Fortinet FortiGate Small Business Firewalls
FortiGate Small Business Firewall. Enterprise protection sized for offices of 5 to 250.
Every model in the FortiGate SMB lineup runs the same FortiOS operating system and the same FortiGuard threat intelligence services used in enterprise deployments. SD-WAN, IPS, deep packet inspection, and application control are built in at no extra cost. Firewalls.com's certified Fortinet engineers can configure your unit before it ships.
Shop by Model
FG-30G / FG-31G
The smallest G-series desktop, built for micro-branches and remote workers on light traffic. Runs full FortiOS; the 31G adds a built-in LTE modem for SIM-based WAN.
Shop FG-30G / FG-31G →
FG-40F
A reliable entry point for small offices replacing a consumer router. 5 Gbps firewall throughput and the full FortiOS feature set in a compact desktop chassis.
Shop FG-40F →
FG-50G / FG-51G
G-series hardware for the 50-user range, with more throughput and SSL inspection headroom than the F-series it replaces. The 51G adds a built-in LTE modem for WAN failover.
Shop FG-50G / FG-51G →
FG-60F / FG-61F
Fortinet's most widely deployed SMB model: 10 Gbps firewall throughput and full FortiGuard support for 50 to 75 users. The 61F adds integrated LTE for WAN failover.
Shop FG-60F / FG-61F →
FG-70F / FG-71F
Steps up from the 60-series with more GE ports and IPsec VPN throughput, ideal for busier branches running multiple tunnels. The 71F adds a built-in LTE modem.
Shop FG-70F / FG-71F →
FG-70G / FG-71G
Same user range as the 70F but on G-series hardware with the NP7 Lite ASIC and much higher SSL inspection throughput. The 71G adds cellular connectivity.
Shop FG-70G / FG-71G →
FG-80F / FG-81F
Upper SMB performance with ten GE ports and higher VPN throughput in a rack-mountable chassis. The 81F adds an integrated LTE modem.
Shop FG-80F / FG-81F →
FG-90G / FG-91G
G-series performance for the 200-user range, with more memory and hardware acceleration over the 80F. Ideal for busy retail and dense branches. The 91G adds cellular failover.
Shop FG-90G / FG-91G →
FG-120G / FG-121G
The top of the SMB desktop lineup, covering up to 250 users with throughput that rivals some rack-mount appliances. The 121G adds a built-in LTE modem.
Shop FG-120G / FG-121G →
Licenses & Renewals
Current FortiGuard subscriptions for every SMB model, in ATP, UTP, and Enterprise bundles from 1 to 5 year terms. We can match a renewal to your appliance and expiration date.
Shop All Licenses →FortiGate Small Business Firewalls at a Glance
| Model | Best For | User Count | Form Factor | Key Feature |
|---|---|---|---|---|
| FG-30G / FG-31G | Micro-branch, remote office | 1 to 25 | Desktop | G-series throughput, 31G adds built-in LTE modem |
| FG-40F | Small office, consumer router replacement | Up to 40 | Desktop | 5 Gbps firewall throughput, full FortiOS feature set |
| FG-50G / FG-51G | Small office, encrypted-traffic-heavy | Up to 50 | Desktop | G-series SSL inspection, 51G adds built-in LTE modem |
| FG-60F / FG-61F | Small to medium office, multi-site VPN | Up to 75 | Desktop | Best-seller, 10 Gbps firewall, 61F adds LTE |
| FG-70F / FG-71F | Medium branch, multi-VPN environment | Up to 100 | Desktop | More GE ports, higher IPsec VPN throughput |
| FG-70G / FG-71G | Medium branch, HTTPS-heavy traffic | Up to 100 | Desktop | NP7 Lite ASIC, higher SSL inspection throughput |
| FG-80F / FG-81F | Growing business, network closet install | Up to 150 | Desktop / Rack | 10x GE ports, rack-mountable, 81F adds LTE |
| FG-90G / FG-91G | Busy branch, retail, light manufacturing | Up to 200 | Desktop | G-series acceleration, more memory than 80F |
| FG-120G / FG-121G | Upper SMB, high SSL inspection demand | Up to 250 | Desktop | Top SMB throughput, bridges into mid-range performance |
FortiGate Small Business Firewall FAQ
The G series uses newer hardware, including Fortinet's NP7 Lite ASIC for higher throughput and lower latency, more memory, and improved SSL inspection performance. F series models are still solid performers and widely deployed, but if your budget allows, the G series handles traffic-heavy environments and encrypted traffic more efficiently. For most new purchases in the SMB range, we recommend the G series where available.
A general starting point: FG-30G for 1-25 users, FG-40F for up to 40, FG-50G for up to 50, FG-60F for up to 75, the 70-series for up to 100, FG-80F for up to 150, FG-90G for up to 200, and FG-120G for up to 250. The right model also depends on how much SSL inspection, VPN, and concurrent session traffic your environment generates. Our engineers can size it precisely if you tell us your traffic profile and use case.
The 1 variant adds a factory-installed LTE or 4G modem for cellular WAN connectivity. That means the FG-61F, FG-71F, FG-71G, FG-81F, FG-91G, and FG-121G can use a SIM card as a primary WAN connection or as automatic failover, without a separate USB adapter or external router. If WAN redundancy is a requirement and you want it built in, choose the 1 model for that series.
Yes. SD-WAN is built into FortiOS and available on every FortiGate model at no additional license cost. You can configure dynamic path selection, WAN load balancing, and application-aware routing from the same management interface you use for firewall policies and VPN.
Fortinet offers three main bundles for SMB appliances. The ATP (Advanced Threat Protection) Bundle covers antivirus, IPS, and cloud-based sandboxing. The UTP (Unified Threat Protection) Bundle adds web filtering, application control, and anti-spam to everything in ATP. The Enterprise Bundle includes all of UTP plus expanded cloud-based threat intelligence feeds. Most SMB customers start with UTP for complete day-to-day coverage without overspending.
Yes. FortiManager provides on-premises centralized management for organizations with multiple sites. FortiGate Cloud is a lighter option for smaller deployments managed through a web portal. Both let you push policies, review logs, and update firmware across devices. FortiAnalyzer adds centralized logging and compliance reporting if your industry requires documentation of security events.
Yes. Our Configuration Service pairs you with a certified Fortinet engineer who gathers your environment details on a pre-deployment call, then configures your unit with zones, VLANs, VPN tunnels, security policies, and SD-WAN rules before it ships. The service includes seven days of post-deployment support to cover anything that comes up during go-live.
Not sure which Fortinet Small Business Firewall is right for you?
Tell us how many users you have, what internet connections you are working with, and whether you need VPN, SD-WAN, or a cellular backup modem. A certified Fortinet engineer gets back to you within one business hour with a specific model and bundle recommendation.
Get a Sizing Recommendation
Login and Registration Form
Existing User