Choose the FortiGate 70G if your office runs on a 1Gbps internet line and gigabit switches. Choose the FortiGate 90G if you have, or plan to move to, a multi-gigabit line, or you need 10GbE ports to connect a core switch. The deciding number is threat protection throughput, which is the speed the firewall sustains with its security features switched on: 1.3Gbps on the 70G and 2.2Gbps on the 90G.
How do the two models compare?
| Specification | FortiGate 70G | FortiGate 90G |
|---|---|---|
| Firewall throughput | 10 Gbps | 28 Gbps |
| IPS throughput | 2.5 Gbps | 4.5 Gbps |
| NGFW throughput | 1.5 Gbps | 2.5 Gbps |
| Threat protection throughput | 1.3 Gbps | 2.2 Gbps |
| Concurrent sessions | 1.4 million | 3 million |
| Ports | 10 x GE RJ45 | 8 x GE RJ45 plus 2 x 10GE RJ45/SFP+ shared |
| Form factor | Desktop, fanless | Desktop |
| Listed price, hardware | S$1,668 | S$3,796.80 |
Source: Fortinet FortiGate 70G and 90G series datasheets. Compiled 12 November 2026. Prices listed 12 Nov 2026; prices change; ask for a current quotation.
Which number should you size by?
Ignore the headline firewall throughput. That figure is measured with inspection switched off. An office buys a FortiGate to inspect traffic, so the figure that matters is threat protection throughput, measured with firewall, intrusion prevention, application control and malware protection all enabled.
CALC, 1Gbps line on a 70G: 1.0 / 1.3 = 77 percent of threat protection capacity at full line speed. That leaves headroom.
CALC, 2Gbps line on a 70G: 2.0 / 1.3 = 154 percent. The firewall becomes the bottleneck. On a 90G: 2.0 / 2.2 = 91 percent. It fits, with little to spare.
CALC, 10Gbps line: neither model inspects at that speed. Either accept the 90G as the limit at 2.2Gbps or look at a larger model such as the FortiGate 120G.
Size a firewall to the internet line you will have in three years, with inspection on. Headline throughput with inspection off describes a product nobody actually deploys.
When do the ports decide it?
The 70G has gigabit ports only. If your core switch or NAS uplink is 10GbE, or your broadband router hands off at 2.5GbE or faster, the 70G cannot take it at full speed. The 90G has two multi-gigabit ports that also work as SFP+ slots. For background on whether your office needs faster wiring, see 10GbE vs 2.5GbE.
What about smaller and larger models?
| Model | Position | Listed price |
|---|---|---|
| FortiGate 30G | Very small office or shop | S$766.80 |
| FortiGate 50G | Small office | S$1,168.80 |
| FortiGate 70G | Office on a 1Gbps line | S$1,668 |
| FortiGate 90G | Multi-gigabit line or 10GbE uplink | S$3,796.80 |
| FortiGate 120G | Larger site, rack-mount | S$5,732.40 |
CALC: the 90G costs S$3,796.80 - S$1,668 = S$2,128.80 more than the 70G in hardware. Subscription prices also rise with the model, so compare the three or five year total, not just the box.
Do these prices include security subscriptions?
No. The listed prices are for hardware. A FortiGate needs a FortiGuard subscription to keep its threat signatures and web filtering current. Our guide to FortiGate licence bundles explains the options. If you are replacing an older unit, see the Fortinet trade-up programme.
Buying in Singapore
- Fortinet FortiGate 70G, S$1,668 (listed 12 Nov 2026; prices change; ask for a current quotation).
- Fortinet FortiGate 90G, S$3,796.80.
- Fortinet FortiSwitch 108F, S$574.80, managed from the FortiGate.
- Price on request: FortiGuard subscription bundles for the 70G and 90G.
To start, use Request for Quotation on the product page, call (65) 6978 3502, email Sales@sourceit.com.sg or use our contact page.
Frequently asked questions
Is the FortiGate 70G enough for a 1Gbps fibre line? Yes. Its 1.3Gbps threat protection throughput is above a 1Gbps line with inspection on.
Does the 70G have 10GbE ports? No. It has ten gigabit ports. The 90G adds two 10GE ports.
How many users can each support? Fortinet does not publish a user count. Size by line speed, inspection load and concurrent sessions instead.
Can I manage switches and access points from the FortiGate? Yes, FortiSwitch and FortiAP units can be managed from it.
