Fortinet FortiGate 3700F Firewall in Dubai, UAE
A 2RU FortiGate platform for organisations that need dense 400GE-to-10GE connectivity, high inspected-traffic capacity, segmentation and resilient enterprise security at data-center or large-network scale. FourTeck can help translate traffic, interface, licensing and redundancy requirements into a practical UAE quotation.
Before you request a quote
Confirm the traffic that must be inspected with security services enabled, not only raw firewall bandwidth. Also define the required port speeds, optics, HA design, FortiGuard service bundle and support term.
The FG-3700F has no onboard SSD storage. If local storage is part of the design, discuss the FG-3701F or an external logging architecture instead of assuming the base model includes disks.
Direct answer: what is the FortiGate 3700F?
The Fortinet FortiGate 3700F is a high-end physical next-generation firewall designed for large enterprise and data-center traffic volumes. It combines FortiOS security and networking functions with NP7 and CP9 security-processing hardware, high-density optical connectivity and high-availability options. It is mainly considered for data-center edge security, internal segmentation, high-capacity VPN, hybrid environments and networks that need 400GE, 200GE, 100GE, 50GE, 25GE or 10GE connectivity. Before proceeding, a buyer should validate inspected throughput rather than raw throughput alone, confirm optic and cabling requirements, decide whether local storage is needed, map the FortiGuard and FortiCare subscriptions, and define the HA and management design.
What it does
The 3700F sits at a high-capacity security control point and applies firewall policy, intrusion prevention, application control, encrypted-traffic inspection and other FortiGuard-delivered protections according to the selected licensing and configuration. Its very high interface speeds make it suitable where modern data-center switching fabrics and high-throughput WAN or interconnect links would overwhelm lower-capacity appliances.
It can also support segmentation and VPN use cases, including large numbers of sessions, while FortiOS provides a common operating environment for security policy, routing, SD-WAN capabilities and integration into the wider Fortinet Security Fabric. The commercial and technical value comes from choosing the appliance for a verified workload, not simply selecting the largest headline number.
Who it suits
The platform is most relevant to large enterprises, data-center operators, service providers, government or regulated environments, cloud-connected organisations and campus or industrial networks with substantial east-west and north-south traffic. It can also be relevant to consolidation projects where multiple security zones or high-capacity links are being brought under one firewall platform.
It is normally excessive for a small office, ordinary branch or modest internet edge. If your requirement is measured in a few gigabits rather than tens of gigabits of fully inspected traffic, or if you do not need the high-speed optical interface density, FourTeck can help compare a smaller FortiGate model rather than over-sizing the project.
Business problems the 3700F can help address
Security inspection becoming a bottleneck
Large environments can have enough application, internet, data-center and encrypted traffic that a lower-capacity firewall forces compromises in inspection policy. The 3700F is designed for a much higher performance class, but sizing must still be based on the services you will actually enable. SSL inspection, IPS, application control, logging and malware protection all affect practical design headroom.
High-speed fabrics need matching security links
A data-center network using 100GE or 400GE switching should not be forced through a firewall with insufficient physical connectivity. The 3700F provides four hardware-accelerated multi-rate QSFP-DD ports that can operate at 400GE and lower supported rates, together with additional 50GE, 25GE and 10GE-capable interfaces. Optics and cabling remain a separate bill-of-material decision.
Segmentation at enterprise scale
Security teams increasingly need to separate user, server, production, OT, guest, cloud and application zones while maintaining operational visibility. FortiGate supports policy-based segmentation and, where appropriate, VXLAN-oriented designs. The exact topology, route design, traffic symmetry and inspection policy should be planned before deployment rather than added after the firewall is installed.
Resilience and planned failover
A single appliance may be unacceptable at a critical security boundary. The 3700F supports active-active, active-passive and clustering configurations, and ships with dual hot-swappable AC power supplies for 1+1 power redundancy. Device-level HA still requires at least two appliances, compatible network design and correctly licensed cluster members.
Core capability band
Hardware acceleration for high-speed firewall, session processing, VPN and supported network functions.
Offloads resource-intensive inspection work such as SSL-related processing, pattern matching and security content functions.
Multi-rate ports across 400GE, 200GE, 100GE, 50GE, 40GE, 25GE, 10GE and 1GE options depending on port type.
Converges security, routing, segmentation, VPN and management capabilities in one FortiGate operating environment.
Is the FortiGate 3700F the right fit?
The following matrix is a selection aid rather than a substitute for a design. A high-end firewall should be sized with traffic measurements, projected growth, enabled inspection services, session characteristics, port requirements and failover expectations in view.
| Requirement | Suitable when | Confirm before ordering |
|---|---|---|
| High inspected throughput | Your real NGFW, IPS or threat-protection load is in the performance range where a high-end appliance is justified. | Peak and average inspected traffic, TLS mix, policy count, growth headroom and logging design. |
| 400GE or 100GE security links | The firewall must connect directly into high-speed data-center switching or backbone links. | Exact port speed, number of links, breakout design, optics, fiber type and switch compatibility. |
| Large session scale | The environment has substantial concurrent and new-session demand from internet, application or service-provider workloads. | Session profile, NAT needs, connection churn, application behavior and capacity margin. |
| High availability | The security boundary must survive device or maintenance events with a planned failover architecture. | Second appliance, licensing for every cluster member, cabling, upstream/downstream redundancy and failover testing. |
| Local onboard storage | Choose carefully: the FG-3700F itself has no onboard SSD listed. | Whether FG-3701F storage or a FortiAnalyzer/external logging approach is required. |
Verified FortiGate 3700F technical information
The figures below are taken from the current Fortinet FortiGate 3700F Series data sheet reviewed for the FG-3700F. Performance values are published as up to values and can vary by system configuration, traffic mix and enabled security functions. They should be used for initial qualification, then validated against the proposed design.
| Brand / model | Fortinet FortiGate 3700F, SKU FG-3700F |
| Product type | High-end next-generation firewall appliance |
| Form factor | Rack mount, 2 RU |
| IPv4 firewall throughput | Up to 589 / 589 / 420 Gbps for 1518 / 512 / 64-byte UDP traffic |
| IPS throughput | Up to 86 Gbps |
| NGFW throughput | Up to 80 Gbps |
| Threat protection throughput | Up to 75 Gbps |
| SSL inspection throughput | Up to 55 Gbps using Fortinet’s stated IPS / average-HTTPS methodology |
| IPsec VPN throughput | Up to 160 Gbps at 512-byte packet size under the vendor test methodology |
| Concurrent TCP sessions | Up to 140 million |
| New TCP sessions per second | Up to 930,000 |
| Firewall policies | Up to 200,000 |
| High-speed QSFP-DD ports | 4 × hardware-accelerated ports supporting 400GE QSFP-DD / 200GE QSFP56 / 100GE QSFP28 / 40GE QSFP+ |
| High-density SFP56 ports | 18 × hardware-accelerated ports supporting 50GE SFP56 / 25GE SFP28 / 10GE SFP+ / 1GE SFP |
| ULL ports | 4 × hardware-accelerated 25GE SFP28 / 10GE SFP+ / 1GE SFP ultra-low-latency ports |
| HA ports | 2 × hardware-accelerated 50GE / 25GE / 10GE / 1GE HA1 and HA2 ports |
| Management | 2 × 10GE / GE RJ45 management ports, 1 console port, USB client/server support |
| Included transceivers | 2 × SFP+ short-range 10GE transceivers listed by Fortinet |
| Onboard storage | None on FG-3700F. The FG-3701F variant is listed with 2 × 1.92 TB SSD. |
| High availability | Active-active, active-passive and clustering configurations |
| Power | 100–240 VAC, 50/60 Hz; average 590 W, maximum 1140 W; dual hot-swappable AC supplies for 1+1 redundancy |
| Dimensions | 88.9 × 443 × 607.1 mm |
| Weight | 21.4 kg |
| Operating temperature | 0°C to 40°C |
| Important note | Performance, licensing, software behavior, compatible optics and deployment results are configuration dependent. Confirm the final bill of materials and supported FortiOS design before purchase. |
Configuration, licensing and compatibility dependencies
The hardware SKU and the security service entitlement are separate purchasing decisions. Fortinet publishes FortiGuard service bundles as well as a-la-carte options, and the available bundle names and contents can change over time. A buyer should therefore avoid assuming that the appliance price automatically includes IPS, malware protection, web filtering, DNS filtering, support, cloud logging or managed services for a specific term. The quotation should name the exact hardware SKU, the selected service bundle or a-la-carte services, the FortiCare level and the subscription duration.
For high availability, both appliances need to be budgeted and licensed correctly. Fortinet’s current NGFW ordering guidance states that cluster members require valid support contracts and valid licenses for the FortiGuard services being used. Licensing only the primary appliance is not sufficient for a properly covered HA cluster. This is an important procurement point because a technically redundant design can still be commercially incomplete if the second appliance is missing the necessary entitlements.
Interface compatibility also deserves detailed attention. The 3700F has flexible multi-rate ports, but that does not mean every transceiver, cable or breakout combination works in every slot or with every neighboring switch. The design should identify port speed, optic type, fiber type, reach, connector, switch-side transceiver and any breakout arrangement. Fortinet lists supported 1GE, 10GE, 25GE, 40GE, 50GE, 100GE, 200GE and 400GE transceiver families for this platform, yet the exact ordering code must match the intended port and distance.
Finally, confirm the target FortiOS release, management architecture and logging destination. The appliance runs FortiOS, but feature availability and behavior can vary between software trains and licensed services. If your design depends on a particular VPN mode, inspection feature, SD-WAN service, automation workflow, FortiManager release or FortiAnalyzer integration, validate it against the planned software release before implementation.
A practical purchase and deployment journey
Measure the workload
Collect real traffic peaks, application mix, encrypted traffic percentage, concurrent sessions, session setup rate and projected growth. Separate raw firewall traffic from traffic that will pass IPS, application control, malware protection or full SSL inspection.
Map physical connectivity
List every production, WAN, core, DMZ, HA and management connection. Record required link speed, number of links, optic reach and switch model. This determines whether the 3700F port mix fits without unnecessary adapters or overlooked transceivers.
Select protection and support
Decide which FortiGuard services, FortiCare support level and subscription term are required. If HA is planned, align entitlement across all cluster members. Include central management and log-retention requirements in the same design discussion.
Build and validate the BOM
Prepare a bill of materials covering appliances, subscriptions, support, optics, cables, spare power supply needs and any FortiManager or FortiAnalyzer components. Review compatibility and the software target before purchase approval.
Plan migration and acceptance
Define policy migration, routing cutover, NAT translation, VPN transition, HA failover tests, logging verification, rollback criteria and change windows. A strong acceptance plan proves the design rather than assuming success because the hardware has high headline capacity.
High-speed inspection without ignoring the security mix
A common procurement mistake is to size a firewall from the maximum Layer-3/Layer-4 throughput number and assume the same result will be available when the security stack is enabled. Fortinet publishes several different measurements for the 3700F because these workloads are not equivalent. The current data sheet lists up to 589 Gbps for IPv4 firewall throughput, while IPS is up to 86 Gbps, NGFW throughput is up to 80 Gbps and threat-protection throughput is up to 75 Gbps. SSL inspection is published at up to 55 Gbps under Fortinet’s stated methodology.
For a buyer, the important number is the one that most closely reflects the intended policy stack. If the appliance will inspect internet traffic with IPS, application control, malware protection and TLS decryption, threat-protection and SSL-inspection figures are far more meaningful than raw firewall throughput. If it will handle large amounts of east-west segmentation with simpler policies, the throughput profile may be different. Traffic direction, packet size, session churn and the proportion of elephant flows versus short web sessions also matter.
The NP7 and CP9 processors are designed to accelerate network and security workloads, but acceleration does not remove the need for headroom. A production design should include growth, maintenance, asymmetric bursts and the impact of future inspection changes. FourTeck can help map the technical requirement to the published metrics so procurement is comparing the right values rather than simply choosing the largest number in a table.
Sizing note
Use the slowest relevant security-service metric as an important planning reference, then apply reasonable design headroom. If the intended traffic profile is uncertain, gather firewall telemetry or run a structured assessment before locking the model. Oversizing wastes budget; undersizing can force the security team to disable inspection or add unplanned appliances later.
Segmentation, hybrid environments and traffic control
The 3700F is not limited to an internet perimeter role. Its combination of high interface density, large session scale and FortiOS policy controls also makes it relevant to internal segmentation and hybrid data-center designs. Organisations may need to isolate production applications, development zones, OT networks, tenant environments, DMZ services, cloud interconnects or groups of servers with different risk profiles. In these cases, the firewall becomes part of the architecture between zones rather than only a north-south gateway.
Fortinet describes the 3700F Series for segmentation use cases and references VXLAN-oriented segmentation across physical and virtual domains. That can be useful where data-center fabrics use overlays, but the presence of a supported feature does not automatically make every overlay design simple. Route symmetry, MTU, VLAN or VXLAN mapping, high-availability state, policy direction and the placement of service insertion points need to be documented. The network team and security team should agree on where traffic is inspected and how failover changes the path.
The same principle applies to hybrid and multi-cloud connectivity. A high-capacity physical firewall can protect on-premises boundaries and interconnects, while virtual or cloud-native FortiGate instances may protect cloud workload edges. Centralised policy and logging can improve operational consistency, but the exact architecture depends on routing, licenses, cloud connectivity and the organisation’s management model. FourTeck can assist with the planning discussion without assuming that one physical appliance should secure every location or workload.
Resilience, operations and management at scale
High-end firewalls are often purchased for critical paths where maintenance and failure need to be planned, not improvised. The FortiGate 3700F supports active-active, active-passive and clustering configurations and includes two dedicated high-speed HA ports. The appliance also ships with dual hot-swappable AC power supplies for 1+1 redundancy. These hardware capabilities are only one layer of resilience: power feeds, top-of-rack or core switches, link paths, routing protocols and upstream services must also be redundant if the business expects end-to-end continuity.
Operational management becomes equally important as scale grows. FortiOS can be administered locally, while FortiManager may be considered for centralised policy and configuration workflows across multiple FortiGate devices. FortiAnalyzer can be considered where centralised logging, reporting and analytics are required, especially because the FG-3700F has no onboard SSD storage. The right logging architecture depends on retention, event rate, compliance requirements, search performance and whether logs need to remain available during firewall maintenance.
Change governance should also be designed before deployment. A high-capacity firewall can host large policy sets, virtual domains and multiple security zones, which creates operational risk if naming, ownership and rule lifecycle are not controlled. Define who can approve policy, how emergency changes are recorded, how objects are standardised, how backups are protected and how firmware upgrades are tested. If the 3700F is part of a wider Fortinet Security Fabric, document which integrations are operationally mandatory and which are optional enhancements.
For organisations with strict support requirements, the quotation should name the FortiCare level and term rather than using a generic phrase such as “support included.” This helps procurement understand what is being purchased and allows the technical team to plan firmware access, support engagement and hardware replacement expectations against the actual entitlement.
Where this firewall is most likely to make sense
Enterprise data-center edge
Suitable where internet, WAN, partner or cloud interconnect traffic reaches very high volumes and security inspection needs to keep pace with modern core switching.
Internal segmentation
Relevant for separating application tiers, production systems, OT zones, tenants or sensitive environments when many high-speed links converge on the security layer.
Service-provider security edge
Can be considered where very large session counts, fast new-session rates, NAT, IPsec or subscriber-facing traffic are part of the design, subject to detailed sizing and licensing.
Hybrid infrastructure
Useful as a high-capacity on-premises control point within a wider architecture that also includes cloud, virtual networks, private connectivity and centralised security operations.
The firewall is less compelling when the primary requirement is a small branch, a simple few-gigabit internet circuit or a site with no need for high-density optical ports. In those cases, a smaller FortiGate can reduce purchase, power, optics and support cost while still meeting the business requirement. Model selection should therefore begin with workload and interfaces rather than product prestige.
Integration and operational considerations
A 3700F deployment usually touches more than the firewall team. Network engineers need to validate L2/L3 design, optics, routing, MTU and link aggregation. Security engineers need to define zones, policies, inspection profiles, certificates, logging and incident visibility. Systems or application teams may need to identify TLS applications that require inspection exceptions or certificate changes. Procurement needs a precise bill of materials and license term. Facilities teams may need to check rack depth, weight, front-to-back airflow, power circuits and heat output.
The appliance is 2RU, approximately 607.1 mm deep and 21.4 kg. The current data sheet lists average power consumption of 590 W and maximum consumption of 1140 W, with front-to-back airflow. That information is useful for rack and power planning, but the final data-center design should include the power feeds, redundancy policy, PDU capacity and thermal headroom for the complete installation, not only the firewall’s average draw.
Logging architecture is especially important because the FG-3700F has no onboard SSD. Organisations that require long retention, forensic search, compliance reporting or central SOC workflows should plan FortiAnalyzer, a cloud logging service or another supported logging destination as part of the solution. The choice affects storage sizing, event handling, reporting, data residency and operational process.
Management can also be local or centralised depending on the environment. If there are many FortiGate devices, multiple administrators or standardised policy packages, FortiManager may reduce manual inconsistency. Where only one or two appliances are involved, the operational overhead of a separate management platform should still be justified. FourTeck can help review these dependencies as a complete architecture rather than treating the firewall as an isolated box.
Buyer questions to resolve before ordering
Document average and peak traffic, TLS percentage and the exact security profiles that will be enabled.
Count production, HA and management links and define speeds, optics, cable type, reach and switch compatibility.
The FG-3700F has no onboard SSD; the FG-3701F has a storage variant specification. Decide where logs will reside.
If yes, budget the second appliance, cluster licensing, redundant links, power and failover testing.
Confirm FortiGuard services, FortiCare level, contract duration and any cloud or managed-service add-ons.
Define routing, policy, VPN, logging, performance and HA tests before the change window.
Procurement checklist for a clean quotation
Sending these details with the request helps avoid a quotation that covers only the appliance while leaving out licenses, optics, HA components or implementation services. When the design is not yet complete, FourTeck can assist with requirement clarification before a final bill of materials is prepared.
How FourTeck can assist with the 3700F project
FourTeck can support the commercial and planning stage by helping the buyer translate business and network requirements into a model, license and accessory discussion. That can include reviewing expected traffic, identifying high-speed port needs, confirming whether HA is required, mapping FortiGuard and FortiCare terms, and discussing central management or logging. This is especially useful when procurement receives a technical model number but not the complete bill of materials.
Where implementation help is required, the scope can be discussed separately around configuration, migration, policy review, routing, VPN, HA, logging and acceptance testing. The exact deliverables depend on the existing environment and should be written into the quotation or statement of work. Buyers can review FourTeck’s firewall and security services or use the FourTeck firewall and cybersecurity portal for related planning context.
For broader Fortinet sourcing and UAE solution discussions, buyers can also review Fortinet firewall options in Dubai and the FourTeck Fortinet UAE resource. Product availability, license region, final pricing and project timing should be reconfirmed for the exact requirement.
UAE availability and support guidance
Contact FourTeck to confirm current UAE availability for the FortiGate 3700F, the required FortiGuard subscription, support term, optics and any associated management or logging components. Availability can vary with model, quantity, regional SKU, vendor lead time and license selection, so a current quotation is more reliable than a static web price or stock message.
Delivery and project coordination can be discussed after the exact bill of materials is agreed. If installation, configuration, migration or testing is required, include that scope in the request so the commercial response distinguishes hardware, subscriptions and professional work. For direct assistance, use the FourTeck UAE contact page.
Dubai, Abu Dhabi, Sharjah and Ajman coverage
Organisations in Dubai, Abu Dhabi, Sharjah and Ajman can discuss FortiGate 3700F purchasing, sizing, licensing and project coordination through FourTeck. A data-center customer in Dubai may be focused on 400GE core links, while an Abu Dhabi enterprise may prioritise HA, segmentation and strict change control; a Sharjah manufacturing environment may need IT/OT separation, and an Ajman business may be planning centralised security for multiple sites. The location does not change the need for accurate technical scoping. Share the destination, quantity, required support term, interface design, expected deployment schedule and whether configuration or migration services are needed. Current availability and delivery planning should be confirmed after the exact requirement is reviewed.
GCC Availability
FourTeck can assist organisations planning FortiGate 3700F requirements across the GCC by reviewing the technical and commercial inputs before a quotation is finalised. Regional projects may involve the United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Bahrain or Oman, but the key buying information is the same: exact hardware model, quantity, destination, required FortiGuard services, FortiCare term, optics, HA design and expected deployment timeline. Product availability, license eligibility, delivery schedules, vendor lead times and service scope can vary by country and requirement. For multi-country projects, identify which site will host each appliance and whether the configuration must be standardised across locations. FourTeck can help coordinate requirement review, bill-of-material preparation, delivery planning and configuration discussions, while country-specific commercial and project details remain subject to confirmation. Buyers with a Kuwait requirement can also review FourTeck Kuwait technology support.
Africa Availability
Organisations in African markets can approach FourTeck for FortiGate 3700F planning where the project calls for a high-capacity enterprise or data-center firewall. The purchasing process should account for the destination country, exact model, quantity, license region, optic requirements, power and rack conditions, shipping arrangements, vendor lead time and any local project constraints. Availability should never be inferred from a listing in another country. For East Africa, West Africa, Southern Africa or other regional projects, share the intended deployment site, expected traffic, support term, desired implementation schedule and whether onsite or remote assistance is required. FourTeck can help review the product, licenses, accessories and deployment scope and can coordinate regional procurement discussions without promising local inventory or fixed delivery dates. For wider regional context, see FourTeck Africa technology services.
Related products, platforms and alternatives to consider
FortiGate 3701F
The closely related storage variant. Fortinet lists the same core performance class and interface layout with 2 × 1.92 TB SSD onboard storage. Consider it when local disk capability is a defined requirement.
FortiManager
A central management platform to consider when multiple FortiGate devices, policy packages, administrators or standardised change workflows make local-only management inefficient.
FortiAnalyzer
A logging, analytics and reporting option that can be particularly relevant because the FG-3700F base model has no onboard SSD. Retention and event-volume sizing should be handled separately.
FortiGuard security services
Security-service bundles and a-la-carte options determine which subscription-delivered protections are active. Choose the service mix and contract term according to the security requirement.
Smaller or newer FortiGate models
If the 3700F is larger than needed, compare other high-end models on inspected throughput, interface mix, software support, power and commercial fit rather than assuming the nearest model number is equivalent.
Why businesses contact FourTeck before buying
High-end firewall purchases can fail at the details: a missing optic, wrong license term, unlicensed HA partner, overlooked logging requirement or unrealistic throughput assumption can delay a project even when the correct appliance model was selected. FourTeck’s practical role is to help clarify those details before procurement is locked. That may include model selection, bill-of-material guidance, compatibility review, subscription mapping, quotation coordination, migration planning and implementation-scope discussion. The aim is not to claim that one firewall is right for every environment, but to help the buyer decide whether the FortiGate 3700F fits the actual network and what must accompany it for a complete deployment.
What buyers usually need to know before shortlisting the 3700F
Most serious 3700F evaluations concentrate on a small set of practical issues: how its security throughput differs from raw firewall throughput, whether the 400GE interface capability is genuinely needed, what separates the 3700F from the 3701F, how FortiGuard and FortiCare affect the commercial package, and what information is required for a defensible quotation. The answers below focus on those decisions rather than repeating the specification table.
The price question is really a configuration question
A web price for FG-3700F hardware can look very different from a quote that includes one, three or five years of FortiGuard security services, FortiCare support, optics, a second HA appliance, central management and implementation work. For this reason, procurement should compare like-for-like bills of materials rather than only comparing the appliance line. The exact service bundle, term and included components should be visible on every supplier quote. A lower hardware number may not be a lower project cost if essential subscriptions and optics are missing.
3700F versus 3701F: storage is the key model distinction
The current Fortinet data sheet lists both models with the same core interface and performance figures, but the FG-3701F includes 2 × 1.92 TB SSD storage while the FG-3700F lists no onboard storage. That distinction matters if the firewall is expected to retain logs locally or if a design document assumes internal disks. Many large deployments use a separate logging platform anyway, so the storage variant is not automatically better. The right choice depends on the logging and operational architecture.
400GE capability matters only when the surrounding network can use it
The four multi-rate QSFP-DD ports are a major reason to consider the 3700F in a modern data center, but they should not be treated as a buying badge. Identify which links really need 400GE, 200GE, 100GE or 40GE, how many links are required, and whether the switch-side ports and optics support the intended design. If most connections are 10GE or 25GE, the remaining port density may still be valuable, but another model could be more economical. Interface planning should be completed before the hardware order.
Security throughput is more important than raw throughput for many buyers
The 589 Gbps firewall figure describes a different workload from the 75 Gbps threat-protection figure. If a security team intends to run IPS, application control, malware protection and inspection on a large proportion of traffic, sizing against raw firewall throughput can create a misleading sense of capacity. The same applies to encrypted traffic: SSL inspection has its own published performance figure. Buyers should therefore state which services will be enabled and on what percentage of traffic when asking whether the appliance is large enough.
Licensing should be aligned with the security outcome
FortiGuard services are not simply a checkbox added after the hardware choice. The selected bundle determines which security services and support components are available for the term. A buyer concerned primarily with IPS, malware defense, web controls, data protection, SD-WAN services or operational support should map those requirements to the current Fortinet ordering options. If HA is required, plan licensing for every cluster member. This avoids a common mismatch where the technical design expects features that were never included in the commercial order.
A good RFQ gives the supplier enough engineering context
A useful quotation request should include the exact model being considered, quantity, inspected throughput target, link speeds, required optics, HA requirement, license term, management and logging preferences, destination and any migration or installation scope. If those details are not known, say so and ask for sizing assistance. The supplier can then help close the gaps before issuing a final bill of materials. This is more reliable than asking only for a “3700F best price,” because the final project usually contains several line items beyond the chassis.
Buyers also ask whether the 3700F is still appropriate when a newer FortiGate generation exists. The right comparison should be based on current Fortinet lifecycle guidance, required FortiOS support, interface mix, inspected throughput, power, license availability and project timing. A model can still be technically capable without being the best procurement choice for every new deployment. FourTeck can help review the current options at quotation time rather than assuming that a particular model number should be selected solely because it appears in an earlier design document.
Decision questions buyers ask during technical review
Should we size on 589 Gbps or 75 Gbps?
Size on the metric that resembles the planned policy stack. For full security inspection, threat-protection, NGFW and SSL-inspection figures are more relevant than raw firewall throughput. Use traffic telemetry and headroom rather than treating one published number as universal capacity.
Do we need the 400GE ports on day one?
Not necessarily. They can provide design headroom and connect to high-speed fabrics, but optics are a separate cost and the surrounding switches must support the same design. Map present and near-term link requirements before deciding how many ports need to run at the highest speed.
When does the 3701F make more sense?
When onboard SSD storage is a specific operational requirement. The 3700F base model does not list internal storage, while the 3701F lists 2 × 1.92 TB SSD. If logs will be sent to FortiAnalyzer or another central platform, local storage may be less important.
How should an HA pair be budgeted?
Budget two appliances plus the required support and FortiGuard coverage for both cluster members, along with optics, cabling and redundant upstream/downstream connectivity. The project plan should also include state synchronisation, failover validation and maintenance procedures.
Should logs stay on the firewall?
Do not assume they can, because the FG-3700F has no onboard SSD. Define retention, analytics and reporting requirements and decide whether FortiAnalyzer, cloud logging or another supported destination will provide the operational record the security team needs.
What should an RFQ include to avoid rework?
State the hardware quantity, HA design, security-service bundle or requirements, support term, interface speeds, optic distances, management and logging platforms, destination and implementation scope. If any point is unknown, mark it for sizing review rather than letting a supplier assume.
Frequently asked questions
What is the Fortinet FortiGate 3700F mainly used for?
It is mainly used as a high-capacity next-generation firewall for large enterprises, data centers, service-provider environments, segmentation projects and other networks that need very high inspected throughput and high-speed optical connectivity.
What throughput does the FortiGate 3700F provide?
Fortinet’s current 3700F Series data sheet lists up to 589 Gbps IPv4 firewall throughput, 86 Gbps IPS, 80 Gbps NGFW and 75 Gbps threat protection. These are vendor test figures and actual results vary by configuration, traffic and enabled services.
What is the difference between FortiGate 3700F and 3701F?
The current data sheet shows the same core performance and interface class for both, while the 3701F includes 2 × 1.92 TB SSD onboard storage. The FG-3700F lists no onboard SSD.
Does the FG-3700F hardware include all FortiGuard licenses?
No assumption should be made that all security subscriptions are included with hardware. FortiGuard services, FortiCare support and contract terms should be specified on the quotation. Bundle contents and ordering options can change, so confirm the current selection.
Which high-speed interfaces are available?
The platform includes four multi-rate QSFP-DD ports supporting up to 400GE, eighteen multi-rate SFP56 ports, four ULL SFP28 ports, two dedicated HA ports and two 10GE/GE RJ45 management ports. Exact optic compatibility must be confirmed.
Does the FortiGate 3700F support high availability?
Yes. Fortinet lists active-active, active-passive and clustering configurations. A resilient design requires at least two appliances plus correctly licensed cluster members, redundant links, power and a tested failover plan.
Does the FortiGate 3700F support SSL inspection?
Yes. The current data sheet lists up to 55 Gbps SSL inspection throughput under Fortinet’s stated test methodology. Real performance depends on cipher suites, session profile, inspection policy and other enabled services.
Does the FG-3700F have onboard storage?
No onboard storage is listed for FG-3700F in the current data sheet. If local SSD storage is required, review the FG-3701F or design a central logging approach such as FortiAnalyzer.
What information is needed for a UAE quotation?
Provide the model, quantity, HA requirement, inspected throughput target, port and optic needs, FortiGuard and FortiCare term, management or logging requirements, delivery destination and any migration or configuration scope.
Can FourTeck assist with configuration and deployment planning?
FourTeck can discuss sizing, bill-of-material preparation, licensing, compatibility, configuration, migration and installation requirements. The exact technical scope should be defined in the quotation or statement of work before the project begins.
Need a confirmed FortiGate 3700F bill of materials?
Share your throughput target, interface requirements, HA design, license term, logging plan and destination. FourTeck can help review the requirement and prepare a current UAE quotation without assuming stock, delivery dates or license content that has not been confirmed.
Reviews
There are no reviews yet.