Direct answer for buyers evaluating the 901G
The Fortinet FortiGate 901G is a mid-range enterprise next-generation firewall in the FortiGate 900G series. It is mainly used to protect high-capacity internet edges, corporate WANs, data-centre connections and segmented enterprise networks while combining firewalling, application control, IPS, secure SD-WAN, VPN and subscription-based FortiGuard services. It should be considered by organisations whose real inspected traffic, session scale and interface requirements exceed branch-class platforms. Before proceeding, buyers should confirm the exact security profile, expected encrypted traffic, interface speeds, optical transceivers, high-availability design, local logging needs, subscription bundle and support duration. Those choices materially affect sizing, licensing and the final bill of materials.
What the FortiGate 901G does
At its core, the 901G enforces network security policy between trust zones, internet links, private WAN connections, data-centre segments and user networks. FortiOS brings firewall rules, routing, SD-WAN, VPN and security services into one operating environment so security teams can design controls around users, applications, destinations and network context rather than relying only on basic port filtering.
The platform also supports integration into the broader Fortinet Security Fabric. That matters when buyers are planning coordinated management, logging, endpoint integration, switching, wireless or security-operations workflows rather than deploying the firewall as an isolated appliance.
Who it is designed for
The 901G is most relevant to medium and large enterprises, institutions, service environments and distributed organisations that need significantly more capacity than a branch firewall but do not require the scale of chassis-class or very high-end data-centre systems. Typical decision-makers include network architects, cybersecurity managers, infrastructure leads and procurement teams planning refresh, consolidation or SD-WAN projects.
It may be excessive for smaller offices with modest internet speeds and limited inspection requirements. In those cases, a lower FortiGate model can be easier to justify. FourTeck can help compare practical sizing before a purchase decision is made.
Business challenges this model can help address
Security inspection at higher speeds
A fast internet circuit is only useful if the firewall can inspect traffic at the security level the business actually enables. The 901G is designed for enterprise inspection workloads, but buyers should size against IPS, NGFW, threat-protection and SSL-inspection figures rather than raw firewall throughput alone.
Network and security consolidation
Organisations often manage routing, VPN, security policy and WAN failover across separate technologies. FortiOS allows many of these controls to be coordinated on one platform, which can simplify architecture when designed carefully and when operational roles are clearly assigned.
High-speed uplink requirements
The mix of 25GE SFP28, 10GE SFP+, GE SFP and copper interfaces suits environments that need more than standard gigabit connectivity. Correct transceivers and cabling must still be selected for distance, fibre type and switch compatibility.
Local event retention
The 901G variant includes 960 GB local storage, useful for on-box logging and operational visibility. Retention expectations should still be assessed, because central logging with FortiAnalyzer or another approved logging design may be preferable for longer retention, correlation and reporting.
FortiGate 901G capability overview
Policy-led path selection, link monitoring and application-aware WAN control can support branch and hub architectures where routing and security need coordinated design.
FortiGuard services can provide IPS, malware protection, application control, filtering and other protections depending on the selected subscription or bundle.
IPsec VPN capabilities support site-to-site connectivity and secure network interconnection. Exact remote-access design should align with the FortiOS release and organisational access strategy.
The appliance can participate in HA designs. Every HA member needs appropriate support and FortiGuard licensing for the services in use.
Product-fit matrix
| Requirement | Suitable when | Confirm before ordering |
|---|---|---|
| High-capacity internet edge | The organisation needs enterprise-grade inspected throughput and room for growth. | Real traffic mix, SSL inspection percentage, threat profiles and peak utilisation. |
| 25GE/10GE aggregation | Core, distribution or provider connectivity requires higher-speed optics. | Optic type, fibre type, distance, switch compatibility and spare port capacity. |
| HA perimeter pair | Business continuity requirements justify redundant firewalls and power design. | Second unit, matching licenses, cabling, HA links, rack space and change plan. |
| Local log storage | On-appliance storage is useful for operational logging and troubleshooting. | Retention target, log volume and whether central FortiAnalyzer logging is also required. |
Verified FortiGate 901G specifications
The figures below are based on Fortinet’s current FortiGate 900G series information and product matrix. Performance values are laboratory maximums and can vary with traffic mix, FortiOS version, enabled security functions and configuration. They should be used as sizing inputs, not as guaranteed production results.
| Brand | Fortinet |
| Product name | FortiGate 901G |
| Model / hardware SKU | FG-901G |
| Product type | Next-generation firewall appliance |
| Firewall throughput | Up to 164 / 163 / 153 Gbps for 1518 / 512 / 64-byte UDP |
| IPsec VPN throughput | Up to 55 Gbps, Fortinet test conditions |
| IPS throughput | Up to 42 Gbps, enterprise mix |
| NGFW throughput | Up to 31 Gbps, enterprise mix |
| Threat protection throughput | Up to 30 Gbps, enterprise mix |
| Concurrent sessions | Up to 28 million |
| New sessions per second | Up to 720,000 |
| SSL inspection throughput | Up to 16.7 Gbps under Fortinet stated test conditions |
| Interfaces | 4 × 25GE SFP28, 4 × 10GE SFP+, 8 × GE SFP, 17 × GE RJ45 including management/switch ports, plus 2.5GE HA connectivity |
| Local storage | 960 GB total on the 901G variant |
| Power | Dual power supplies; confirm AC/DC variant and regional requirement |
| Form factor | 1 RU rack appliance |
| FortiAP support | Up to 2,048 total / 1,024 tunnel according to product matrix |
| FortiSwitch support | Up to 196 |
| Virtual domains | 10 default / up to 50 maximum, subject to FortiOS and licensing conditions |
| Security subscriptions | FortiGuard services are subscription dependent; select standalone services or an appropriate bundle |
| Support | FortiCare support level and term should be confirmed in the quotation |
| Availability | Contact FourTeck to confirm current UAE availability, lead time and exact configuration. |
Licensing, transceivers and HA are part of the buying decision
A hardware appliance alone does not define the security outcome. FortiGuard services such as intrusion prevention, malware protection, application control, web and DNS filtering, data protection and other capabilities depend on the services or bundle purchased. FortiCare support is likewise selected by support level and term. The correct subscription should reflect the policies the organisation intends to enable rather than simply matching a familiar bundle name.
For high availability, Fortinet requires all cluster members to have valid support contracts and valid FortiGuard service licenses for the services being used. Buyers planning an active-passive or active-active design should therefore budget for the second appliance and matching service coverage rather than licensing only the primary unit.
The optical interfaces also need deliberate planning. A 25GE or 10GE port does not automatically include the correct transceiver for every link. Distance, multimode or single-mode fibre, switch-side optic, DAC/AOC preference and vendor compatibility should all be checked before finalising the order.
How to plan a FortiGate 901G deployment
Document internet speed, WAN links, east-west traffic, peak sessions, application mix, SSL inspection scope, VPN traffic and expected growth. Raw circuit bandwidth alone is not enough because security inspection can be the limiting design factor.
Map upstream routers, core switches, VLANs, DMZs, server zones, internet links, HA connections and management networks. This identifies the required physical interfaces and transceiver types.
Choose the FortiGuard capabilities required by policy and confirm the FortiCare level and duration. Multi-year planning can reduce renewal administration but should match procurement policy and project lifecycle.
Existing firewall objects, NAT, VPNs, routes and security rules should be reviewed before migration. FortiConverter may assist in some migrations, but policy cleanup and validation remain important because translating legacy rules without review can preserve old technical debt.
Validate routing, failover, VPNs, application access, inspection behaviour, logging, administrative access and rollback procedures. HA failover should be tested under controlled conditions when redundancy is part of the design.
Performance should be sized around security, not only bandwidth
A common procurement mistake is to compare the appliance’s highest firewall-throughput number directly with an internet circuit and conclude that the unit has enormous spare capacity. That can be misleading. Basic Layer 3 firewall throughput is measured differently from enterprise-mix IPS, NGFW or threat-protection workloads. Once application control, intrusion prevention, malware controls and SSL inspection are enabled, the relevant throughput figure changes. The correct approach is to define the policies that will be active in production and compare expected peak traffic against the appropriate inspected-throughput figures with realistic headroom.
For the 900G platform, Fortinet publishes up to 42 Gbps IPS throughput, 31 Gbps NGFW throughput and 30 Gbps threat-protection throughput under its stated test methodology. These are strong enterprise figures, but they remain test results rather than a guarantee for every network. Traffic packet size, session behaviour, enabled signatures, encrypted traffic, logging and firmware can all influence observed performance.
FourTeck can help translate a bandwidth requirement into a practical sizing discussion by asking what will actually be inspected, how much growth is expected, whether the firewall will act as an SD-WAN hub, and whether east-west traffic is also crossing the appliance. That usually produces a more reliable shortlist than selecting by internet speed alone.
High-speed interfaces create design flexibility
The interface mix is one of the clearest reasons to evaluate the FortiGate 901G. Four 25GE SFP28 ports can connect to modern core or distribution switching, high-capacity provider handoffs or aggregation links. Four 10GE SFP+ ports offer additional uplink choices, while GE SFP and RJ45 ports support lower-speed circuits, management and access requirements. This mix allows a single appliance to bridge several generations of network infrastructure during a refresh.
However, port count should be planned as a topology, not treated as a simple total. Link aggregation, HA, redundant switch connections, dedicated management, out-of-band access and future growth can consume interfaces quickly. Some buyers also need separate physical zones for DMZ, server, WAN, cloud interconnect or partner networks. Creating a port map before ordering can prevent avoidable redesign.
Optical connectivity is another procurement dependency. The appliance port must match the optic standard and the far-end device. Buyers should identify fibre type, connector, distance and required speed for each link. FourTeck can include compatible transceiver planning in the bill-of-material review where the exact link requirements are provided.
Operational visibility and local storage
The 901G differs from the 900G by including local SSD storage, listed as 960 GB total. That local capacity can support on-box logs and operational investigation, which can be useful when engineers need recent events without immediately querying an external platform. It is also helpful in deployments where temporary logging continuity matters during upstream connectivity issues.
Local storage does not automatically replace a central logging and analytics strategy. Larger organisations often prefer FortiAnalyzer or another approved logging platform for longer retention, consolidated reporting, event correlation, audit workflows and multi-device visibility. The correct design depends on log volume, retention policy, compliance requirements and the number of FortiGate devices under management.
For procurement, this means the 901G should be evaluated together with the intended management and logging architecture. If central management, analytics or cloud-based services are required, those items should be included in the quotation rather than discovered after hardware delivery.
Where the FortiGate 901G can fit
Enterprise internet edge
Suitable where multiple high-speed internet links, advanced inspection and substantial session counts need to be handled in one perimeter design.
Regional SD-WAN hub
Can be considered for central or regional hubs aggregating branch tunnels and WAN paths, provided tunnel scale and inspected traffic are validated against the design.
Data-centre perimeter
High-speed fibre interfaces and enterprise inspection make the model relevant to data-centre edge designs that need segmentation, VPN and security policy enforcement.
Large campus core security
May suit campuses that route selected inter-VLAN or north-south traffic through a firewall for stronger segmentation and application visibility.
Hybrid cloud connectivity
IPsec, routing and policy controls can support secure connectivity between on-premises networks and cloud environments, subject to cloud-side design and throughput requirements.
Segmentation gateway
Can enforce policy between sensitive network zones when the design requires higher traffic capacity than smaller appliances can provide.
Integration and operational considerations
A firewall replacement touches more than security rules. Routing adjacencies, VLAN design, DHCP relay, DNS dependencies, authentication, VPN peers, monitoring systems, SIEM forwarding, automation, backup procedures and administrator access can all be affected. An accurate implementation plan therefore starts with the current network topology and a list of services that depend on the existing firewall.
If the organisation already uses FortiSwitch, FortiAP, FortiManager, FortiAnalyzer, FortiClient or other Fortinet components, the 901G can participate in a broader Fortinet architecture. Exact interoperability should still be checked against supported software versions, license requirements and the organisation’s operational model. The presence of a shared vendor does not eliminate the need for design validation.
For new deployments, decide whether management will be local, centrally managed or cloud-assisted, who owns firewall policy changes, how configuration backups are handled, and what logging retention is required. These decisions influence both the technical architecture and the products or subscriptions that should appear in the quotation.
Questions buyers should resolve before ordering
Define IPS, application control, malware protection, URL filtering, DNS filtering, SSL inspection and other services to size against the correct performance profile.
SSL inspection can materially change sizing and may require certificate, endpoint and application planning.
List every 25GE, 10GE and fibre GE connection, including distance and fibre type, to avoid incomplete transceiver orders.
If HA is required, include the second appliance, appropriate support and matching FortiGuard licensing for the cluster.
FortiGate 901G procurement checklist
✓ Confirm hardware model FG-901G and required quantity.
✓ Record internet, WAN and internal traffic capacity.
✓ Estimate inspected throughput and SSL inspection percentage.
✓ Confirm 25GE, 10GE, GE fibre and copper port requirements.
✓ Identify all SFP28, SFP+ and SFP transceivers.
✓ Decide whether a second appliance is required for HA.
✓ Select FortiGuard service bundle or individual subscriptions.
✓ Confirm FortiCare support level and term.
✓ Define local versus central logging requirements.
✓ Confirm FortiOS and management-platform compatibility.
✓ Document migration, configuration and testing scope.
✓ Confirm rack, power and cabling requirements.
✓ State delivery destination and target project timeline.
✓ Request a final bill of materials before purchase approval.
FourTeck assistance for sizing, quotation and deployment planning
FourTeck can help organisations turn a FortiGate 901G requirement into a clearer procurement package. That can include reviewing bandwidth and security-inspection needs, identifying required interfaces and transceivers, discussing high-availability requirements, selecting suitable FortiGuard and FortiCare terms, and preparing a bill of materials for quotation. Where migration or implementation is part of the project, the configuration scope can be discussed separately so the customer knows what is included.
For buyers comparing models, FourTeck can also help evaluate whether the 901G is appropriately sized or whether a nearby FortiGate model would be more proportionate. This is useful when the current internet speed is only one part of the requirement and future growth, VPN aggregation, SSL inspection or internal segmentation could materially affect capacity.
You can review more firewall products available through FourTeck, explore Fortinet firewall solutions in Dubai, or discuss implementation through the FourTeck security services team.
UAE availability and support guidance
Contact FourTeck to confirm current UAE availability for the Fortinet FortiGate 901G. Availability can depend on hardware variant, quantity, FortiGuard bundle, support term, regional licensing and vendor lead time. Delivery and project coordination should therefore be discussed after the exact bill of materials has been approved. If the project includes installation, migration, high-availability setup or policy configuration, request that scope as part of the quotation so the hardware and service plan are aligned.
FourTeck can coordinate requirements for businesses in Dubai, Abu Dhabi, Sharjah and Ajman through one combined requirement review. Buyers should share the deployment address, preferred timeline, quantity, licensing term, rack and power information, current firewall details and whether on-site or remote engineering assistance is expected. For current pricing or product consultation, use the FourTeck contact page.
GCC Availability
Organisations planning FortiGate 901G deployments across the GCC can use FourTeck for requirement review, model confirmation, licensing guidance, quotation coordination and deployment planning. Projects in the United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Bahrain or Oman can differ significantly in their preferred FortiGuard bundle, FortiCare term, power requirement, delivery route and implementation scope. For multi-country rollouts, it is useful to standardise the core firewall design while still confirming local site interfaces, circuit speeds and installation conditions. Product availability, licensing rules, delivery schedules, service visits and vendor lead times can vary by country, model and quantity. Share the destination country, exact product requirement, quantity, subscription term, deployment location and expected timeline so FourTeck can provide current guidance. For Kuwait-related coordination, buyers can also visit FourTeck Kuwait resources. No stock, customs, delivery or installation date should be assumed until the final requirement has been reviewed.
Africa Availability
For organisations evaluating the FortiGate 901G for African projects, FourTeck can assist with hardware and license selection, accessories, support terms, configuration scope and regional procurement planning. A data-centre or headquarters deployment in East Africa may have different fibre optics, power, shipping and support requirements from a regional project elsewhere on the continent. Availability and fulfilment can depend on destination, quantity, license region, vendor lead time, shipping arrangements and local project conditions. Buyers should provide the destination country, quantity, intended security services, desired subscription duration, deployment schedule and any installation or support expectations before a quotation is finalised. FourTeck provides regional information through FourTeck Africa, with additional resources for Kenya and Uganda. Local inventory, customs outcomes, on-site coverage and fixed delivery schedules should be confirmed for the specific project rather than assumed.
Related products and services to consider
FortiGate 900G
Consider the non-storage 900G variant where local SSD capacity is not required and central logging is already part of the architecture.
FortiAnalyzer
Useful when centralised log retention, analytics, reporting and multi-device visibility are required beyond local appliance storage.
FortiManager
Relevant for organisations managing multiple FortiGate devices and seeking central policy and configuration administration.
Firewall migration service
Useful when replacing a legacy firewall and needing structured rule review, object migration, VPN recreation, testing and cutover coordination.
Why businesses contact FourTeck for FortiGate projects
A FortiGate purchase is easier to approve when the requirement is translated into a complete and defensible bill of materials. FourTeck can help clarify model sizing, interface requirements, optics, subscription bundles, support terms, HA design and implementation scope. This reduces the chance of discovering after purchase that the project needs additional transceivers, a different license tier or engineering effort that was not included in the original request.
The same approach applies to refresh projects. Instead of replacing an old firewall model with the nearest newer model by name alone, buyers can review current traffic, changed security policies, cloud usage, VPN growth and future bandwidth. Contact FourTeck sales and solution support to discuss the exact requirement.
What enterprise buyers are trying to work out before choosing this firewall
Many buyers first encounter the FortiGate 901G while searching for a firewall that can keep pace with a 10 Gbps or multi-10-gigabit network. That starting point is reasonable, but the more useful question is how much traffic must be inspected with the security stack actually enabled. A company may have two 10 Gbps internet links yet see only a fraction of that traffic during normal operations, while another organisation may drive heavy east-west traffic through segmentation policies. The firewall that looks oversized on circuit speed alone may be appropriate once encrypted inspection, concurrent sessions, VPN aggregation and growth are considered. Conversely, the 901G can be unnecessary if most traffic bypasses security inspection and the business operates at a much smaller scale.
The platform has performance well above 10 Gbps in several published tests, but the practical answer depends on which inspection features are enabled and how much of the traffic is encrypted. Size against the intended security profile, not only raw firewall throughput.
The key published difference is local storage: the 901G includes 960 GB. If the project needs on-box logging, that can be useful. If central logging is already mandatory and local storage adds little value, the 900G may deserve comparison.
Another frequent question is whether security services are included with the appliance. They should not be assumed. FortiGate hardware can be purchased with different FortiGuard service bundles and FortiCare support terms. Some organisations require broad enterprise protection; others purchase a narrower set of services because they already use separate web security, sandboxing or data protection platforms. The correct choice depends on the control objectives, existing security stack and procurement model. It is useful to map required capabilities first, then choose the bundle that covers them.
Buyers also search for FortiGate 901G price in Dubai or the UAE. Public internet prices vary widely because some listings are hardware-only while others include one, three or five years of FortiCare and FortiGuard services. Currency, region, discount level and support bundle also change the number. A useful quotation request therefore states the model, quantity, desired subscription term, security bundle, HA requirement and required optics. Without those details, two prices can look comparable while representing very different packages.
Migration is another practical concern. Organisations replacing a third-party firewall often expect a configuration export to convert cleanly into FortiOS. In practice, migration should also be treated as a policy-review opportunity. Address objects, NAT, unused rules, VPN definitions and route behaviour may have accumulated over years. FortiConverter can assist in supported migration workflows, but validation remains essential. A clean cutover plan includes current configuration capture, policy mapping, test cases, rollback steps and a maintenance window aligned with business risk.
Finally, enterprise buyers increasingly evaluate the firewall as part of a management ecosystem rather than an isolated box. If the organisation has multiple FortiGate sites, central administration through FortiManager and central logging through FortiAnalyzer may be relevant. If the firewall controls FortiSwitch or FortiAP devices, controller scale and topology should also be reviewed. The goal is not to add every Fortinet product to the bill of materials; it is to identify which operational tools reduce complexity for the specific environment. FourTeck can help separate mandatory items from optional components when preparing the quotation.
Questions worth answering before you shortlist the 901G
Do we need the storage version?
Choose the 901G specifically when local SSD storage has operational value. If all security logs will be forwarded to a central platform and local retention is not part of the design, compare the 900G as well. This is a practical way to avoid paying for a feature the project does not use.
How much headroom should we keep?
Headroom should account for traffic growth, new security controls, encrypted inspection, VPN expansion and failover conditions. There is no single percentage that fits every organisation. Critical environments often size more conservatively than offices where short peaks are acceptable.
Can we reuse existing optics?
Possibly, but optic compatibility should be checked. Speed, wavelength, fibre type, connector, distance and supported transceiver lists matter. A physically fitting module is not automatically a supported design choice.
Does HA require two licenses?
Fortinet states that all HA members need valid support contracts and valid FortiGuard licenses for the services used. Budget the cluster as two properly covered appliances rather than licensing only the primary.
What information gives us an accurate quote?
Provide quantity, hardware variant, required FortiGuard bundle, support term, HA requirement, optics, destination, target schedule and any installation or migration scope. That produces a much more useful comparison than asking for hardware price alone.
Should we centralise management from day one?
If the organisation already has several FortiGate devices or expects rapid expansion, central management and logging can simplify governance. A standalone environment may not need the same architecture. Evaluate current scale and operating process before adding platforms.
Frequently asked questions about FortiGate 901G
1. What is the Fortinet FortiGate 901G?
It is a 1RU enterprise next-generation firewall in the FortiGate 900G series. It combines high-capacity firewalling, IPS, application control, VPN, SD-WAN and FortiGuard security services, with 960 GB local storage on the 901G variant.
2. What is the difference between FortiGate 900G and 901G?
The key published difference is local storage. Fortinet lists the 901G with 960 GB local storage, while the 900G is the non-storage variant. Core platform performance and interfaces are otherwise part of the same 900G series specification.
3. Does the FortiGate 901G include FortiGuard security subscriptions?
Do not assume that the hardware-only SKU includes the required subscriptions. FortiGuard services can be purchased in bundles or individually. Confirm the exact bundle and term in the quotation.
4. Can the 901G be deployed in high availability?
Yes, it can be used in FortiGate HA designs. Fortinet requires each cluster member to have valid support and valid licenses for the FortiGuard services being used.
5. Which network interfaces are available?
The platform includes 25GE SFP28, 10GE SFP+, GE SFP and GE RJ45 connectivity. The exact port map should be checked against the current datasheet when preparing the design.
6. Is the FortiGate 901G suitable for a 10 Gbps internet connection?
It can be a strong candidate, but suitability depends on the enabled inspection features, encrypted traffic percentage, session load and required headroom. Size against NGFW or threat-protection workload where those controls are used.
7. Do transceivers come with the firewall?
Required optics should be treated as separate bill-of-material items unless the quotation explicitly includes them. Confirm supported transceiver types for each planned link.
8. Can FourTeck assist with migration and configuration?
FourTeck can discuss migration, configuration, testing and installation requirements as part of the project scope. The exact services should be specified in the quotation.
9. How can I get the current FortiGate 901G price in Dubai?
Request a current quotation with quantity, security bundle, support term, HA requirement and optics. Public prices are difficult to compare because many listings include different subscriptions and service durations.
10. Is the FortiGate 901G currently available in the UAE?
Availability can change with quantity, variant, license package and vendor lead time. Contact FourTeck to confirm current UAE availability for the exact configuration required.
Build the right FortiGate 901G bill of materials
Share your bandwidth, interface, security-subscription, HA, logging and deployment requirements. FourTeck can help prepare a current UAE quotation and confirm the components needed for the project.
Reviews
There are no reviews yet.