FortiGate 1000F
100GE QSFP28 optics and 100,000 firewall policies in 2 RU
- Threat protection
- 13 Gbps
- Firewall throughput
- 198 Gbps
- IPsec VPN
- 55 Gbps
- Concurrent sessions
- 7.5 Million
Front panel
- QSFP cage
- SFP cage
- RJ45 copper
The 1000F introduces 100GE QSFP28 optics and a large policy and tunnel scale — 100,000 firewall policies, 20,000 gateway-to-gateway and 100,000 client-to-gateway IPsec tunnels, and up to 250 VDOMs. Firewall throughput is 198 Gbps with 13 Gbps threat protection.
This is a scale box rather than an inspection box. Its threat protection matches the far smaller 400G, but its tunnel counts are 10x and 2x higher respectively and its VDOM ceiling is 250 against 50. Buy it for VPN concentration, multi-tenancy and policy scale — not for deep inspection throughput.
Highlights
- 2x 100GE QSFP28 plus 8x 25GE SFP28
- 100,000 firewall policies, 250 VDOMs
- 20,000 site-to-site and 100,000 client IPsec tunnels
- 20,000 FortiTokens
Typical deployments
- Large hub-and-spoke VPN concentrator terminating thousands of branches
- Multi-tenant service provider deployments needing many VDOMs
- Data-centre edge with 100GE uplinks
The numbers, with their conditions
Every figure below is Fortinet's own, with the test conditions it was measured under.
Performance
Fortinet's published figures. Firewall throughput is measured on UDP with no inspection enabled — size your deployment on threat protection throughput instead, which is measured with firewall, IPS, application control and malware protection all running against an enterprise traffic mix.
| Firewall throughput (1518 / 512 / 64 byte UDP) | 198 / 196 / 134 Gbps |
|---|---|
| IPsec VPN throughput (512 byte)IPsec VPN performance test uses AES256-SHA256. | 55 Gbps |
| IPS throughput (enterprise mix)IPS, application control, NGFW and threat protection are measured with logging enabled. | 19 Gbps |
| NGFW throughput (enterprise mix)NGFW performance is measured with firewall, IPS and application control enabled, enterprise mix traffic. | 15 Gbps |
| Threat protection throughput (enterprise mix)Threat protection performance is measured with firewall, IPS, application control and malware protection enabled, enterprise mix traffic. | 13 Gbps |
| SSL inspection throughput (IPS, avg. HTTPS)SSL inspection performance values use an average of HTTPS sessions of different cipher suites. | 10 Gbps |
| Application control throughput (HTTP 64K) | 44 Gbps |
| Firewall latency | 3.45 µs |
Capacity
| Concurrent sessions | 7.5 Million |
|---|---|
| New sessions / second | 650,000 |
| Firewall policies | 100,000 |
| Max gateway-to-gateway IPsec tunnels | 20,000 |
| Max client-to-gateway IPsec tunnels | 100,000 |
| SSL VPN throughput | 5.3 Gbps |
| Concurrent SSL VPN users (recommended max, tunnel mode) | 10,000 |
| Virtual domains (default / max) | 10 / 250 |
Security Fabric capacity
How much of the rest of the Fabric this model manages directly, with no separate controller.
| Max managed FortiAPs (total / tunnel) | 4,096 / 2,048 |
|---|---|
| Max managed FortiSwitches | 196 |
| Max FortiTokens | 20,000 |
Hardware
| Interfaces | 2x 100GE QSFP28, 8x 25GE SFP28, 16x 10GE SFP+, 8x 10GE RJ45, 1x 2.5GE RJ45, 1x GE RJ45 |
|---|---|
| Local storage | 960 GB (1001F) |
| Power supplies | Dual PS |
| Form factor | 2 RU |
| Variants | — |
Sources
- Fortinet Product Matrix — FortiGate Network Security Platform (July 2026) — retrieved 2026-09-01
Reproduced from Fortinet published documentation and subject to change without notice. Where a figure is load-bearing for your design, ask us to confirm it in writing before you order — we will.
Buyers also compare
FortiGate 1800F
Hyperscale-capable — 40 million sessions and 2 million new sessions/sec
FortiGate 900G
1 RU with ultra-low-latency ports and 74.8 Gbps application control
FortiGate 2600F
The entry point to the high-end range — 25 Gbps inspected in 2 RU