Fortinet FortiGate 900D

Legacy / end of life · renewals available

End-of-life 1U enterprise next-generation firewall built on dual NP6 network processors and the CP8 content processor, with 52 Gbps firewall throughput, 11 million concurrent sessions, sixteen GE RJ45 ports, sixteen GE SFP slots and two 10 GE SFP+ slots. The FortiGate 900D hardware is no longer sold — FortiGuard and FortiCare renewals are still available below, and the FortiGate 900G is the direct, currently-shipping replacement.

KEY PERFORMANCE
Threat protection3 Gbps
Firewall throughput52 Gbps
NGFW throughput4 Gbps
Concurrent sessions11 M
Why buy with us:
FortiGuard & FortiCare renewals Upgrade guidance Worldwide license delivery MSSP 100% secure checkout Expert pre-sales support
Fortinet FortiGate 900D (FG-900D) 1U rackmount firewallFortinet Select Partner
RENEWALS

FortiGate 900D licensing renewals

The FortiGate 900D hardware has reached end of life and is no longer sold. These FortiGuard and FortiCare renewals keep an installed unit licensed and supported. Licensing is delivered electronically worldwide.

FortiGuard + FortiCare renewal bundles Most popular

Compare the protection bundles
Bundle includesEnterpriseUTPATP
Firewall hardware
IPS, malicious/botnet URL
Anti-malware (AMP, sandbox, CDR)
URL, DNS & video filtering
Anti-spam
AI-based inline malware prevention
Data loss prevention (DLP)
Attack surface security
FortiCare Premium support
Filters Sort results
Reset Apply

Subscriptions & renewals bundles

Compare the protection bundles
Bundle includesEnterpriseUTPATP
Firewall hardware
IPS, malicious/botnet URL
Anti-malware (AMP, sandbox, CDR)
URL, DNS & video filtering
Anti-spam
AI-based inline malware prevention
Data loss prevention (DLP)
Attack surface security
FortiCare Premium support
Filters Sort results
Reset Apply
OVERVIEW

What the FortiGate 900D is for

The FortiGate 900D is an end-of-life 1U rackmount next-generation firewall from Fortinet. Built on the two NP6 processors and CP8 security processors, it delivers 52 Gbps of firewall throughput, 4 Gbps NGFW, 3 Gbps of threat protection and 11,000,000 concurrent sessions over sixteen GE RJ45 ports, sixteen GE SFP slots and two 10 GE SFP+ slots. The 900D reached end of life, so the hardware is no longer sold; you can still renew its FortiGuard security services and FortiCare support to keep an installed unit protected, using the renewal bundles below.

When you are ready to replace it, the currently-shipping FortiGate 900G is the direct successor — roughly 3x the firewall throughput and about 6.5x the threat protection of the 900D in the same 1U form factor, with 25 GE and 100 GE interface options — and the FortiGate 901G adds 2x 480 GB onboard SSDs for local logging and reporting on the same current-gen platform. See the upgrade path comparison below.

Fortinet FortiGate 900D ports
See the FortiGate in action
Try a live FortiGate in our online demo center, no install required.
Open demo center →
RENEW OR UPGRADE

Renew the FortiGate 900D, or upgrade?

A quick guide to keeping your existing unit protected, or moving to a current FortiGate.

You run a FortiGate 900D today and want to keep it protected
Renew FortiGuard + FortiCare below
Renew →
Ready to replace it with a current, fully supported model
FortiGate 900G
View →
Need more throughput, sessions and capacity for growth
FortiGate 901G
View →
Need local storage for on-box logging and reporting
FortiGate 901G (onboard SSD)
View →
SPECIFICATIONS

FortiGate 900D specifications

IPv4 firewall throughput (1518 / 512 / 64 byte, UDP)52 / 52 / 33 Gbps
IPv6 firewall throughput (1518 / 512 / 86 byte, UDP)52 / 52 / 33 Gbps
Firewall latency (64 byte, UDP)3 µs
Firewall throughput (packets/sec)49.5 Mpps
Concurrent sessions (TCP)11,000,000
New sessions/second (TCP)280,000
Firewall policies10,000
IPS throughput (Enterprise mix)4.2 Gbps
NGFW throughput (Enterprise mix)4 Gbps
Threat protection throughput (Enterprise mix)3 Gbps
IPsec VPN throughput (512 byte)25 Gbps
Gateway-to-gateway IPsec VPN tunnels2,000
Client-to-gateway IPsec VPN tunnels50,000
SSL-VPN throughput3.6 Gbps
Concurrent SSL-VPN users (tunnel mode, rec. max)10,000
SSL inspection throughput (IPS, avg. HTTPS)3.9 Gbps
SSL inspection CPS (IPS, avg. HTTPS)2,400
SSL inspection concurrent sessions800,000
Application control throughput (HTTP 64K)10 Gbps
CAPWAP throughput (1444 byte, UDP)11 Gbps
Virtual domains (default / max)10 / 10
Managed FortiSwitches64
Managed FortiAPs (total / tunnel)1,024 / 512
Maximum FortiTokens5,000
High availabilityActive-Active, Active-Passive, Clustering
Hardware accelerationFortinet SPU (NP6 + CP8)
Interfaces2x 10 GE SFP+ slots, 16x GE SFP slots, 16x GE RJ45 ports, 2x GE RJ45 management/HA, 1x USB client + 2x USB server, 1x console (RJ45)
Onboard storage1x 256 GB SSD
Weight20.24 lbs (9.18 kg)
Form factor1U rack mount (EIA / non-EIA)
Dimensions (H x W x L)1.75 x 17.22 x 18.24 in (44.45 x 437.5 x 463.2 mm)
Power input100-240V AC, 50/60 Hz, 300 W redundant
Redundant power suppliesDual hot-swap AC PSU (1+1), 80 Plus compliant
Operating temperature32°F to 104°F (0°C to 40°C)
Storage temperature-31°F to 158°F (-35°C to 70°C)
Humidity10% to 90% non-condensing
Noise level49.9 dBA
Forced airflowSide to back
Operating altitudeUp to 7,400 ft (2,250 m)
Power consumption (avg / max)135 W / 187.2 W
Maximum current100V / 5A, 240V / 3A
Heat dissipation638.75 BTU/h
ComplianceFCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB
CertificationsICSA Labs (Firewall, IPsec, IPS, Antivirus, SSL-VPN); USGv6 / IPv6
Product lifecycleEnd of life (legacy) — renewals available; upgrade path: FortiGate 900G

Source: official Fortinet FortiGate 900D datasheet. Values are Fortinet-published maximums.

Download the FortiGate 900D datasheet
USE CASES

Where the FortiGate 900D fits

Protect an installed unit
Keep an existing 900D covered with renewed FortiGuard security services and FortiCare support while you plan a refresh.
Branch & campus edge
Proven NGFW with SD-WAN in FortiOS for the deployments it was sized for, over sixteen GE RJ45 ports, sixteen GE SFP slots and two 10 GE SFP+ slots.
Plan an upgrade
Move to the FortiGate 900G for current hardware, higher throughput and full FortiGuard AI-powered services.
Managed (MSSP)
Run centrally from FortiManager or FortiGate Cloud as part of a managed security service.
900 CLASS

FortiGate 900D and the current 900-class models

The 900D is end of life. The currently-shipping FortiGate 900G is its direct successor, and the 901G is the 900G with 2x 480 GB onboard SSDs for local logging. Both deliver several times the throughput and sessions of the 900D.

ModelGenerationOnboard storage
FortiGate 900DD-series (EOL)1x 256 GB SSDViewing
FortiGate 900GG-series (current)View →
FortiGate 901GG-series (current)2x 480 GB SSDView →
UPGRADE PATH

FortiGate 900D and its modern replacement

The FortiGate 900D is end of life. The FortiGate 900G is the direct, currently-shipping replacement — roughly 3x the firewall throughput and about 6.5x the threat protection of the 900D in the same 1U form factor, with 25 GE and 100 GE interface options. Same FortiOS and FortiGuard services across the range.

You're here · EOL
FortiGate 900D
Threat protection3 Gbps
Firewall52 Gbps
NGFW4 Gbps
Concurrent sessions11 M
New sessions/sec280,000
Direct replacement
FortiGate 900G
Threat protection20 Gbps
Firewall164 Gbps
NGFW22 Gbps
Concurrent sessions16 M
New sessions/sec720,000
View the FortiGate 900G →
FULL CATALOG

All FortiGate 900D licensing options

Every licensing option still available for the FG-900D: FortiGuard + FortiCare renewal bundles, individual FortiGuard services, FortiCare support, and FortiGate Cloud management. Licensing is delivered electronically worldwide.

FortiGuard + FortiCare renewal bundlesMost popular

Compare the protection bundles
Bundle includesEnterpriseUTPATP
Firewall hardware
IPS, malicious/botnet URL
Anti-malware (AMP, sandbox, CDR)
URL, DNS & video filtering
Anti-spam
AI-based inline malware prevention
Data loss prevention (DLP)
Attack surface security
FortiCare Premium support
Filters Sort results
Reset Apply

Subscriptions & renewals bundles

Compare the protection bundles
Bundle includesEnterpriseUTPATP
Firewall hardware
IPS, malicious/botnet URL
Anti-malware (AMP, sandbox, CDR)
URL, DNS & video filtering
Anti-spam
AI-based inline malware prevention
Data loss prevention (DLP)
Attack surface security
FortiCare Premium support
Filters Sort results
Reset Apply

FortiCare support

Filters Sort results
Reset Apply
Item
SKU
Price
fortinet fortigate licensing forticare services v2
FC-10-00900-247-02-12
List price:CAD$5,591.63
Our Price:CAD$4,461.40
fortinet fortigate licensing forticare services v2
FC-10-00900-284-02-12
List price:CAD$6,989.54
Our Price:CAD$5,576.76
fortinet fortigate licensing forticare services v2
FC-10-00900-204-02-12
List price:CAD$1,397.91
Our Price:CAD$1,127.34

FortiGate Cloud management

Filters Sort results
Reset Apply
ACCESSORIES

Accessories for the FortiGate 900D

Populate the FortiGate 900D SFP slots with the right 1 GbE or 10 GbE transceiver for your fiber or copper runs.

10 GE SFP+ SR transceiver (MMF, 300 m)
10 GE SFP+ SR transceiver (MMF, 300 m)
FN-TRAN-SFP+SR
View →
1 GE SFP SX transceiver (MMF, 500 m)
1 GE SFP SX transceiver (MMF, 500 m)
FN-TRAN-SX
View →
1 GE SFP RJ45 copper transceiver (30 m)
1 GE SFP RJ45 copper transceiver (30 m)
FN-TRAN-GC
View →
FAQ

FortiGate 900D - frequently asked questions

No. The FortiGate 900D (FG-900D) has reached end of life and the hardware is no longer sold. You can still renew FortiGuard security services and FortiCare support for an installed unit, and we can quote the current FortiGate 900G as a direct replacement.

The FortiGate 900G is the direct, currently-shipping replacement — roughly 3x the firewall throughput and about 6.5x the threat protection of the 900D in the same 1U form factor, with 25 GE and 100 GE interface options. For more headroom you can also look at the FortiGate 901G.

Yes, while the model is in its renewal window. Choose a FortiGuard + FortiCare renewal bundle above, or renew individual FortiGuard services and FortiCare support. Licensing is delivered electronically worldwide.

The 900D delivers 52 Gbps firewall throughput, 4.2 Gbps IPS, 4 Gbps NGFW, 3 Gbps threat protection and 25 Gbps IPsec VPN, with 11,000,000 concurrent sessions and 280,000 new sessions per second, accelerated by Fortinet’s two NP6 processors and CP8 security processors.

The FortiGate 900D is the D-generation 1U appliance with 256 GB onboard storage and dual hot-swap AC power supplies. Its current replacement is the FortiGate 900G; the 901G is the same 900G platform with 2x 480 GB SSDs added for local logging and reporting.

Stay current on FortiGate
News, firmware updates and buying guides from our team.
Read the latest →