Fortinet FG-800D Dubai — legacy firewall support for networks that can’t just be ripped out

Some Dubai networks still run on FG-800D firewalls because the design works, the policies are stable, and the HA pair has been sitting in the rack for years without drama. Then one unit starts showing PSU alarms, ports behave strangely, or FortiGuard renewal needs checking before the next audit. That’s usually when the IT team needs the same model, a matching replacement, or a clear upgrade path without breaking the existing routing design.

The Fortinet FG-800D is a 1U rackmount FortiGate firewall for enterprise edge, campus, hotel back-office, warehouse and medium data centre networks. It delivers 36 Gbps firewall throughput and 2.4 Gbps threat protection throughput. Don’t mix those two numbers. The 36 Gbps figure is raw firewall traffic. The 2.4 Gbps figure is the number that matters when IPS, antivirus, application control and web filtering are active.

For new builds in Dubai, Abu Dhabi or Sharjah, newer FortiGate F-Series and G-Series models usually make more sense. For an existing FG-800D deployment in JAFZA, DAFZA, DIFC, DMCC, a hotel rack, or a brownfield Etisalat and du WAN edge, the job is different. You need model matching, FortiGuard licence clarity, HA pair planning and a clean migration route.

What the FG-800D is used for in UAE networks

The FG-800D fits older enterprise sites where the firewall still sits between internal VLANs, WAN links, VPN users and public services. It was built for 1U rack deployment, not desktop branch use. In practical UAE terms, that means a server room rack in a logistics office, a school campus MDF, a hotel back-office, or a regional office with multiple WAN circuits.

A normal deployment range is around 300 to 1,500 users, depending on how much SSL VPN, IPS, web filtering and application control is enabled. A site pushing mostly plain routing and firewall policy will behave very differently from a site inspecting high volumes of encrypted traffic. Dubai buyers should size against the 2.4 Gbps threat protection figure, not just the 36 Gbps firewall headline.

Vector Digital Systems is an authorised Fortinet distributor in Dubai, supplying FortiGate hardware and FortiGuard licensing support across all 7 emirates. For the full FortiGate range, see the FortiGate firewall Dubai hub page.

FortiGuard licensing for FG-800D

The hardware is only the platform. The protection comes from FortiGuard services. Without the right FortiGuard subscription, the FG-800D works mainly as a stateful firewall. IPS signatures, web filtering categories, antivirus definitions, FortiSandbox Cloud and threat feeds depend on the active licence tied to the appliance serial number.

For a Dubai procurement team, the licence term matters as much as the hardware condition. A 1-year term helps when the firewall is being kept alive during a migration window. A 3-year term can reduce yearly cost, but it only makes sense if support eligibility, lifecycle status and the refresh plan are clear.

If the FG-800D is part of an HA pair, both units need licence planning. Mixed subscriptions cause messy audit trails and weak protection on the standby unit when failover happens. This is common in older Etisalat Business and du Enterprise WAN edge deployments where the firewall pair was installed years before the current IT team took over.

Fortinet Fg 800d Dubai 300×205

Fortinet FG-800D specifications

HA pair and redundancy planning

The FG-800D supports Active-Active, Active-Passive and clustering. Most UAE enterprise sites use Active-Passive because it keeps failover behaviour predictable. One unit handles traffic, the second waits. When the active firewall fails, the standby unit takes over based on the HA design.

For replacement work, match the model and check the software branch, interface mapping, FortiGuard state, transceivers, cabling and bypass behaviour before moving traffic. Small differences can break a maintenance window. Especially where the firewall carries VLAN trunks, site-to-site VPNs, public NATs and access policies for finance, warehouse, POS or guest networks.

A lot of FG-800D firewalls in Dubai are no longer simple perimeter boxes. They carry years of policy history: remote access, VIPs, IPsec tunnels, guest VLANs, server NAT, syslog forwarding and custom routing. That’s why a like-for-like replacement may be requested even when a newer FortiGate is technically the better long-term answer.

For teams comparing replacement options, keep the FortiGate firewall Dubai range open while checking the current FG-800D load. If inspected throughput is near 2.4 Gbps, plan a newer platform instead of extending the old one.

1U rackmount deployment context

The Fortinet FG-800D is a 1U rackmount firewall. It belongs in a proper network rack with clean airflow, labelled copper and fibre runs, and a planned maintenance window for any swap-out work. Not under a desk. Not balanced on a shelf behind the printer. We’ve seen that too many times.

In Dubai, FG-800D units are usually found in older enterprise sites: JAFZA logistics offices, hotel back-office racks, education campuses, warehouse networks, and corporate offices with Etisalat or du WAN circuits. The 1U size is still easy to fit, but power and cooling should be checked. The appliance is rated at 128 W average and 187 W maximum power draw, with 636 BTU/h heat output.

That heat number matters in small server rooms around Al Quoz, DIP, Business Bay and Deira where cooling is shared with UPS, switches, NVRs and old storage. A newer FortiGate can reduce inspection-per-watt cost, especially when the site has 10GE uplinks or heavier SSL inspection plans.

Upgrading from FG-800D? Here’s what changes

The FG-800D still makes sense when the buyer needs a matching replacement for an existing HA pair or a short-term spare for a brownfield site. For a new project, don’t start here. The D-Series platform is old, and the 2.4 Gbps threat protection figure becomes the real ceiling once IPS, application control, antivirus and web filtering are turned on.

A move to FortiGate 400F or FortiGate 600F usually works for mid-size sites that need better inspected throughput without jumping too high in budget. Larger enterprise sites with data centre edge traffic should compare FortiGate 1000F or G-Series options such as FortiGate 700G and 900G, depending on port requirements and inspection load.

For a wider comparison, use the Fortinet firewall Dubai range page, then shortlist by threat protection throughput, interface type, HA design and FortiGuard term. That gives procurement a cleaner AED budget discussion than comparing only firewall throughput.

What’s in the box

A standard Fortinet FG-800D appliance package normally includes the firewall hardware, AC power cable, rack mounting hardware, console access items and included optical transceivers where supplied under the exact part code. For legacy units, packaging can vary depending on whether the unit is new old stock, replacement stock or project stock.

Not included by default: SFP+ optics beyond the stated package, fibre patch cords, RJ45 patch cords, FortiAnalyzer, professional migration work, rack PDU, HA cables, structured cabling and public IP changes with Etisalat or du. These should be scoped separately for a clean deployment.

Related FortiGate models for replacement planning

FG-800D buyers usually fall into two groups: teams keeping an old HA pair alive, and teams planning a refresh because the old firewall has reached its practical limit. These related models help narrow the route.

Dubai and UAE deployment notes

For DIFC, DMCC and regulated office environments, the key question is not “does the firewall pass traffic?” It’s whether the firewall still has valid security services, audit logs, HA resilience and a supportable replacement path. Old hardware can keep working for years, but compliance teams usually want proof around licensing, logging and policy control.

For JAFZA, DAFZA and warehouse networks, the firewall often carries site-to-site VPN, CCTV VLANs, ERP access, WiFi guest traffic and scanner networks. A like-for-like FG-800D replacement may be the fastest way to restore service, but a planned refresh to a newer FortiGate can reduce outage risk before the next peak season.

Across all 7 emirates — Dubai, Abu Dhabi, Sharjah, Ajman, Ras Al Khaimah, Fujairah and Umm Al Quwain — Vector Digital Systems can help check FG-800D availability, FortiGuard bundle terms, HA pair needs and migration options. For mixed FortiGate estates, start with the FortiGate Dubai range before locking the replacement model.

Africa, GCC and MEA export from Dubai

FG-800D requests from Africa and GCC are usually for replacement stock, HA pair matching, spare-unit planning or brownfield support. Common export enquiries include Saudi Arabia, Qatar, Oman, Kenya, Tanzania, Nigeria and South Africa. FOB Dubai pricing can be quoted for approved project quantities, subject to stock and licensing eligibility. FortiGuard UTP and Enterprise bundles should be checked before shipment, especially where the unit will be installed outside the UAE.

Fortinet FG-800D FAQ

What is the threat protection throughput on the Fortinet FG-800D?

The Fortinet FG-800D delivers 2.4 Gbps threat protection throughput with security inspection services active. The raw firewall throughput is 36 Gbps, but Dubai buyers should size against 2.4 Gbps when IPS, antivirus, application control and web filtering are required.

Does the FG-800D support HA?

Yes. The FG-800D supports Active-Active, Active-Passive and clustering. For most UAE enterprise sites, Active-Passive is the cleaner design because failover behaviour is easier to predict and test during a maintenance window.

What FortiGuard bundles are available for FG-800D?

UTP Bundle and Enterprise Bundle can be checked in 1-year and 3-year terms. UTP includes IPS, Application Control, Web Filtering, Antivirus, FortiSandbox Cloud and Botnet protection. Enterprise adds FortiCASB, FortiConverter, Industrial Security and IoT Detection. Eligibility depends on lifecycle and serial number status.

What is the form factor of the Fortinet FG-800D?

The FG-800D is a 1U rackmount firewall. It is suited for server rooms, enterprise racks, campus MDF rooms and older data centre edge deployments, not desktop branch use.

How many VDOMs does the FG-800D support?

The FG-800D supports 10 default VDOMs and 10 maximum VDOMs. That is enough for smaller segmentation designs, but not ideal for newer multi-tenant or MSSP environments that need higher VDOM scale.

Is the FG-800D suitable for Etisalat and du WAN links?

Yes, the FG-800D can be used with Etisalat and du WAN handoffs where the interface and routing design match. For new high-speed WAN projects, check inspected throughput first because the 2.4 Gbps threat protection number is the practical sizing figure.