Fortinet FortiWiFi 70G / 71G.
Built-in Wi-Fi 6. Branch security without the rack.
The FortiWiFi 70G and 71G pack a next-generation firewall, SD-WAN, and a dual-band Wi-Fi 6 access point
into one compact, fanless desktop. Fortinet's SP5 ASIC delivers 10 Gbps firewall throughput and 1.3 Gbps of
threat protection without throttling wireless traffic. The 71G adds 64 GB of onboard SSD storage for local
logging and reporting, so branch sites keep visibility on the box without a separate FortiAnalyzer.
Ports: 10 x GE RJ45 (7 internal, 2 WAN, 1 DMZ) Wi-Fi: Dual-band 802.11ax (Wi-Fi 6), dual-stream, 2.4 GHz and 5 GHz Storage (70G): None Storage (71G): 64 GB onboard SSD for local logging and reporting USB: 1 x USB port Console: RJ45 console port
Capacity
Concurrent sessions: 1,400,000 New sessions per second: 100,000 Firewall policies: 5,000 IPsec VPN tunnels: 200 site-to-site SSL VPN users: 200 concurrent FortiAPs managed: Up to 32 FortiSwitches managed: Up to 8
Hardware and Deployment
Processor: Fortinet SP5 secure SD-WAN ASIC Security: Trusted Platform Module (TPM), signed firmware switch Form factor: Fanless desktop, wall-mountable Power: External AC adapter Operating temp: 0 to 40 degrees C Management: FortiOS, FortiManager, FortiGate Cloud
Series includes PoE variants (70G-PoE, 71G-PoE) for powering downstream APs and phones.
Not sure which model fits your site?
The 70G and 71G share the same SP5 ASIC and throughput. The 71G adds a 64 GB SSD for on-box logging. PoE
variants power downstream access points and IP phones directly from the firewall. Compare the full
FortiWiFi lineup to find the right configuration for your branch.
The hardware platform is identical. Both run Fortinet's SP5 SD-WAN ASIC and deliver
the same throughput: 10 Gbps firewall, 2.5 Gbps IPS, 1.5 Gbps NGFW, and 1.3 Gbps threat protection.
The FortiWiFi 71G adds a 64 GB onboard SSD for local log storage and reporting. If your branch needs
on-box traffic history and compliance records without a separate FortiAnalyzer, the 71G is the right
pick. Both models include built-in dual-band Wi-Fi 6.
The FortiWiFi 70G and 71G include a dual-band, dual-stream 802.11ax (Wi-Fi 6) access
point built directly into the chassis, covering both 2.4 GHz and 5 GHz bands. For a small branch this
often eliminates the need for a separate access point. For larger spaces or higher client density, the
integrated wireless controller manages up to 32 external FortiAP units alongside the built-in radio,
all from the same FortiOS interface.
Most branch deployments choose UTP (Unified Threat Protection), which bundles IPS,
anti-malware, web filtering, DNS filtering, and antispam with FortiCare Premium support. Sites with
stricter compliance requirements often step up to Enterprise Protection, which adds DLP and AI inline
malware prevention. ATP covers the core threat prevention stack without antispam and FortiCare
Premium. Our engineers can recommend the right bundle once we know your user count, traffic mix, and
compliance obligations. Call or chat us and we'll size it for you.
Yes. SD-WAN is built into FortiOS and included in every FortiGate and FortiWiFi
appliance at no added cost. The SP5 ASIC accelerates SD-WAN path selection and WAN link monitoring
alongside firewall and threat inspection, so enabling SD-WAN does not reduce security throughput. You
get application-aware WAN steering, link health monitoring, automatic failover, and WAN utilization
reporting out of the box.
Yes. FortiManager provides centralized policy, firmware, and configuration management
across all of your deployed units, giving your team a single pane of glass over every site. FortiGate
Cloud is a lighter-weight alternative for smaller deployments that do not need an on-premises manager.
Both options integrate with the full Fortinet Security Fabric, so FortiSwitches and FortiAPs at each
site are visible and manageable from the same console as the firewall.
Not sure which FortiWiFi 70G or 71G configuration is right for you?
Tell us your user count, how many WAN links you are running, whether you need PoE for access points or
phones, and whether on-box logging matters for your compliance posture. A certified Fortinet engineer will
reply with a sized recommendation and a bundled quote, usually within one business hour.
