The two models share identical hardware, port configuration, and performance specs. The only difference is onboard storage. The 121G includes a 480 GB SSD for local logging, reporting, and traffic capture directly on the appliance. The 120G does not include onboard storage. If you centralize logs through FortiAnalyzer or FortiGate Cloud, the 120G handles that just fine. If you want logs retained on the device itself, choose the 121G.

The 120G series delivers 39 Gbps of firewall throughput, 5.3 Gbps of IPS throughput, 3.1 Gbps of NGFW throughput, and 2.8 Gbps of full-stack threat protection. SSL inspection runs at 3 Gbps. All figures are SP5 ASIC-accelerated and sourced from the official Fortinet datasheet measured under lab conditions.

Three FortiGuard bundles are sold with the hardware. ATP includes IPS, advanced malware protection, and application control. UTP adds URL filtering, DNS filtering, video filtering, and antispam. Enterprise Protection adds data loss prevention and OT security services on top of UTP. All three bundles include FortiCare Premium support. Subscriptions are available in 1, 3, and 5 year terms.

Yes. SD-WAN is built into FortiOS and available on every FortiGate, including the 120G and 121G, with no additional license required. ZTNA enforcement is also included in FortiOS at no extra cost, making these appliances capable of replacing standalone SD-WAN boxes while adding full next-generation firewall inspection in the same chassis.

Both models ship with 18 GE RJ45 ports (1 dedicated management, 1 HA, and 16 FortiLink-capable switch ports), 8 GE SFP slots, and 4 10GE SFP+ slots. The FortiLink-enabled switch ports can be reconfigured as standard routed ports if needed, and they support direct integration with FortiSwitch access switches for centralized security and switching management from the FortiGate interface.