FortiGate Firewall Buying Guide: Which Model Does Your Business Need?

Choosing a firewall by the biggest Gbps number on the box is how businesses end up either overpaying or under-protected. This guide walks through the seven FortiGate models we supply at AccessStore.lk, explains what the specifications actually mean, and matches each model to the size of network it fits.

The one number that matters most

Datasheets lead with firewall throughput, but that figure is measured with security switched off. The realistic number is threat protection throughput — performance with intrusion prevention, antivirus and application control enabled on real-world traffic. Size your firewall so your internet connection fits comfortably inside the threat protection number, with headroom to grow.

The range at a glance

• FortiGate 40F — 5 Gbps firewall / 600 Mbps threat protection, 700k sessions, fanless desktop. The small-office starter for a branch or office under roughly 20 users.
• FortiGate 60F — 10 Gbps firewall / 700 Mbps threat protection, 10 GE ports. The SMB workhorse and the default choice for 20–75 users.
• FortiGate 80F — 10 Gbps firewall / 900 Mbps threat protection, 1.5 million sessions. For larger SMBs and busy branches of 75–150 users, or heavier VPN use.
• FortiGate 70G — 10 Gbps firewall / 1.3 Gbps threat protection on current-generation FortiSP5 silicon. The modern step up from the 60F class, for busy small offices and larger branches.
• FortiGate 90G — 28 Gbps firewall / 2.2 Gbps threat protection and 10G ports. Serious headroom for growing SMBs with heavy SSL inspection or many VPN users.
• FortiGate 100F — 20 Gbps firewall / 1 Gbps threat protection in a 1U rackmount appliance. Built for mid-size head offices and larger branches.
• FortiGate 200F — 27 Gbps firewall / 3 Gbps threat protection, 3 million sessions, 10G SFP+ uplinks and redundant power. The campus and HQ edge, with high-availability pairing.

Do not forget licensing

A FortiGate's next-generation features — FortiGuard intrusion prevention, antivirus, web filtering and application control — run on a renewable subscription (UTP or Enterprise bundle), with FortiCare covering support and hardware replacement. Budget for the bundle together with the hardware: an unlicensed firewall is only half a firewall. We quote hardware and licensing together so there are no surprises at renewal time.

Talk to us before you buy

Sizing depends on your line speed, user count, VPN plans and how much encrypted traffic you inspect. Browse the full firewalls range and the Fortinet brand page, or call AccessStore.lk on +94 76 101 9946 and we will recommend the model that fits — no overselling.