G-series mid-range enterprise next-generation firewall with NP7 + CP10 acceleration, 25 Gbps IPS, 164 Gbps firewall throughput, 4x 25GE SFP28 and 8x 5GE multi-gig ports, 28 million concurrent sessions, and 2x 480 GB onboard SSD for local logging — in a compact 1RU appliance with dual AC power.
The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-401G-BDL-809-12 | View productFG-401G-BDL-809-36 | View productFG-401G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-401G-BDL-950-12 | View productFG-401G-BDL-950-36 | View productFG-401G-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-FG4H1-809-02-12 | View productFC-10-FG4H1-809-02-36 | View productFC-10-FG4H1-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-FG4H1-950-02-12 | View productFC-10-FG4H1-950-02-36 | View productFC-10-FG4H1-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-FG4H1-928-02-12 | View productFC-10-FG4H1-928-02-36 | View productFC-10-FG4H1-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 401G is Fortinet’s G-series mid-range enterprise next-generation firewall with onboard storage, powered by the NP7 network processor and the tenth-generation CP10 content processor. It is the FortiGate 400G platform with 2x 480 GB SSD added for local logging and reporting. It delivers 13 Gbps of threat protection, 25 Gbps IPS throughput, 164 Gbps firewall throughput, and 28 million concurrent sessions in a compact 1RU appliance — with four 25GE SFP28 slots, four 10GE SFP+ slots, sixteen GE SFP slots, and eight 5GE multi-gig RJ45 ports. Ideal for enterprise campus edges that want CP10 inspection plus on-box logs without a dedicated FortiAnalyzer.
Ask AI about the FortiGate 401GA quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 164 / 164 / 145 Gbps |
| IPv6 firewall throughput (1518 / 512 / 64 byte, UDP) | 164 / 164 / 145 Gbps |
| Firewall latency (64 byte, UDP) | 2.51 µs |
| Firewall throughput (packets/sec) | 217.5 Mpps |
| Concurrent sessions (TCP) | 28 Million |
| New sessions/second (TCP) | 580,000 |
| Firewall policies | 10,000 |
| IPS throughput | 25 Gbps |
| NGFW throughput | 14 Gbps |
| Threat protection throughput | 13 Gbps |
| IPsec VPN throughput (512 byte) | 55 Gbps |
| SSL inspection throughput (IPS, avg. HTTPS) | 11.5 Gbps |
| SSL inspection concurrent sessions | 3 Million |
| Application control throughput (HTTP 64K) | 50 Gbps |
| CAPWAP throughput (HTTP 64K) | 131 Gbps |
| Virtual domains (default / max) | 10 / 25 |
| Managed FortiAPs (total / tunnel) | 512 / 256 |
| Managed FortiSwitches | 96 |
| Maximum FortiTokens | 5,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 + CP10 |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 4x 25GE SFP28 slots, 4x 10GE SFP+ slots, 16x GE SFP slots, 8x 5GE BASE-T RJ45 ports, 2x RJ45 ports (incl. HA 2.5GE and MGMT GE) |
| Onboard storage | 2x 480 GB SSD |
| Power supply | Dual AC (100–240VAC, 50/60 Hz, 1+1 redundancy, non-swappable) |
| Power consumption (avg / max) | 240 W / 295 W |
| Form factor | Rack Mount, 1RU |
| Dimensions (H x W x L) | 1.75 x 17.0 x 13.5 in (44.45 x 432 x 342 mm) |
| Weight | 7.72 lbs (3.5 kg) |
Source: Fortinet FortiGate 400G Series datasheet (FG-401G column) + Fortinet Product Matrix (May 2026).
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The 400G and 401G variants share the same NP7 + CP10 platform and performance. The 401G adds 2x 480 GB onboard SSD for local logging; both use dual AC power.
| Model | Power | Onboard SSD | Best for | |
|---|---|---|---|---|
| FortiGate 400G | Dual AC | — | Base 1U rack, no on-box logging | View → |
| FortiGate 401G | Dual AC | ✓ 2x 480 GB | AC + SSD for local logging | Viewing |
The 401G sits above the 200G in the FortiGate G-series enterprise lineup. Step down to the 200G for lower cost, or up to the 700G for higher IPS and session capacity. Same FortiOS and FortiGuard services across the range.
Every catalogued SKU for the FG-401G: hardware, protection bundles, subscriptions, services, cloud, support and RMA. Contact us for current pricing and lead time; licensing delivered electronically worldwide.
Available by quote — ask us for current pricing.
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-401G-BDL-809-12 | View productFG-401G-BDL-809-36 | View productFG-401G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-401G-BDL-950-12 | View productFG-401G-BDL-950-36 | View productFG-401G-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-FG4H1-809-02-12 | View productFC-10-FG4H1-809-02-36 | View productFC-10-FG4H1-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-FG4H1-950-02-12 | View productFC-10-FG4H1-950-02-36 | View productFC-10-FG4H1-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-FG4H1-928-02-12 | View productFC-10-FG4H1-928-02-36 | View productFC-10-FG4H1-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-FG4H1-189-02-12 | — | — |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-FG4H1-247-02-12 | View productFC-10-FG4H1-247-02-36 | View productFC-10-FG4H1-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-FG4H1-284-02-12 | View productFC-10-FG4H1-284-02-36 | View productFC-10-FG4H1-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-FG4H1-204-02-12 | View productFC-10-FG4H1-204-02-36 | View productFC-10-FG4H1-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-FG4H1-100-02-12 | View productFC-10-FG4H1-100-02-36 | View productFC-10-FG4H1-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-FG4H1-577-02-12 | View productFC-10-FG4H1-577-02-36 | View productFC-10-FG4H1-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-FG4H1-108-02-12 | View productFC-10-FG4H1-108-02-36 | View productFC-10-FG4H1-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-FG4H1-112-02-12 | View productFC-10-FG4H1-112-02-36 | View productFC-10-FG4H1-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-FG4H1-159-02-12 | View productFC-10-FG4H1-159-02-36 | View productFC-10-FG4H1-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-FG4H1-589-02-12 | View productFC-10-FG4H1-589-02-36 | View productFC-10-FG4H1-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-FG4H1-1329-02-12 | View productFC-10-FG4H1-1329-02-36 | View productFC-10-FG4H1-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-FG4H1-1389-02-12 | View productFC-10-FG4H1-1389-02-36 | View productFC-10-FG4H1-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-FG4H1-131-02-12 | View productFC-10-FG4H1-131-02-36 | View productFC-10-FG4H1-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-FG4H1-585-02-12 | View productFC-10-FG4H1-585-02-36 | View productFC-10-FG4H1-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-FG4H1-464-02-12 | View productFC-10-FG4H1-464-02-36 | View productFC-10-FG4H1-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-FG4H1-660-02-12 | View productFC-10-FG4H1-660-02-36 | View productFC-10-FG4H1-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-FG4H1-210-02-12 | View productFC-10-FG4H1-210-02-36 | View productFC-10-FG4H1-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-FG4H1-211-02-12 | View productFC-10-FG4H1-211-02-36 | View productFC-10-FG4H1-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-FG4H1-212-02-12 | View productFC-10-FG4H1-212-02-36 | View productFC-10-FG4H1-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-FG4H1-301-02-12 | View productFC-10-FG4H1-301-02-36 | View productFC-10-FG4H1-301-02-60 |
The 401G is a compact 1RU appliance with four 25GE SFP28 slots, four 10GE SFP+ slots, eight 5GE multi-gig RJ45 ports, dual AC power and 2x 480 GB onboard SSD.
The FortiGate 401G is a current-generation G-series model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
Performance is identical — both run on the same NP7 + CP10 platform. The FortiGate 401G adds 2x 480 GB onboard SSD storage for local logging and reporting; the 400G has no onboard storage. Choose the 401G when you want on-box logs without a dedicated FortiAnalyzer.
The 401G is the newer G-series generation using the NP7 + CP10 platform, with 25 Gbps IPS, 4x 25GE SFP28 ports and 2x 480 GB onboard SSD. The 400F is the F-series (NP7 + CP9). Choose the 401G for the latest CP10 inspection engine, 25GE connectivity and on-box logging.
The FortiGate 401G uses Fortinet’s NP7 network processor for firewall and VPN acceleration, and the tenth-generation CP10 content processor for IPS, SSL inspection, and application control. Both ASICs are custom silicon designed by Fortinet.
UTP (Unified Threat Protection) is the most common choice: it adds web, DNS, and video filtering plus antispam on top of IPS and anti-malware. ATP covers core threat protection only. Enterprise adds DLP, AI-based inline malware prevention, and the full SASE service set.
