Description
Fortinet FortiGate 200G Series (FG-200G / FG-201G)
Enterprise NGFW + Secure SD-WAN + Segmentation with SPU acceleration (NP7Lite + CP10)
The FortiGate 200G Series is built for mid-to-large enterprise edge, campus, and data-center segmentation where you need high throughput, deep SSL inspection, and lots of interface flexibility—without sacrificing security performance. It runs FortiOS (converged networking + security) and leverages Fortinet’s SPU hardware acceleration to keep inspection fast even under heavy load.
At-a-glance performance (Enterprise Traffic Mix)
-
IPS: 9 Gbps
-
NGFW: 7 Gbps
-
Threat Protection: 6 Gbps
-
SSL Inspection (IPS avg HTTPS): 7 Gbps
-
IPsec VPN (512B): 36 Gbps
-
SSL-VPN: 3 Gbps
-
Concurrent Sessions: 11 million
-
New Sessions/sec: 400,000
-
Firewall Throughput (IPv4/IPv6): 39 / 39 / 26.5 Gbps
-
Firewall policies: 10,000
-
VDOMs: 10 default / up to 25
Interfaces (this is a big selling point)
Designed for mixed networks (legacy 1G, multi-gig, and 10G uplinks):
-
8 × GE RJ45 switch ports
-
8 × 5/2.5/GE RJ45 (multi-gig)
-
8 × 10GE SFP+/SFP (FortiLink slots by default)
-
4 × GE SFP slots
-
2 × GE RJ45 dedicated MGMT/HA ports
-
1RU rack mount
This makes it easy to:
-
do 10G uplinks to core/distribution,
-
power multi-gig access edge (Wi-Fi 6/6E/7 AP uplinks),
-
and still have 1G copper/SFP for older infrastructure.
Hardware features (what makes it “G-series fast”)
SPU acceleration: NP7Lite + CP10
-
NP7Lite accelerates firewall + VPN + tunneling and improves latency/packet handling.
-
CP10 offloads content/security functions (pattern matching, IPS pre-scan, app identification).
Security hardening
-
TPM (Trusted Platform Module) for cryptographic key protection
-
Signed Firmware Hardware Switch (physical security switch so only validated FortiOS firmware can load)
-
BLE for provisioning/onboarding
Power redundancy
-
Dual internal AC power supplies (non hot-swappable) for 1+1 redundancy.
Best-fit use cases
1) High-throughput NGFW at the edge
-
Strong for sites that need full TLS 1.3 inspection + deep visibility without collapsing throughput.
2) Secure SD-WAN / WAN Edge
-
Single FortiOS framework for SD-WAN + security + management
-
Great for hybrid working and multi-site connectivity at scale.
3) Segmentation (campus/data center / hybrid IT)
-
Dynamic segmentation + VXLAN, with coordinated FortiGuard services to limit lateral movement.
4) Universal ZTNA
-
Enforce access policies everywhere
-
FortiClient agent-based or proxy portal for BYOD/guests.
Model difference: FG-200G vs FG-201G
-
FG-200G: No onboard storage
-
FG-201G: 480GB onboard SSD (better for local logging/reporting/retention use cases)
Everything else (ports + performance class) is essentially aligned.
Physical & power (quick spec)
-
Form factor: 1RU rack
-
Dimensions: 44.45 × 432 × 380 mm
-
Weight: 6.4–6.5 kg
-
Power: ~145W avg / 175–176W max
-
Noise: ~48 dBA (typical rack appliance airflow)
View data sheet: FortiGate 200G Series Data Sheet
form