Top-of-line G-series data-center next-generation firewall with NP7 + CP10 acceleration, 250 Gbps IPS, 795 Gbps firewall throughput, 4x 400GE QSFP-DD and 18x 50GE SFP56 ports, 200 million concurrent sessions, and dual hot-swappable AC power in a 3RU chassis.
The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3800G-BDL-809-12 | View productFG-3800G-BDL-809-36 | View productFG-3800G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3800G-BDL-950-12 | View productFG-3800G-BDL-950-36 | View productFG-3800G-BDL-950-60 |
| Appliance + bundle | View productFG-3800G-BDL-1082-12 | View productFG-3800G-BDL-1082-36 | View productFG-3800G-BDL-1082-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-3K80G-809-02-12 | View productFC-10-3K80G-809-02-36 | View productFC-10-3K80G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-3K80G-950-02-12 | View productFC-10-3K80G-950-02-36 | View productFC-10-3K80G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-3K80G-928-02-12 | View productFC-10-3K80G-928-02-36 | View productFC-10-3K80G-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 3800G is Fortinet’s top-of-line G-series data-center next-generation firewall, powered by the NP7 network processor and the tenth-generation CP10 content processor. It delivers 200 Gbps of threat protection, 250 Gbps IPS throughput, 795 Gbps firewall throughput, and 200 million concurrent sessions in a 3RU chassis — with four 400GE QSFP-DD uplinks, six 200GE QSFP56 slots, and eighteen 50GE SFP56 slots. Built for the largest enterprise data centers and service-provider cores that need 400GE density and class-leading CP10 threat inspection.
Ask AI about the FortiGate 3800GA quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 795 / 793 / 453 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 795 / 793 / 453 Gbps |
| Firewall latency (64 byte, UDP) | 3.53 µs |
| Firewall throughput (packets/sec) | 679.5 Mpps |
| Concurrent sessions (TCP) | 200 Million (450 Million with Hyperscale Firewall license) |
| New sessions/second (TCP) | 1.11 Million (7 Million with Hyperscale Firewall license) |
| Firewall policies | 400,000 |
| IPS throughput | 250 Gbps |
| NGFW throughput | 210 Gbps |
| Threat protection throughput | 200 Gbps |
| IPsec VPN throughput (512 byte) | 210 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 40,000 |
| Client-to-gateway IPsec VPN tunnels | 200,000 |
| SSL-VPN throughput | 27 Gbps |
| Concurrent SSL-VPN users (tunnel mode) | 30,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 120 Gbps |
| SSL inspection concurrent sessions | 18 Million |
| Application control throughput (HTTP 64K) | 315 Gbps |
| Virtual domains (default / max) | 10 / 500 |
| Managed FortiAPs (total / tunnel) | 8,192 / 4,096 |
| Managed FortiSwitches | 300 |
| Maximum FortiTokens | 20,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 + CP10 |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 4x 400GE QSFP-DD / 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ ports, 6x 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ slots, 18x 50GE SFP56 / 25GE SFP28 / 10GE SFP+ / GE SFP slots, 2x 10GE / GE RJ45 management, 1x USB, 1x RJ45 console |
| Included transceivers | 2x 10GE SFP56 SR |
| Onboard storage | None (FG-3801G: 2x 1.92 TB SSD) |
| Power supply | Dual AC (1+1 redundancy, hot-swappable) |
| Power consumption (avg / max) | 1496 W / 1950 W |
| Form factor | Rack Mount, 3RU |
| Dimensions (H x W x L) | 5.22 x 17.2 x 26.13 in (132.5 x 437 x 663.7 mm) |
| Weight | 71.65 lbs (32.5 kg) |
Source: Fortinet FortiGate 3800G Series datasheet (FG-3800G column) + Fortinet Product Matrix (May 2026).
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The 3800G and 3801G variants share the same NP7 + CP10 platform and performance. The 3801G adds 2x 1.92 TB onboard SSD for local logging; both use dual hot-swappable AC power.
| Model | Power | Onboard SSD | Best for | |
|---|---|---|---|---|
| FortiGate 3800G | Dual AC | — | Base 3RU chassis, no on-box logging | Viewing |
| FortiGate 3801G | Dual AC | ✓ 2x 1.92 TB | AC + SSD for local logging | — |
The 3800G is the top of the FortiGate 3000-G data-center line. Step down to the 3500G or 3000G for lower cost and 100GE density. Same FortiOS and FortiGuard services across the range.
Every catalogued SKU for the FG-3800G: hardware, protection bundles, subscriptions, services, cloud, support and RMA. Contact us for current pricing and lead time; licensing delivered electronically worldwide.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3800G-BDL-809-12 | View productFG-3800G-BDL-809-36 | View productFG-3800G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3800G-BDL-950-12 | View productFG-3800G-BDL-950-36 | View productFG-3800G-BDL-950-60 |
| Appliance + bundle | View productFG-3800G-BDL-1082-12 | View productFG-3800G-BDL-1082-36 | View productFG-3800G-BDL-1082-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-3K80G-809-02-12 | View productFC-10-3K80G-809-02-36 | View productFC-10-3K80G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-3K80G-950-02-12 | View productFC-10-3K80G-950-02-36 | View productFC-10-3K80G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-3K80G-928-02-12 | View productFC-10-3K80G-928-02-36 | View productFC-10-3K80G-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-3K80G-189-02-12 | View productFC-10-3K80G-189-02-36 | View productFC-10-3K80G-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-3K80G-247-02-12 | View productFC-10-3K80G-247-02-36 | View productFC-10-3K80G-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-3K80G-284-02-12 | View productFC-10-3K80G-284-02-36 | View productFC-10-3K80G-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-3K80G-204-02-12 | View productFC-10-3K80G-204-02-36 | View productFC-10-3K80G-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-3K80G-100-02-12 | View productFC-10-3K80G-100-02-36 | View productFC-10-3K80G-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-3K80G-577-02-12 | View productFC-10-3K80G-577-02-36 | View productFC-10-3K80G-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-3K80G-108-02-12 | View productFC-10-3K80G-108-02-36 | View productFC-10-3K80G-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-3K80G-112-02-12 | View productFC-10-3K80G-112-02-36 | View productFC-10-3K80G-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-3K80G-159-02-12 | View productFC-10-3K80G-159-02-36 | View productFC-10-3K80G-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-3K80G-589-02-12 | View productFC-10-3K80G-589-02-36 | View productFC-10-3K80G-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-3K80G-1329-02-12 | View productFC-10-3K80G-1329-02-36 | View productFC-10-3K80G-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-3K80G-1389-02-12 | View productFC-10-3K80G-1389-02-36 | View productFC-10-3K80G-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-3K80G-131-02-12 | View productFC-10-3K80G-131-02-36 | View productFC-10-3K80G-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-3K80G-585-02-12 | View productFC-10-3K80G-585-02-36 | View productFC-10-3K80G-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-3K80G-464-02-12 | View productFC-10-3K80G-464-02-36 | View productFC-10-3K80G-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-3K80G-660-02-12 | View productFC-10-3K80G-660-02-36 | View productFC-10-3K80G-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-3K80G-210-02-12 | View productFC-10-3K80G-210-02-36 | View productFC-10-3K80G-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-3K80G-211-02-12 | View productFC-10-3K80G-211-02-36 | View productFC-10-3K80G-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-3K80G-212-02-12 | View productFC-10-3K80G-212-02-36 | View productFC-10-3K80G-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-3K80G-301-02-12 | View productFC-10-3K80G-301-02-36 | View productFC-10-3K80G-301-02-60 |
The 3800G is a 3RU chassis appliance with four 400GE QSFP-DD ports, six 200GE QSFP56 slots, eighteen 50GE SFP56 slots and dual hot-swappable AC power.
The FortiGate 3800G is a current-generation, top-of-line G-series model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
The 3800G is the top G-series tier: 795 Gbps firewall and 250 Gbps IPS with 4x 400GE QSFP-DD ports in a 3RU chassis, versus the 3500G’s 595 Gbps firewall, 125 Gbps IPS and 2x 400GE ports in 2RU. Choose the 3800G for the highest G-series throughput and port density.
Both offer 400GE QSFP-DD connectivity. The 3800G is the newer G-series (NP7 + CP10) with much higher inspection performance (250 Gbps IPS and 200 Gbps threat protection vs 86 Gbps and 75 Gbps). Choose the 3800G for the latest CP10 engine and maximum inspection throughput.
The optional Hyperscale Firewall license unlocks additional NP7 acceleration, raising concurrent sessions from 200 million to 450 million and new sessions/second from 1.11 million to 7 million. It is a perpetual license for carrier and hyperscale deployments.
The FortiGate 3800G uses Fortinet’s NP7 network processor for firewall and VPN acceleration, and the tenth-generation CP10 content processor for IPS, SSL inspection, and application control. Both ASICs are custom silicon designed by Fortinet.
