The FG-3000F and FG-3001F run on identical hardware and deliver the same throughput, port density, and processor complement. The only hardware difference is onboard storage: the 3001F ships with 2x 1 TB SSDs (2 TB usable) for local log retention, which removes the need for a dedicated FortiAnalyzer in smaller deployments. The -DC suffix on either model indicates a direct-current power supply for data center environments that distribute DC power.

Fortinet publishes 33 Gbps for threat protection throughput, which measures the appliance running IPS, application control, and malware protection simultaneously on an enterprise traffic mix with logging enabled. That is the number to plan around if you intend to run full inspection. The 397 Gbps firewall throughput figure applies to a stateful firewall-only workload on large packet sizes, which is a different and lighter workload than full NGFW.

Most commonly at the enterprise perimeter edge, at the data center core as a segmentation device between internal zones, and in hybrid IT environments that need 100GE uplinks to the network core. Service providers use the multi-tenant VDOM architecture to manage up to 500 isolated policy domains on a single chassis. The -DC models serve telecom and carrier environments where DC power distribution is standard. Fortinet recommends this series for organizations running ISP connections up to 11 Gbps and expecting 500 to 2,000 concurrent users on the NGFW.

Full NGFW capability requires a FortiGuard bundle that activates IPS, application control, and URL filtering at a minimum. Fortinet sells two main bundles for this series: the Unified Threat Protection (UTP) bundle, which covers IPS, antivirus, application control, URL filtering, and antispam, and the Enterprise Protection bundle, which adds AI-based inline malware prevention, DNS filtering, inline CASB, data loss prevention, attack surface security, and the FortiConverter migration service. Both require a FortiCare support contract, which covers firmware access, technical support, and hardware warranty.

Yes. Both the 3000F and 3001F include two dedicated HA interface slots (HA1 and HA2) that are physically separate from the NP7 data path and management plane. Active-active and active-passive HA modes are both supported via Fortinet's FortiGate Clustering Protocol (FGCP). Redundant, hot-swap AC power supplies ship standard on both AC models, and the dual power design covers the unit even during a supply failure without a planned maintenance window.