Maximum FortiTokens | 20,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 + CP10 |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 2x 400GE QSFP-DD / 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ ports, 4x 100GE QSFP28 / 40GE QSFP+ slots, 30x 25GE SFP28 / 10GE SFP+ / GE SFP slots, 2x 10GE / GE RJ45 management, 1x USB, 1x RJ45 console |
| Included transceivers | 2x 10GE SFP+ SR |
| Onboard storage | None (FG-3501G: 2x 1.92 TB SSD) |
| Power supply | Dual AC (1+1 redundancy, hot-swappable) |
| Power consumption (avg / max) | 678 W / 973 W |
| Form factor | Rack Mount, 2RU |
| Dimensions (H x W x L) | 3.5 x 17.4 x 20.8 in (88.5 x 442.5 x 529.3 mm) |
| Weight | 36.7 lbs (16.65 kg) |
Source: Fortinet FortiGate 3500G Series datasheet (FG-3500G column) + Fortinet Product Matrix (May 2026).
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The 3500G and 3501G variants share the same NP7 + CP10 platform and performance. The 3501G adds 2x 1.92 TB onboard SSD for local logging; both use dual hot-swappable AC power.
| Model | Power | Onboard SSD | Best for | |
|---|---|---|---|---|
| FortiGate 3500G | Dual AC | — | Base 2RU rack, no on-box logging | Viewing |
| FortiGate 3501G | Dual AC | ✓ 2x 1.92 TB | AC + SSD for local logging | — |
The 3500G sits above the 3000G in the FortiGate 3000-G data-center line. Step down to the 3000G for lower cost, or up to the 3800G for 200GE/400GE density and 795 Gbps throughput. Same FortiOS and FortiGuard services across the range.
Every catalogued SKU for the FG-3500G: hardware, protection bundles, subscriptions, services, cloud, support and RMA. Contact us for current pricing and lead time; licensing delivered electronically worldwide.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3500G-BDL-809-12 | View productFG-3500G-BDL-809-36 | View productFG-3500G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3500G-BDL-950-12 | View productFG-3500G-BDL-950-36 | View productFG-3500G-BDL-950-60 |
| Appliance + bundle | View productFG-3500G-BDL-1082-12 | View productFG-3500G-BDL-1082-36 | View productFG-3500G-BDL-1082-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-G3K5G-809-02-12 | View productFC-10-G3K5G-809-02-36 | View productFC-10-G3K5G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-G3K5G-950-02-12 | View productFC-10-G3K5G-950-02-36 | View productFC-10-G3K5G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-G3K5G-928-02-12 | View productFC-10-G3K5G-928-02-36 | View productFC-10-G3K5G-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-G3K5G-189-02-12 | — | — |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-G3K5G-247-02-12 | View productFC-10-G3K5G-247-02-36 | View productFC-10-G3K5G-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-G3K5G-284-02-12 | View productFC-10-G3K5G-284-02-36 | View productFC-10-G3K5G-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-G3K5G-204-02-12 | View productFC-10-G3K5G-204-02-36 | View productFC-10-G3K5G-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-G3K5G-100-02-12 | View productFC-10-G3K5G-100-02-36 | View productFC-10-G3K5G-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-G3K5G-577-02-12 | View productFC-10-G3K5G-577-02-36 | View productFC-10-G3K5G-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-G3K5G-108-02-12 | View productFC-10-G3K5G-108-02-36 | View productFC-10-G3K5G-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-G3K5G-112-02-12 | View productFC-10-G3K5G-112-02-36 | View productFC-10-G3K5G-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-G3K5G-159-02-12 | View productFC-10-G3K5G-159-02-36 | View productFC-10-G3K5G-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-G3K5G-589-02-12 | View productFC-10-G3K5G-589-02-36 | View productFC-10-G3K5G-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-G3K5G-1329-02-12 | View productFC-10-G3K5G-1329-02-36 | View productFC-10-G3K5G-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-G3K5G-1389-02-12 | View productFC-10-G3K5G-1389-02-36 | View productFC-10-G3K5G-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-G3K5G-131-02-12 | View productFC-10-G3K5G-131-02-36 | View productFC-10-G3K5G-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-G3K5G-585-02-12 | View productFC-10-G3K5G-585-02-36 | View productFC-10-G3K5G-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-G3K5G-464-02-12 | View productFC-10-G3K5G-464-02-36 | View productFC-10-G3K5G-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-G3K5G-660-02-12 | View productFC-10-G3K5G-660-02-36 | View productFC-10-G3K5G-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-G3K5G-210-02-12 | View productFC-10-G3K5G-210-02-36 | View productFC-10-G3K5G-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-G3K5G-211-02-12 | View productFC-10-G3K5G-211-02-36 | View productFC-10-G3K5G-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-G3K5G-212-02-12 | View productFC-10-G3K5G-212-02-36 | View productFC-10-G3K5G-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-G3K5G-301-02-12 | View productFC-10-G3K5G-301-02-36 | View productFC-10-G3K5G-301-02-60 |
The 3500G is a 2RU rack appliance with two 400GE QSFP-DD ports, four 100GE QSFP28 slots, thirty 25GE SFP28 slots and dual hot-swappable AC power.
The FortiGate 3500G is a current-generation G-series model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
Both deliver 595 Gbps firewall throughput, but the 3500G is the newer G-series using the NP7 + CP10 platform, with higher inspection performance (125 Gbps IPS and 112 Gbps SSL inspection vs 72 Gbps and 63 Gbps) and 400GE QSFP-DD uplinks. Choose the 3500G for the latest CP10 engine.
The 3500G is the higher tier: 595 Gbps firewall and 125 Gbps IPS with 400GE QSFP-DD ports, versus the 3000G’s 397 Gbps firewall, 90 Gbps IPS and 100GE QSFP28 ports. Both use the NP7 + CP10 platform in 2RU.
Performance is identical — both run on the same NP7 + CP10 platform. The FortiGate 3501G adds 2x 1.92 TB onboard SSD storage for local logging and reporting.
The FortiGate 3500G uses Fortinet’s NP7 network processor for firewall and VPN acceleration, and the tenth-generation CP10 content processor for IPS, SSL inspection, and application control. Both ASICs are custom silicon designed by Fortinet.
