Description
Fortinet FortiGate 4800F Series (FG-4800F / FG-4801F + DC + NEBS variants)
Overview
The FortiGate 4800F Series is a hyperscale, data-centre-class next-generation firewall designed for ultra-high throughput networks and hybrid environments. It forms the foundation of a Hybrid Mesh Firewall architecture—embedding security across the data centre, edge, and multi-cloud—while delivering coordinated threat protection through FortiGuard AI/ML services and Fortinet Security Fabric. It also includes integrated ZTNA enforcement within the NGFW to verify users and tightly control access to applications, reducing lateral movement.
Highlights
-
Gartner® Magic Quadrant™ Leaders for Network Firewalls and SD-WAN
-
FortiOS convergence for networking + security
-
Purpose-built SPU / vSPU acceleration (NP7 + CP9)
-
AI/ML-powered FortiGuard services consolidated into the platform
-
Hyperscale performance to secure any edge at any scale
Key Performance (Enterprise Traffic Mix)
-
IPS Throughput: 87 Gbps
-
NGFW Throughput: 77 Gbps
-
Threat Protection Throughput: 75 Gbps
-
SSL Inspection Throughput (IPS, avg. HTTPS): 63 Gbps
-
SSL Inspection CPS (IPS, avg. HTTPS): 60,000
-
SSL Inspection Concurrent Sessions (IPS, avg. HTTPS): 30 Million
-
Application Control Throughput (HTTP 64K): 180 Gbps
Hyperscale Firewall & Capacity
-
IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP): 3.1 / 3.1 / 0.93 Tbps
-
IPv6 Firewall Throughput (1518 / 512 / 86 byte UDP): 3.1 / 3.1 / 0.93 Tbps
-
Firewall Latency (64 byte UDP): 3.6 μs
-
Firewall Throughput: 1396 Mpps
-
Concurrent Sessions (TCP): 280 Million / 1.8 Billion*
-
New Sessions/Second (TCP): 915,000 / 25 Million*
-
Firewall Policies: 200,000
* Requires Hyperscale Firewall License.
Interfaces & Connectivity (400G / 200G ready)
This is the major differentiator vs the 4200F/4400F series: native 400GE/200GE QSFP-DD plus dense 200GE and 50GE uplinks.
Modules / Ports
-
8 × 400GE/200GE/100GE/40GE QSFP-DD / QSFP56 / QSFP28 / QSFP+ slots
-
12 × 200GE/100GE/40GE QSFP56 / QSFP28 / QSFP+ slots
-
8 × 50GE/25GE/10GE/GE SFP56 / SFP28 / SFP+ / SFP slots
-
4 × 50GE/25GE/10GE/GE SFP56/SFP28/SFP+/SFP High Availability + AUX slots
-
2 × 10GE/GE RJ45 management ports
-
USB (3.0): 1
-
Console: 1
-
Included transceivers: 2 × SFP+ (SR 10GE)
Why it matters
-
400GE/200GE QSFP-DD simplifies core segmentation and high-speed interconnects without extra aggregation gear.
-
Mixed 400G/200G/100G/50G/25G interface options make it easier to match modern spine-leaf, EVPN/VXLAN, and DC edge designs.
VPN & Remote Access
-
IPsec VPN Throughput (512 byte): 800 Gbps
-
Gateway-to-Gateway IPsec VPN tunnels: 40,000
-
Client-to-Gateway IPsec VPN tunnels: 200,000
-
SSL-VPN Throughput: 18 Gbps (uses RSA-2048 certificate in this test)
-
Recommended concurrent SSL-VPN users (Tunnel mode): 30,000
Wireless / Fabric Scale
-
Max FortiSwitches supported: 300
-
Max FortiAPs (Total / Tunnel): 8192 / 4096
-
Max FortiTokens: 20,000
-
High availability: Active-Active, Active-Passive, Clustering
Hyperscale Firewall License (LIC-FGT-HYPSC)
Per your text, this perpetual license enables hardware-accelerated CGNAT features via NP7, including:
-
hardware session setup
-
firewall session logging
-
NAT acceleration
Hardware, Form Factor & Power
-
Form factor: Rack mount, 4RU
-
Storage:
-
FG-4800F/4800F-DC: none listed
-
FG-4801F / 4801F-DC / NEBS variants: 2 × 1.92TB SSD (≈ 4TB raw)
-
-
Noise level: 63.794 dBA
-
Airflow: front-to-back
-
Operating altitude: up to 10,000 ft (3048 m)
-
Operating temperature: up to 50°C
Power (200–240VAC, 4× AC PSUs)
-
FG-4800F: 1602W avg / 1918.2W max
-
FG-4801F: 1622W avg / 1938.2W max
-
FG-4801F-NEBS / 4801F-DC-NEBS: 1528.8W avg / 1964.9W max (as listed)
Models & Ordering (SKUs)
-
FG-4800F: 8× QSFP-DD + 12× QSFP56/28 + 12× SFP56/28, NP7 + CP9, 4× AC PSUs
-
FG-4800F-DC: same + 4× DC PSUs
-
FG-4801F: same + 2× 1.92TB storage, 4× AC PSUs
-
FG-4801F-DC: same + 2× 1.92TB storage, 4× DC PSUs
-
FG-4801F-NEBS: same + storage + NEBS Level 3 compliant, 4× AC PSUs
-
FG-4801F-DC-NEBS: same + storage + NEBS + 4× DC PSUs
-
LIC-FGT-HYPSC: Hyperscale Firewall License for FortiGate FG-4000F Series (covers this family)
Quick “spot check” notes (so your listing stays clean)
-
Your “Interfaces” summary at the very top says “50GE/25GE/10GE SFP65/28” — that looks like a typo. In the detailed hardware section and specs table it’s SFP56/SFP28.
-
The platform explicitly calls out 400GE/200GE QSFP-DD as a key differentiator for core segmentation (that’s the big “why 4800F” story vs 4400F).
If you want, paste your 4200F + 4400F + 4800F “hero spec row” format and I’ll rewrite them so they all match the exact same structure (throughput line, port line, key differentiator line) for your product pages.
View data sheet: FortiGate 4800F Series Datasheet
form