The hardware specs are identical on both models. Same port layout, same NP7Lite and CP10 ASICs, same throughput ratings, and dual AC power supplies on both. The only difference is storage. The 200G ships without an onboard drive. The 201G includes a 480 GB SSD for local log storage and reporting. If you plan to forward logs to FortiAnalyzer or an external SIEM, the 200G works fine. If you want local log retention without a separate logging device, the 201G saves you the extra purchase.

With the full service stack running, including firewall, IPS, Application Control, and Malware Protection, the 200G delivers 6 Gbps of Threat Protection throughput. IPS on its own runs at 9 Gbps. NGFW throughput, which combines firewall, IPS, and Application Control, hits 7 Gbps. Raw firewall throughput is 39 Gbps at 1518-byte and 512-byte packet sizes. All performance numbers are measured with logging active, which is how real networks operate.

Fortinet rates the 200G series for 400 to 500 concurrent users. The 11 million concurrent session table and 400,000 new sessions per second give the platform enough headroom for that user range, including environments with active SSL inspection and a heavy HTTPS traffic mix.

The appliance hardware ships without a FortiGuard subscription. You add the services that match your environment. The most common bundle includes IPS, Application Control, Web Filtering, Antivirus and Anti-Botnet Security, and Zero-Day Threat Prevention. FortiCare support covers firmware updates and TAC access. Firewalls.com quotes hardware, FortiGuard services, and FortiCare together so you have one number, not three separate line items to track down.

Yes. Secure SD-WAN is a native FortiOS feature on the 200G and 201G and requires no additional license. That includes WAN path intelligence, application-aware traffic steering, per-link SLA monitoring, and self-healing link failover. It runs under the same policy framework as the NGFW, so there is no separate appliance and no separate management interface to learn.