Fortinet FortiGate 7121F-2-DC

The Fortinet FortiGate 7121F-2-DC is a chassis-based next-generation firewall built for large enterprises and service providers that need to secure a datacentre core or hybrid IT architecture at very large scale. It delivers 1.89 Tbps of firewall throughput, 675 Gbps of IPS throughput and 520 Gbps of full threat protection throughput from a 16RU chassis fitted with 2x FPM-7620F processor modules and 2x FIM-7921F I/O modules.

It runs the same AI/ML-powered FortiGuard security services and integrated Security Fabric platform as the rest of the FortiGate F-series, combining threat protection, SSL inspection and network segmentation into a single coordinated, automated system across every use case.

Integrated Zero Trust Network Access (ZTNA) enforcement controls and verifies user access to applications before granting it, and a dedicated hardware security module generates, stores and authenticates cryptographic keys to protect against malware and phishing attacks at the hardware level.

Key features

• 1.89 / 1.88 / 1.129 Tbps IPv4 firewall throughput (1518/512/64-byte UDP), 7.50 μs latency, 1,680 Mpps
• 675 Gbps IPS and 550 Gbps NGFW throughput (enterprise traffic mix), 520 Gbps full threat protection throughput
• 630 Gbps IPsec VPN throughput, 40,000 gateway-to-gateway and 260,000 client-to-gateway tunnels
• 1 billion concurrent sessions, 9 million new sessions per second, 200,000 firewall policies
• 4x 400GE QSFP-DD / 100GE QSFP28 / 40GE QSFP+ slots, 56x 100GE QSFP28/40GE QSFP+ slots, 80x 25GE SFP28/10GE SFP+ slots
• 4x 4TB SSD onboard storage, 4x 10GE SFP+ SR transceivers included
• 16RU chassis, 10 slots for FPM and 2 slots for FIM (default configuration 2x FPM-7620F and 2x FIM-7921F)
• 8x 2,500W DC hot-swappable redundant power supplies
• Security Fabric management for up to 300 FortiSwitches
• Active-Passive and Active-Active high availability

Works with

• FortiGate high-end firewalls
• FortiGuard licences & renewals

Frequently asked questions

Bundle or hardware only?

Hardware only is the chassis with no FortiGuard subscription — for buyers who licence separately or are renewing existing cover. Bundles add FortiCare Premium support plus FortiGuard UTP or Enterprise Protection services for 1, 3 or 5 years in a single SKU.

What does the "-2-DC" suffix mean?

In the FortiGate 7000F series chassis range, "-DC" denotes a single DC power-feed configuration and "-2-DC" denotes a dual DC power-feed configuration for full power-path redundancy. The 7121F-2-DC ships as a 16RU chassis with 2x FPM-7620F processor modules, 2x FIM-7921F I/O modules, 2x management modules and 8x 2,500W DC hot-swappable redundant power supplies.

Is the 7121F-2-DC right for my deployment?

With 1.89 Tbps firewall throughput, 1 billion concurrent sessions and Security Fabric management for up to 300 FortiSwitches, the 7121F-2-DC is built for hyperscale datacentre cores and large carrier or service-provider networks rather than enterprise branch or campus deployments.

Sizing a FortiGate deployment? Call 0333 242 1314 or email sales@clisecure.com.