Low-encryption (FG-900G-LENC) build of the FortiGate 900G-LENC for high-end campus and data-centre edge deployments in export-restricted markets. Identical hardware, ports and FortiGuard inspection to the standard FortiGate 900G-LENC - the difference is a reduced-strength VPN cryptographic module, which is what makes the unit exportable where the full-crypto model is not.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 900G-LENC low-encryption appliance. License not included. | View productFG-900G-LENC |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-900G-BDL-809-12 | View productFG-900G-BDL-809-36 | View productFG-900G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-900G-BDL-950-12 | View productFG-900G-BDL-950-36 | View productFG-900G-BDL-950-60 |
| Appliance + bundle | View productFG-900G-BDL-1082-12 | View productFG-900G-BDL-1082-36 | View productFG-900G-BDL-1082-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-FG9H0-809-02-12 | View productFC-10-FG9H0-809-02-36 | View productFC-10-FG9H0-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-FG9H0-950-02-12 | View productFC-10-FG9H0-950-02-36 | View productFC-10-FG9H0-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-FG9H0-928-02-12 | View productFC-10-FG9H0-928-02-36 | View productFC-10-FG9H0-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 900G-LENC (FG-900G-LENC) is Fortinet's low-encryption variant of the FortiGate 900G. LENC models exist for one reason: export control. Some destinations and some customers cannot lawfully receive a firewall carrying full-strength VPN cryptography, so Fortinet ships the same appliance with a reduced-strength cryptographic module.
Everything else is the standard FortiGate 900G: identical chassis, identical interfaces, identical FortiASIC hardware, and the same FortiOS. Threat inspection is unaffected - IPS, antivirus, application control, web filtering and sandboxing all behave exactly as they do on the full-crypto model, because those services do not depend on the restricted VPN cipher suite.
What you give up is site-to-site and client VPN performance and cipher strength. If the deployment terminates a lot of IPsec or SSL VPN, the standard FortiGate 900G is the correct choice unless export rules force your hand.

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 164 / 163 / 153 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 164 / 163 / 153 Gbps |
| Firewall latency (64 byte, UDP) | 3.78 / 2.5 µs (standard / ULL ports) |
| Firewall throughput (packets/sec) | 229.5 Mpps |
| Concurrent sessions (TCP) | 16,000,000 |
| New sessions/second (TCP) | 720,000 |
| Firewall policies | 10,000 |
| IPS throughput | 26 Gbps |
| NGFW throughput | 22 Gbps |
| Threat protection throughput | 20 Gbps |
| Application control throughput (HTTP 64K) | 74.8 Gbps |
| CAPWAP throughput (HTTP 64K) | 70 Gbps |
| Virtual domains (default / max) | 10 / 10 |
| Managed FortiSwitches | 96 |
| Managed FortiAPs (total / tunnel) | 2,048 / 1,024 |
| Maximum FortiTokens | 5,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 network processor + CP9 content processor |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 4x 25 GE SFP28 ULL slots, 4x 10 GE SFP+/GE SFP slots, 8x GE SFP slots, 16x GE RJ45 slots, 1x 2.5 GE/GE HA port, 1x GE Management port |
| Onboard storage | 2x 480 GB SSD |
| Included transceivers | 2x SFP SX |
| Power supply | 100–240 VAC, 50/60 Hz (dual redundant, hot-swappable) |
| Power consumption (avg / max) | 134 W / 252 W |
| Form factor | Rack Mount, 1 RU |
| Dimensions (H x W x L) | 1.5 x 17.0 x 15.0 in (44.45 x 432 x 380 mm) |
| Weight | 15.98 lbs (7.25 kg) |
Source: official Fortinet FortiGate 900G-LENC Series datasheet (FG-900G / FG-900G-DC column). All performance values are “up to” and vary with system configuration.
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
LENC appliances sit alongside their standard siblings in the FortiGate line. Inspection performance is shared; only VPN cryptography differs.
| Model | VPN cryptography | Export restricted | |
|---|---|---|---|
| FortiGate 900G-LENC | Reduced strength | Yes - export licence required | Viewing |
| FortiGate 900G | Full strength | No | View → |
| Mid-to-high-end crypto licence key upgrade | Field upgrade to full strength | Licence key | LENC-99006 |
The FortiGate 900G-LENC is the export-controlled build. Use the comparison below before you commit.
Every available SKU for the FG-900G-LENC: the low-encryption appliance plus the standard FG-900G FortiGuard bundles and renewals it is entitled to, with live Canadian pricing.
| Configuration | Price & action |
|---|---|
| FortiGate 900G-LENC low-encryption appliance. License not included. | View productFG-900G-LENC |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-900G-BDL-809-12 | View productFG-900G-BDL-809-36 | View productFG-900G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-900G-BDL-950-12 | View productFG-900G-BDL-950-36 | View productFG-900G-BDL-950-60 |
| Appliance + bundle | View productFG-900G-BDL-1082-12 | View productFG-900G-BDL-1082-36 | View productFG-900G-BDL-1082-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-FG9H0-809-02-12 | View productFC-10-FG9H0-809-02-36 | View productFC-10-FG9H0-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-FG9H0-950-02-12 | View productFC-10-FG9H0-950-02-36 | View productFC-10-FG9H0-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-FG9H0-928-02-12 | View productFC-10-FG9H0-928-02-36 | View productFC-10-FG9H0-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-FG9H0-189-02-12 | — | — |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-FG9H0-247-02-12 | View productFC-10-FG9H0-247-02-36 | View productFC-10-FG9H0-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-FG9H0-284-02-12 | View productFC-10-FG9H0-284-02-36 | View productFC-10-FG9H0-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-FG9H0-204-02-12 | View productFC-10-FG9H0-204-02-36 | View productFC-10-FG9H0-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-FG9H0-100-02-12 | View productFC-10-FG9H0-100-02-36 | View productFC-10-FG9H0-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-FG9H0-577-02-12 | View productFC-10-FG9H0-577-02-36 | View productFC-10-FG9H0-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-FG9H0-108-02-12 | View productFC-10-FG9H0-108-02-36 | View productFC-10-FG9H0-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-FG9H0-112-02-12 | View productFC-10-FG9H0-112-02-36 | View productFC-10-FG9H0-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-FG9H0-159-02-12 | View productFC-10-FG9H0-159-02-36 | View productFC-10-FG9H0-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-FG9H0-589-02-12 | View productFC-10-FG9H0-589-02-36 | View productFC-10-FG9H0-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-FG9H0-1329-02-12 | View productFC-10-FG9H0-1329-02-36 | View productFC-10-FG9H0-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-FG9H0-1389-02-12 | View productFC-10-FG9H0-1389-02-36 | View productFC-10-FG9H0-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-FG9H0-131-02-12 | View productFC-10-FG9H0-131-02-36 | View productFC-10-FG9H0-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-FG9H0-585-02-12 | View productFC-10-FG9H0-585-02-36 | View productFC-10-FG9H0-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-FG9H0-464-02-12 | View productFC-10-FG9H0-464-02-36 | View productFC-10-FG9H0-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-FG9H0-660-02-12 | View productFC-10-FG9H0-660-02-36 | View productFC-10-FG9H0-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-FG9H0-210-02-12 | View productFC-10-FG9H0-210-02-36 | View productFC-10-FG9H0-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-FG9H0-211-02-12 | View productFC-10-FG9H0-211-02-36 | View productFC-10-FG9H0-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-FG9H0-212-02-12 | View productFC-10-FG9H0-212-02-36 | View productFC-10-FG9H0-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-FG9H0-301-02-12 | View productFC-10-FG9H0-301-02-36 | View productFC-10-FG9H0-301-02-60 |
Transceivers and rack hardware for the FortiGate 900G-LENC are identical to the standard FortiGate 900G.
LENC stands for low encryption. It is Fortinet’s export-controlled build of the FortiGate 900G: same hardware and same FortiOS, but with a reduced-strength VPN cryptographic module so the appliance can lawfully ship to destinations and customers that cannot receive full-strength cryptography.
No. IPS, antivirus, application control, web and DNS filtering, and inline sandboxing run exactly as they do on the standard FortiGate 900G. Those FortiGuard services do not rely on the restricted VPN cipher suite. Only IPsec and SSL VPN performance and cipher strength are affected.
The same ones as the non-LENC model. Fortinet’s price list directs resellers to use the standard FG-900G SKUs and pricing for bundle renewal, FortiCare and FortiGuard, which is exactly what the purchasing tables on this page list.
Yes, subject to export approval. Fortinet sells a cryptographic licence key upgrade (LENC-99006) that raises a low-encryption unit to full crypto in the field, so you do not have to replace the appliance if your export restriction is lifted. Ask us to quote it.
In most cases yes – Fortinet notes that an export licence is normally required to obtain the cryptographic licence key for a LENC appliance. Build that approval time into your schedule. Hardware ships within Canada; licence and subscription delivery is electronic and available worldwide.