The FortiGate 200F and 201F are 1U rack-mount next-generation firewalls built for mid-sized to large
enterprise environments, campus locations, and large branch deployments. Both deliver 27 Gbps of firewall
throughput, AI/ML-powered FortiGuard security services, and built-in secure SD-WAN, all hardware-accelerated
by Fortinet's NP6XLite and CP9 processors. The 201F adds 480 GB of onboard SSD storage for local logging and
on-box reporting without a separate FortiAnalyzer appliance.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
FortiGate 200F / 201F at a Glance
Performance
Firewall throughput of 27 Gbps on 1518-byte packets, with IPS at 5 Gbps, NGFW at 3.5 Gbps, and Threat
Protection at 3 Gbps. Application control runs at 13 Gbps and IPsec VPN hits 13 Gbps. All figures are
hardware-accelerated by the NP6XLite network processor and CP9 content processor, so full-inspection
throughput does not degrade under real-world load.
Interfaces and Ports
16x GE RJ45 switch ports with dedicated MGMT and HA ports. 8x GE SFP slots for fiber uplinks. 4x 10GE
SFP+ slots, including 2 FortiLink-designated slots for direct FortiSwitch stacking. USB and console
ports round out the panel. Hardware TPM and Bluetooth Low Energy (BLE) support zero-touch provisioning
workflows.
VPN and Remote Access
IPsec VPN throughput of 13 Gbps supports up to 2,000 site-to-site tunnels and 16,000 client-to-gateway
tunnels. SSL-VPN delivers 2 Gbps with up to 500 concurrent tunnel-mode users. SSL inspection reaches 4
Gbps at 3,500 connections per second and 300,000 concurrent sessions, so encrypted traffic receives full
inspection without a throughput penalty.
Capacity and High Availability
3 million concurrent TCP sessions and 280,000 new sessions per second handle demanding enterprise
workloads. Supports 10,000 firewall policies, up to 64 managed FortiSwitches, 256 FortiAPs, and 5,000
FortiTokens. High availability options include Active-Active, Active-Passive, and full clustering. ICSA
Labs certified for Firewall, IPsec, IPS, AV, SSL-VPN, and IPv6.
Not sure which configuration fits your environment?
Compare the FG-200F and FG-201F side by side with the broader FortiGate enterprise lineup to find the
model that matches your traffic volume, user count, and storage requirements.
The FG-200F and FG-201F share the same hardware platform, port count, and throughput
specs. The only hardware difference is internal storage. The FG-201F includes 480 GB of onboard SSD,
which enables local log retention and on-box reporting without a separate FortiAnalyzer appliance. The
FG-200F has no internal storage and sends logs to an external log management system or FortiCloud.
Both models use the same NP6XLite and CP9 hardware acceleration.
Fortinet rates the 200F series for 200 to 300 concurrent users, which makes it a
strong fit for mid-sized enterprise locations, large campus sites, and high-traffic branch offices.
The 3 million concurrent session capacity and 280,000 new sessions per second give it plenty of
headroom for demanding enterprise workloads without running into a hardware ceiling.
Yes. Secure SD-WAN is built into FortiOS and included on every FortiGate at no
additional license cost. There is no separate SD-WAN module or subscription required. The NP6XLite
processor handles SD-WAN path-steering decisions at line rate, so adding SD-WAN policies does not
reduce overall firewall throughput. FortiGate SD-WAN supports application-aware routing, dynamic WAN
link health monitoring, and centralized orchestration through FortiManager.
Three primary FortiGuard bundles are available for the 200F and 201F. UTP (Unified
Threat Protection) covers IPS, antivirus, botnet, mobile malware, and application control. Advanced
Threat Protection adds inline sandbox detection on top of IPS and AV. Enterprise Protection is the
most comprehensive tier, covering everything in UTP plus inline CASB, Data Loss Prevention, DNS and
video filtering, antispam, and the FortiConverter migration service. All bundles include FortiCare
Premium support with next-business-day hardware replacement. Terms of 1, 3, or 5 years are available
for each bundle.
Both the FG-200F and FG-201F are 1U rack-mount appliances measuring 1.73 x 17.01 x
13.47 inches (44 x 432 x 342 mm). Both include dual built-in power supplies. A rack mount tray
accessory is available separately for installations that require it. The compact 1U footprint fits
standard 19-inch rack infrastructure at campus data centers and large branch office wiring closets
without requiring any additional rack space.
Need help sizing a FortiGate 200F or 201F?
Tell our engineers what you are protecting, how many users you have, and whether you need local logging.
We will help you choose the right model and the FortiGuard bundle that fits your threat posture and
budget.
