Flagship hyperscale data-center next-generation firewall with NP7 + CP9 acceleration, 87 Gbps IPS, 3.1 Tbps firewall throughput, 8x 400GE QSFP-DD ports, 280 million concurrent sessions, and 2x 1.92 TB onboard SSD for local logging — in a 4RU chassis with redundant hot-swappable power.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 4801F 4RU flagship chassis appliance, redundant power, 2x 1.92 TB SSD. License not included. | View productFG-4801F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-4801F-BDL-809-12 | View productFG-4801F-BDL-809-36 | View productFG-4801F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-4801F-BDL-950-12 | View productFG-4801F-BDL-950-36 | View productFG-4801F-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F481F-809-02-12 | View productFC-10-F481F-809-02-36 | View productFC-10-F481F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F481F-950-02-12 | View productFC-10-F481F-950-02-36 | View productFC-10-F481F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F481F-928-02-12 | View productFC-10-F481F-928-02-36 | View productFC-10-F481F-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 4801F is Fortinet’s flagship hyperscale data-center next-generation firewall with onboard storage, powered by the NP7 network processor and CP9 content processor. It is the FortiGate 4800F platform with 2x 1.92 TB SSD added for local logging and reporting. It delivers 75 Gbps of threat protection, 87 Gbps IPS throughput, 3.1 Tbps firewall throughput, and 280 million concurrent sessions in a 4RU chassis — with eight 400GE QSFP-DD uplinks and twelve 200GE/100GE QSFP56 slots. Built for the largest hyperscale cores and service-provider backbones that need 400GE density plus on-box logs, with up to 1.8 billion sessions on the Hyperscale Firewall license.

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 3.1 / 3.1 / 0.93 Tbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 3.1 / 3.1 / 0.93 Tbps |
| Firewall latency (64 byte, UDP) | 3.6 µs |
| Firewall throughput (packets/sec) | 1396 Mpps |
| Concurrent sessions (TCP) | 280 Million (1.8 Billion with Hyperscale Firewall license) |
| New sessions/second (TCP) | 915,000 (25 Million with Hyperscale Firewall license) |
| Firewall policies | 200,000 |
| IPS throughput | 87 Gbps |
| NGFW throughput | 77 Gbps |
| Threat protection throughput | 75 Gbps |
| IPsec VPN throughput (512 byte) | 800 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 40,000 |
| Client-to-gateway IPsec VPN tunnels | 200,000 |
| SSL-VPN throughput | 18 Gbps |
| Concurrent SSL-VPN users (tunnel mode) | 30,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 63 Gbps |
| SSL inspection concurrent sessions | 30 Million |
| Application control throughput (HTTP 64K) | 180 Gbps |
| CAPWAP throughput (HTTP 64K) | 112 Gbps |
| Virtual domains (default / max) | 10 / 500 |
| Managed FortiAPs (total / tunnel) | 8,192 / 4,096 |
| Managed FortiSwitches | 300 |
| Maximum FortiTokens | 20,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 + CP9 |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 8x 400GE / 200GE / 100GE / 40GE QSFP-DD slots, 12x 200GE / 100GE / 40GE QSFP56 / QSFP28 slots, 12x 50GE / 25GE / 10GE / GE SFP56 / SFP28 / SFP+ slots, 2x 10GE / GE RJ45 management, 1x RJ45 console |
| Included transceivers | 2x 10GE SFP+ SR |
| Onboard storage | 2x 1.92 TB SSD |
| Power supply | Dual AC (1+1 redundancy, hot-swappable); DC option available |
| Power consumption (avg / max) | 1602 W / 1918 W |
| Form factor | Rack Mount, 4RU |
| Dimensions (H x W x L) | 6.89 x 17.13 x 26.10 in (175 x 435 x 663 mm) |
| Weight | 90.83 lbs (41.2 kg) |
Source: Fortinet FortiGate 4800F Series datasheet (FG-4801F column) + Fortinet Product Matrix (May 2026).
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
The 4800F and 4801F variants share the same NP7 + CP9 platform and performance. The 4801F adds 2x 1.92 TB onboard SSD for local logging; both use redundant hot-swappable power.
| Model | Power | Onboard SSD | Best for | |
|---|---|---|---|---|
| FortiGate 4800F | Dual AC | — | Base 4RU chassis, no on-box logging | View → |
| FortiGate 4801F | Dual AC | ✓ 2x 1.92 TB | AC + SSD for local logging | Viewing |
The 4801F is the flagship of the FortiGate 4000-series chassis line. Step down to the 4400F or 4200F for lower cost and 100GE density. Same FortiOS and FortiGuard services across the range.
Every available SKU for the FG-4801F: hardware, protection bundles, subscriptions, services, cloud, support and RMA. Brand new, shipped from Canada; licensing delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 4801F 4RU flagship chassis appliance, redundant power, 2x 1.92 TB SSD. License not included. | View productFG-4801F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-4801F-BDL-809-12 | View productFG-4801F-BDL-809-36 | View productFG-4801F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-4801F-BDL-950-12 | View productFG-4801F-BDL-950-36 | View productFG-4801F-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F481F-809-02-12 | View productFC-10-F481F-809-02-36 | View productFC-10-F481F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F481F-950-02-12 | View productFC-10-F481F-950-02-36 | View productFC-10-F481F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F481F-928-02-12 | View productFC-10-F481F-928-02-36 | View productFC-10-F481F-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-F481F-189-02-12 | View productFC-10-F481F-189-02-36 | View productFC-10-F481F-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-F481F-247-02-12 | View productFC-10-F481F-247-02-36 | View productFC-10-F481F-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-F481F-284-02-12 | View productFC-10-F481F-284-02-36 | View productFC-10-F481F-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-F481F-204-02-12 | View productFC-10-F481F-204-02-36 | View productFC-10-F481F-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-F481F-100-02-12 | View productFC-10-F481F-100-02-36 | View productFC-10-F481F-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-F481F-577-02-12 | View productFC-10-F481F-577-02-36 | View productFC-10-F481F-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-F481F-108-02-12 | View productFC-10-F481F-108-02-36 | View productFC-10-F481F-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-F481F-112-02-12 | View productFC-10-F481F-112-02-36 | View productFC-10-F481F-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-F481F-159-02-12 | View productFC-10-F481F-159-02-36 | View productFC-10-F481F-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-F481F-589-02-12 | View productFC-10-F481F-589-02-36 | View productFC-10-F481F-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-F481F-1329-02-12 | View productFC-10-F481F-1329-02-36 | View productFC-10-F481F-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-F481F-1389-02-12 | View productFC-10-F481F-1389-02-36 | View productFC-10-F481F-1389-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-F481F-585-02-12 | View productFC-10-F481F-585-02-36 | View productFC-10-F481F-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-F481F-464-02-12 | View productFC-10-F481F-464-02-36 | View productFC-10-F481F-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-F481F-660-02-12 | View productFC-10-F481F-660-02-36 | View productFC-10-F481F-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-F481F-210-02-12 | View productFC-10-F481F-210-02-36 | View productFC-10-F481F-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-F481F-211-02-12 | View productFC-10-F481F-211-02-36 | View productFC-10-F481F-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-F481F-212-02-12 | View productFC-10-F481F-212-02-36 | View productFC-10-F481F-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-F481F-301-02-12 | View productFC-10-F481F-301-02-36 | View productFC-10-F481F-301-02-60 |
The 4801F is a 4RU chassis appliance with eight 400GE QSFP-DD ports, twelve 200GE/100GE QSFP56 slots, redundant hot-swappable power and 2x 1.92 TB onboard SSD.
The FortiGate 4801F is a current-generation flagship model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
Performance is identical — both run on the same NP7 + CP9 platform. The FortiGate 4801F adds 2x 1.92 TB onboard SSD storage for local logging and reporting; the 4800F has no onboard storage. Choose the 4801F when you want on-box logs without a dedicated FortiAnalyzer.
The 4801F is the flagship: 3.1 Tbps firewall throughput, 8x 400GE QSFP-DD ports and 2x 1.92 TB onboard SSD, versus the 4400F’s 1.15 Tbps and 12x 100GE QSFP28 ports. Choose the 4801F when you need 400GE optics and multi-terabit throughput.
The optional Hyperscale Firewall license unlocks additional NP7 acceleration, raising concurrent sessions from 280 million to 1.8 billion and new sessions/second from 915,000 to 25 million. It is a perpetual license for the largest carrier and hyperscale deployments.
The 4801F provides eight 400GE QSFP-DD ports (also 200GE / 100GE / 40GE), twelve 200GE / 100GE QSFP56 / QSFP28 slots, and twelve 50GE / 25GE / 10GE SFP56 / SFP28 / SFP+ slots, plus dual 10GE RJ45 management ports.