Compare FortiGate firewalls and the wider Fortinet Security Fabric in one place: filter by throughput, size the right model for your network and compare up to four models side by side.
This page turns Fortinet's official Product Matrix (October 2026 edition) into a tool you can use instead of scrolling through a six-page PDF. Here is what you can do:
Firewall throughput is the raw maximum, measured without inspection, so it overstates what you will get with security features on. NGFW throughput is measured with the firewall, IPS and application control enabled, and Threat Protection throughput also adds malware protection. For sizing a real network, use the NGFW figure if you run IPS and application control, and the Threat Protection figure if you also use malware protection, then add headroom for growth.
All performance values in the matrix are "up to" figures from Fortinet's internal lab tests, so actual results depend on your traffic mix and configuration. Need help choosing? Contact Ressis or browse our Fortinet products.
Compare FortiGate firewalls and the wider Fortinet Security Fabric in one place: filter by throughput, size the right model for your network, and compare up to four models side by side. Data from Fortinet's official Product Matrix, no PDF download needed.
Top selling models, 27 firewalls from desktop units to 16 RU chassis. All values are "up to" figures from Fortinet's lab.
Answer three questions and we shortlist models with about 30% headroom.
Send us your user count, internet speed and the security features you need, and we will size it for you.
The matrix lists the headline limits of each appliance so you can shortlist models before reading datasheets. Firewall throughput is the raw maximum; NGFW and Threat Protection add inspection and are the numbers that matter for sizing a real network.
Always size on the throughput of the features you will switch on, then add headroom for growth. Our wizard above does this for you.
Firewall throughput is measured with UDP traffic and no inspection. NGFW throughput is measured with Firewall, IPS and Application Control enabled using Enterprise Mix traffic. Threat Protection additionally enables malware protection. Both are measured with logging enabled.
Use NGFW throughput if you run IPS and application control, and Threat Protection throughput if you also use malware protection. Firewall throughput alone overstates what you can expect with security features enabled.
SSL Inspection values use an average of HTTPS sessions with different cipher suites, with IPS enabled.
No. Fortinet states that performance values are "up to" figures obtained in internal lab tests under ideal conditions, and real results vary with network environment and configuration.
Session counts marked with a Hyperscale note require the Hyperscale license. Latency values with an Ultra-Low Latency note apply when ULL ports are used.
Source: Fortinet Product Matrix, October 2026 (document PROMTX-2026-R177-OCT), fortinet.com. Fortinet®, FortiGate®, FortiCare® and FortiGuard® are registered trademarks of Fortinet, Inc. Performance and other metrics were attained in internal lab tests under ideal conditions and actual results may vary. Fortinet reserves the right to change this information without notice; the most current Fortinet publication applies. This page is a convenience reformatting by Ressis and is not an official Fortinet publication.