The FortiGate 120G and 121G share the same SP5 platform, chassis, port layout, and performance figures. The only difference is onboard storage. The 121G includes a 480 GB SSD for local logging, reporting, and packet capture on the device itself. The 120G has no internal storage. Both ship with dual built-in AC power supplies and identical throughput ratings. If you need local log retention without a separate FortiAnalyzer, choose the 121G.

The FortiGate 120G and 121G deliver 39 Gbps of firewall throughput, 5.3 Gbps of IPS throughput, 3.1 Gbps NGFW throughput, and 2.8 Gbps of full threat protection. Those numbers place this appliance in mid-size campus networks, distributed enterprise branch sites, and data-center-edge deployments where dense Gigabit switch ports and 10GE SFP+ uplinks are needed alongside full NGFW inspection. For smaller branches, the 90G desktop is a step down. For higher session capacity or more throughput, the 200G is the next model up.

Yes. Secure SD-WAN and ZTNA enforcement are built into FortiOS and require no additional license to activate. SD-WAN provides application-aware link steering, WAN health monitoring, and failover across multiple ISP connections. ZTNA enforces per-session, per-application access control for users working from any location. Both capabilities are managed from the same FortiOS interface as the rest of the firewall policy.

The most common bundles are UTP (Unified Threat Protection) and ENT (Enterprise Protection). UTP covers IPS, application control, antivirus, anti-botnet, URL filtering, DNS filtering, mobile malware, and FortiCare Premium support. Enterprise Protection adds DLP, inline CASB, advanced malware prevention, anti-spam, IoT security, Security Rating, and FortiConverter. Both are available in 1-year, 3-year, and 5-year terms. Our team can quote any combination and walk you through which bundle matches your compliance requirements.

The FortiSP5 is Fortinet's fifth-generation Security Processing Unit, a custom ASIC that integrates a RISC system CPU and a dedicated hardware SPU on a single chip. It offloads and accelerates IPsec VPN encryption, SSL inspection, and flow-based threat scanning in hardware rather than software. The practical effect is that the firewall can run full NGFW inspection at rated throughput without the performance cliff that software-only processing creates under load. Most competing appliances in this class rely on general-purpose CPUs, which slow down under deep inspection. The SP5 does not.

Yes. Firewalls.com offers a firewall configuration service where our certified Fortinet engineers configure your appliance before it leaves our facility. We run an analysis call with you to document your VLANs, user groups, policy requirements, and WAN connections, then configure over 25 components to best-practice standards. You also get remote deployment support and 7 days of post-deployment follow-up. If you want ongoing management after deployment, our FireGuard managed service covers firmware, patches, rule changes, and 24/7 threat monitoring for a flat monthly fee.