A lot of Dubai offices don’t fail because the internet link is slow. They fail because the firewall was sized using the wrong number. Raw firewall throughput looks good on paper, then IPS, antivirus, application control, web filtering, SSL inspection, VPN, and logging get switched on. That’s when the delay starts. Video meetings stutter. ERP sessions freeze. Guest WiFi bleeds into staff traffic. The IT team gets blamed, even when Etisalat or du is working fine.

The FortiGate 91G is for that middle ground. Bigger than a small branch firewall, still compact enough for a wall shelf or small cabinet. It gives you 28 Gbps firewall throughput and 2.2 Gbps threat protection throughput, so you can size it against inspected traffic instead of a brochure number. For a DMCC office, DAFZA tech company, JAFZA warehouse office, clinic group, retail HQ, or MSSP-managed customer site, that difference matters.

The 91G also adds 120 GB local storage compared with the non-storage 90G. That doesn’t make it faster. It makes it more useful where the branch needs local logs, reports, and event history before a dedicated FortiAnalyzer is added. For teams comparing models across the FortiGate firewall Dubai range, this is the main reason to choose the 91G over the 90G.

Where the FortiGate 91G fits

The FortiGate 91G is a desktop firewall for sites that have outgrown entry-level security but don’t need a 1U rackmount model. Think 75 to 150 users, mixed wired and wireless access, separate VLANs for staff, guests, CCTV, phones, and servers, plus site-to-site VPN back to a main office or cloud environment. It’s a practical fit for Dubai offices where the server room is a cabinet, not a full rack.

The appliance gives you two 10G SFP+ interfaces, two multi-gig RJ45 WAN ports, and eight 1G RJ45 LAN ports. That lets a network engineer build a clean layout: Etisalat on WAN1, du on WAN2, 10G uplink to a core switch, FortiLink to FortiSwitch, and segmented LAN ports for smaller sites that don’t yet have a full switching stack. For an MSSP, it’s also a tidy model to standardise across customer branches.

One port detail is worth planning early. On the 90G/91G platform, the SFP and WAN interface pairs use shared media. That means the copper and fibre side of a shared pair can’t both be active at the same time. It’s not a problem when the design is planned. It becomes a problem when someone orders SFP modules after the cabling is already done.

FortiGuard licensing for FortiGate 91G

The hardware is the firewall platform. The FortiGuard licence is the protection layer. Without FortiGuard, the FortiGate 91G still works as a stateful firewall, but the services most buyers expect from a security firewall are not active in the same way: IPS signatures, web filtering ratings, antivirus definitions, FortiSandbox Cloud checks, botnet filtering, and wider threat intelligence feeds.

For Dubai procurement teams, the licence term should be decided with the hardware order. A 1-year FortiGuard bundle reduces the first invoice. A 3-year bundle normally makes more sense for branch rollouts, HA pairs, and MSSP-managed sites because the per-year cost is lower and renewal tracking is cleaner. Vector Digital Systems can quote hardware-only, UTP bundle, or Enterprise bundle options for the FortiGate 91G.

UTP is usually enough for a standard branch or office edge where the requirement is network inspection, web control, malware filtering, VPN, and application visibility. Enterprise makes more sense when the buyer has industrial devices, unmanaged IoT endpoints, cloud visibility needs, or a compliance-led environment such as DIFC, healthcare, logistics, or a multi-tenant free zone office. The choice should match the risk profile, not just the lowest line item.

FortiGate 91G specifications

These are the numbers buyers should check before placing the order. Don’t compare only the firewall throughput. Always compare firewall throughput and threat protection throughput together, because threat protection is closer to how the firewall is used in a real Dubai office with inspection switched on.

HA and redundancy planning

For branches that can’t afford downtime, order the FortiGate 91G as an HA pair from the start. Active-passive HA is the usual branch design: one unit carries production traffic, the second unit takes over when the primary unit, link, or power path fails. Active-active can be used in some designs, but most Dubai offices keep HA simple and predictable.

There is one buying detail that should not be ignored. FortiGate 90G and 91G hardware exists in different generations, and mixed-generation HA is not the right approach. If you are buying an HA pair, both units should be the same model and same hardware generation. That avoids interface naming mismatch and saves time during handover.

A clean HA layout for Dubai is simple: Etisalat primary WAN, du secondary WAN, matched FortiGate 91G pair, separate switch links, UPS-backed power, and documented failover testing. For buyers comparing single unit and HA pair pricing, check the FortiGate 90G Dubai page as well, then decide whether local storage on the 91G is required at the branch.

Desktop form factor for real branch work

The FortiGate 91G is a desktop appliance, not a 1U rackmount firewall. That matters for Dubai sites where the network room is a wall cabinet, a back-office shelf, or a small comms corner inside a serviced office. No full rack. No spare depth. No clean airflow plan. Just a branch network that still needs serious inspection.

It suits offices with around 75 to 150 users, depending on traffic profile. A law office in DIFC with SSL inspection and VPN users will load the firewall differently from a JAFZA warehouse office with handheld scanners, CCTV VLANs, and one ERP link. Same firewall. Different policy load. That’s why the useful number is not only 28 Gbps firewall throughput — it’s the 2.2 Gbps threat protection throughput when security services are active.

The 91G also works well for MSSPs standardising managed branch firewalls. Two 10G SFP+ ports give room for faster switching. The multi-gig WAN ports suit modern Etisalat and du handoffs. Eight 1G RJ45 ports give enough local copper for smaller sites that don’t yet have a full FortiSwitch stack. Simple. But not small in capability.

Upgrading from FortiGate 80F or 100F?

The FortiGate 91G is not a direct copy of an F-Series box with a new label. It is the newer G-Series branch platform. Buyers usually compare it with FortiGate 80F Dubai, FortiGate 100F Series Dubai, and FortiGate 90G when they need more inspection headroom without going to a 1U appliance.

The big change is the G-Series silicon. The SP5/SOC5 platform gives the 91G a stronger throughput-per-watt story than older branch models. In plain terms, you get more inspected traffic from a compact desktop firewall, with less pressure on power and cooling. In Dubai, that matters more than people admit. Small server rooms already run hot, especially in summer when the AC is shared with the office area.

The other change is storage. Compared with FortiGate 90G, the 91G includes 120 GB local storage. Compared with many older branch models, that storage helps with local event retention and on-box reporting. It doesn’t replace a proper FortiAnalyzer design for a multi-site customer, but it gives the branch more breathing room.

What’s in the box

A standard FortiGate 91G order normally includes the FortiGate 91G appliance, power adapter, basic printed safety information, and packaging for local delivery or export. Exact box contents can vary by Fortinet region and SKU, so procurement should match the invoice line with the required bundle before payment.

For deployment, you may also need SFP+ transceivers, patch cords, rack shelf, UPS, FortiGuard subscription, FortiCare support term, FortiSwitch, FortiAP, or FortiAnalyzer. These are usually separate line items unless the quotation clearly includes them.

Stock and availability in Dubai

Vector Digital Systems supplies Fortinet firewall hardware and FortiGuard licensing across Dubai, Abu Dhabi, Sharjah, Ajman, Ras Al Khaimah, Fujairah, and Umm Al Quwain. For Dubai orders, the usual buying questions are simple: hardware-only or bundle, 1-year or 3-year term, single unit or HA pair, and whether the site needs local storage.

For resellers, the 91G is a useful project model because it covers a wide branch range without becoming too large for smaller offices. For end users, it gives more headroom than entry-level desktop firewalls while staying easy to place in a cabinet. That balance is why it fits DMCC, JLT, DAFZA, JAFZA, Business Bay, and Dubai healthcare branch networks.

Related FortiGate models

Not every office needs the 91G. Some sites need a smaller desktop firewall. Some need a 1U rackmount model with more ports and inspection headroom. Use these related models to size the branch properly:

UAE deployment notes

For most UAE branch deployments, the FortiGate 91G sits between the ISP handoff and the LAN switching layer. Etisalat Business can terminate on one WAN interface and du Enterprise can terminate on the second. From there, the firewall handles SD-WAN policy, VPN, traffic shaping, inspection, and VLAN segmentation. Keep the cabling map clean. Future you will be grateful.

In DMCC and DIFC offices, policy design often focuses on user identity, SaaS access, SSL inspection scope, and reporting. In JAFZA or DAFZA, the firewall may also separate warehouse scanners, IP phones, CCTV, guest WiFi, and back-office systems. In healthcare, the concern is usually patient data, remote access, and strict web controls. The 91G has enough port and throughput headroom to handle those branch designs when sized properly.

For buyers comparing the wider Fortinet range, start from the Fortinet firewall Dubai hub page, then narrow by user count, threat protection throughput, form factor, FortiGuard bundle, and HA requirement. That is a better method than choosing only by firewall throughput.

Africa, GCC, and MEA export from Dubai

FortiGate 91G is a practical export model for branch rollout projects across Africa, GCC, and South Asia. Orders can be quoted FOB Dubai for resellers, integrators, and multi-site customers. Common project destinations include Saudi Arabia, Qatar, Oman, Kenya, Tanzania, Nigeria, and Pakistan.

For export orders, confirm the exact SKU, FortiGuard term, power requirements, and activation plan before shipment. HA pairs should be quoted as matched units. For 10, 25, or 50-unit branch projects, ask for bundle pricing with 1-year or 3-year UTP or Enterprise licensing so the rollout has one renewal calendar.

FortiGate 91G FAQ

What is the threat protection throughput on the FortiGate 91G?

The FortiGate 91G delivers 2.2 Gbps threat protection throughput. Its raw firewall throughput is 28 Gbps. Always compare both numbers, because threat protection is closer to real use when IPS, antivirus, application control, and web filtering are active.

Does FortiGate 91G support HA?

Yes. FortiGate 91G supports HA designs, including active-passive deployments commonly used in Dubai branch networks. For HA pairs, order matched FortiGate 91G units from the same hardware generation to avoid interface mismatch problems.

What FortiGuard bundles are available for FortiGate 91G?

FortiGate 91G is available with UTP and Enterprise FortiGuard bundles in 1-year and 3-year terms. UTP includes IPS, Application Control, Web Filtering, Antivirus, FortiSandbox Cloud, and Botnet. Enterprise adds FortiCASB, FortiConverter, Industrial Security, and IoT Detection.

What is the form factor of the FortiGate 91G?

FortiGate 91G is a desktop firewall. It is suitable for branch offices, clinics, retail HQs, and medium office networks where a full rackmount firewall is not needed.

How many VDOMs does FortiGate 91G support?

FortiGate 91G supports 10 VDOMs by default and 10 maximum VDOMs. This is enough for most branch segmentation needs, including separate admin, guest, CCTV, voice, and server zones.

What is the SP5 advantage in the FortiGate 91G?

The FortiGate 91G uses Fortinet’s G-Series SP5/SOC5 security processing platform. It gives higher inspected throughput from a compact desktop firewall, which helps Dubai offices reduce power, heat, and cabinet space pressure while keeping 2.2 Gbps threat protection throughput available.