The hardware is nearly identical. The key difference is onboard storage. The 121G ships with a 480 GB SSD, which the 120G does not include. That storage enables local log retention, SD-WAN analytics, and reporting without requiring a separate FortiAnalyzer appliance at the site. Both models share the same port configuration, SP5 ASIC, throughput specs, and FortiOS feature set. If local storage matters for your deployment, the 121G is the right pick.

The SP5 is Fortinet's latest Security Processing Unit, combining a RISC-based CPU with a proprietary content and network processor on a single chip. It accelerates firewall, VPN, and deep packet inspection natively in silicon, which is why the 121G can reach 39 Gbps of raw firewall throughput and 2.8 Gbps of full threat protection without relying on general-purpose CPUs. You get enterprise-grade inspection performance from a 1RU branch appliance without paying for a much larger chassis.

For most branch and distributed enterprise deployments, the UTP (Unified Threat Protection) bundle is the right starting point. It covers IPS, application control, web and DNS filtering, antivirus, and antispam, plus FortiCare Premium support. Organizations with stricter compliance needs or zero-day exposure often step up to the Enterprise Protection bundle, which adds inline sandbox, CASB, DLP, and OT security services. Our engineers can walk you through which bundle maps to your requirements before you buy.

Yes. SD-WAN is built into FortiOS and included at no additional license cost. The 121G supports application-aware path selection, WAN SLA monitoring, cloud on-ramp, automated failover across multiple ISP links, and full SD-WAN analytics stored locally on the 480 GB SSD. The 4 x 10GE SFP+ uplinks and 16 built-in switch ports give you the flexibility to run active WAN aggregation and access-layer switching from the same appliance.

Yes. The FortiLink protocol lets you manage FortiSwitch and FortiAP devices directly from the FortiGate dashboard with no separate controller hardware needed. The 121G supports up to 32 FortiSwitches and up to 128 FortiAPs (64 in tunnel mode) from a single management interface. That makes it a natural SD-Branch anchor for campus, distributed retail, or multi-site healthcare environments where you want unified wired, wireless, and security management in one appliance.