Mid-range enterprise next-generation firewall with NP7 + CP9 acceleration, 12 Gbps IPS, 79.5 Gbps firewall throughput, four 10GE SFP+ ultra-low-latency ports, and hot-swappable dual AC power supplies in a 1U appliance.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 400F 1U rack appliance, dual AC. License not included. | View productFG-400F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-400F-BDL-809-12 | View productFG-400F-BDL-809-36 | View productFG-400F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-400F-BDL-950-12 | View productFG-400F-BDL-950-36 | View productFG-400F-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-0400F-809-02-12 | View productFC-10-0400F-809-02-36 | View productFC-10-0400F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-0400F-950-02-12 | View productFC-10-0400F-950-02-36 | View productFC-10-0400F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-0400F-928-02-12 | View productFC-10-0400F-928-02-36 | View productFC-10-0400F-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 400F is Fortinet’s mid-range enterprise next-generation firewall, powered by the NP7 network processor and CP9 content processor. It delivers 9 Gbps of threat protection, 12 Gbps IPS throughput, 79.5 Gbps firewall throughput, and 7.8 million concurrent sessions in a 1U rack appliance — with hot-swappable dual AC power supplies, four 10GE SFP+ ultra-low-latency uplinks, and eight GE SFP slots. Ideal for enterprise campus cores and data centre edge deployments that demand high firewall throughput, SSL inspection at the edge, and carrier-grade availability.

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 79.5 / 78.5 / 70 Gbps |
| IPv6 firewall throughput (1518 / 512 / 64 byte, UDP) | 79.5 / 78.5 / 70 Gbps |
| Firewall latency (64 byte, UDP) | 4.19 µs (2.5 µs ULL) |
| Firewall throughput (packets/sec) | 105 Mpps |
| Concurrent sessions (TCP) | 7,800,000 |
| New sessions/second (TCP) | 500,000 |
| Firewall policies | 10,000 |
| IPS throughput | 12 Gbps |
| NGFW throughput | 10 Gbps |
| Threat protection throughput | 9 Gbps |
| IPsec VPN throughput (512 byte) | 55 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 2,000 |
| Client-to-gateway IPsec VPN tunnels | 50,000 |
| SSL-VPN throughput | 3.6 Gbps |
| SSL inspection throughput (IPS, avg. HTTPS) | 8 Gbps |
| SSL inspection concurrent sessions | 800,000 |
| Application control throughput (HTTP 64K) | 28 Gbps |
| CAPWAP throughput (HTTP 64K) | 65 Gbps |
| Virtual domains (default / max) | 10 / 10 |
| Managed FortiAPs (total / tunnel) | 512 / 256 |
| Managed FortiSwitches | 72 |
| Maximum FortiTokens | 5,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 + CP9 |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 16x GE RJ45, 8x GE SFP, 4x 1/10GE SFP+, 4x 10GE SFP+ ultra-low-latency, 2x GE RJ45 MGMT/HA, 1x USB, 1x RJ45 console |
| Included transceivers | 2x 1GE SFP SX |
| Onboard storage | None |
| Power supply | Dual AC (100–240V AC, 50/60Hz, hot-swappable 1+1 redundancy) |
| Power consumption (avg / max) | 154.8 W / 189.2 W |
| Form factor | Rack Mount, 1U |
| Dimensions (H x W x L) | 1.75 x 17.0 x 15.0 in (44.45 x 432 x 380 mm) |
| Weight | 14.11 lbs (6.4 kg) |
Source: Fortinet FortiGate 400F Series datasheet (FG-400F column) + Fortinet Product Matrix (May 2026).
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.

Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The 400F, 401F and DC variants share the same NP7 + CP9 platform and performance. The 401F adds 2x 480 GB SSD for local logging; the -DC models swap to dual DC power.
The 400F sits between the 200G and the 600F in the FortiGate rack lineup. Step up to the 600F for 139 Gbps firewall and 25GE SFP28 interfaces, or step down to the 200G for lower-cost mid-range deployments. Same FortiOS and FortiGuard services across the range.
Every available SKU for the FG-400F: hardware, protection bundles, subscriptions, services, cloud, support and RMA. In stock, brand new, shipped from Canada; licensing delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 400F 1U rack appliance, dual AC. License not included. | View productFG-400F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-400F-BDL-809-12 | View productFG-400F-BDL-809-36 | View productFG-400F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-400F-BDL-950-12 | View productFG-400F-BDL-950-36 | View productFG-400F-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-0400F-809-02-12 | View productFC-10-0400F-809-02-36 | View productFC-10-0400F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-0400F-950-02-12 | View productFC-10-0400F-950-02-36 | View productFC-10-0400F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-0400F-928-02-12 | View productFC-10-0400F-928-02-36 | View productFC-10-0400F-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-0400F-189-02-12 | View productFC-10-0400F-189-02-36 | View productFC-10-0400F-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-0400F-247-02-12 | View productFC-10-0400F-247-02-36 | View productFC-10-0400F-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-0400F-284-02-12 | View productFC-10-0400F-284-02-36 | View productFC-10-0400F-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-0400F-204-02-12 | View productFC-10-0400F-204-02-36 | View productFC-10-0400F-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-0400F-100-02-12 | View productFC-10-0400F-100-02-36 | View productFC-10-0400F-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-0400F-577-02-12 | View productFC-10-0400F-577-02-36 | View productFC-10-0400F-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-0400F-108-02-12 | View productFC-10-0400F-108-02-36 | View productFC-10-0400F-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-0400F-112-02-12 | View productFC-10-0400F-112-02-36 | View productFC-10-0400F-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-0400F-159-02-12 | View productFC-10-0400F-159-02-36 | View productFC-10-0400F-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-0400F-589-02-12 | View productFC-10-0400F-589-02-36 | View productFC-10-0400F-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-0400F-1329-02-12 | View productFC-10-0400F-1329-02-36 | View productFC-10-0400F-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-0400F-1389-02-12 | View productFC-10-0400F-1389-02-36 | View productFC-10-0400F-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-0400F-131-02-12 | View productFC-10-0400F-131-02-36 | View productFC-10-0400F-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-0400F-585-02-12 | View productFC-10-0400F-585-02-36 | View productFC-10-0400F-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-0400F-464-02-12 | View productFC-10-0400F-464-02-36 | View productFC-10-0400F-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-0400F-660-02-12 | View productFC-10-0400F-660-02-36 | View productFC-10-0400F-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-0400F-210-02-12 | View productFC-10-0400F-210-02-36 | View productFC-10-0400F-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-0400F-211-02-12 | View productFC-10-0400F-211-02-36 | View productFC-10-0400F-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-0400F-212-02-12 | View productFC-10-0400F-212-02-36 | View productFC-10-0400F-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-0400F-301-02-12 | View productFC-10-0400F-301-02-36 | View productFC-10-0400F-301-02-60 |
The 400F is a 1U rack appliance with four 10GE SFP+ ultra-low-latency ports and dual AC power.
The FortiGate 400F is a current-generation model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
Performance is identical — both run on the same NP7 + CP9 platform. The FortiGate 401F adds 2x 480 GB onboard SSD storage for local logging and reporting. Choose the 400F when on-box storage is not required.
The 400F-DC is the same appliance with dual DC (48–60V) power supplies instead of AC, for telco central offices, OT sites, and DC-powered racks. Performance, interfaces, and FortiGuard licensing are identical.
The FortiGate 400F uses Fortinet’s NP7 network processor for firewall and VPN acceleration, and the CP9 content processor for IPS, SSL inspection, and application control. Both ASICs are custom silicon designed by Fortinet.
Yes. The FortiGate 400F ships with dual hot-swappable AC power supplies providing 1+1 redundancy — standard for mission-critical deployments.