Top-of-line G-series data-center next-generation firewall with NP7 + CP10 acceleration, 250 Gbps IPS, 795 Gbps firewall throughput, 4x 400GE QSFP-DD and 18x 50GE SFP56 ports, 200 million concurrent sessions, and 2x 1.92 TB onboard SSD for local logging — in a 3RU chassis with dual hot-swappable AC power.
The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3801G-BDL-809-12 | View productFG-3801G-BDL-809-36 | View productFG-3801G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3801G-BDL-950-12 | View productFG-3801G-BDL-950-36 | View productFG-3801G-BDL-950-60 |
| Appliance + bundle | View productFG-3801G-BDL-1082-12 | View productFG-3801G-BDL-1082-36 | View productFG-3801G-BDL-1082-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-3K81G-809-02-12 | View productFC-10-3K81G-809-02-36 | View productFC-10-3K81G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-3K81G-950-02-12 | View productFC-10-3K81G-950-02-36 | View productFC-10-3K81G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-3K81G-928-02-12 | View productFC-10-3K81G-928-02-36 | View productFC-10-3K81G-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 3801G is Fortinet’s top-of-line G-series data-center next-generation firewall with onboard storage, powered by the NP7 network processor and the tenth-generation CP10 content processor. It is the FortiGate 3800G platform with 2x 1.92 TB SSD added for local logging and reporting. It delivers 200 Gbps of threat protection, 250 Gbps IPS throughput, 795 Gbps firewall throughput, and 200 million concurrent sessions in a 3RU chassis — with four 400GE QSFP-DD uplinks, six 200GE QSFP56 slots, and eighteen 50GE SFP56 slots. Built for the largest enterprise data centers and service-provider cores that need 400GE density and CP10 threat inspection plus on-box logs without a dedicated FortiAnalyzer.
Ask AI about the FortiGate 3801GA quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 795 / 793 / 453 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 795 / 793 / 453 Gbps |
| Firewall latency (64 byte, UDP) | 3.53 µs |
| Firewall throughput (packets/sec) | 679.5 Mpps |
| Concurrent sessions (TCP) | 200 Million (450 Million with Hyperscale Firewall license) |
| New sessions/second (TCP) | 1.11 Million (7 Million with Hyperscale Firewall license) |
| Firewall policies | 400,000 |
| IPS throughput | 250 Gbps |
| NGFW throughput | 210 Gbps |
| Threat protection throughput | 200 Gbps |
| IPsec VPN throughput (512 byte) | 210 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 40,000 |
| Client-to-gateway IPsec VPN tunnels | 200,000 |
| SSL-VPN throughput | 27 Gbps |
| Concurrent SSL-VPN users (tunnel mode) | 30,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 120 Gbps |
| SSL inspection concurrent sessions | 18 Million |
| Application control throughput (HTTP 64K) | 315 Gbps |
| Virtual domains (default / max) | 10 / 500 |
| Managed FortiAPs (total / tunnel) | 8,192 / 4,096 |
| Managed FortiSwitches | 300 |
| Maximum FortiTokens | 20,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 + CP10 |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 4x 400GE QSFP-DD / 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ ports, 6x 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ slots, 18x 50GE SFP56 / 25GE SFP28 / 10GE SFP+ / GE SFP slots, 2x 10GE / GE RJ45 management, 1x USB, 1x RJ45 console |
| Included transceivers | 2x 10GE SFP56 SR |
| Onboard storage | 2x 1.92 TB SSD |
| Power supply | Dual AC (1+1 redundancy, hot-swappable) |
| Power consumption (avg / max) | 1496 W / 1950 W |
| Form factor | Rack Mount, 3RU |
| Dimensions (H x W x L) | 5.22 x 17.2 x 26.13 in (132.5 x 437 x 663.7 mm) |
| Weight | 71.65 lbs (32.5 kg) |
Source: Fortinet FortiGate 3800G Series datasheet (FG-3801G column) + Fortinet Product Matrix (May 2026).
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The 3800G and 3801G variants share the same NP7 + CP10 platform and performance. The 3801G adds 2x 1.92 TB onboard SSD for local logging; both use dual hot-swappable AC power.
| Model | Power | Onboard SSD | Best for | |
|---|---|---|---|---|
| FortiGate 3800G | Dual AC | — | Base 3RU chassis, no on-box logging | View → |
| FortiGate 3801G | Dual AC | ✓ 2x 1.92 TB | AC + SSD for local logging | Viewing |
The 3801G is the top of the FortiGate 3000-G data-center line. Step down to the 3500G or 3000G for lower cost and 100GE density. Same FortiOS and FortiGuard services across the range.
Every catalogued SKU for the FG-3801G: hardware, protection bundles, subscriptions, services, cloud, support and RMA. Contact us for current pricing and lead time; licensing delivered electronically worldwide.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-3801G-BDL-809-12 | View productFG-3801G-BDL-809-36 | View productFG-3801G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-3801G-BDL-950-12 | View productFG-3801G-BDL-950-36 | View productFG-3801G-BDL-950-60 |
| Appliance + bundle | View productFG-3801G-BDL-1082-12 | View productFG-3801G-BDL-1082-36 | View productFG-3801G-BDL-1082-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-3K81G-809-02-12 | View productFC-10-3K81G-809-02-36 | View productFC-10-3K81G-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-3K81G-950-02-12 | View productFC-10-3K81G-950-02-36 | View productFC-10-3K81G-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-3K81G-928-02-12 | View productFC-10-3K81G-928-02-36 | View productFC-10-3K81G-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-3K81G-189-02-12 | View productFC-10-3K81G-189-02-36 | View productFC-10-3K81G-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-3K81G-247-02-12 | View productFC-10-3K81G-247-02-36 | View productFC-10-3K81G-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-3K81G-284-02-12 | View productFC-10-3K81G-284-02-36 | View productFC-10-3K81G-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-3K81G-204-02-12 | View productFC-10-3K81G-204-02-36 | View productFC-10-3K81G-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-3K81G-100-02-12 | View productFC-10-3K81G-100-02-36 | View productFC-10-3K81G-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-3K81G-577-02-12 | View productFC-10-3K81G-577-02-36 | View productFC-10-3K81G-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-3K81G-108-02-12 | View productFC-10-3K81G-108-02-36 | View productFC-10-3K81G-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-3K81G-112-02-12 | View productFC-10-3K81G-112-02-36 | View productFC-10-3K81G-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-3K81G-159-02-12 | View productFC-10-3K81G-159-02-36 | View productFC-10-3K81G-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-3K81G-589-02-12 | View productFC-10-3K81G-589-02-36 | View productFC-10-3K81G-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-3K81G-1329-02-12 | View productFC-10-3K81G-1329-02-36 | View productFC-10-3K81G-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-3K81G-1389-02-12 | View productFC-10-3K81G-1389-02-36 | View productFC-10-3K81G-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-3K81G-131-02-12 | View productFC-10-3K81G-131-02-36 | View productFC-10-3K81G-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-3K81G-585-02-12 | View productFC-10-3K81G-585-02-36 | View productFC-10-3K81G-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-3K81G-464-02-12 | View productFC-10-3K81G-464-02-36 | View productFC-10-3K81G-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-3K81G-660-02-12 | View productFC-10-3K81G-660-02-36 | View productFC-10-3K81G-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-3K81G-210-02-12 | View productFC-10-3K81G-210-02-36 | View productFC-10-3K81G-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-3K81G-211-02-12 | View productFC-10-3K81G-211-02-36 | View productFC-10-3K81G-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-3K81G-212-02-12 | View productFC-10-3K81G-212-02-36 | View productFC-10-3K81G-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-3K81G-301-02-12 | View productFC-10-3K81G-301-02-36 | View productFC-10-3K81G-301-02-60 |
The 3801G is a 3RU chassis appliance with four 400GE QSFP-DD ports, six 200GE QSFP56 slots, eighteen 50GE SFP56 slots, dual hot-swappable AC power and 2x 1.92 TB onboard SSD.
The FortiGate 3801G is a current-generation, top-of-line G-series model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
Performance is identical — both run on the same NP7 + CP10 platform. The FortiGate 3801G adds 2x 1.92 TB onboard SSD storage for local logging and reporting; the 3800G has no onboard storage. Choose the 3801G when you want on-box logs without a dedicated FortiAnalyzer.
Both offer 400GE QSFP-DD connectivity. The 3801G is the newer G-series (NP7 + CP10) with much higher inspection performance (250 Gbps IPS and 200 Gbps threat protection vs 86 Gbps and 75 Gbps) plus 2x 1.92 TB onboard SSD. Choose the 3801G for the latest CP10 engine and maximum throughput.
The optional Hyperscale Firewall license unlocks additional NP7 acceleration, raising concurrent sessions from 200 million to 450 million and new sessions/second from 1.11 million to 7 million. It is a perpetual license for carrier and hyperscale deployments.
The FortiGate 3801G uses Fortinet’s NP7 network processor for firewall and VPN acceleration, and the tenth-generation CP10 content processor for IPS, SSL inspection, and application control. Both ASICs are custom silicon designed by Fortinet.
