Description
Fortinet FortiGate FG-1000F - Appliance only
The Fortinet FortiGate 1000F is a next-generation firewall with SD-WAN and VPN built in, rated at 13 Gbps threat protection and 198 Gbps firewall throughput in Fortinet's data sheet. This listing is the appliance only, with no FortiCare support or FortiGuard security services, part number FG-1000F-1.
- Part numberFG-1000F-1
- Threat protection13 Gbps
- Firewall198 Gbps
- Form factor2U rack mount
- ServicesNone, appliance only
Who it is for
Data center or large campus
25G, 40G and 100G ports for core and data center segmentation, with hot-swappable power supplies in 2U.
SD-WAN and VPN included
SD-WAN and site-to-site and remote-access IPsec VPN are part of FortiOS, so branches can link to head office without another product.
One place to run the network
Manages up to 196 FortiSwitches and 4,096 FortiAPs through FortiLink, so switching and Wi-Fi are set up from the firewall.
What is included
- FortiGate 1000F appliance: 2 x 100/40GE QSFP28, 8 x 25/10GE SFP28, 16 x 10GE SFP+, 8 x 10GE RJ45, plus MGMT and HA.
- Power: Dual hot-swappable AC power supplies.
- Transceivers: Fortinet lists two SFP SX transceivers in the box.
- No FortiCare or FortiGuard term. Support, firmware updates and security services such as IPS, antivirus and web filtering need a FortiCare and FortiGuard subscription, sold separately.
Appliance only means no security updates. Without a FortiGuard subscription the FortiGate still routes and filters by policy, but IPS, antivirus and web filtering do not get updates. Most buyers choose the UTP or Enterprise Protection bundle below.
Specifications
| Interfaces | 2 x 100/40GE QSFP28, 8 x 25/10GE SFP28, 16 x 10GE SFP+, 8 x 10GE RJ45, plus MGMT and HA |
|---|---|
| Firewall throughput (1518-byte UDP) | 198 Gbps |
| IPS throughput | 19 Gbps |
| NGFW throughput | 15 Gbps |
| Threat protection throughput | 13 Gbps |
| IPsec VPN throughput | 55 Gbps |
| SSL inspection throughput | 10 Gbps |
| Concurrent sessions | 7.5 million |
| New sessions per second | 650,000 |
| IPsec tunnels | 20,000 site-to-site, 100,000 client |
| Managed FortiSwitches | 196 |
| Managed FortiAPs | 4,096 (1,024 in tunnel mode) |
| High availability | Active-active, active-passive, clustering |
| Form factor | 2U rack mount |
| Power | Dual hot-swappable AC power supplies |
Compare FortiGate models
Size a FortiGate on threat protection throughput: it is measured with IPS, application control and malware protection turned on, which is how most businesses run it.
| Model | Threat protection | NGFW | IPsec VPN | FortiSwitches | Form factor |
|---|---|---|---|---|---|
| FortiGate 40F | 600 Mbps | 800 Mbps | 4.4 Gbps | 8 | Desktop |
| FortiGate 60F | 700 Mbps | 1 Gbps | 6.5 Gbps | 16 | Desktop |
| FortiGate 80F | 900 Mbps | 1 Gbps | 6.5 Gbps | 16 | Desktop |
| FortiGate 200F | 3 Gbps | 3.5 Gbps | 13 Gbps | 64 | 1U rack mount |
| FortiGate 400F | 9 Gbps | 10 Gbps | 55 Gbps | 72 | 1U rack mount |
| FortiGate 1000F (this model) | 13 Gbps | 15 Gbps | 55 Gbps | 196 | 2U rack mount |
UTP or Enterprise Protection
| What you get | UTP | Enterprise Protection |
|---|---|---|
| FortiCare Premium support (24x7, one-hour response for priority 1 and 2) | Yes | Yes |
| Intrusion prevention (IPS) | Yes | Yes |
| Antivirus and FortiSandbox SaaS | Yes | Yes |
| Application control and inline CASB | Yes | Yes |
| URL, DNS and video filtering | Yes | Yes |
| Anti-botnet and command-and-control blocking | Yes | Yes |
| AI-based inline malware prevention | No | Yes |
| Data loss prevention (DLP) | No | Yes |
| Attack surface monitoring and risk scoring | No | Yes |
| IoT detection and vulnerability correlation | No | Yes |
Upgrade path
- FortiGate 1000F appliance only (this listing).
- Add FortiCare Premium and FortiGuard UTP. Support plus IPS, antivirus, sandboxing and web filtering (see the table below).
- FortiGuard Enterprise Protection. Adds DLP, AI-based inline malware prevention, attack surface risk scoring and IoT detection.
- FortiSwitch. Switches managed from the FortiGate over FortiLink.
All options for the FortiGate 1000F
| Option | One-time | 1 year | 3 years |
|---|---|---|---|
| Appliance only (no FortiCare or FortiGuard) | This listing | - | - |
| 5-year terms, renewals or a high availability pair | Ask Nuformat for a quote | ||
Frequently asked questions
Does the appliance-only listing include FortiGuard or FortiCare?
No. Add a FortiCare and FortiGuard subscription for support, firmware updates and security services, or choose a bundle listing that includes them.
Which number should I use to size a FortiGate?
Threat protection throughput, which Fortinet measures with firewall, IPS, application control and malware protection enabled. The FortiGate 1000F is rated at 13 Gbps.
What is the difference between UTP and Enterprise Protection?
Both include FortiCare Premium, IPS, antivirus with FortiSandbox SaaS, application control and URL, DNS and video filtering. Enterprise Protection adds data loss prevention, AI-based inline malware prevention, attack surface risk scoring and IoT detection.
Is SD-WAN included?
Yes. SD-WAN and IPsec VPN are part of FortiOS on every FortiGate, with no separate license.
How many FortiSwitches and FortiAPs can it manage?
Up to 196 FortiSwitches and 4,096 (1,024 in tunnel mode) FortiAPs, per the Fortinet data sheet.
Can I buy two for high availability?
Yes. FortiGate supports active-passive and active-active HA. Ask us for a quote on a matched pair with services for both units.
Get your FortiGate sized right
Nuformat serves businesses in Canada and the United States. Tell us your internet speed, user count and which security services you need, and we will confirm the model and bundle.
Request a quoteSpecifications from the Fortinet FortiGate 1000F Series data sheet R01; bundle contents from the Fortinet FortiGuard Security Services Bundles brief (January 2026), checked October 11, 2026. Performance figures are Fortinet lab results; real throughput depends on traffic and enabled features. Pricing and availability confirmed by Nuformat at quotation. FortiGate 1000F options · All FortiGate firewalls