FortiGate 70G vs 90G vs 120G: Which One Fits?

FortiGate 90G next-generation firewall

Choosing between the FortiGate 70G vs 90G vs 120G comes down to throughput, port layout and form factor rather than price alone. All three sit in Fortinet’s G-series, so this guide lines them up side by side.

FortiGate 70G vs 90G

Both are desktop appliances. The 90G roughly triples the 70G’s firewall throughput (28 Gbps vs 10 Gbps) and lifts IPsec VPN from 7.1 Gbps to 25 Gbps. If you are already brushing the 70G’s ceiling, or need 10 GbE links and PoE power, the 90G is the better fit; for everyday office traffic, cloud apps and video calls, the 70G remains the value pick.

FortiGate 90G vs 120G

Here the split is form factor as much as performance. The 90G is a desktop unit with a single power supply; the FortiGate 120G is 1U rack-mount with dual redundant power supplies, plus 8 x GE SFP slots and 4 x 10GE SFP+ uplinks. Choose the 120G when you run several branches from one appliance, or cannot tolerate a single power-supply failure.

Specifications at a glance

SpecFortiGate 70GFortiGate 90GFortiGate 120G
Firewall throughput10 Gbps28 Gbps39 Gbps
IPsec VPN throughput7.1 Gbps25 Gbps35 Gbps
Concurrent sessions1.4 million3 million3 million
PortsGE RJ45 desktop8 x GE RJ45 + 2 shared-media, some with PoE18 x GE RJ45, 8 x GE SFP, 4 x 10GE SFP+
Form factorDesktop, very low powerDesktop, low noise1U rack-mount, dual PSU
Best forSmall to mid-size officesLarger branches, small HQ (~200 users)Enterprises, multi-branch HQ

Which should you choose?

  • Small to mid-size office: the FortiGate 70G — G-series performance and SD-WAN at the lowest cost.
  • Larger branch or small HQ: the FortiGate 90G — more throughput, PoE and 10 GbE connectivity.
  • Enterprise or multi-branch HQ: the FortiGate 120G — rack-mount, redundant power and rich uplinks.

Running something smaller? Start with the FortiGate 50G. For the full lineup and how older E-series and F-series models map onto their replacements, see the FortiGate G-Series upgrade guide.

Don’t forget the licence

Whichever model you pick, its protection depends on a current UTP licence — once it lapses, IPS, antivirus and web filtering stop updating and you are left with basic packet filtering. See our FortiGate firewall license renewal service.

Talk to Potoco

Potoco Systems is a Hong Kong Fortinet partner. Tell us your headcount, traffic profile and branch structure, and we will recommend the right model and licence bundle.


About Potoco Systems Limited

Potoco Systems is a Hong Kong-based IT service provider specializing in managed IT services, network security, and Microsoft 365 solutions. We help businesses streamline their IT operations with expert support and enterprise-grade technology.

Contact us:

WhatsApp QR Code
Scan to chat with us on WhatsApp

Contact us today for a free consultation on your IT needs.