FortiWeb Hardware Appliances —
100F to 4000F, sized for India
On-premise FortiWeb appliances for Indian data centres and edge sites. Seven models — from the 100 Mbps desktop (100F) to the 70 Gbps, 2RU, 40 GE-bypass 4000F (industry's fastest WAF appliance per Fortinet's own Ordering Guide). Ogma sizes, quotes in INR, deploys, and supports the renewal cycle.
7 models
100F → 4000F
100 Mbps desktop to 70 Gbps 2RU. Pick by HTTP/HTTPS throughput.
70 Gbps
FortiWeb-4000F
"Industry's fastest WAF appliance" per the Ordering Guide.
3 bundles
Std / Adv / Ent
Standard, Advanced, Enterprise — match features to workload need.
CAPEX
One-time HW + annual renewal
Best price/performance for steady-state DC workloads over 3-5 years.
The 100F to 4000F model range
Pick the model by HTTP/HTTPS throughput class. Form factor and bypass-port count are usually the secondary decision points. ML Domain count nudges the choice up a tier for larger application portfolios.
| Model | HTTP / HTTPS throughput | ML Domains | Form factor | Ports | Power |
|---|---|---|---|---|---|
| FortiWeb-100F | 100 Mbps | 6 | Desktop | 4× 10/100/1000 | Single |
| FortiWeb-400F | 500 Mbps | 6 | 1RU | 4× GE RJ45 + 4× SFP GE | Single |
| FortiWeb-600F | 1 Gbps | 16 | 1RU | 4× GE (2 bypass) + 4× SFP | Dual |
| FortiWeb-1000F | 2.5 Gbps | 32 | 2RU | 8× GE (8 bypass) + 4× SFP + 2× SFP+ | Hot Swap |
| FortiWeb-2000F | 5 Gbps | 96 | 2RU | 4× GE (4 bypass) + 4× SFP + 4× SFP+ | Hot Swap |
| FortiWeb-3000F | 10 Gbps | 96 | 2RU | 8× GE (8 bypass) + 10× SFP+ (2 bypass) | Hot Swap |
| FortiWeb-4000F | 70 Gbps | 192 | 2RU | 8× GE + 10× SFP+ + 2× 40 GE (bypass) | Hot Swap |
Source: FortiWeb Ordering Guide, FWEB-OG-R25-20260318. Throughput at 2048-bit HTTPS keysize. Bot-protection request volumes scale with model: 100F not listed; 400F 850K/mo, 600F 1.25M, 1000F 1.7M, 2000F 3M, 3000F 4M, 4000F 11M/mo.
Sizing — five inputs, one right model
1 · Throughput class
Peak HTTPS throughput your apps need. Headroom: target ~60% of model's rated throughput at peak — avoids over-buying while leaving room for growth.
2 · ML Domain count
Number of unique applications protected. 600F covers 16 domains; 1000F covers 32; 2000F+/3000F covers 96. Large enterprises typically need 2000F+.
3 · Latency budget
Card-payment / interactive workloads need single-digit-ms WAF inspection — the dedicated ASIC path on higher-tier models matters here.
4 · HA pair requirement
Active-passive or active-active? Active-passive halves licence cost; active-active gives ~1.8x throughput with both inspecting.
5 · Rack space + power
100F desktop; 400F/600F are 1RU; 1000F+ are 2RU. Dual power kicks in at 600F. Hot-swap at 1000F+.
+ Bot-traffic ceiling
Enterprise bundle's Advanced Bot Protection has a per-month request limit by platform. Heavy bot-targeted workloads (e-commerce, BFSI) often need to jump a tier just for this ceiling.
Bundle selection — Standard, Advanced, Enterprise
Each model is bought as a Hardware Bundle SKU. The bundle determines feature set, support, and threat-intel coverage. Renewal SKU follows the bundle.
| Bundle | Hardware SKU pattern | Renewal SKU pattern | Includes |
|---|---|---|---|
| Standard | FWB-XXXX-BDL-934-DD | FC-10-FWXKF-934-02-DD | OWASP Top 10, signatures, IP rep, antimalware, 24×7 support, FortiAI Assist |
| Advanced | FWB-XXXX-BDL-580-DD | FC-10-FWXKF-580-02-DD | + Sandboxing, ML anomaly detection, Threat Analytics, Credential Stuffing Defense |
| Enterprise | FWB-XXXX-BDL-1266-DD | FC-10-WXXXF-1266-02-DD | + Advanced Bot Protection, Client-Side Protection (PCI DSS 4.0), DLP |
When hardware is the right answer
Data-centre workloads
Apps live in your colo or DC. WAF inspection happens at line rate without a public-cloud hop. Lowest cost-per-Gbps over 3-5 years.
High throughput
2.5+ Gbps inspection is where appliances start to materially beat VM-S on cost-per-Gbps. 4000F at 70 Gbps has no software equivalent.
CAPEX preference
Steady-state workloads with predictable load. One-time HW purchase + annual renewals — clean P&L line.
Latency-critical apps
Card-payment, trading, transaction-heavy workloads where single-ms latency budget matters. Dedicated ASIC paths in higher-tier models.
Data-residency constraints
BFSI / regulated workloads where logs and inspection must stay on-prem under RBI / SEBI / DPDP rules. Self-hosted FortiAnalyzer pairs naturally.
Hybrid estates
HW at HQ DC + VM-S BYOL on cloud workloads + FortiAppSec Cloud for public-facing sites. All three under one FortiManager.
India warranty + RMA SLA
Hardware bundles include FortiCare premium support. Ogma layers on India-localised escalation:
- Replacement Disk SKU (
SP-DFWB2T) carried as spare for 2000F+/3000F/4000F - RMA coordination with FortiCare India for next-business-day swap (urban centres) or 48-hour swap (Tier 2/3)
- Pre-shipping configuration via Ogma's lab — appliance arrives pre-staged to your policy
- FortiManager / FortiAnalyzer integration for centralised policy and logging
- Renewal management — quote raised 60-90 days before expiry, INR + GST
FAQ
How do I choose between 1000F, 2000F and 3000F?
What about HA pair sizing?
Does the appliance need internet for FortiGuard updates?
Can the appliance protect cloud-hosted apps too?
How long does HW delivery + deployment take?
What's the renewal cost vs new hardware?
Get a HW-sized FortiWeb quote in INR
Ogma sizes the right model + bundle against your app portfolio, throughput, HA topology, and rack constraints. INR + GST, 1-year, 3-year or 5-year terms. Quote returned in 2 working days.
Request the sizing + quote