the full FortiOS next-gen firewall, deployed in your cloud or hypervisor
FortiGate-VM is the same FortiOS NGFW as the hardware appliances, delivered as a software virtual machine you run on your own cloud or hypervisor. One annual subscription sizes it by vCPU and includes a FortiGuard protection bundle and FortiCare support, licensed for worldwide electronic delivery from an authorized Fortinet Select Partner.


Pick your vCPU size, then the protection bundle and term. Prices are live and update with your selected currency; licences are delivered electronically, worldwide. Add to cart to check out, or request a quote for volume and a-la-carte options.
| Protection bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Threat Protection (ATP) IPS, antivirus / AMP, FortiGate Cloud sandbox, application control and FortiCare Premium. | View productFC1-10-FGVVS-993-02-12 | View productFC1-10-FGVVS-993-02-36 | View productFC1-10-FGVVS-993-02-60 |
| Unified Threat Protection (UTP) Everything in ATP plus web, URL and DNS filtering, video filtering, anti-spam and malicious-certificate protection. | View productFC1-10-FGVVS-990-02-12 | View productFC1-10-FGVVS-990-02-36 | View productFC1-10-FGVVS-990-02-60 |
| Enterprise Bundle (Enterprise) Everything in UTP plus DLP, attack-surface security, IoT detection, IoT vulnerability correlation and Security Rating. | View productFC1-10-FGVVS-814-02-12 | View productFC1-10-FGVVS-814-02-36 | View productFC1-10-FGVVS-814-02-60 |
| Protection bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Threat Protection (ATP) IPS, antivirus / AMP, FortiGate Cloud sandbox, application control and FortiCare Premium. | View productFC2-10-FGVVS-993-02-12 | View productFC2-10-FGVVS-993-02-36 | View productFC2-10-FGVVS-993-02-60 |
| Unified Threat Protection (UTP) Everything in ATP plus web, URL and DNS filtering, video filtering, anti-spam and malicious-certificate protection. | View productFC2-10-FGVVS-990-02-12 | View productFC2-10-FGVVS-990-02-36 | View productFC2-10-FGVVS-990-02-60 |
| Enterprise Bundle (Enterprise) Everything in UTP plus DLP, attack-surface security, IoT detection, IoT vulnerability correlation and Security Rating. | View productFC2-10-FGVVS-814-02-12 | View productFC2-10-FGVVS-814-02-36 | View productFC2-10-FGVVS-814-02-60 |
| Protection bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Threat Protection (ATP) IPS, antivirus / AMP, FortiGate Cloud sandbox, application control and FortiCare Premium. | View productFC3-10-FGVVS-993-02-12 | View productFC3-10-FGVVS-993-02-36 | View productFC3-10-FGVVS-993-02-60 |
| Unified Threat Protection (UTP) Everything in ATP plus web, URL and DNS filtering, video filtering, anti-spam and malicious-certificate protection. | View productFC3-10-FGVVS-990-02-12 | View productFC3-10-FGVVS-990-02-36 | View productFC3-10-FGVVS-990-02-60 |
| Enterprise Bundle (Enterprise) Everything in UTP plus DLP, attack-surface security, IoT detection, IoT vulnerability correlation and Security Rating. | View productFC3-10-FGVVS-814-02-12 | View productFC3-10-FGVVS-814-02-36 | View productFC3-10-FGVVS-814-02-60 |
| Protection bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Threat Protection (ATP) IPS, antivirus / AMP, FortiGate Cloud sandbox, application control and FortiCare Premium. | View productFC4-10-FGVVS-993-02-12 | View productFC4-10-FGVVS-993-02-36 | View productFC4-10-FGVVS-993-02-60 |
| Unified Threat Protection (UTP) Everything in ATP plus web, URL and DNS filtering, video filtering, anti-spam and malicious-certificate protection. | View productFC4-10-FGVVS-990-02-12 | View productFC4-10-FGVVS-990-02-36 | View productFC4-10-FGVVS-990-02-60 |
| Enterprise Bundle (Enterprise) Everything in UTP plus DLP, attack-surface security, IoT detection, IoT vulnerability correlation and Security Rating. | View productFC4-10-FGVVS-814-02-12 | View productFC4-10-FGVVS-814-02-36 | View productFC4-10-FGVVS-814-02-60 |
| Protection bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Threat Protection (ATP) IPS, antivirus / AMP, FortiGate Cloud sandbox, application control and FortiCare Premium. | View productFC5-10-FGVVS-993-02-12 | View productFC5-10-FGVVS-993-02-36 | View productFC5-10-FGVVS-993-02-60 |
| Unified Threat Protection (UTP) Everything in ATP plus web, URL and DNS filtering, video filtering, anti-spam and malicious-certificate protection. | View productFC5-10-FGVVS-990-02-12 | View productFC5-10-FGVVS-990-02-36 | View productFC5-10-FGVVS-990-02-60 |
| Enterprise Bundle (Enterprise) Everything in UTP plus DLP, attack-surface security, IoT detection, IoT vulnerability correlation and Security Rating. | View productFC5-10-FGVVS-814-02-12 | View productFC5-10-FGVVS-814-02-36 | View productFC5-10-FGVVS-814-02-60 |
| Protection bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Threat Protection (ATP) IPS, antivirus / AMP, FortiGate Cloud sandbox, application control and FortiCare Premium. | View productFC6-10-FGVVS-993-02-12 | View productFC6-10-FGVVS-993-02-36 | View productFC6-10-FGVVS-993-02-60 |
| Unified Threat Protection (UTP) Everything in ATP plus web, URL and DNS filtering, video filtering, anti-spam and malicious-certificate protection. | View productFC6-10-FGVVS-990-02-12 | View productFC6-10-FGVVS-990-02-36 | View productFC6-10-FGVVS-990-02-60 |
| Enterprise Bundle (Enterprise) Everything in UTP plus DLP, attack-surface security, IoT detection, IoT vulnerability correlation and Security Rating. | View productFC6-10-FGVVS-814-02-12 | View productFC6-10-FGVVS-814-02-36 | View productFC6-10-FGVVS-814-02-60 |
| Protection bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Threat Protection (ATP) IPS, antivirus / AMP, FortiGate Cloud sandbox, application control and FortiCare Premium. | View productFC7-10-FGVVS-993-02-12 | View productFC7-10-FGVVS-993-02-36 | View productFC7-10-FGVVS-993-02-60 |
| Unified Threat Protection (UTP) Everything in ATP plus web, URL and DNS filtering, video filtering, anti-spam and malicious-certificate protection. | View productFC7-10-FGVVS-990-02-12 | View productFC7-10-FGVVS-990-02-36 | View productFC7-10-FGVVS-990-02-60 |
| Enterprise Bundle (Enterprise) Everything in UTP plus DLP, attack-surface security, IoT detection, IoT vulnerability correlation and Security Rating. | View productFC7-10-FGVVS-814-02-12 | View productFC7-10-FGVVS-814-02-36 | View productFC7-10-FGVVS-814-02-60 |
FortiGate-VM uses a bring-your-own-license (BYOL) model. You deploy the FortiGate virtual machine yourself on your cloud or hypervisor, then apply an annual subscription license. That one license sets the vCPU size, includes a FortiGuard protection bundle, and includes FortiCare Premium support. There is no separate hardware to buy and no per-appliance shipping.
Choose the vCPU level (VM01 to VMUL) that matches your throughput, VDOMs and Security Fabric needs. You can move the licence between platforms as you scale.
Select ATP, UTP or the Enterprise bundle, for 1, 3 or 5 years. The bundle decides which FortiGuard services are switched on.
Download FortiOS for your platform, deploy the VM, and apply the licence key we deliver electronically, usually the same business day, worldwide.
Download the FortiGate-VM datasheet (PDF)
Every FortiGate-VM runs the same FortiOS; the vCPU size sets capacity. Sizes scale across two tiers: VM01 to VM04 support up to 10,000 firewall policies, while VM08 and above jump to 200,000 policies and up to 500 VDOMs. Storage is 32 GB to 2 TB on every size. Pick by throughput, number of VDOMs and how many FortiSwitch and FortiAP units you will manage.
| Model | Firewall policies | Max VDOMs | Max FortiSwitch | Max FortiAPs | Managed endpoints |
|---|---|---|---|---|---|
| FortiGate-VM01-S 1 vCPU · Lab, single app or small branch segment | 10,000 | 10 | 8 | 32 / 64 | 2,000 |
| FortiGate-VM02-S 2 vCPU · Small-business cloud edge or branch | 10,000 | 25 | 24 | 512 / 1,024 | 2,000 |
| FortiGate-VM04-S 4 vCPU · Mid-size cloud / VPC perimeter | 10,000 | 50 | 64 | 512 / 1,024 | 8,000 |
| FortiGate-VM08-S 8 vCPU · Busy cloud edge with a Security Fabric | 200,000 | 500 | 300 | 1,024 / 4,096 | 20,000 |
| FortiGate-VM16-S 16 vCPU · High-throughput data-center firewall | 200,000 | 500 | 300 | 1,024 / 4,096 | 20,000 |
| FortiGate-VM32-S 32 vCPU · Large multi-tenant / service provider | 200,000 | 500 | 300 | 1,024 / 4,096 | 20,000 |
| FortiGate-VMUL-S Unlimited vCPU · Maximum scale, bound only by the instance | 200,000 | 500 | 300 | 1,024 / 4,096 | 20,000 |
Values are platform maximums from the Fortinet datasheet and are ‘up to’, depending on the cloud or hypervisor instance you deploy on. Not sure which size fits? Tell us your throughput and we will size it.
Each FortiGate-VM subscription includes one FortiGuard bundle plus FortiCare Premium support. The three bundles build on each other, so pick by the security services you need.
Advanced Threat Protection
Core threat protection: FortiGuard IPS, antivirus and advanced malware protection, FortiGate Cloud sandbox and application control.
Best for cost-conscious edge protection.
Unified Threat Protection
Adds web, URL, DNS and video filtering, anti-spam and malicious-certificate protection on top of ATP.
The popular all-round choice for most deployments.
Enterprise Bundle
The full suite: adds DLP, attack-surface security, IoT detection and vulnerability correlation and Security Rating on top of UTP.
Best for compliance and full data & SaaS posture.
| Capability | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Antivirus, AMP & FortiGate Cloud sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL, DNS & video filtering | — | ✓ | ✓ |
| Anti-spam | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| Attack-surface security | — | — | ✓ |
| IoT detection & vulnerability correlation | — | — | ✓ |
| Security Rating | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
Need only one or two services, or OT security? Those are available a-la-carte. Ask us for an a-la-carte quote.

Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from cloud rollout to round-the-clock protection.
FortiGate-VM runs across public clouds and private virtualization, with vSPU acceleration that lets the virtual firewall hit high throughput instead of bottlenecking your network. Deploy by hand or as code with Terraform, Ansible, CloudFormation or the REST API.
FortiGate-VM is Fortinet’s next-generation firewall delivered as a software virtual machine. It runs the same FortiOS as the hardware FortiGate appliances and supports the same security and networking services, but you deploy it on your own cloud or hypervisor instead of buying a physical box.
It uses an annual subscription (bring-your-own-license). One licence sets the vCPU size (VM01 to VMUL), includes a FortiGuard protection bundle (ATP, UTP or Enterprise) and includes FortiCare Premium support. You choose a 1, 3 or 5-year term.
ATP covers core threat protection (IPS, antivirus, sandbox). UTP adds web, DNS and video filtering plus anti-spam, and is the popular all-round choice. Enterprise adds DLP, attack-surface security, IoT detection and Security Rating for full data and compliance posture. See the comparison in the Choose a bundle section above.
Pick by throughput, number of VDOMs and how many FortiSwitch and FortiAP units you will manage. VM01 to VM04 suit branches and mid-size cloud edges (up to 10,000 policies); VM08 and above are for high-throughput and multi-tenant deployments (up to 200,000 policies and 500 VDOMs). Tell us your numbers and we will size it.
On all major public clouds (AWS, Azure, Google Cloud, Oracle OCI, Alibaba, IBM) and most hypervisors (VMware ESXi and NSX-T, Microsoft Hyper-V, KVM, Citrix/Xen, Nutanix AHV, Red Hat OpenShift). It also supports infrastructure-as-code tools like Terraform and Ansible.
No. FortiGate-VM runs on infrastructure you already have or provision in the cloud. You download FortiOS free from Fortinet and apply the subscription licence you buy here to activate and protect it.
FortiGate-VM licences are delivered electronically, worldwide, usually the same business day. There is nothing to ship.
Tell us your platform, throughput and use case — we will size FortiGate-VM and quote it, usually the same day.