FortiGate firewalls deliver integrated network security, SD-WAN and threat protection across branch, enterprise and data centre environments. Built on FortiOS and Fortinet security processors, they provide consistent policy enforcement, encrypted traffic inspection and scalable performance across all deployment sizes.
As a trusted Fortinet partner, our team has an extensive technical understanding of Fortinet’s product and services portfolio – enabling us to assess, integrate, and optimise solutions for even the most complex or high-demand environments.
FortiGate campus firewalls deliver scalable, high-performance security for dense user environments, enabling segmented access and consistent policy enforcement across users.
Features models FG-100F to FG-600F.
Designed for large enterprise networks, FortiGate firewalls provide high-throughput security, advanced segmentation and centralised policy control for complex distributed environments.
Features models FG-1000F to FG-7000F.
Built for high-density data centre environments, FortiGate firewalls deliver ultra-high throughput, low latency and advanced threat protection for east-west and north-south traffic.
Includes models FG-1800F to FG-7080F.
Talk to a certified Fortinet expert. We’ll help you choose the right combination of hardware, licenses, and services.
Considering FortiGate firewalls to protect your infrastructure? Our FAQ answers 8 common questions.
Q1. Which FortiGate series is best for my deployment?
| Deployment needs | Key capabilities | Best-fit FortiGate series |
| Secure large campus or distributed sites with high east-west traffic and WAN edge connectivity | • Next-generation firewall with consistent threat inspection • Integrated Secure SD-WAN and VPN • High session capacity for dense user environments • Support for segmentation and internal network visibility | FortiGate Campus (100F to 600F). Well suited to campus cores, large branch aggregation, and secure WAN edge deployments needing balanced performance and advanced security services. |
| Protect enterprise perimeters and central WAN hubs with high encrypted traffic volumes | • High firewall and threat protection throughput • Scalable session and VPN capacity • Multi-gigabit and high-speed interface options • Advanced security services for enterprise edge and hybrid environments | FortiGate Enterprise (1000F to 7000F). Designed for enterprise core and perimeter roles with critical performance, scale, and flexibility requirements. |
| Secure data centre perimeters or internal segmentation at very high scale | • Ultra-high throughput with low latency • Very high session and connection capacity • High-speed interfaces for data centre fabrics • Support for large-scale east-west traffic inspection and segmentation | FortiGate Data Centre (1800F to 7080F). Optimised for data centre and hyper-scale environments requiring line-rate security and sustained performance at scale. |
Q2. How does Fortinet support zero trust and segmentation at scale?
Fortinet Data Centre Firewalls apply granular security policies using VXLAN/VLAN tagging, micro-segmentation, and user identity through FortiAuthenticator. Zero Trust Network Access (ZTNA) ensures that every user, device, and application is continuously verified, preventing lateral movement across workloads and tenants.
Q3. What makes Fortinet Firewalls suitable for hyperscale data centres?
High-end FortiGate models leverage Fortinet’s NP7 processors to deliver multi-terabit throughput with sub-microsecond latency. Hardware acceleration offloads intensive tasks such as intrusion prevention and SSL inspection, enabling secure operations in hyperscale environments without impacting application performance.
Q4. How do Fortinet Firewalls manage encrypted traffic at massive scale?
With dedicated SSL/TLS inspection hardware, Fortinet Firewalls can decrypt and inspect encrypted traffic (including TLS 1.3) at line rate. This allows enterprises to maintain visibility across over 80% of encrypted traffic without creating bottlenecks or blind spots.
Q5. How do Fortinet Firewalls integrate with SDN and automation frameworks?
Fortinet provides APIs, Ansible modules, and direct integrations with VMware NSX, Cisco ACI, and OpenStack. This enables policy-driven automation where firewall rules adapt dynamically to workload changes, supporting agile, software-defined data centre environments.
Q6. How do Fortinet Firewalls mitigate DDoS and high-volume attack scenarios?
FortiGate firewalls feature hardware-accelerated DDoS protection, anomaly detection, and rate-limiting to block volumetric and application-layer attacks. They can also integrate with FortiDDoS appliances for advanced, layered mitigation in large-scale environments.
Q7. What support options are provided under FortiCare?
FortiCare offers flexible global support ranging from 8×5 business-hour cover to 24×7 mission-critical support. Options include advanced hardware replacement, firmware updates, and direct access to Fortinet engineers, ensuring organisations maintain uptime and compliance.
Q8. How do FortiGate firewalls integrate with the wider Fortinet Security Fabric?
FortiGate firewalls are typically deployed as part of a broader Fortinet Security Fabric, combining cloud services, centralised management, identity, endpoint protection, and WAN control to extend visibility, control, and operational efficiency.
| Operational requirement | Fortinet platforms and services | What they deliver |
|---|---|---|
| Cloud-based management and visibility | FortiCloud | Centralised, cloud-hosted management, analytics, reporting, and sandboxing for Fortinet security platforms, reducing on-premises infrastructure while maintaining enterprise-grade control. |
| Threat intelligence and security services | FortiGuard | Continuously updated threat intelligence powering IPS, antivirus, web filtering, application control, and botnet protection across FortiGate and the wider Security Fabric. |
| Secure remote access and endpoint posture | FortiClient and VPN / ZTNA | Endpoint protection with integrated VPN and Zero Trust Network Access, enabling secure remote connectivity with device posture checks and policy enforcement. |
| Identity, authentication, and access control | FortiAuthenticator and FortiIdentity Cloud (FortiToken) | Centralised identity services, multi-factor authentication, and user-based policy enforcement across network, VPN, and ZTNA access. |
| Secure Access Service Edge (SASE) | FortiSASE | Cloud-delivered security and access services for remote users and branch locations, integrating networking and security controls under a unified policy model. |
| Centralised management and analytics (on-prem or hybrid) | FortiManager and FortiAnalyzer | Policy management, configuration control, logging, analytics, and compliance reporting for large-scale FortiGate and multi-device environments. |
| Advanced visibility and network control | FortiSIEM and FortiNAC | Security event correlation, operational visibility, and network access control for endpoint discovery, segmentation, and compliance enforcement. |
| WAN optimisation and connectivity | Fortinet SD-WAN | Application-aware routing, integrated security, and centralised orchestration to optimise WAN performance across MPLS, broadband, and LTE/5G links. |
