Fortinet FortiGate 200G / 201G.
Mid-market throughput. FortiGuard AI security built in.
The FortiGate 200G and 201G are 1U rack-mount next-generation firewalls built for organizations running 400
to 500 users across distributed branch and headquarters environments. Both models run on Fortinet's NP7Lite
and CP10 ASICs, delivering 39 Gbps of firewall throughput and 9 Gbps of IPS performance without touching the
CPU. The 201G adds 480 GB of onboard SSD for local logging and reporting. Both ship with dual AC power
supplies standard and support the full FortiGuard AI-powered security suite.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
FortiGate 200G / 201G at a Glance
Performance
Firewall throughput of 39 Gbps at 1518-byte and 512-byte packet sizes, with 26.5 Gbps at 64 bytes.
IPsec VPN throughput reaches 36 Gbps. New sessions per second: 400,000. Firewall latency runs 4.36
microseconds. Application Control throughput: 27.8 Gbps. CAPWAP: 37.5 Gbps. NP7Lite and CP10 ASICs
handle all packet and content acceleration without CPU involvement.
Threat Protection
IPS with enterprise traffic mix and logging active: 9 Gbps. NGFW (firewall, IPS, and Application
Control combined): 7 Gbps. Full Threat Protection with Malware Protection added: 6 Gbps. SSL Inspection
with IPS: 7 Gbps, covering TLS 1.3. SSL Inspection CPS: 7,100. SSL-VPN throughput: 3 Gbps with a
recommended 500 concurrent tunnel users.
Interfaces
8x GE RJ45 switch ports, 1x MGMT RJ45, 1x HA RJ45, 8x 5/2.5/GE RJ45, 4x GE SFP slots, 8x 10GE SFP+/SFP
FortiLink slots, 1x USB, 1x console. The 201G adds 480 GB SSD for onboard log storage. FortiLink
supports up to 64 FortiSwitches and up to 256 FortiAPs with 128 in tunnel mode.
HA and Management
Active-Active, Active-Passive, and Clustering HA all supported. Up to 10 virtual domains.
FortiManager-ready for centralized multi-device policy management. FortiAnalyzer-ready for logging and
analytics. Holds up to 5,000 FortiTokens. Both models ship with dual non-hot-swappable AC power supplies
for 1+1 redundancy.
Not sure the 200G fits your traffic load?
The 200G and 201G are sized for 400 to 500 users in mid-market and distributed enterprise environments.
If your user count or throughput requirements land above or below that range, the FortiGate 100G or 400G
may be the better fit. Our certified Fortinet engineers will run the sizing numbers for you before you
buy.
The hardware specs are identical on both models. Same port layout, same NP7Lite and
CP10 ASICs, same throughput ratings, and dual AC power supplies on both. The only difference is
storage. The 200G ships without an onboard drive. The 201G includes a 480 GB SSD for local log storage
and reporting. If you plan to forward logs to FortiAnalyzer or an external SIEM, the 200G works fine.
If you want local log retention without a separate logging device, the 201G saves you the extra
purchase.
With the full service stack running, including firewall, IPS, Application Control,
and Malware Protection, the 200G delivers 6 Gbps of Threat Protection throughput. IPS on its own runs
at 9 Gbps. NGFW throughput, which combines firewall, IPS, and Application Control, hits 7 Gbps. Raw
firewall throughput is 39 Gbps at 1518-byte and 512-byte packet sizes. All performance numbers are
measured with logging active, which is how real networks operate.
Fortinet rates the 200G series for 400 to 500 concurrent users. The 11 million
concurrent session table and 400,000 new sessions per second give the platform enough headroom for
that user range, including environments with active SSL inspection and a heavy HTTPS traffic mix.
The appliance hardware ships without a FortiGuard subscription. You add the services
that match your environment. The most common bundle includes IPS, Application Control, Web Filtering,
Antivirus and Anti-Botnet Security, and Zero-Day Threat Prevention. FortiCare support covers firmware
updates and TAC access. Firewalls.com quotes hardware, FortiGuard services, and FortiCare together so
you have one number, not three separate line items to track down.
Yes. Secure SD-WAN is a native FortiOS feature on the 200G and 201G and requires no
additional license. That includes WAN path intelligence, application-aware traffic steering, per-link
SLA monitoring, and self-healing link failover. It runs under the same policy framework as the NGFW,
so there is no separate appliance and no separate management interface to learn.
Need help sizing the right FortiGate for your environment?
Tell us your user count, your current firewall, and whether you need onboard storage or HA. A certified
Fortinet engineer will have a configuration and pricing recommendation back to you within one business
hour.
