A busy enterprise network in Dubai doesn’t slow down in one neat place. It slows down when SSL VPN users, cloud apps, ERP traffic, branch tunnels, guest WiFi, server backups, and inspection profiles all hit the same gateway together.

That’s the point where a normal edge firewall starts looking tired. The raw firewall number still looks fine on paper, but threat inspection tells the real story. IPS, antivirus, application control, web filtering, SSL inspection, and routing policy all take capacity. That’s why the FortiGate 900G has to be judged on both numbers: 164 Gbps firewall throughput and 20 Gbps threat protection throughput.

For a bank office in DIFC, a logistics operation in JAFZA, a government-connected site, or a private rack in a Dubai data centre, this model sits in the part of the network where downtime gets noticed fast. Not only by IT. By finance, operations, call centre staff, warehouse users, and the people waiting for an application to load.

Vector Digital Systems supplies the FortiGate 900G in Dubai for enterprise edge, campus core security zones, data centre edge, and high-throughput HA firewall projects. For a wider model comparison, see our FortiGate firewall Dubai hub.

FortiGate 900G product overview

The FortiGate 900G is a 1U rackmount enterprise firewall for high-throughput inspection at the edge of a large network. It’s not a desktop branch firewall. It’s the kind of appliance you use where multiple WAN links, server VLANs, remote access, site-to-site VPNs, and internal segmentation all converge.

The interface layout is one of the reasons this model fits Dubai enterprise sites well. You get 25GE SFP28 slots for fast upstream or aggregation links, 10GE SFP+ slots for server-room connectivity, GE SFP slots for fibre handoff, and GE RJ45 ports for copper networks. That mix helps when the site has Etisalat and du WAN services, older copper handoffs, fibre to aggregation, and a spare path for migration.

In practical terms, the FortiGate 900G is a strong fit for 500 to 5,000+ user environments depending on inspection policy, SSL usage, VPN load, and segmentation design. A hotel group with centralised apps, a free-zone HQ with regulated departments, a manufacturing site with OT networks, or an MSSP-managed customer edge can all use this tier.

The model also suits refresh projects where older E-Series or mid-range F-Series firewalls are running out of inspection headroom. The gap shows up when security profiles stay enabled during peak hours. Turning inspection off to gain speed is not a design. It’s a risk that comes back later.

FortiGuard licensing: UTP Bundle or Enterprise Bundle

The hardware is the platform. The FortiGuard licence is what keeps inspection useful against current threats. Without the right FortiGuard bundle, the FortiGate can still work as a stateful firewall, but IPS signatures, web filtering categories, antivirus detection, FortiSandbox Cloud, and threat intelligence services depend on an active subscription.

For most UAE enterprise deployments, the first decision is between UTP Bundle and Enterprise Bundle. UTP is usually selected for strong perimeter protection: IPS, application control, web filtering, antivirus, FortiSandbox Cloud, and botnet protection. It covers the core security services expected on a business firewall handling users, servers, and internet breakout.

Enterprise Bundle goes further. It adds services such as FortiCASB, FortiConverter, industrial security, and IoT detection on top of the UTP security layer. This matters for larger sites where cloud app visibility, mixed device types, operational technology, or multi-department security policy has become part of the firewall design.

Both bundles are available in 1-year and 3-year terms. A 1-year term keeps the first purchase lighter. A 3-year term usually makes more sense for procurement teams buying HA pairs, refresh projects, or fixed-budget rollouts because the per-year cost is lower and renewal admin is reduced.

FortiGate 900G specifications

Use these figures when comparing the FG-900G for a Dubai firewall refresh, data centre edge, HA pair, or high-throughput internet gateway. The firewall throughput number shows packet forwarding capacity. Threat protection shows inspected security capacity with security services active.

HA and redundancy planning

Most FortiGate 900G projects in Dubai should be priced as an HA pair, not a single appliance. At this tier, the firewall is usually sitting in front of production systems. One unit failure should not take down internet access, VPN, published applications, or inter-VLAN policy enforcement.

The FG-900G supports Active-Passive, Active-Active, and clustering designs. Active-Passive is the usual choice when the business wants cleaner failover and easier troubleshooting. Active-Active can be used where design policy and operations teams are ready for the extra planning. Either way, the dedicated 2.5GE/GE HA interface keeps heartbeat and sync traffic away from normal user data.

Dual hot-swappable power supplies help with A/B power feeds in a data centre rack. That matters in Dubai facilities where the firewall may be fed from separate PDUs, UPS paths, or cabinet power circuits. The 1U rack size also leaves more space for switches, WAN routers, FortiAnalyzer, or out-of-band management hardware.

For procurement, include both appliances, both FortiGuard licences, optics where needed, rack planning, and support terms in the same bill of materials. For sizing across other models, compare the FortiGate 900G against nearby options on the FortiGate firewall Dubai product range.

1U rackmount firewall for enterprise edge and data centre racks

The FortiGate 900G is a 1U rackmount firewall, which is a useful detail for Dubai server rooms where every rack unit has a power and cooling cost attached to it. It gives enterprise inspection capacity without taking 2U or 4U of cabinet space.

That makes it a good fit for data centre edge, large campus edge, and high-throughput internet gateway roles. Think Equinix DX1/DX2, Khazna, Gulf Data Hub, a bank HQ in DIFC, a logistics office in JAFZA, or a private enterprise rack with Etisalat and du handoffs coming into the same security layer.

The user count depends on policy design. As a practical UAE planning range, use it for roughly 500 to 5,000+ users where traffic inspection, VPN, SD-WAN, server segmentation, and web filtering all need to stay active. A low-inspection network can push more sessions. A heavy SSL inspection design will need more margin.

This is also where the 20 Gbps threat protection number matters. A firewall that can pass 164 Gbps without inspection is one thing. A firewall that can keep security profiles active while users are hitting cloud apps, remote VPN, ERP, file transfers, and hosted services is the number procurement should compare.

Upgrading to FortiGate 900G? Here’s what changes

Many FortiGate 900G enquiries come from teams replacing older 600E, 800D, 900D, 1000D, 1500D, or overworked mid-range F-Series firewalls. The common sign is simple: the firewall still passes traffic, but inspection cannot stay enabled during peak business hours without users complaining.

The upgrade gives you higher inspected throughput, 25GE SFP28 uplink options, stronger HA design, 16 million concurrent sessions, and a cleaner path for data centre or campus segmentation. For older projects that grew in pieces, this can also reduce port pressure because the 900G gives a mix of 25GE, 10GE, GE fibre, and GE copper on the same appliance.

There is one detail buyers sometimes miss: the FG-900G has no onboard storage. If local log storage is part of the requirement, choose the FG-901G variant with 2 x 480GB onboard storage, or pair the firewall with FortiAnalyzer. For regulated sites in DIFC, healthcare, education, or government-linked environments, centralised logging is usually the cleaner design.

For larger data centre designs, compare the 900G with the FortiGate 3000G. For slightly lower enterprise edge requirements, the FortiGate 700G may be enough.

What’s in the box

The FortiGate 900G appliance is supplied as a rackmount firewall with dual hot-swappable AC power supplies, rackmount hardware, console access, management interfaces, and two included SFP SX transceivers. The exact packing list should be checked against the final SKU at order time, especially for project shipments and export orders.

For most UAE enterprise orders, the hardware is only one part of the bill of materials. Add FortiGuard licensing, extra optics, DAC cables, fibre patch leads, rack PDUs, FortiCare term, FortiAnalyzer, and any deployment work needed for migration from an older firewall.

Related FortiGate models

Use these models when comparing the FortiGate 900G for a new firewall build, HA pair, or refresh project.

For the full model range, visit the FortiGate firewall Dubai category page.

UAE deployment context

In Dubai, the FortiGate 900G often sits where business internet, MPLS, cloud access, server networks, and remote access meet. That means sizing has to include both Etisalat and du WAN links, not just the current firewall CPU graph.

For DMCC and DIFC offices, inspection policy usually needs to separate finance, guest, server, voice, and user VLANs. For JAFZA and DAFZA, warehouse systems, handheld scanners, ERP, CCTV networks, and contractor access may all pass through the same policy layer. A 900G gives enough port and session capacity to design properly instead of squeezing everything into one flat path.

Power and cooling also matter. The FortiGate 900G is rated at 134W average and 252W maximum for the base FG-900G appliance. In a Dubai server room running near the 45°C operating ceiling, that’s not a small detail. Cabinet airflow, hot aisle planning, UPS load, and spare rack space should be part of the firewall discussion.

Vector Digital Systems supports FortiGate supply across Dubai, Abu Dhabi, Sharjah, Ajman, Ras Al Khaimah, Fujairah, and Umm Al Quwain. Hardware, FortiGuard licensing, and project quantities can be quoted together for UAE delivery.

Africa, GCC, and MEA export from Dubai

The FortiGate 900G is also supplied for enterprise deployments outside the UAE. Common project destinations include Saudi Arabia, Qatar, Oman, Bahrain, Egypt, Kenya, Tanzania, Nigeria, and South Africa.

For export orders, FortiGate 900G HA pairs can be quoted with 1-year or 3-year FortiGuard UTP or Enterprise bundles. FOB Dubai pricing is available for resellers, system integrators, MSSPs, and enterprise procurement teams.

For multi-site rollouts, keep the licensing term the same across both HA units and all related FortiGate appliances. It keeps renewal tracking clean and avoids support gaps when the project scales.

FortiGate 900G FAQ

What is the threat protection throughput on the FortiGate 900G?

The FortiGate 900G delivers 20 Gbps threat protection throughput with security inspection enabled. Its firewall throughput is up to 164 Gbps, but the 20 Gbps inspected figure is the number to use for real business traffic with IPS, antivirus, application control, and web filtering active.

Does FortiGate 900G support HA?

Yes. The FortiGate 900G supports Active-Passive, Active-Active, and clustering. It also includes a dedicated 2.5GE/GE HA port, which is useful for Dubai enterprise racks where heartbeat and sync traffic should stay separate from production traffic.

What FortiGuard bundles are available for FortiGate 900G?

FortiGate 900G can be supplied with UTP Bundle or Enterprise Bundle in 1-year and 3-year terms. UTP covers IPS, application control, web filtering, antivirus, FortiSandbox Cloud, and botnet protection. Enterprise adds services such as FortiCASB, FortiConverter, industrial security, and IoT detection.

What is the form factor of the FortiGate 900G?

The FortiGate 900G is a 1U rackmount firewall with dual hot-swappable AC power supplies. This is useful for Dubai data centre cabinets where rack space, power draw, and cooling load are part of the purchase decision.

How many VDOMs does FortiGate 900G support?

The FortiGate 900G supports 10 VDOMs by default and 10 maximum. For MSSP or multi-tenant designs that need more virtual domains, check the required segmentation count before ordering.

Is FortiGate 900G suitable for Etisalat and du enterprise WAN links?

Yes. The 900G has 25GE SFP28, 10GE SFP+, GE SFP, and GE RJ45 interfaces, so it can fit many Etisalat Business and du Enterprise handoff designs. Confirm fibre type, optics, WAN speed, HA topology, and whether the site needs FG-900G or FG-901G with onboard storage.