The hardware, port layout, and performance specs are identical. The only difference is storage. The 71F includes a 128 GB SSD for local log retention. If your environment requires on-device logging for PCI-DSS, HIPAA, or other compliance frameworks, and you do not have a FortiAnalyzer in the stack, the 71F is the right choice. If logs go to FortiCloud, FortiAnalyzer, or a third-party SIEM, the 70F handles everything else at a lower list price.

Fortinet rates the 70F for up to 100 users in a small office or branch environment. Practical capacity depends on the security features you enable. With a full NGFW stack running IPS, application control, and SSL inspection, the device sustains 1 Gbps of inspected throughput, which is sufficient for a 100-user site on a standard broadband or dedicated fiber circuit. Heavier traffic profiles or multiple concurrent VPN tunnels may reduce that headroom.

Yes. SD-WAN is built into FortiOS at no additional license cost and runs on the 70F out of the box. You can configure multiple WAN links, write application-aware routing policies, and automate failover between ISPs. The optional FortiGuard SD-WAN Overlay subscription adds Fortinet's Secure SD-WAN overlay network, application SLA steering, and centralized orchestration through FortiManager for multi-site deployments.

The most complete option is the FortiGuard Enterprise Protection bundle, which covers IPS, Application Control, Anti-Malware, Web Filtering, DNS Filtering, Anti-Spam, Security Rating, and Industrial Security. For smaller budgets, the UTM Protection bundle includes IPS, Application Control, Anti-Malware, and Web Filtering at a lower annual cost. Fortinet sells all subscriptions in 1, 3, and 5-year terms. Our team can quote the right bundle alongside your hardware order so everything arrives bundled and registered.

Yes. The 70F registers to FortiManager for centralized policy management, and to FortiAnalyzer for log aggregation, reporting, and compliance exports. Both platforms are available as physical appliances or virtual machines. If you manage more than three or four FortiGate devices across sites, centralizing through FortiManager substantially reduces the time your team spends pushing policy changes and firmware updates to each box individually.

Yes. Our Fortinet-certified engineers configure your 70F or 71F before it leaves the warehouse. The service covers more than 25 components, including WAN interfaces, LAN zones, IPS profiles, SSL inspection policies, VPN tunnels, SD-WAN rules, and admin accounts, all tuned to the environment details you provide. Remote deployment assistance and seven calendar days of post-deployment support are included. Add the configuration service to your cart when you order the appliance.