Large UAE networks don’t usually run out of basic firewall capacity first. They run out of inspected capacity. IPS, application control, antivirus, SSL inspection, remote access VPN, site-to-site tunnels, data centre interconnects, and branch traffic all hit the same firewall pair at the worst possible time.

That’s where sizing gets serious. A Dubai office with Etisalat and du WAN links may look simple on a drawing, but once the traffic includes cloud apps, private data centre access, guest WiFi, ERP, POS, CCTV backhaul, and VPN users, raw firewall throughput alone doesn’t tell the story. Threat protection throughput matters. So do concurrent sessions, interface mix, storage, HA design, airflow, and licence selection.

The FortiGate 901G is built for enterprise edge, data centre edge, large campus, and MSSP-managed firewall deployments where the buyer needs a 1U rackmount appliance with 25GE uplinks, local SSD storage, and FortiGuard inspection capacity. Vector Digital Systems supplies the FortiGate 901G in Dubai with UTP and Enterprise FortiGuard bundles for projects across the UAE, GCC, Africa, and South Asia. For the wider FortiGate range, see the FortiGate firewall Dubai hub.

Built for enterprise edge, not small branch routing

The FortiGate 901G sits above normal branch firewall sizing. It belongs in large head offices, regional data centre edges, campus aggregation points, and service provider customer environments where many VLANs, many tunnels, and many inspected flows meet one security layer.

A common Dubai deployment is an HA pair in a rack at the main office or data centre. One unit handles live traffic. The second unit stands ready for failover, or both units share load depending on the architecture. The appliance is 1U rackmount, so it fits neatly into server room racks in JAFZA warehouses, DAFZA technology offices, DIFC financial firms, and hosted racks at UAE data centres.

The sizing point is simple: don’t buy by firewall throughput alone. The 901G has 164 Gbps firewall throughput, but the more useful number for most buyers is 20 Gbps threat protection throughput. That’s the figure to look at when IPS, application control, and antivirus inspection are part of the design.

Product overview

The FortiGate 901G is a 1U rackmount next-generation firewall for high-throughput enterprise security. It includes 25GE SFP28 capability for high-speed uplinks, 10GE SFP+ ports for distribution switching, GE SFP and GE RJ45 ports for mixed handoff environments, a dedicated HA port, and a separate management port.

That interface mix helps in real UAE projects. Not every carrier handoff is the same. Not every switch stack is new. A customer may have 25G data centre links, 10G aggregation, 1G branch routers, management networks, and legacy copper all sitting in the same rack. The 901G gives the network team room to migrate without redesigning the whole edge on day one.

The appliance supports 16 million concurrent TCP sessions and 720,000 new TCP sessions per second. Those two numbers matter when thousands of users, servers, cloud apps, and site-to-site tunnels create short-lived sessions all day. In a busy office, the firewall isn’t just passing traffic. It’s constantly creating, inspecting, closing, and logging flows.

For larger rollouts, Vector Digital Systems can quote FortiGate 901G hardware with FortiGuard licensing, HA pair quantities, transceiver planning, and project pricing. Related rackmount options include FortiGate 900G for the same class without onboard SSD and FortiGate 1000F where existing F-Series standardisation is already in place.

FortiGuard licensing for FortiGate 901G

The hardware is the platform. The FortiGuard licence is what gives the firewall its inspection value. Without the right FortiGuard subscription, the FortiGate 901G still operates as a stateful firewall, but services such as IPS signatures, web filtering categories, antivirus protection, botnet detection, and cloud sandbox checks depend on active licensing.

For most enterprise buyers in Dubai, the choice comes down to UTP Bundle or Enterprise Bundle. UTP is common for offices, campuses, data centre edges, retail groups, and managed firewall projects where IPS, web filtering, antivirus, application control, FortiSandbox Cloud, and botnet protection are required.

Enterprise Bundle is the stronger fit when the project needs broader control across cloud use, OT or industrial environments, IoT device visibility, migration work, or richer security coverage. Both bundles are available in 1-year and 3-year terms. A 3-year term usually lowers the per-year cost and reduces renewal work for procurement teams.

FortiGate 901G specifications

Specification	Detail
Model	FortiGate 901G / FG-901G
Firewall Throughput	164 Gbps
Threat Protection Throughput	20 Gbps
NGFW Throughput	22 Gbps
IPS Throughput	26 Gbps
Concurrent TCP Sessions	16 million
New TCP Sessions/Sec	720,000
IPsec VPN Throughput	70 Gbps
SSL VPN Throughput	9 Gbps
SSL Inspection Throughput	20 Gbps
Interfaces	4 × 25GE SFP28 / 10GE SFP+ ULL, 4 × 10GE SFP+ / GE SFP, 8 × GE SFP, 16 × GE RJ45
HA Port	1 × 2.5GE / GE RJ45 dedicated HA port
Management Port	1 × GE RJ45 management port
Storage	2 × 480 GB onboard SSD
Form Factor	1U Rackmount
HA Support	Active-Active, Active-Passive, Clustering
VDOMs	10 default / 10 maximum
Power Supplies	Dual hot-swappable power supplies
Power Use	144 W average / 264 W maximum
Heat Dissipation	902 BTU/h
Airflow	Side-to-front

HA and redundancy planning

For most FortiGate 901G buyers, a single unit is not the final design. Enterprise networks usually deploy it as an HA pair. That protects the main internet edge, VPN edge, data centre perimeter, or campus aggregation layer from becoming one box in the rack that everyone worries about.

The FortiGate 901G supports Active-Passive and Active-Active HA. Active-Passive is common where the design goal is clean failover and easier troubleshooting. Active-Active can be used where the architecture and traffic profile justify shared processing. In both cases, the firewall has a dedicated 2.5GE/GE RJ45 HA port, keeping HA control traffic separate from normal data interfaces.

Dual hot-swappable power supplies also help in data centre and enterprise racks. One feed can land on UPS A, the other on UPS B, depending on the rack design. For Dubai data centre rooms where cooling, power draw, and rack space are discussed early, the 1U body, 144 W average power use, and 902 BTU/h heat output make planning easier than a higher rack-unit design.

1U rackmount firewall for 500 to 5,000+ user environments

The FortiGate 901G is a 1U rackmount firewall for enterprise edge, data centre edge, large campus, and MSSP environments. It is not a desktop branch unit. It belongs where many VLANs, many WAN paths, many site-to-site VPNs, and many inspected sessions all meet at the same security layer.

A practical deployment range is around 500 to 5,000+ users, depending on inspection policy, SSL inspection depth, VPN load, logging volume, and application mix. A DIFC finance office with strict web controls is not the same as a JAFZA logistics site running mostly private WAN traffic. Same appliance. Different load.

The 1U size helps when rack density matters. Dubai data centre racks don’t give free space forever. Power, airflow, copper handoff, fibre patching, and cable access all matter when the firewall pair sits between Etisalat Business links, du Enterprise circuits, internal switching, and hosted workloads.

The side-to-front airflow should be checked against the rack layout before installation. The FortiGate 901G has 144 W average power use, 264 W maximum power use, and 902 BTU/h heat dissipation. In UAE server rooms and colo racks, those numbers help facilities teams plan cooling without guesswork.

Upgrading from FortiGate 1000F? Here’s what changes

Some UAE buyers compare the FortiGate 901G against the FortiGate 1000F because both sit in serious enterprise firewall conversations. The numbers are not identical. FortiGate 1000F has higher raw firewall throughput at 198 Gbps, while FortiGate 901G gives 164 Gbps firewall throughput and 20 Gbps threat protection throughput.

That second number is the one many Dubai network teams care about. If IPS, application control, antivirus, and SSL inspection are active, threat protection throughput is closer to the real buying decision than raw firewall throughput. The FortiGate 901G also brings 25GE SFP28 ultra-low-latency ports and 2 × 480 GB onboard SSD storage in the 901G variant.

A FortiGate 1000F may still make sense where an F-Series standard is already approved, spare units already exist, or the security team wants the same operational model across sites. But for new rackmount projects where 25GE uplinks, local SSD storage, and 20 Gbps threat protection are the key points, the FortiGate 901G deserves a proper side-by-side quote.

What’s in the box

A FortiGate 901G hardware shipment normally includes the firewall appliance, rackmount accessories, power supplies, power cords based on order region, and basic documentation. The FG-901G model includes 2 × 480 GB onboard SSD storage. For HA pair orders, two appliances are required.

Transceivers, fibre patch leads, extra optics, FortiGuard subscription licences, FortiCare terms, and FortiAnalyzer are separate unless they are written into the quotation. For 25GE SFP28 uplinks, confirm optic type, switch compatibility, cable distance, and whether the port will run at 25G or 10G.

Stock and availability in Dubai

For urgent projects, send the required model, licence term, quantity, delivery location, and whether the unit is for standalone or HA deployment. A clean request gets a cleaner quote. For example: “FG-901G, quantity 2, Enterprise Bundle 3-year, HA pair, Dubai delivery.”

Vector Digital Systems supplies FortiGate appliances across all 7 UAE emirates: Dubai, Abu Dhabi, Sharjah, Ajman, Ras Al Khaimah, Fujairah, and Umm Al Quwain. Export buyers can request FOB Dubai pricing with FortiGuard licensing included on the same proforma invoice.

Related FortiGate models

Sizing a firewall is easier when adjacent models are compared using both firewall throughput and threat protection throughput. For the wider range, start with the FortiGate Dubai product hub.

UAE deployment context

In Dubai, the FortiGate 901G is a sensible fit for enterprise head offices, high-traffic free zone networks, managed service providers, logistics hubs, finance groups, and data centre edge racks. It handles the kind of mixed traffic seen in real sites: internet breakout, private WAN, cloud SaaS, VPN, branch aggregation, server access, and logging.

For JAFZA and DAFZA sites, the firewall often has to deal with warehouse offices, ERP systems, handheld scanners, remote users, and partner VPNs. In DMCC and DIFC environments, policy control and logging become more important because audit teams ask sharper questions. The FortiGate 901G gives the security team room to inspect traffic without dropping down to basic routing mode.

For Etisalat Business and du Enterprise links, confirm handoff type early. Copper, 10G fibre, 25G fibre, and managed router designs need different cabling and port plans. The 901G has a wide interface mix, but the quote should still include the correct optics and patching from day one.

Africa, GCC, and MEA export from Dubai

Vector Digital Systems can quote FortiGate 901G hardware and FortiGuard licences for export projects on FOB Dubai terms. Common rackmount firewall destinations include Saudi Arabia, Qatar, Oman, Kuwait, Egypt, Kenya, Nigeria, and South Africa.

For enterprise projects, send the exact quantity, bundle term, destination country, and whether the shipment needs hardware only or hardware with UTP or Enterprise Bundle. HA pairs should be quoted as matched units with matched licence dates.

MSSPs and resellers can request project pricing for multi-unit FortiGate rollouts. FortiGuard bundles can be included in the same quote so the buyer receives a clean hardware-plus-security-services offer instead of separate paperwork later.

FortiGate 901G FAQ

What is the threat protection throughput on the FortiGate 901G?

The FortiGate 901G delivers 20 Gbps threat protection throughput. Firewall throughput is 164 Gbps. Use both numbers when sizing the appliance because production networks usually run IPS, application control, antivirus, and web security services.

Does the FortiGate 901G support HA?

Yes. The FortiGate 901G supports Active-Active, Active-Passive, and clustering. It also has a dedicated 2.5GE/GE RJ45 HA port, which helps keep HA control traffic separate from normal data traffic.

What FortiGuard bundles are available for FortiGate 901G?

FortiGuard UTP Bundle and Enterprise Bundle are available in 1-year and 3-year terms. UTP includes IPS, application control, web filtering, antivirus, FortiSandbox Cloud, and botnet protection. Enterprise adds FortiCASB, FortiConverter, Industrial Security, and IoT Detection.

What is the form factor of the FortiGate 901G?

The FortiGate 901G is a 1U rackmount firewall. It uses side-to-front airflow, dual hot-swappable power supplies, and fits enterprise racks in offices, server rooms, and data centre environments.

How many VDOMs does the FortiGate 901G support?

The FortiGate 901G supports 10 VDOMs by default and 10 maximum VDOMs. This is useful for segmentation, tenant separation, and managed firewall use cases where different business units or customers need isolated policy domains.

Does the FortiGate 901G use FortiSP5?

No. The FortiGate 901G uses NP7 and CP9 acceleration. The 901G buying case is 164 Gbps firewall throughput, 20 Gbps threat protection throughput, 25GE SFP28 uplinks, 1U rackmount design, and 2 × 480 GB onboard SSD storage.