Mid-to-large enterprise 1RU next-generation firewall with NP7 + CP9 ASIC acceleration, 164 Gbps firewall throughput, 20 Gbps threat protection, 16 million concurrent sessions, and 2x 960 GB onboard SSD for extended on-appliance log storage.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 901G 1RU appliance with 2x 960 GB SSD. License not included. | View productFG-901G |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-901G-BDL-809-12 | View productFG-901G-BDL-809-36 | View productFG-901G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-901G-BDL-950-12 | View productFG-901G-BDL-950-36 | View productFG-901G-BDL-950-60 |
| Appliance + bundle | View productFG-901G-BDL-1082-12 | View productFG-901G-BDL-1082-36 | View productFG-901G-BDL-1082-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-FG9H1-809-02-12 | View productFC-10-FG9H1-809-02-36 | View productFC-10-FG9H1-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-FG9H1-950-02-12 | View productFC-10-FG9H1-950-02-36 | View productFC-10-FG9H1-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-FG9H1-928-02-12 | View productFC-10-FG9H1-928-02-36 | View productFC-10-FG9H1-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 901G is the extended-storage variant of the FortiGate 900G. It delivers identical performance — 164 Gbps firewall, 26 Gbps IPS, 22 Gbps NGFW, 20 Gbps threat protection, and 16 million concurrent sessions — while doubling the onboard SSD capacity to 2x 960 GB (versus 2x 480 GB on the 900G). The larger storage is the right choice for deployments that retain high volumes of log and event data on-appliance for compliance, forensics, or extended reporting retention. Built on Fortinet’s NP7 network processor and CP9 content processor, the 901G supports hardware-accelerated inspection, TLS 1.3 decryption, and sub-3 µs latency on four 25 GE SFP28 ULL ports.

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 164 / 163 / 153 Gbps |
| IPv6 firewall throughput (1518 / 512 / 86 byte, UDP) | 164 / 163 / 153 Gbps |
| Firewall latency (64 byte, UDP) | 3.78 / 2.5 µs (standard / ULL ports) |
| Firewall throughput (packets/sec) | 229.5 Mpps |
| Concurrent sessions (TCP) | 16,000,000 |
| New sessions/second (TCP) | 720,000 |
| Firewall policies | 10,000 |
| IPS throughput | 26 Gbps |
| NGFW throughput | 22 Gbps |
| Threat protection throughput | 20 Gbps |
| IPsec VPN throughput (512 byte) | 55 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 2,000 |
| Client-to-gateway IPsec VPN tunnels | 50,000 |
| SSL-VPN throughput | 10 Gbps |
| Concurrent SSL-VPN users (tunnel mode) | 10,000 |
| SSL inspection throughput (IPS, avg. HTTPS) | 16.7 Gbps |
| SSL inspection CPS (IPS, avg. HTTPS) | 18,000 |
| SSL inspection concurrent sessions (IPS, avg. HTTPS) | 1,600,000 |
| Application control throughput (HTTP 64K) | 74.8 Gbps |
| CAPWAP throughput (HTTP 64K) | 70 Gbps |
| Virtual domains (default / max) | 10 / 10 |
| Managed FortiSwitches | 96 |
| Managed FortiAPs (total / tunnel) | 2,048 / 1,024 |
| Maximum FortiTokens | 5,000 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | NP7 network processor + CP9 content processor |
| Trusted Platform Module (TPM) | Yes |
| Interfaces | 4x 25 GE SFP28 ULL slots, 4x 10 GE SFP+/GE SFP slots, 8x GE SFP slots, 16x GE RJ45 slots, 1x 2.5 GE/GE HA port, 1x GE Management port |
| Onboard storage | 2x 960 GB SSD |
| Included transceivers | 2x SFP SX |
| Power supply | 100–240 VAC, 50/60 Hz (dual redundant, hot-swappable) |
| Power consumption (avg / max) | 134 W / 252 W |
| Form factor | Rack Mount, 1 RU |
| Dimensions (H x W x L) | 1.5 x 17.0 x 15.0 in (44.45 x 432 x 380 mm) |
| Weight | 15.98 lbs (7.25 kg) |
Source: official Fortinet FortiGate 900G Series datasheet (FG-901G column). All performance values are “up to” and vary with system configuration.
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
All four 900G-series models share the same NP7 + CP9 platform and performance. The 901G models double the onboard SSD to 2x 960 GB for extended log retention; the -DC suffix denotes DC power. Choose based on power and storage requirements.
The 901G sits between the 200G and the high-end 3800G in the FortiGate rack lineup. It matches the 900G in throughput but adds 2x 960 GB SSD. Step up to the 3800G for 200 Gbps threat protection and hyperscale session capacity; step down to the 200G for a lower-cost mid-range deployment.
Every available SKU for the FG-901G: hardware, protection bundles, subscriptions, services, cloud management, FortiCare support, and RMA. In stock, brand new, shipped from Canada; licensing delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 901G 1RU appliance with 2x 960 GB SSD. License not included. | View productFG-901G |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-901G-BDL-809-12 | View productFG-901G-BDL-809-36 | View productFG-901G-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-901G-BDL-950-12 | View productFG-901G-BDL-950-36 | View productFG-901G-BDL-950-60 |
| Appliance + bundle | View productFG-901G-BDL-1082-12 | View productFG-901G-BDL-1082-36 | View productFG-901G-BDL-1082-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-FG9H1-809-02-12 | View productFC-10-FG9H1-809-02-36 | View productFC-10-FG9H1-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-FG9H1-950-02-12 | View productFC-10-FG9H1-950-02-36 | View productFC-10-FG9H1-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-FG9H1-928-02-12 | View productFC-10-FG9H1-928-02-36 | View productFC-10-FG9H1-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-FG9H1-189-02-12 | View productFC-10-FG9H1-189-02-36 | View productFC-10-FG9H1-189-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-FG9H1-247-02-12 | View productFC-10-FG9H1-247-02-36 | View productFC-10-FG9H1-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-FG9H1-284-02-12 | View productFC-10-FG9H1-284-02-36 | View productFC-10-FG9H1-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-FG9H1-204-02-12 | View productFC-10-FG9H1-204-02-36 | View productFC-10-FG9H1-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-FG9H1-100-02-12 | View productFC-10-FG9H1-100-02-36 | View productFC-10-FG9H1-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-FG9H1-577-02-12 | View productFC-10-FG9H1-577-02-36 | View productFC-10-FG9H1-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-FG9H1-108-02-12 | View productFC-10-FG9H1-108-02-36 | View productFC-10-FG9H1-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-FG9H1-112-02-12 | View productFC-10-FG9H1-112-02-36 | View productFC-10-FG9H1-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-FG9H1-159-02-12 | View productFC-10-FG9H1-159-02-36 | View productFC-10-FG9H1-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-FG9H1-589-02-12 | View productFC-10-FG9H1-589-02-36 | View productFC-10-FG9H1-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-FG9H1-1329-02-12 | View productFC-10-FG9H1-1329-02-36 | View productFC-10-FG9H1-1329-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-FG9H1-1389-02-12 | View productFC-10-FG9H1-1389-02-36 | View productFC-10-FG9H1-1389-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-FG9H1-131-02-12 | View productFC-10-FG9H1-131-02-36 | View productFC-10-FG9H1-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-FG9H1-585-02-12 | View productFC-10-FG9H1-585-02-36 | View productFC-10-FG9H1-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-FG9H1-464-02-12 | View productFC-10-FG9H1-464-02-36 | View productFC-10-FG9H1-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-FG9H1-660-02-12 | View productFC-10-FG9H1-660-02-36 | View productFC-10-FG9H1-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-FG9H1-210-02-12 | View productFC-10-FG9H1-210-02-36 | View productFC-10-FG9H1-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-FG9H1-211-02-12 | View productFC-10-FG9H1-211-02-36 | View productFC-10-FG9H1-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-FG9H1-212-02-12 | View productFC-10-FG9H1-212-02-36 | View productFC-10-FG9H1-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-FG9H1-301-02-12 | View productFC-10-FG9H1-301-02-36 | View productFC-10-FG9H1-301-02-60 |
The 901G is a 1RU rack appliance with 2x 960 GB SSD, 25 GE ULL, 10 GE SFP+, GE SFP, and GE RJ45 ports.
The FortiGate 901G is a current-generation ‘G’ series model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms. It is not end-of-life.
Performance is identical. The 901G has larger onboard SSD storage — 2x 960 GB versus 2x 480 GB on the 900G — for extended local log and report retention. Both models use dual redundant AC power supplies. Choose the 901G when on-appliance log storage capacity is a priority.
Performance and SSD storage are the same (2x 960 GB). The 901G-DC uses dual redundant DC power supplies (48–60 VDC) instead of AC power supplies (100–240 VAC) on the standard 901G. Choose the 901G-DC for environments with DC power infrastructure.
The FortiGate 901G uses Fortinet’s NP7 network processor for firewall, IPsec VPN, and session acceleration, and the CP9 content processor for IPS, SSL/TLS inspection (including TLS 1.3), application control, and antivirus offload. Both are custom ASICs designed by Fortinet.
The four 25 GE SFP28 ultra-low latency (ULL) slots deliver sub-3 µs firewall latency (2.5 µs measured). They are hardware-accelerated by the NP7 and are suited to latency-sensitive traffic such as financial applications or high-performance computing workloads.