In short
The FortiGate 120G is a 1U next-generation firewall for head offices and larger branches: 18 GE RJ45 (16 switch ports), 8 GE SFP, 4 x 10GE SFP+, dual AC power and 2.8 Gbps threat protection. It takes the 100F's place in the Fortinet range. Forever Systems, a Fortinet Advocate Partner, can quote, supply and install it.
Order the FortiGate 120G
Add products and licences to your basket, then check out when you are ready.
What the FortiGate 120G is
Fortinet describes the 120G as "18 x GE RJ45 ports (including 1 x MGMT port, 1 X HA port, 16 x switch ports), 8 x GE SFP slots, 4 x 10GE SFP+ slots, SP5 hardware accelerated, dual AC power supplies". The 121G adds a 480 GB SSD.
Fortinet groups it in Mid-Range (Campus): 2.8 Gbps threat protection, 39 Gbps firewall throughput at 1518-byte packets and 35 Gbps IPsec VPN in the data sheet, with up to 128 FortiAP access points (64 tunnel) and 48 FortiSwitch switches managed (Product Matrix). Dedicated HA and management ports make an HA pair simple to cable.
FortiGate 120G models and part numbers
Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.
| Part number | Model | Vendor description | Key specs | What you order with it | Status | Basket |
|---|---|---|---|---|---|---|
| FG-120G | FG-120G | FortiGate-120G 18 x GE RJ45 ports (including 1 x MGMT port, 1 X HA port, 16 x switch ports), 8 x GE SFP slots, 4 x 10GE SFP+ slots, SP5 hardware accelerated, dual AC power supplies | 18 x GE RJ45 ports (including 1 x MGMT port, 1 X HA port, 16 x switch ports), 8 x GE SFP slots, 4 x 10GE SFP+ slots, SP5 hardware accelerated, dual AC power supplies; 10G SFP+… | Optional: FortiGuard and FortiCare services for FortiGate-120G | Current | |
| FG-121G | FG-121G | FortiGate-121G 18 x GE RJ45 ports (including 1 x MGMT port, 1 X HA port, 16 x switch ports), 8 x GE SFP slots, 4 x 10GE SFP+ slots, SP5 hardware accelerated, 480GB onboard SSD storage, dual AC power… | 18 x GE RJ45 ports (including 1 x MGMT port, 1 X HA port, 16 x switch ports), 8 x GE SFP slots, 4 x 10GE SFP+ slots, SP5 hardware accelerated, 480GB onboard SSD storage, dual AC… | Optional: FortiGuard and FortiCare services for FortiGate-121G | Current |
Add the FortiGate 120G to your basket
Add it and anything else you need, then check out when you are ready.
Replacing a FortiGate 100F or 101F
The current Fortinet models table no longer lists the FortiGate 100F; the 120G sits in its place. If you are replacing a 100F or 101F:
- Ports: the 120G is 1U with 16 switch ports, 8 GE SFP and 4 x 10GE SFP+ slots for fibre uplinks and fast WAN circuits.
- SSD: the 101F's equivalent is the FG-121G (480 GB SSD).
- Configuration: we can migrate the FortiOS configuration to the new hardware and check interface mappings.
- Subscriptions: FortiGuard and FortiCare are licensed per appliance, so the 120G takes its own bundle. We quote the 120G with the bundle, or the FG-120G-BDL codes below that combine both.
Still running a 100F for now? Ask us about its FortiCare and FortiGuard renewals, and lifecycle dates for older models are on Fortinet end of life.
FortiGate 120G specifications
| Figure | FortiGate 120G and 121G |
|---|---|
| Threat protection | 2.8 Gbps |
| NGFW | 3.1 Gbps |
| IPS | 5.3 Gbps |
| Firewall (1518 / 512 / 64 byte UDP) | 39 / 39 / 28 Gbps |
| IPsec VPN (512 byte) | 35 Gbps |
| Concurrent sessions (TCP) | 3M |
| FortiAP access points managed (total / tunnel) | 128 / 64 |
| FortiSwitch switches managed | 48 |
| Form factor | Rack Mount, 1RU |
Figures are Fortinet data-sheet figures. Fortinet: "All performance values are 'up to' and vary depending on system configuration." Threat protection is measured with firewall, IPS, application control and malware protection enabled, so it is the figure to size on. Source: FortiGate 120G Series Data Sheet (FG-120G-DAT-R19, 29 Sep 2026) (opens in a new tab).
Not sure what you need?
Tell us about your sites and we will recommend the right kit and licences.
Subscriptions and support
The security services that make a FortiGate firewall a next-generation firewall come as FortiGuard subscriptions: the Advanced Threat Protection (ATP), Unified Threat Protection (UTP) or Enterprise Protection (ENT) bundle, the SD-WAN bundle, or single services, for 1, 3 or 5 years. Fortinet says "All bundles include FortiCare Premium Services"; FortiCare support can also be bought on its own. FortiGuard bundles compared explains what each bundle adds.
What you order with it
Subscription and support part numbers for the hardware above. We confirm the right tier, term and quantity at quote.
FortiGuard and FortiCare services for FortiGate-120G
| Part number | Description | Term | Basket |
|---|---|---|---|
| FC-10-F120G-247-02-12 | FortiGate-120G 1 Year FortiCare Premium Support | 1 year | |
| FC-10-F120G-247-02-36 | FortiGate-120G 3 Year FortiCare Premium Support | 3 years | |
| FC-10-F120G-247-02-60 | FortiGate-120G 5 Year FortiCare Premium Support | 5 years | |
| FC-10-F120G-284-02-12 | FortiGate-120G 1 Year FortiCare Elite Support | 1 year | |
| FC-10-F120G-284-02-36 | FortiGate-120G 3 Year FortiCare Elite Support | 3 years | |
| FC-10-F120G-284-02-60 | FortiGate-120G 5 Year FortiCare Elite Support | 5 years | |
| FC-10-F120G-809-02-12 | FortiGate-120G 1 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 1 year | |
| FC-10-F120G-809-02-36 | FortiGate-120G 3 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 3 years | |
| FC-10-F120G-809-02-60 | FortiGate-120G 5 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 5 years | |
| FC-10-F120G-928-02-12 | FortiGate-120G 1 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 1 year | |
| FC-10-F120G-928-02-36 | FortiGate-120G 3 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 3 years | |
| FC-10-F120G-928-02-60 | FortiGate-120G 5 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 5 years | |
| FC-10-F120G-950-02-12 | FortiGate-120G 1 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service… | 1 year | |
| FC-10-F120G-950-02-36 | FortiGate-120G 3 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service… | 3 years | |
| FC-10-F120G-950-02-60 | FortiGate-120G 5 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service… | 5 years | |
| FC-10-F120G-1329-02-12 | FortiGate-120G 1 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, FortiSASE 10-user starter kit, SASE Secure… | 1 year | |
| FC-10-F120G-1329-02-36 | FortiGate-120G 3 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, FortiSASE 10-user starter kit, SASE Secure… | 3 years | |
| FC-10-F120G-1329-02-60 | FortiGate-120G 5 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, FortiSASE 10-user starter kit, SASE Secure… | 5 years |
FortiGuard and FortiCare services for FortiGate-121G
| Part number | Description | Term | Basket |
|---|---|---|---|
| FC-10-F121G-247-02-12 | FortiGate-121G 1 Year FortiCare Premium Support | 1 year | |
| FC-10-F121G-247-02-36 | FortiGate-121G 3 Year FortiCare Premium Support | 3 years | |
| FC-10-F121G-247-02-60 | FortiGate-121G 5 Year FortiCare Premium Support | 5 years | |
| FC-10-F121G-284-02-12 | FortiGate-121G 1 Year FortiCare Elite Support | 1 year | |
| FC-10-F121G-284-02-36 | FortiGate-121G 3 Year FortiCare Elite Support | 3 years | |
| FC-10-F121G-284-02-60 | FortiGate-121G 5 Year FortiCare Elite Support | 5 years | |
| FC-10-F121G-809-02-12 | FortiGate-121G 1 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 1 year | |
| FC-10-F121G-809-02-36 | FortiGate-121G 3 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 3 years | |
| FC-10-F121G-809-02-60 | FortiGate-121G 5 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 5 years | |
| FC-10-F121G-928-02-12 | FortiGate-121G 1 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 1 year | |
| FC-10-F121G-928-02-36 | FortiGate-121G 3 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 3 years | |
| FC-10-F121G-928-02-60 | FortiGate-121G 5 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 5 years | |
| FC-10-F121G-950-02-12 | FortiGate-121G 1 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service… | 1 year | |
| FC-10-F121G-950-02-36 | FortiGate-121G 3 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service… | 3 years | |
| FC-10-F121G-950-02-60 | FortiGate-121G 5 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service… | 5 years | |
| FC-10-F121G-1329-02-12 | FortiGate-121G 1 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, FortiSASE 10-user starter kit, SASE Secure… | 1 year | |
| FC-10-F121G-1329-02-36 | FortiGate-121G 3 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, FortiSASE 10-user starter kit, SASE Secure… | 3 years | |
| FC-10-F121G-1329-02-60 | FortiGate-121G 5 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, FortiSASE 10-user starter kit, SASE Secure… | 5 years |
Hardware plus bundle part numbers
Fortinet also sells the hardware and a bundle as one part number: -BDL-950 codes are the hardware plus FortiCare Premium and FortiGuard Unified Threat Protection, and -BDL-809 codes the hardware plus FortiCare Premium and FortiGuard Enterprise Protection, each for 1, 3 or 5 years. They are an alternative to ordering the appliance and the bundle as two lines.
| Part number | Fortinet description | Term | Basket |
|---|---|---|---|
| FG-120G-BDL-809-12 | FortiGate-120G Hardware plus 1 Year FortiCare Premium and FortiGuard Enterprise Protection | 1 year | |
| FG-120G-BDL-809-36 | FortiGate-120G Hardware plus 3 Year FortiCare Premium and FortiGuard Enterprise Protection | 3 years | |
| FG-120G-BDL-809-60 | FortiGate-120G Hardware plus 5 Year FortiCare Premium and FortiGuard Enterprise Protection | 5 years | |
| FG-120G-BDL-950-12 | FortiGate-120G Hardware plus 1 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 1 year | |
| FG-120G-BDL-950-36 | FortiGate-120G Hardware plus 3 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 3 years | |
| FG-120G-BDL-950-60 | FortiGate-120G Hardware plus 5 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 5 years | |
| FG-121G-BDL-809-12 | FortiGate-121G Hardware plus 1 Year FortiCare Premium and FortiGuard Enterprise Protection | 1 year | |
| FG-121G-BDL-809-36 | FortiGate-121G Hardware plus 3 Year FortiCare Premium and FortiGuard Enterprise Protection | 3 years | |
| FG-121G-BDL-809-60 | FortiGate-121G Hardware plus 5 Year FortiCare Premium and FortiGuard Enterprise Protection | 5 years | |
| FG-121G-BDL-950-12 | FortiGate-121G Hardware plus 1 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 1 year | |
| FG-121G-BDL-950-36 | FortiGate-121G Hardware plus 3 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 3 years | |
| FG-121G-BDL-950-60 | FortiGate-121G Hardware plus 5 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 5 years |
Transceivers and accessories
Accessories Fortinet lists for this range, including SFP and SFP+ transceivers and direct-attach cables for the fibre ports:
| Part number | Vendor description | Type | Basket |
|---|---|---|---|
| FN-CABLE-SFP+1 | 10 GE SFP+ passive direct attach cable 10 GE SFP+ passive direct attach cable, 1m, 0°C to 70°C, transceivers included, for systems with SFP/SFP+ slots | Cable | |
| FN-CABLE-SFP+3 | 10 GE SFP+ passive direct attach cable 10 GE SFP+ passive direct attach cable, 3m, 0°C to 70°C, transceivers included, for systems with SFP/SFP+ slots | Cable | |
| FN-CABLE-SFP+5 | 10 GE SFP+ passive direct attach cable 10 GE SFP+ passive direct attach cable, 5m, 0°C to 70°C, transceivers included, for systems with SFP/SFP+ slots | Cable | |
| FN-TRAN-GC | 1GE SFP RJ45 transceiver module 1 GE SFP transceiver module, range 100m, RJ45 connector, -40°C to 85°C, for systems with SFP/SFP+ slots | Transceiver | |
| FN-TRAN-LX | 1GE SFP LX transceiver module 1 GE SFP transceiver module, long range 10km, LC connector, SMF, 1310nm, -40°C to 85°C, for systems with SFP/SFP+ slots | Transceiver | |
| FN-TRAN-SFP+BD27 | 10GE SFP+ transceiver module, 30KM long range 10 GE SFP+ BIDI transceiver module, long range 30km, single LC connector, SMF, TX:1271nm/RX:1331nm, -5°C to 85°C, for… | Transceiver | |
| FN-TRAN-SFP+BD33 | 10GE SFP+ transceiver module, (connects to FN-TRAN-SFP+BD27, ordered separately) 10 GE SFP+ BIDI transceiver module, long range 30km, single LC connector, SMF… | Transceiver | |
| FN-TRAN-SFP+GC | 10GE copper SFP+ RJ45 Transceiver (30m range) 10 GE SFP+ transceiver module, range 30m, RJ45 connector, CAT6A, -5°C to 85°C, for systems with SFP+ slots | Transceiver | |
| FN-TRAN-SFP+GC-T80 | 10 GE copper SFP+ RJ45 transceiver module (80m range) 10 GE SFP+ transceiver module, range 80m, RJ45 connector, CAT6A, -5°C to 85°C, for systems with SFP+ slots | Transceiver | |
| FN-TRAN-SFP+LR | 10GE SFP+ transceiver module, long range 10 GE SFP+ transceiver module, long range 10km, LC connector, SMF, 1310nm, 0°C to 85°C, for systems with SFP+ slots | Transceiver | |
| FN-TRAN-SFP+SR | 10GE SFP+ transceiver module, short range 10 GE SFP+ transceiver module, short range 300m, LC connector, MMF, 850nm, 0°C to 70°C, for systems with SFP+ slots | Transceiver | |
| FN-TRAN-SFP-1BD10 | 1 GE SFP transceiver module, 10km 1 GE SFP BIDI transceiver module, long range 10km, single LC connector, SMF, TX:1490nm/RX:1310nm, -40°C to 85°C, for systems with SFP+… | Transceiver | |
| FN-TRAN-SFP-1BD40 | 1 GE SFP transceiver module, 40km 1 GE SFP BIDI transceiver module, long range 40km, single LC connector, SMF, TX:1490nm/RX:1310nm, -40°C to 85°C, for systems with SFP+… | Transceiver | |
| FN-TRAN-SFP-1BU10 | 1 GE SFP transceiver module, 10km 1 GE SFP BIDI transceiver module, long range 10km, single LC connector, SMF, TX:1310nm/RX:1490nm, -40°C to 85°C, for systems with SFP+… | Transceiver | |
| FN-TRAN-SFP-1BU40 | 1 GE SFP transceiver module, 40km 1 GE SFP BIDI transceiver module, long range 40km, single LC connector, SMF, TX:1310nm/RX:1490nm, -40°C to 85°C, for systems with SFP+… | Transceiver | |
| FN-TRAN-SFP28-ESR-4PACK | 25 GE SFP28 transceiver module, extended short range 400m Pack of four 25 GE SFP28 transceiver module, extended short range 400m, LC connector, MMF, 850nm, 0°C to 70°C… | Transceiver | |
| FN-TRAN-SFX | 100M SFP transceiver module, long range 2km 100M SFP transceiver module with SGMII interface, long range 2km, LC connector, MMF, 1310nm, -40°C to 85°C, for systems with… | Transceiver | |
| FN-TRAN-SX | 1GE SFP SX transceiver module 1 GE SFP transceiver module, short range 500m, LC connector, MMF, 850nm, -20°C to 85°C, for systems with SFP slots | Transceiver | |
| FTK-210-20 | FortiToken-210 Twenty pieces one-time password token, time based password generator. Perpetual license, Compatible with FortiGate, FortiAuthenticator and FortiToken… | FortiToken hardware token | |
| FTK-210-5 | FortiToken-210 Five pieces one-time password token, time based password generator. Perpetual license, Compatible with FortiGate, FortiAuthenticator and FortiToken… | FortiToken hardware token | |
| FTK-310-5 | FortiToken-310 5 USB tokens for PKI certificate and client software. Perpetual license. | FortiToken hardware token | |
| FTK-411-20 | FortiToken-411 Twenty pieces of 2FA USB-C interfaced security key that supports FIDO U2F/FIDO2 | FortiToken hardware token | |
| FTK-411-5 | FortiToken-411 Five pieces of 2FA USB-C interfaced security key that supports FIDO U2F/FIDO2 | FortiToken hardware token | |
| SP-CONSOLE-USB-10 | Pack of 10 cables, USB to R45 console port. | Accessory |
120G or 200G?
The FortiGate 200G adds 8 x 5GE RJ45 ports and 8 x 10GE SFP+ slots and lifts threat protection to 6 Gbps, with 11 million sessions and 64 FortiSwitch switches. Choose it for a larger head office or a site with several 10G links; the 120G suits a single head office on gigabit or 10G internet.
How to order
How ordering works. Press Add next to a part number and it goes into your basket; where a security subscription or support contract goes with the firewall, you choose it in the same step. Add any accessories, then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the firewalls, VPNs and policies as a project, with the scope confirmed at quote (see network installation).
Vendor sources
How we can help with your network
Forever Systems can design, supply, stage, install and configure the network around the hardware you buy here, as a project or one step at a time.
- Design: we look at your sites, users and existing kit and size the switches, wireless and firewalls to fit
- Supply: every order gets a personalised quote by part number, with the subscriptions and support each product needs
- Stage: we can pre-configure and label equipment before it reaches site
- Install: we can rack and mount switches, access points and firewalls on site
- Configure: VLANs, wireless, firewall policy, VPNs and management platforms set up and documented at handover
Scope is confirmed at quote, so you only pay for the parts of the project you need.
Frequently asked questions
What replaced the FortiGate 100F?
The current Fortinet models table no longer lists the 100F and shows the FortiGate 120G in its place. The FG-121G, with a 480 GB SSD, corresponds to the 101F.
Is the FortiGate 100F end of life?
The 100F is no longer in the current Fortinet models table. Existing 100F firewalls can still renew FortiCare and FortiGuard; ask us about yours, and see Fortinet end of life for dates Fortinet has published.
What is the threat protection throughput of the FortiGate 120G?
2.8 Gbps, from the Fortinet data sheet, with firewall, IPS, application control and malware protection enabled.
What is the difference between the FG-120G and FG-121G?
The FG-121G adds 480 GB of onboard SSD storage for logs and reports.
Does the FortiGate 120G have redundant power?
Yes. The Fortinet description lists dual AC power supplies on both the FG-120G and FG-121G.
Ready to order?
Build your basket and check out when you are ready.