FortiGate 4400F
1.15 Tbps firewall and 310 Gbps IPsec in 4 RU
- Threat protection
- 75 Gbps
- Firewall throughput
- 1.15 Tbps
- IPsec VPN
- 310 Gbps
- Concurrent sessions
- 210 Million
Front panel
- QSFP cage
- SFP cage
- RJ45 copper
The 4400F crosses the terabit line at 1.15 Tbps of firewall throughput with 310 Gbps of IPsec VPN and 700 million Hyperscale sessions at 10 million new sessions per second. Twelve 100GE QSFP28 and twenty 25GE SFP28 ports across 4 RU with four power supplies.
The best balance in the 4000 series: it delivers 75 Gbps of threat protection — the same as the much larger 4800F — while offering 310 Gbps of IPsec and terabit forwarding. If you are considering a 4800F, check whether the 4400F already meets your inspection requirement, because it very often does at lower cost and in less rack space.
Highlights
- 1.15 Tbps firewall throughput, 310 Gbps IPsec VPN
- 75 Gbps threat protection — matches the 4800F
- Hyperscale: 700M sessions, 10M new sessions/sec
- 12x 100GE QSFP28, 4 power supplies
Typical deployments
- Terabit-class data-centre perimeter
- Very large IPsec concentration at 310 Gbps
- Service provider core with heavy session requirements
The numbers, with their conditions
Every figure below is Fortinet's own, with the test conditions it was measured under.
Performance
Fortinet's published figures. Firewall throughput is measured on UDP with no inspection enabled — size your deployment on threat protection throughput instead, which is measured with firewall, IPS, application control and malware protection all running against an enterprise traffic mix.
| Firewall throughput (1518 / 512 / 64 byte UDP) | 1.15 / 1.14 / 0.50 Tbps |
|---|---|
| IPsec VPN throughput (512 byte)IPsec VPN performance test uses AES256-SHA256. | 310 Gbps |
| IPS throughput (enterprise mix)IPS, application control, NGFW and threat protection are measured with logging enabled. | 94 Gbps |
| NGFW throughput (enterprise mix)NGFW performance is measured with firewall, IPS and application control enabled, enterprise mix traffic. | 82 Gbps |
| Threat protection throughput (enterprise mix)Threat protection performance is measured with firewall, IPS, application control and malware protection enabled, enterprise mix traffic. | 75 Gbps |
| SSL inspection throughput (IPS, avg. HTTPS)SSL inspection performance values use an average of HTTPS sessions of different cipher suites. | 86 Gbps |
| Application control throughput (HTTP 64K) | 140 Gbps |
| Firewall latency | 2.98 µs |
Capacity
| Concurrent sessions | 210 Million / 700 Million |
|---|---|
| New sessions / second | 1 Million / 10 Million |
| Firewall policies | 400,000 |
| Max gateway-to-gateway IPsec tunnels | 40,000 |
| Max client-to-gateway IPsec tunnels | 200,000 |
| SSL VPN throughput | 16 Gbps |
| Concurrent SSL VPN users (recommended max, tunnel mode) | 30,000 |
| Virtual domains (default / max) | 10 / 500 |
Security Fabric capacity
How much of the rest of the Fabric this model manages directly, with no separate controller.
| Max managed FortiAPs (total / tunnel) | 8,192 / 4,096 |
|---|---|
| Max managed FortiSwitches | 300 |
| Max FortiTokens | 20,000 |
Hardware
| Interfaces | 12x 100GE QSFP28/40GE QSFP+, 20x 25GE SFP28, 2x GE RJ45 |
|---|---|
| Local storage | 2x 1.92 TB (4401F) |
| Power supplies | 4 PS |
| Form factor | 4 RU |
| Variants | DC |
Model-specific caveats
Fortinet conditions that apply to this model in particular. Worth reading before you order.
| Note 1 | The second figure requires a Hyperscale license. |
|---|
Sources
- Fortinet Product Matrix — FortiGate Network Security Platform (July 2026) — retrieved 2026-09-01
Reproduced from Fortinet published documentation and subject to change without notice. Where a figure is load-bearing for your design, ask us to confirm it in writing before you order — we will.
Buyers also compare
FortiGate 4800F
3.1 Tbps firewall and 1.8 billion sessions — the largest fixed FortiGate
FortiGate 4200F
800 Gbps firewall throughput with 450 million Hyperscale sessions
FortiGate 3800G
200 Gbps threat protection — the highest inspected throughput outside a chassis