The letter indicates the hardware generation. E series models use older NP6 and CP9 processors. F series adds NP6 capacity and improved SSL inspection throughput. G series uses the current NP7 processor and delivers roughly twice the encrypted inspection throughput in the same rack space. If you are purchasing new hardware today, G series is the current-generation choice unless budget or a specific legacy requirement points you toward F or E.

The appliance ships with FortiOS and base firewall, routing, and VPN features included. Advanced threat services such as IPS, antivirus, web filtering, and sandboxing require an active FortiGuard subscription. Most enterprise buyers purchase a FortiCare support contract and a FortiGuard bundle at the time of purchase. Our team can recommend the right licensing package for your security requirements.

SPU stands for Security Processing Unit. Fortinet builds its own ASIC processors, NP (Network Processor) for traffic offloading and CP (Content Processor) for SSL and IPS inspection. These chips allow FortiGate firewalls to maintain their rated throughput even when all threat inspection services are active. Software-based firewalls typically see a 70 to 80 percent throughput drop under full UTM load. FortiGate appliances powered by NP7 silicon avoid that penalty.

User count and workload type are the two main sizing inputs. Branch offices with fewer than 200 users typically fit the FG-120G. Regional sites of 200 to 500 users land on the FG-200G. Enterprise campuses of 500 to 2,500 users look at the FG-400F or FG-400G. Large headquarters and data center edge roles call for the FG-900G or FG-3000F. Carrier and hyperscale environments use the FG-7121F chassis. Our engineers will size the right model based on your actual traffic profile and inspection requirements.

Yes. Our certified Fortinet engineers offer pre-shipment configuration services that tune firewall policies, VPN tunnels, SD-WAN rules, and high-availability settings to your environment before the appliance leaves our facility. We also offer ongoing managed firewall services covering firmware management, monitoring, and change request handling.

In-stock models ship the same day when ordered by 3 PM EST. Larger chassis systems and custom configurations may require a short lead time. Our sales team confirms stock availability and lead time for your specific model and licensing bundle before the order is placed.