Fortinet FortiGate 121G

The Fortinet FortiGate 121G is a 1RU rack-mount next-generation firewall for security-driven networks at distributed enterprise sites and campuses. It delivers 39 Gbps firewall throughput, 5.3 Gbps IPS throughput and 2.8 Gbps threat protection throughput, with 3 million concurrent sessions, 140,000 new sessions per second and 10,000 firewall policies.

AI/ML-based FortiGuard security services and the integrated Security Fabric platform provide coordinated, automated, end-to-end threat protection. SD-WAN and zero-trust network access (ZTNA) enforcement are integrated in the same appliance under one operating system, so the 121G controls, verifies and enforces application access from a single policy framework.

FortiOS converges high-performance networking and security across the Fortinet Security Fabric for consistent, context-aware policy. The 121G carries the same 16× hardware-accelerated GE RJ45 switch ports, 2× management/HA ports, 8× GE SFP slots and 4× 10 GE SFP+ FortiLink slots as the 120G, adds a 480 GB onboard SSD for local logging and reporting, drives 35 Gbps of IPsec VPN and ships with dual power supplies as standard.

Key features

• 39 Gbps firewall throughput (1518/512-byte UDP), 3.17 μs latency, 42 Mpps
• 5.3 Gbps IPS and 3.1 Gbps NGFW throughput (enterprise mix), 2.8 Gbps full threat protection
• 35 Gbps IPsec VPN throughput, 2,000 gateway-to-gateway and 16,000 client-to-gateway tunnels
• 3 million concurrent sessions, 140,000 new sessions per second, 10,000 firewall policies
• 16× GE RJ45 ports, 2× management/HA ports, 8× GE SFP slots, 4× 10 GE SFP+ FortiLink slots — all hardware-accelerated
• 1 x 480 GB onboard SSD for local logging and reporting
• Integrated SD-WAN and ZTNA enforcement in one FortiOS appliance
• Trusted Platform Module (TPM) and Bluetooth Low Energy on board
• Security Fabric management for up to 128 FortiAPs, 32 FortiSwitches and 5,000 FortiTokens
• 1RU rack mount with default dual power supplies, 43 W average draw

Works with

• FortiGate mid-range firewalls
• FortiGuard licences & renewals

Frequently asked questions

Bundle or hardware only?

Hardware only is the appliance with no FortiGuard subscription — for buyers who licence separately or are renewing existing cover. Bundles add FortiCare Premium support plus FortiGuard UTP or Enterprise Protection services for 1, 3 or 5 years in a single SKU.

What's the difference between the 120G and 121G?

The 121G is the same platform as the 120G plus a 480 GB onboard SSD for local logging and reporting; the 120G has no internal storage. Port counts and headline throughput figures are otherwise identical, though the 121G draws slightly more power (43 W average against 38 W) to run the extra drive.

Is the 121G sized for a distributed enterprise site?

Yes — 3 million concurrent sessions, 10,000 firewall policies, and Security Fabric management for up to 128 FortiAPs and 32 FortiSwitches make it a fit for a branch or campus aggregation point rather than a single small office.

Sizing a FortiGate deployment? Call 0333 242 1314 or email sales@clisecure.com.