Built for distributed enterprise branch locations and mid-size organizations running 200 to 500 users, the
FortiGate 90G and 91G deliver 27.9 Gbps of firewall throughput and 2.2 Gbps of full threat protection from a
compact desktop chassis. Fortinet's FortiSP5 ASIC powers native SD-WAN and ZTNA enforcement alongside deep
packet and SSL inspection, all under a single FortiOS instance. The 91G adds a 120 GB SSD for local logging
and WAN optimization storage where the 90G does not.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
FortiGate 90G / 91G at a Glance
Performance
Firewall throughput up to 27.9 Gbps. IPS throughput 4.5 Gbps. NGFW throughput 2.5 Gbps. Threat
protection 2.2 Gbps. SSL inspection throughput 2.6 Gbps. Application control throughput 6.7 Gbps. New
sessions per second 124,000. Concurrent sessions 3 million. Powered by the Fortinet FortiSP5 ASIC with
hardware-accelerated IPsec VPN at 25 Gbps.
Interfaces and Connectivity
8x GE RJ45 internal ports. 2x shared-media WAN ports switchable between 10 GE RJ45 or 10GE/GE SFP+ per
slot. 1x USB management port. 1x RJ45 console. Supports up to 24 FortiSwitches and 96 FortiAPs (48 in
tunnel mode). The 91G adds a single 120 GB internal SSD; the 90G ships without onboard storage.
VPN and Zero-Trust Access
IPsec VPN throughput 25 Gbps. Up to 200 gateway-to-gateway tunnels and 2,500 client-to-gateway tunnels.
SSL VPN throughput 1.4 Gbps with up to 200 concurrent tunnel-mode users. Universal ZTNA enforcement is
built into FortiOS and controls application access for both on-site and remote users without a separate
gateway.
Management and High Availability
Active-Active, Active-Passive, and full clustering HA. Dedicated front-panel HA port for direct unit
pairing. Hardware Trusted Platform Module (TPM) for cryptographic key storage. Bluetooth Low Energy
(BLE) for zero-touch provisioning. Centralized management via FortiManager or FortiGate Cloud. Virtual
domains: 10 default, 10 maximum.
Shopping the full FortiGate lineup?
Our engineers can walk you through where the 90G fits relative to the 80G below it and the 120G above. A
quick sizing call can save a costly swap later.
The only hardware difference is internal storage. The 91G ships with a 120 GB SSD for
local logging, WAN optimization, and FortiGuard database caching. The 90G has the same ports, FortiSP5
ASIC, and performance numbers but no onboard storage. Both models accept the same FortiGuard service
bundles and FortiCare support tiers, so the licensing and subscription paths are identical.
Fortinet rates the 90G series for environments with 200 to 500 users. Actual headroom
depends heavily on which security services you run. Full threat protection with SSL inspection draws
more resources than a basic firewall policy. Our engineers can help you size the right model against
your actual traffic mix, concurrent session count, and service requirements before you order.
Fortinet offers three main service tiers for the 90G and 91G. Advanced Threat
Protection covers IPS, malware protection, and application control. Unified Threat Protection adds URL
filtering, DNS security, and antispam on top of that. The Enterprise Protection bundle is the most
complete, adding inline CASB, DLP, AI-powered inline sandbox, attack surface monitoring, and the
FortiConverter migration service. All tiers are available in one-, three-, and five-year terms bundled
with FortiCare Premium support.
Yes. SD-WAN is built into FortiOS and runs on the FortiSP5 ASIC alongside the
firewall engine, so there is no separate license fee and no extra appliance. The 90G supports
application-aware traffic steering, WAN path monitoring, dynamic path selection, and automatic uplink
failover. It is the same SD-WAN stack that earns Fortinet its Gartner Magic Quadrant Leader position,
running on a desktop appliance priced for branch and mid-market deployments.
The 90G supports Active-Active, Active-Passive, and clustering HA. A dedicated
front-panel HA port connects directly to a paired unit. For distributed sites where a redundant pair
is not practical, the 90G also works with FortiManager zero-touch provisioning, so a replacement unit
can pull its full configuration automatically without requiring on-site IT staff to intervene.
Not sure whether the 90G or 91G is the right fit?
Tell us your user count, WAN setup, and whether you need local logging storage. A certified Fortinet
engineer will come back with a specific recommendation and a bundle quote, usually within one business
hour.
