A Dubai office can have clean Etisalat and du fibre links, decent switching, and still feel slow the moment SSL inspection, IPS, antivirus and application control are switched on. That’s usually when the firewall spec sheet gets questioned. Not the headline firewall throughput. The inspected traffic number.

The FortiGate 121G is for networks that have moved past desktop branch firewalls but don’t need a large data-centre box. Think DMCC offices with many cloud apps, JAFZA warehouses with scanners and VPN users, DAFZA operations with segmented departments, clinics with patient systems, or a school group running central internet breakout.

This model gives you 39 Gbps firewall throughput and 2.8 Gbps threat protection throughput. Both numbers matter. The first tells you raw packet movement. The second tells you what the box can do when real security inspection is enabled.

FortiGate 121G product overview

The FortiGate 121G is the storage version of the FortiGate 120G Series. Same firewall family. Same 1U rackmount body. The difference is the built-in 480GB SSD, which makes the FG-121G useful when local logs and event retention matter at the site.

That storage difference is easy to miss during procurement. Many buyers ask for “120G” when the design actually needs “121G” because the appliance will sit in a remote branch, warehouse, school, hotel or clinic group where logs may need to stay local before being pulled into central reporting.

The port layout suits mixed copper and fibre networks in the UAE. You get 16 x GE RJ45 ports, 8 x GE SFP ports, 4 x 10GE SFP+ FortiLink slots, 2 x GE RJ45 HA/MGMT ports, and 1 x RJ45 console port. Enough for WAN, LAN, server, switch uplink and management separation without wasting add-on modules.

For a wider firewall range, see the FortiGate firewall Dubai hub page. It helps compare small branch, campus, 1U rackmount and data-centre models before locking the bill of materials.

FortiGuard licensing for FortiGate 121G

Hardware alone doesn’t give the inspected security posture most buyers expect. For IPS signatures, malware protection, web filtering, DNS filtering, FortiSandbox Cloud and related services, the FortiGate 121G should be quoted with the right FortiGuard bundle.

For most Dubai branch and campus deployments, the UTP Bundle is the normal starting point. It covers the security services commonly required for business internet, VPN users, application control, web access policy and malware filtering.

The Enterprise Bundle is used when the site needs extra control around data protection, IoT visibility, attack-surface checks and deeper risk context. For regulated offices in DIFC, healthcare groups, education networks and MSSP-managed customers, it’s often the cleaner licence discussion because it avoids missing services after the firewall is installed.

Common FortiGate 121G ordering variants

FortiGate 121G specifications

The numbers below are the ones that usually decide whether the FG-121G fits the design. Firewall throughput alone is not enough. Use threat protection throughput when sizing traffic that will pass through IPS, application control and malware inspection.

High Availability and redundancy

The FortiGate 121G supports Active-Active, Active-Passive and clustering modes. For most UAE sites, Active-Passive is the clean design: one appliance handles traffic, the second waits for failover. Active-Active can be used where the design and session behaviour justify it.

There are 2 x GE RJ45 HA/MGMT ports, so heartbeat and management traffic don’t need to fight with normal user traffic. That matters in racks where WAN, LAN, server VLANs and switch uplinks are already taking the main ports.

Power is also better than many smaller branch units. FG-121G has dual built-in AC power supplies for 1+1 redundancy. They are not hot-swappable, but they do reduce single power-feed risk when connected to separate UPS or PDU feeds in a Dubai office rack or small data-room cabinet.

Need to compare this model against the non-storage 120G or a higher model? Start from the FortiGate firewall Dubai page and shortlist by threat protection throughput, not only firewall throughput.

1U rackmount firewall for Dubai branch and campus racks

The FortiGate 121G is a 1U rackmount firewall, not a desktop appliance. That matters when the site already has structured cabling, UPS, fibre handoff, core switching and separate racks for server or network gear. It fits well in a small data-room cabinet, branch rack, school IT room, warehouse network cabinet or managed customer rack.

Airflow is side-to-back. In UAE racks, especially where cooling is tight or mixed equipment is installed in the same cabinet, airflow direction needs to be checked before the device is mounted. The FG-121G runs at 43W average and 47W maximum power, which is practical for offices where every extra watt becomes heat inside the rack.

A good fit is usually a site with 200–350 users, depending on traffic type, SSL inspection depth, VPN count, logging policy and how much east-west segmentation is pushed through the firewall. A JAFZA warehouse with scanners and CCTV VLANs behaves differently from a DIFC office running heavy SaaS and video meetings. Same firewall. Different load.

FortiSP5 ASIC advantage in the FortiGate 121G

The FortiGate 121G belongs to Fortinet’s G-Series branch and campus generation. It uses the SOC5 security processor architecture, commonly referred to as FortiSP5, with acceleration for firewall, VPN and content inspection workloads. In plain network-room language: more inspected traffic per watt, less heat for the same security job.

That’s why the 121G is interesting against older F-Series designs. You’re getting 39 Gbps firewall throughput and 2.8 Gbps threat protection throughput in a 1U appliance that draws under 50W maximum. For Dubai offices paying attention to rack cooling, UPS sizing and cabinet heat, those numbers are not brochure decoration. They affect the design.

SP5 also helps where the firewall is doing several jobs together: SD-WAN path control, IPsec VPN, IPS, application control, malware scanning and VLAN segmentation. Not one feature in isolation. Real traffic. Monday morning. Users logging into cloud apps while branch VPNs reconnect and the helpdesk is already calling.

What’s included with FortiGate 121G

A standard FortiGate 121G hardware order includes the FG-121G appliance with 480GB onboard SSD storage, built-in dual AC power supplies, rackmount form factor, RJ45 console access, GE copper ports, GE SFP ports and 10GE SFP+ FortiLink slots. FortiGuard licensing depends on the SKU ordered.

For new UAE deployments, most customers quote the firewall with either 1-year or 3-year FortiGuard licensing. Three-year terms are cleaner for project budgets, especially where procurement wants one approval cycle for hardware, support and security services.

Stock and availability in Dubai

Vector Digital Systems supplies FortiGate 121G in Dubai for UAE projects, branch rollouts, replacement hardware and reseller export orders. Availability can move quickly because the FG-121G is the storage version of the 120G Series, so it’s often requested where local logging is part of the design.

For urgent replacements, share the current model, FortiCare status, required bundle term, WAN link count and whether HA is needed. That avoids the common delay where hardware is quoted first and the correct UTP or Enterprise licence is added later.

Related FortiGate models

Not every site needs the 121G. Some need the non-storage 120G. Some need more inspected throughput. Some just need a smaller G-Series appliance for branch internet. Compare by threat protection throughput, port count, rack size and FortiGuard term.

UAE deployment context

The FortiGate 121G fits UAE networks where the firewall sits between multiple WAN links, internal VLANs, remote users and cloud applications. Common designs include Etisalat as primary internet, du as backup, IPsec VPN to branches, and separate VLANs for users, servers, voice, CCTV, guest WiFi and management.

For DMCC and DIFC offices, the FG-121G makes sense when application control, SSL inspection, web policy and VPN access need to run without making cloud platforms feel slow. For JAFZA and DAFZA, the port mix helps where fibre uplinks and copper edge networks meet in the same rack.

For schools, clinics and multi-branch groups, the 480GB SSD is the reason to choose the 121G instead of the 120G. Local logs are useful when the IT team needs to check user activity, blocked sites, VPN records, security events or policy changes without depending only on a central collector.

Africa and MEA export from Dubai

Dubai is a practical sourcing point for FortiGate projects moving into Africa, GCC and South Asia. Vector Digital Systems supports reseller and project shipments on FOB Dubai terms, with FortiGate hardware and FortiGuard licensing quoted together where required.

For export orders, confirm the exact destination, required invoice details, bundle term, plug type, support term and whether the project needs SFP or SFP+ optics. Firewalls often ship fast. Missing optics slow down installation at site.

The FG-121G is especially useful for regional branch rollouts where each site needs the same 1U appliance, the same security service term, and enough local storage to hold events before central reporting or remote review.

About Vector Digital Systems — Authorised Fortinet Distributor

FortiGate 121G FAQ

What is the threat protection throughput on the FortiGate 121G?

The FortiGate 121G delivers 2.8 Gbps threat protection throughput with firewall, IPS, application control and malware protection enabled. Its raw firewall throughput is 39 Gbps, but the 2.8 Gbps figure is the safer number for inspected internet traffic sizing.

Does FortiGate 121G support HA?

Yes. FortiGate 121G supports Active-Active, Active-Passive and clustering modes. It also has 2 x GE RJ45 HA/MGMT ports and dual built-in AC power supplies for 1+1 redundancy.

What FortiGuard bundles are available for FortiGate 121G?

FortiGuard UTP and Enterprise bundles are available in 1-year and 3-year terms. UTP is the common choice for IPS, web filtering, DNS filtering, antivirus, application control and FortiSandbox Cloud. Enterprise adds higher-tier services for data, IoT and risk visibility.

What is the form factor of FortiGate 121G?

FortiGate 121G is a 1U rackmount firewall with side-to-back airflow. It is designed for office racks, branch cabinets, school IT rooms, warehouse network racks and small data-room installations.

How many VDOMs does the FortiGate 121G support?

FortiGate 121G supports 10 VDOMs by default and 10 maximum. That works for separated departments, tenant-style segmentation, lab networks or MSSP-managed customer designs where routing and policy separation are needed.

What is the SP5 ASIC advantage over older F-Series firewalls?

The SP5 architecture improves inspected traffic performance per watt. On FortiGate 121G, you get 2.8 Gbps threat protection, 3.1 Gbps NGFW, 5.3 Gbps IPS and 35 Gbps IPsec VPN throughput while the appliance stays at 47W maximum power.

Can FortiGate 121G work with Etisalat and du WAN links?

Yes. FortiGate 121G can be deployed with Etisalat and du internet links using SD-WAN rules, route monitoring and failover policies. For HA sites, both WAN handoffs should be planned across the firewall pair before cabling starts.