Top-tier G-series data-center next-generation firewall with 400GE QSFP-DD connectivity and 2x 1.92 TB onboard SSD for local logging.
The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3501G-BDL-809-12 | View productFG-3501G-BDL-809-36 | View productFG-3501G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3501G-BDL-950-12 | View productFG-3501G-BDL-950-36 | View productFG-3501G-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-G35G1-809-02-12 | View productFC-10-G35G1-809-02-36 | View productFC-10-G35G1-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-G35G1-950-02-12 | View productFC-10-G35G1-950-02-36 | View productFC-10-G35G1-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-G35G1-928-02-12 | View productFC-10-G35G1-928-02-36 | View productFC-10-G35G1-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 3501G is a top-tier G-series data-center next-generation firewall with 400GE QSFP-DD connectivity and 2x 1.92 TB onboard SSD for local logging. It is the FortiGate 3500G platform with 2x 1.92 TB SSD added, so throughput, session capacity and interface layout are unchanged — the difference is that the FortiGate 3501G stores its own logs and reports on the appliance.
Interfaces: 2x 400GE QSFP-DD / 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ ports, 4x 100GE QSFP28 / 40GE QSFP+ slots, 30x 25GE SFP28 / 10GE SFP+ / GE SFP slots (incl. 2x HA), 2x 10GE/GE RJ45 management ports. That makes it a fit for data-center cores and campus aggregation points that need on-box log retention without deploying a dedicated FortiAnalyzer.
Ask AI about the FortiGate 3501GA quick guide to choosing the right enterprise FortiGate.
| IPS throughput (enterprise mix) | 125 Gbps |
| NGFW throughput | 115 Gbps |
| Threat protection throughput | 105 Gbps |
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 595 / 590 / 420 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 595 / 590 / 420 Gbps |
| Firewall latency (64 byte, UDP) | 2.96 µs |
| Firewall throughput (packets/sec) | 630 Mpps |
| Concurrent sessions (TCP) | 179 Million |
| New sessions/second (TCP) | 1.1 Million |
| Firewall policies | 200,000 |
| IPsec VPN throughput (512 byte) | 163 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 40,000 |
| Client-to-gateway IPsec VPN tunnels | 200,000 |
| SSL-VPN throughput | 9.8 Gbps |
| Concurrent SSL-VPN users (recommended max) | 30,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 112 Gbps |
| SSL inspection CPS (IPS, avg. HTTPS) | 112,345 |
| SSL inspection concurrent sessions | 18 Million |
| Application control throughput (HTTP 64K) | 197 Gbps |
| Virtual domains (default / max) | 10 / 500 |
| Managed FortiSwitches | 300 |
| Managed FortiAPs (total / tunnel) | 4,096 / 2,048 |
| Maximum FortiTokens | 20,000 |
| Maximum FortiClients | 50,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | SPU NP7 + CP10 |
| Trusted Platform Module (TPM) | Yes |
| Onboard storage | 2x 1.92 TB SSD |
| Interfaces | 2x 400GE QSFP-DD / 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ ports, 4x 100GE QSFP28 / 40GE QSFP+ slots, 30x 25GE SFP28 / 10GE SFP+ / GE SFP slots (incl. 2x HA), 2x 10GE/GE RJ45 management ports |
| Included transceivers | 2x SFP+ (SR 10GE) |
| Power supply | Dual AC (100–240VAC, 50/60 Hz, hot-swappable, 1+1) |
| Power consumption (avg / max) | 688 W / 993 W |
| Heat dissipation | 3,386 BTU/h |
| Noise level | 70.4 dBA |
| Form factor | Rack Mount, 2RU |
| Dimensions (H x W x L) | 3.5 x 17.4 x 20.8 in (88.5 x 442.5 x 529.3 mm) |
| Weight | 37 lbs (16.8 kg) |
Source: Fortinet FortiGate 3500G Series datasheet (FG-3501G column).
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The FortiGate 3500G and FortiGate 3501G share the same NP7 + CP10 platform and performance. The FortiGate 3501G adds 2x 1.92 TB SSD for local logging.
| Model | Onboard SSD | Best for | |
|---|---|---|---|
| FortiGate 3500G | — | Base platform, logging to FortiAnalyzer | View → |
| FortiGate 3501G | ✓ 2x 1.92 TB SSD | Same platform with local log storage | Viewing |
Step to the FortiGate 3500G if you log to FortiAnalyzer instead, or the FortiGate 3800G for a different tier. Same FortiOS and FortiGuard services across the range.
Every catalogued SKU for the FG-3501G: hardware, protection bundles, subscriptions, services, cloud, support and RMA. Licensing is delivered electronically worldwide.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3501G-BDL-809-12 | View productFG-3501G-BDL-809-36 | View productFG-3501G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3501G-BDL-950-12 | View productFG-3501G-BDL-950-36 | View productFG-3501G-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-G35G1-809-02-12 | View productFC-10-G35G1-809-02-36 | View productFC-10-G35G1-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-G35G1-950-02-12 | View productFC-10-G35G1-950-02-36 | View productFC-10-G35G1-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-G35G1-928-02-12 | View productFC-10-G35G1-928-02-36 | View productFC-10-G35G1-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-G35G1-189-02-12 | — | — |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-G35G1-247-02-12 | View productFC-10-G35G1-247-02-36 | View productFC-10-G35G1-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-G35G1-284-02-12 | View productFC-10-G35G1-284-02-36 | View productFC-10-G35G1-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-G35G1-204-02-12 | View productFC-10-G35G1-204-02-36 | View productFC-10-G35G1-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-G35G1-100-02-12 | View productFC-10-G35G1-100-02-36 | View productFC-10-G35G1-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-G35G1-577-02-12 | View productFC-10-G35G1-577-02-36 | View productFC-10-G35G1-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-G35G1-108-02-12 | View productFC-10-G35G1-108-02-36 | View productFC-10-G35G1-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-G35G1-112-02-12 | View productFC-10-G35G1-112-02-36 | View productFC-10-G35G1-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-G35G1-159-02-12 | View productFC-10-G35G1-159-02-36 | View productFC-10-G35G1-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-G35G1-589-02-12 | View productFC-10-G35G1-589-02-36 | View productFC-10-G35G1-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-G35G1-1329-02-12 | View productFC-10-G35G1-1329-02-36 | View productFC-10-G35G1-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-G35G1-1389-02-12 | View productFC-10-G35G1-1389-02-36 | View productFC-10-G35G1-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-G35G1-131-02-12 | View productFC-10-G35G1-131-02-36 | View productFC-10-G35G1-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-G35G1-585-02-12 | View productFC-10-G35G1-585-02-36 | View productFC-10-G35G1-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-G35G1-464-02-12 | View productFC-10-G35G1-464-02-36 | View productFC-10-G35G1-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-G35G1-660-02-12 | View productFC-10-G35G1-660-02-36 | View productFC-10-G35G1-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-G35G1-210-02-12 | View productFC-10-G35G1-210-02-36 | View productFC-10-G35G1-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-G35G1-211-02-12 | View productFC-10-G35G1-211-02-36 | View productFC-10-G35G1-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-G35G1-212-02-12 | View productFC-10-G35G1-212-02-36 | View productFC-10-G35G1-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-G35G1-301-02-12 | View productFC-10-G35G1-301-02-36 | View productFC-10-G35G1-301-02-60 |
The 3501G is a 2RU appliance with 2x 400GE QSFP-DD / 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ ports, 4x 100GE QSFP28 / 40GE QSFP+ slots, 30x 25GE SFP28 / 10GE SFP+ / GE SFP slots (incl. 2x HA), 2x 10GE/GE RJ45 management ports, plus 2x 1.92 TB SSD of onboard storage.
Performance is identical — both run the same NP7 + CP10 platform with 125 Gbps IPS and 595 Gbps firewall throughput. The FortiGate 3501G adds 2x 1.92 TB onboard SSD for local logging and reporting; the 3500G has no onboard storage. The 3501G draws slightly more power (688 W average vs 678 W). Choose the 3501G when you want on-box logs without a dedicated FortiAnalyzer.
The FortiGate 3501G ships with 2x 1.92 TB SSD for local log storage, so you can retain traffic, security and event logs on the appliance and run FortiView reports locally. For long-term retention or multi-device correlation, pair it with FortiAnalyzer or FortiAnalyzer Cloud.
The FortiGate 3501G is a current-generation model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3 and 5-year terms.
The FortiGate 3501G uses Fortinet’s NP7 + CP10 security processors — the NP7 network processor for firewall and VPN acceleration, and the CP content processor for IPS, SSL inspection and application control. Both are custom silicon designed by Fortinet.
UTP (Unified Threat Protection) is the most common choice: it adds web, DNS and video filtering plus antispam on top of IPS and anti-malware. ATP covers core threat protection only. Enterprise adds DLP, AI-based inline malware prevention and the full SASE service set.
