A Dubai branch office doesn’t fail because one user opens a browser. It fails when the same firewall has to carry Etisalat Business internet, du backup WAN, Teams calls, ERP traffic, cloud accounting, site-to-site VPN, SSL VPN, guest WiFi, CCTV VLANs, and web filtering at the same time.

That’s where small firewalls start to feel tight. The dashboard still shows the link is up. Users still complain. Voice calls break up. File uploads crawl. Remote users blame VPN. Finance blames the internet. The real issue is usually inspection capacity.

FortiGate 90G is for that exact middle tier: a serious office, branch, warehouse admin site, clinic, school block, hotel back-office, or MSSP-managed customer network that needs more than entry desktop capacity but doesn’t always need a 1U rackmount firewall. It gives you 28 Gbps firewall throughput and 2.2 Gbps threat protection throughput, so the sizing conversation starts with the number that matters when security services are enabled.

FortiGate 90G product overview

The Fortinet FortiGate 90G is a desktop G-Series firewall for branch and medium office networks. It fits sites that have outgrown 1 Gbps security inspection, but where rack space is limited or the appliance has to sit in an IT cabinet, reception back room, school server cupboard, clinic comms area, or JAFZA warehouse office.

It is not just a NAT box. The 90G can run firewalling, SD-WAN, IPsec VPN, SSL VPN, application control, IPS, antivirus, web filtering, DNS filtering, FortiSwitch control, and FortiAP control from the same FortiOS platform. For Dubai companies with several branch locations, that reduces the number of devices an IT manager has to monitor.

The 90G is also a useful jump from older branch firewalls where dual WAN and security inspection were added over time. Many UAE offices start with one Etisalat link, then add a du link for backup. Then comes guest WiFi. Then cloud ERP. Then VPN for remote staff. By the time traffic is segmented into VLANs, the firewall is doing much more than basic internet access.

For model comparison, see the FortiGate firewall Dubai hub. If you are planning a refresh from FortiGate 80F or moving up from FortiGate 70G, the 90G gives higher inspection headroom, 10G shared interface options, and enough session capacity for busy branch networks.

FortiGuard licensing for FortiGate 90G

The FortiGate 90G hardware is the platform. FortiGuard is the protection layer that keeps inspection useful after the firewall is installed. Without an active FortiGuard security bundle, the appliance can still work as a stateful firewall, but it won’t have the live security services buyers usually expect from a Fortinet deployment.

For most Dubai branch networks, the quote should compare hardware-only against UTP Bundle and Enterprise Bundle. The difference matters when procurement is comparing line items, because a low hardware-only quote may not include IPS signatures, web filtering, antivirus, FortiSandbox Cloud, or the extra services required by larger IT teams.

A 1-year bundle is common when the project budget is tied to the current financial year. A 3-year bundle usually makes more sense for branch rollouts, managed service contracts, school networks, hotel sites, and free zone offices where the firewall will stay in place for a full refresh cycle.

Vector Digital Systems can quote FortiGate 90G hardware-only, FortiGate 90G with 1-year UTP, FortiGate 90G with 3-year UTP, FortiGate 90G with 1-year Enterprise, FortiGate 90G with 3-year Enterprise, or a matched HA pair for sites where internet downtime affects billing, reservations, logistics, or access to cloud systems.

FortiGate 90G technical specifications

HA and redundancy for Dubai sites

For single-office networks, one FortiGate 90G may be enough. For billing counters, warehouse dispatch, hotel reservations, clinics, school admin systems, and DIFC or DMCC offices with cloud-hosted applications, a single firewall can become a business risk. HA removes that single appliance dependency.

A FortiGate 90G HA pair uses two matching 90G units. In Active-Passive mode, one firewall handles traffic while the second waits to take over during hardware, link, or service failure. In Active-Active mode, traffic processing can be shared across the cluster depending on design and policy requirements.

Most UAE branch designs use Active-Passive because it is easier to support, easier to document, and easier for an internal IT team or MSSP to troubleshoot. Pair it with Etisalat as primary WAN and du as secondary WAN, or reverse that if the building handoff is better from du.

For bigger branch rollouts, link the firewall with central logging and policy review. FortiGate 90G can sit at the edge while reporting into a central Fortinet stack, making it easier to manage branches across Dubai, Abu Dhabi, Sharjah, Ajman, Ras Al Khaimah, Fujairah, and Umm Al Quwain. For other capacity points, compare models on the Fortinet firewall UAE page.

Desktop form factor, but not a small-office toy

FortiGate 90G is a desktop appliance, so it works in places where a rackmount firewall is awkward. Back office shelf. Wall cabinet. School IT room. Hotel admin area. Clinic comms corner. A JAFZA warehouse office where the fibre handoff is nowhere near a clean 19-inch rack.

That desktop size can be misleading. This is still a 28 Gbps firewall with 2.2 Gbps threat protection throughput, 3 million concurrent sessions, 10 VDOMs, 10G shared interface options, and support for FortiSwitch and FortiAP management. It sits above the usual entry branch models and gives IT teams more room for segmentation.

For Dubai deployments, the FortiGate 90G fits medium offices with 75–200 users, busy retail back offices, free zone companies, clinics with cloud applications, and MSSP-managed customer sites. It is also a good match where the buyer wants a firewall that can handle dual Etisalat and du WAN links without jumping straight into a 1U rackmount model.

FortiSP5 ASIC in the FortiGate 90G

The FortiGate 90G belongs to Fortinet’s G-Series family and uses the SP5 platform. In practical terms, that means firewalling, VPN, IPS, application control, and content inspection are handled with hardware acceleration instead of pushing all traffic through general-purpose CPU resources.

That matters when traffic patterns change. Five years ago, many branch firewalls mostly pushed web browsing and email. Now the same branch may carry cloud ERP, video calls, endpoint agents, guest WiFi, payment systems, camera VLANs, remote access VPN, and encrypted traffic inspection. A firewall without enough inspection headroom becomes the choke point.

Upgrading from FortiGate 80F? Here’s what changes

Many UAE buyers comparing the FortiGate 90G are already using FortiGate 80F or a similar branch firewall. The move to 90G is not only about buying a newer box. It changes the performance headroom available for inspection, WAN growth, and segmentation.

FortiGate 80F delivers 10 Gbps firewall throughput and 900 Mbps threat protection throughput. FortiGate 90G moves that to 28 Gbps firewall throughput and 2.2 Gbps threat protection throughput. That is a real difference once IPS, antivirus, application control, and web filtering are enabled across more users.

The 90G also brings 10G shared interface options, 3 million concurrent sessions, and a stronger fit for offices using multiple VLANs, dual WAN, FortiSwitch, FortiAP, and VPN. For smaller branches, see FortiGate 70G Dubai. For an older but still common branch option, compare FortiGate 80F Dubai.

What’s in the box

A standard FortiGate 90G hardware shipment includes the FortiGate appliance, power adapter or power supply as supplied for the regional SKU, basic mounting or placement accessories where included by Fortinet, and standard documentation. The exact carton contents can vary by SKU and distributor batch, so the quote should list the appliance model and bundle code clearly.

For HA projects, order two matching FortiGate 90G units with matching FortiGuard terms. For 91G projects, note that FortiGate 91G includes 120 GB local storage, while FortiGate 90G does not. That difference matters when local logging is part of the design.

Stock and availability in Dubai

Vector Digital Systems supplies FortiGate 90G for companies across Dubai, Abu Dhabi, Sharjah, Ajman, Ras Al Khaimah, Fujairah, and Umm Al Quwain. Orders can be quoted as hardware-only, UTP bundle, Enterprise bundle, or HA pair with matching subscription terms.

For procurement teams, include the required bundle term, delivery emirate, VAT details, and whether the project needs configuration or migration support. For MSSPs, project pricing can cover multiple branch firewalls with the same FortiGuard term, making renewals easier to track.

Related FortiGate models

UAE deployment notes

In Dubai, branch firewall sizing is rarely about one internet pipe. A typical office may have Etisalat Business fibre, du Enterprise backup, cloud PBX, Microsoft 365, CCTV remote viewing, guest WiFi, payment traffic, and site-to-site VPN back to head office. The FortiGate 90G gives enough throughput to inspect that traffic without treating every service the same.

For DMCC, DAFZA, DIFC, and JAFZA offices, segmentation is often part of the requirement. Finance users, guest WiFi, warehouse scanners, CCTV, VoIP, admin PCs, and contractor access should not all sit in one flat network. The 90G’s VLAN, policy, VDOM, and SD-WAN features help split those zones cleanly.

Heat and space also matter. Many UAE offices keep network gear in small rooms that were never designed as data centres. A desktop firewall with 2.2 Gbps threat protection can make more sense than forcing a rackmount appliance into a poor cabinet with weak airflow.

Africa, GCC, and MEA export

FortiGate 90G is a strong fit for branch rollout projects across Saudi Arabia, Qatar, Oman, Bahrain, Kuwait, Kenya, Tanzania, and Nigeria. Project orders can include 1-year or 3-year FortiGuard UTP and Enterprise bundles. HA pairs can be quoted for larger sites where internet downtime affects operations. FOB Dubai pricing is available for resellers and system integrators exporting to Africa, GCC, and South Asia.

For multi-site rollouts, standardising on the same hardware and FortiGuard term keeps support cleaner. Same model. Same renewal cycle. Same policy baseline. Less confusion when the regional IT team is handling branches from Dubai.

FortiGate 90G FAQ

What is the threat protection throughput on the FortiGate 90G?

The FortiGate 90G delivers 2.2 Gbps threat protection throughput. Its firewall throughput is 28 Gbps, but threat protection is the number to check when IPS, antivirus, application control, and web filtering are enabled.

Does the FortiGate 90G support HA?

Yes. FortiGate 90G supports HA using matching units. Active-Passive is common for Dubai branch offices using Etisalat and du links, while Active-Active can be considered where the design calls for traffic processing across the pair.

What FortiGuard bundles are available for FortiGate 90G?

FortiGate 90G can be quoted with UTP Bundle or Enterprise Bundle in 1-year and 3-year terms. UTP covers the common branch security services. Enterprise adds wider visibility and control services for larger IT teams.

What is the form factor of the FortiGate 90G?

FortiGate 90G is a desktop firewall. It suits offices and branch sites where a rackmount firewall is not practical, but the network still needs 28 Gbps firewall throughput and 2.2 Gbps threat protection.

How many VDOMs does the FortiGate 90G support?

FortiGate 90G supports 10 default VDOMs and 10 maximum VDOMs. That helps separate departments, tenants, guest networks, lab networks, or managed customer zones on the same appliance.

What is the SP5 ASIC advantage over older F-Series models?

The SP5 platform gives the FortiGate 90G higher inspection headroom in a compact desktop appliance. Compared with FortiGate 80F, the 90G moves from 10 Gbps firewall and 900 Mbps threat protection to 28 Gbps firewall and 2.2 Gbps threat protection.