Description
FortiGate 400F Series — High-Performance AI-Powered NGFW with NP7 and CP9 ASICs
The FortiGate 400F series is a 1RU enterprise NGFW delivering 12 Gbps IPS and 9 Gbps threat protection throughput — powered by Fortinet's NP7 and CP9 ASICs for hyperscale firewall performance, ultra-low latency, and accelerated SSL inspection across hybrid enterprise environments.
Key Performance
- 12 Gbps IPS throughput
- 10 Gbps NGFW throughput
- 9 Gbps Threat Protection throughput
- 79.5 Gbps firewall throughput (1518 byte)
- 55 Gbps IPsec VPN throughput
- 8 Gbps SSL inspection throughput
- 3.6 Gbps SSL-VPN throughput
- 7.8 million concurrent sessions
- 500,000 new sessions per second
- 4.19 Ç?¶æs firewall latency / 2.5 Ç?¶æs ultra-low latency (ULL ports)
- 10,000 firewall policies
Interfaces & Hardware
- 16x GE RJ45 ports (hardware accelerated)
- 8x GE SFP slots
- 4x 10GE SFP+ slots
- 4x 10GE SFP+ Ultra Low Latency slots
- 2x GE RJ45 MGMT/HA ports
- 1x USB, 1x RJ45 Console port
- Trusted Platform Module (TPM)
- Dual hot-swappable redundant PSUs (AC or DC variants)
- 2x SFP SX 1GE transceivers included
- 1RU rack mount form factor
Available Models
- FortiGate 400F (FG-400F) — dual AC power supplies
- FortiGate 400F-DC (FG-400F-DC) — dual DC power supplies
- FortiGate 401F (FG-401F) — adds 2x 480GB onboard SSD, dual AC
- FortiGate 401F-DC (FG-401F-DC) — adds 960GB onboard SSD, dual DC
Capacity
- Up to 96 FortiSwitches (FortiOS 7.6.1+)
- Up to 512 FortiAPs (256 tunnel mode)
- Up to 5,000 FortiTokens
- Up to 25 virtual domains (VDOMs)
- 2,000 gateway-to-gateway IPsec VPN tunnels
- 50,000 client-to-gateway IPsec VPN tunnels
- 5,000 concurrent SSL-VPN users
Security Features
- FortiGuard AI-powered IPS with 18,000+ signatures and virtual patching
- Anti-malware: AV, sandboxing, AI-based heuristics, Content Disarm and Reconstruct
- Web/DNS/video filtering across 300M+ URL database
- AI-based inline malware prevention — sub-second zero-day blocking
- Data Loss Prevention (DLP) and inline CASB
- OT security with 1,000+ virtual patches and 3,300+ protocol rules
- Real-time SSL/TLS 1.3 deep inspection
Networking & SD-WAN
- Full SD-WAN built into FortiOS at no extra cost
- NP7 ASIC for hyperscale firewall, ultra-low latency VPN and VXLAN
- CP9 ASIC for accelerated SSL/TLS 1.3 decryption and IPS pre-scan
- Universal ZTNA — agent-based via FortiClient or agentless via proxy portal
- VXLAN segmentation bridging physical and virtual domains
- FortiLink for converged switch and access point management
- Active-Active, Active-Passive, and Clustering HA
Management
- Managed via FortiManager (enterprise) or FortiGate Cloud (SMB)
- FortiAnalyzer Cloud and FortiManager Cloud available
- GenAI-assisted configuration and troubleshooting via FortiAI
- Zero-touch provisioning for rapid deployment
- FortiConverter Service for migration from legacy firewalls
Environment
- Operating temperature: 0°C to 40°C
- Power consumption: 154.8W average / 189.2W max (400F AC)
- Noise: 48 dBA, side and front-to-back airflow
- Operating altitude: up to 3,048m
View data sheet: FortiGate 400F Series Data Sheet

