FortiGate 90G in Uganda
A compact Fortinet next-generation firewall for secure branch networking, accelerated inspection, VPN connectivity and integrated secure SD-WAN.
The FG-90G is positioned for distributed enterprise sites and demanding small-to-midsize business environments that need substantially more inspection headroom than basic entry firewalls while retaining a desktop form factor. Its two shared-media multi-gigabit/10GbE WAN pairs are especially relevant where an organisation expects faster ISP circuits, fibre handoffs, high-speed inter-site links or a staged WAN upgrade.
A branch firewall built around converged security and networking
The FortiGate 90G is a physical next-generation firewall in Fortinet’s compact appliance range. Fortinet positions the 90G series for distributed enterprise sites and for organisations modernising WAN architecture. In practical terms, it can sit at the edge of a branch, head office segment, retail location, education site or other business network where the security gateway must inspect internet traffic, apply application and web controls, terminate VPNs, steer WAN traffic and enforce policy from a single FortiOS platform.
The model stands out because it combines a desktop footprint with higher-speed interface options. Eight Gigabit Ethernet RJ45 ports handle common LAN or routed connections, while two shared-media pairs provide a choice between 10/5/2.5/1 Gigabit RJ45 and 10/1 Gigabit SFP+/SFP operation. A buyer can therefore connect conventional copper circuits today while preserving a practical path to faster copper or fibre WAN handoffs. Because these are shared-media pairs, procurement teams should confirm the intended physical media and transceiver plan rather than counting every connector as independently usable.
Fortinet publishes firewall throughput up to 28 Gbps for the FG-90G under its stated UDP packet-size test conditions. More relevant to security sizing are 4.5 Gbps IPS throughput, 2.5 Gbps NGFW throughput and 2.2 Gbps threat-protection throughput using Fortinet’s enterprise traffic mix. The platform also lists 25 Gbps IPsec VPN throughput and 2.6 Gbps SSL inspection throughput under specified test conditions. These figures are not a promise of identical production performance; real results vary with packet characteristics, security profiles, encryption, logging, firmware, policies, VPN design and concurrent services.
For an Uganda buyer, the most important decision is normally not whether the appliance can pass a particular raw internet speed. It is whether the selected security services, subscription bundle, WAN topology and expected growth fit the operating environment. FourTeck can help structure that review before a quote is prepared, including appliance SKU, FortiGuard service bundle, FortiCare term, SFP/SFP+ optics, optional mounting, second power adapter requirements and project quantity.
What the 90G changes for an IT team
Security throughput with usable headroom
The 90G’s published IPS, NGFW and threat-protection figures are materially different from its raw firewall number, which helps buyers size around real security services rather than simple packet forwarding. For growing sites, that extra inspection capacity can delay the point at which the firewall becomes the bottleneck when faster circuits or more users are introduced.
Flexible multi-gigabit and 10GbE edge connectivity
Two shared-media WAN pairs support high-speed copper or SFP+/SFP connections. This is the standout physical feature for many buyers: a branch can move from ordinary Gigabit links toward faster ISP or backbone connections without immediately replacing the firewall solely because the uplink interface is too slow.
Converged firewall and secure SD-WAN operations
FortiOS combines network security and SD-WAN functions on the same appliance. For distributed organisations, this can reduce the number of separate edge systems that must be configured and monitored, while allowing WAN path decisions to work alongside security policy.
Strong VPN capacity for hybrid connectivity
Fortinet lists 25 Gbps IPsec VPN throughput, 200 gateway-to-gateway IPsec tunnels and up to 2,500 client-to-gateway IPsec tunnels under its product specifications. Actual project suitability depends on authentication, cipher choices, traffic profiles and concurrent inspection, but the published capacity gives architects meaningful room for branch interconnection.
Compact deployment without giving up management depth
At roughly 216 mm wide and 178 mm deep, the appliance can fit environments where a full 1U chassis is unnecessary. Optional rack and wall mounting accessories allow the physical installation to be adapted to the site. Central management options are available in the Fortinet ecosystem where multiple sites need consistent policy and visibility.
A practical platform for Fortinet LAN integration
Fortinet’s published platform limits include support for up to 24 FortiSwitches and up to 128 FortiAPs in total, with 64 tunnel-mode FortiAPs. Those limits are not a design target by themselves, but they show why the 90G can be attractive as the security and management anchor for a branch using Fortinet switching and wireless components.
The defining advantage is not one headline number; it is the balance of inspection, WAN speed and compact deployment.
The 90G is designed for organisations that need a branch-class firewall to do several jobs at once. Its SP5-based hardware platform, FortiOS software, high-speed shared-media ports, FortiGuard service integration and SD-WAN capabilities are intended to work as one system. That matters because enterprise edge traffic rarely arrives as simple unencrypted packets. Cloud applications, remote access, SaaS, video collaboration and site-to-site connectivity create a mix of encrypted and application-aware traffic that requires more than raw forwarding performance.
FortiGate 90G specifications that matter for procurement
| Specification | Published FG-90G detail | Buyer relevance |
|---|---|---|
| Firewall throughput | 28 / 28 / 27.9 Gbps (1518/512/64-byte UDP) | Raw forwarding benchmark; not a substitute for inspected-traffic sizing. |
| IPS throughput | 4.5 Gbps | Useful when intrusion prevention is enabled on significant traffic volumes. |
| NGFW throughput | 2.5 Gbps | More representative for policy plus application-aware security workloads. |
| Threat protection | 2.2 Gbps | Critical sizing figure when several threat-protection services operate together. |
| IPsec VPN | 25 Gbps | Relevant for branch-to-branch and hybrid connectivity; production performance varies. |
| SSL inspection | 2.6 Gbps (IPS, average HTTPS) | Important when decrypting and inspecting large amounts of HTTPS traffic. |
| Concurrent TCP sessions | 3 million | Shows session-table scale; application patterns determine actual demand. |
| New TCP sessions/second | 124,000 | Relevant for bursty web, service-provider style or high-session environments. |
| WAN/shared-media pairs | 2 x 10/5/2.5/GE RJ45 or 10GE/GE SFP+/SFP | Confirm copper versus fibre and required optics before ordering. |
| Internal ports | 8 x GE RJ45 | Useful for direct LAN, DMZ or segmented interfaces depending on design. |
| Management ports | 1 x USB, 1 x RJ45 console | Supports local installation and troubleshooting workflows. |
| VPN tunnel limits | 200 gateway-to-gateway; 2,500 client-to-gateway IPsec | Validate topology and concurrent remote-access design. |
| SSL-VPN | 1.4 Gbps; 200 concurrent tunnel-mode users | Confirm current FortiOS feature/licensing direction and access architecture. |
| Virtual domains | 10 default / 10 maximum | Relevant for logical segmentation and multi-tenant style administration. |
| FortiSwitch support | Up to 24 | Useful when planning Fortinet-managed access switching. |
| FortiAP support | Up to 128 total / 64 tunnel | Check WLAN topology and traffic tunnelling before using platform maxima. |
| Power | Up to two external DC adapters; one included; 100-240V AC input to adapter | A second adapter can be considered where power-feed resilience is required. |
| Power consumption | 19.9 W average / 20.53 W maximum | Supports UPS, heat and cabinet planning. |
| Dimensions | 42 x 216 x 178 mm | Desktop form factor; optional rack or wall hardware may be needed. |
| Weight | 1.12 kg | Relevant for shelves, wall mounting and shipping planning. |
Three groups of specifications typically influence a purchase more than the rest. First, inspected-traffic performance should be compared with the expected internet and inter-site traffic after security profiles are enabled. An organisation with a 1 Gbps internet link does not automatically need only 1 Gbps of firewall capacity; SSL inspection, IPS, application control and threat-prevention policies introduce different processing requirements. Growth, peak utilisation and failover traffic should also be considered.
Second, interface choice can determine whether the appliance fits the network physically. The two high-speed pairs are shared media, so each pair is used as either its copper or optical interface rather than both simultaneously. Buyers expecting 10GbE fibre should specify the correct SFP+ transceiver type and fibre characteristics. Third, licensing determines what security services and support coverage are available. A hardware-only appliance and a security bundle are not equivalent purchases. FourTeck can help align the base FG-90G, subscription term, FortiCare service, transceivers and installation accessories into one bill of materials.
Five questions to answer before asking for a quote
01 — What traffic and security workload will the firewall handle?
List internet bandwidth, inter-site traffic, public services, cloud applications and the security functions you expect to enable. A simple router replacement is a different workload from a branch firewall performing IPS, web control, application inspection, SSL inspection, VPN and SD-WAN at the same time. This answer determines which Fortinet performance figures should dominate sizing.
02 — How many users, devices and sessions must be supported?
User count alone can hide important load. A site with many cloud applications, phones, cameras, IoT devices and guest clients may generate far more concurrent sessions than a conventional office with the same headcount. Provide a realistic device estimate, peak user count, remote-access population and any unusually connection-heavy systems.
03 — What must connect to the appliance?
Confirm ISP handoff type, LAN switches, VLANs, fibre type, transceivers, existing FortiSwitch or FortiAP equipment, authentication systems and upstream/downstream routing. The shared 10GbE media pairs provide flexibility, but only when the correct copper or optical components are selected.
04 — What growth, licensing and resilience requirements exist?
Consider expected WAN upgrades, new branches, additional VPN users, stronger inspection policies, future Fortinet switching or wireless adoption and desired subscription term. If high availability between two firewalls is required, that is a different bill of materials from using the optional second DC adapter on one appliance for power-feed redundancy.
05 — What installation, delivery and support expectations apply?
State whether the appliance will sit on a desk, shelf, wall or rack; whether SFP+ modules are required; whether the project includes configuration or migration; the target location in Uganda; desired FortiCare coverage; and the number of units. These details affect accessories, services and availability planning.
Where the FG-90G is a credible fit
A growing branch with faster internet
A professional services office, distribution branch or corporate site may move from sub-gigabit broadband to 1 Gbps or multi-gigabit fibre while increasing SaaS and video traffic. The 90G provides enough interface flexibility to accommodate that transition and published inspection performance that can support substantially more than basic packet filtering. The correct fit depends on how much traffic will be decrypted and which FortiGuard services are enabled.
A multi-link secure SD-WAN site
An organisation using two ISPs, fibre plus wireless backup, or different WAN services can use FortiOS SD-WAN functions to steer application traffic according to policy and link condition. The firewall simultaneously applies security controls. The design should document link speeds, handoff media, path priorities and failover expectations so that interfaces and policies are planned before deployment.
A branch integrated with FortiSwitch and FortiAP
Where a business prefers a common Fortinet operational ecosystem, the firewall can form the security and management anchor for supported FortiSwitch and FortiAP deployments. This can improve policy consistency and visibility across the branch. Maximum supported device counts should not be treated as an automatic recommended design; WLAN tunnelling, traffic concentration and resilience requirements need proper architecture review.
A VPN-heavy hybrid environment
Businesses connecting branch offices to a data centre, cloud networks or a central office can make use of the 90G’s strong published IPsec capacity. Remote access can also be part of the design, but current FortiOS capabilities, access method, authentication and security policy should be checked at project time. The useful sizing measure is concurrent real traffic, not the maximum tunnel-count figure alone.
Security performance: read the workload numbers in the right order
Firewall appliances are often compared by their largest throughput number, but that approach is risky when the device will run multiple inspection services. Fortinet lists up to 28 Gbps firewall throughput for the FG-90G under defined UDP test conditions, yet the published enterprise-mix security numbers are 4.5 Gbps for IPS, 2.5 Gbps for NGFW and 2.2 Gbps for threat protection. SSL inspection is listed at 2.6 Gbps under the stated IPS/average-HTTPS test. These figures describe different workloads rather than conflicting capabilities.
For a buyer, the practical sizing sequence starts with peak traffic that actually needs inspection. A site with dual 1 Gbps internet links could theoretically present close to 2 Gbps of aggregate inbound or outbound demand during failover or simultaneous use. If most of that traffic is HTTPS and policy requires deep inspection, SSL processing becomes relevant. If threat-protection services are applied broadly, the 2.2 Gbps figure deserves more weight than the raw 28 Gbps firewall benchmark. Logging, policy complexity, VPN encryption, firmware and real packet mixes further influence live performance.
Capacity planning should also include growth. A firewall installed for three to five years may see faster WAN services, more SaaS traffic, additional users and stricter inspection profiles during its service life. The advantage of choosing with headroom is operational: the organisation can enable the security controls it actually wants instead of turning them down later because the appliance is saturated.
10GbE-capable shared media gives the WAN edge room to evolve
The physical interface design is one of the strongest reasons to evaluate this model. Each of the two shared-media pairs can use high-speed copper or optical connectivity. On the copper side, Fortinet specifies 10/5/2.5/1 Gigabit Ethernet RJ45 operation; on the optical side, the appliance supports 10 Gigabit or Gigabit SFP+/SFP connectivity. This lets a business match the firewall to an ISP or backbone handoff without committing exclusively to copper or fibre.
The word shared matters. The copper and SFP+ connectors in a pair represent alternative media for the same logical port resource, so they should not be counted as four simultaneous high-speed interfaces. A clean bill of materials must state which media will be used on each WAN pair and which transceiver is required. Fibre designs should identify speed, fibre type, connector and distance so that an appropriate SFP or SFP+ module can be selected.
Licensing and operations are part of the appliance decision
A FortiGate purchase is not complete when the hardware model has been selected. FortiGuard AI-powered Security Services provide capabilities such as intrusion prevention and other security functions according to the chosen service bundle, while FortiCare provides support entitlements according to the selected level and term. The exact bundle names and inclusions can evolve, so procurement should confirm the current Fortinet ordering option instead of assuming that every advertised FG-90G includes the same services.
Operational tooling matters as well. FortiOS provides the local operating platform, and organisations with multiple appliances can evaluate Fortinet’s central management, analytics and cloud-management options according to architecture and licensing needs. For a single site, the priority may be straightforward policy administration and logging. For many sites, consistent templates, firmware management, visibility and change control can become more important than the hardware interface count.
Buyer decision checklist
- Confirm whether the quote is hardware-only or includes a FortiGuard security bundle.
- Specify the required FortiCare term and support level.
- Decide whether central management or analytics is part of the project.
- Verify any SFP/SFP+ modules, rack tray, wall mount or second power adapter required.
- If local storage is a requirement, compare the FG-91G storage-equipped variant rather than assuming the FG-90G includes an SSD.
- Document migration needs such as existing VPNs, public IPs, VLANs, security objects and policy conversion.
What buyers should check before purchase
A second layer of risk comes from treating availability and warranty as fixed attributes. Supply conditions, service bundles and manufacturer terms can vary by SKU, quantity and procurement route. Buyers should ask for the exact quoted part numbers and service term to be shown clearly. For project deployments, provide the target installation window rather than assuming a specific delivery date. FourTeck can use that information to coordinate a quote and discuss current options without relying on generic stock claims.
Plan the appliance, subscriptions and accessories as one order
Availability in Uganda can vary with the base hardware SKU, FortiGuard bundle, FortiCare term, optics, mounting parts and project quantity. FourTeck can help review these dependencies before quotation so the commercial request matches the intended deployment rather than listing only the firewall chassis.
For Kampala projects, buyers can provide the required delivery location, target deployment schedule and any staging or configuration expectations. Warranty guidance should be tied to the exact Fortinet product and service entitlement on the quote. Delivery coordination and project planning are handled according to current availability; no fixed stock or delivery promise should be assumed until confirmed for the order.
One procurement conversation for sites across Uganda
Businesses can request FortiGate quotation and deployment guidance for projects in Kampala as well as other Uganda locations such as Entebbe, Jinja, Mbarara and Gulu. The practical requirement is to identify where each appliance will be installed, whether every site has the same WAN design, and whether configuration should be standardised or adapted per branch. A multi-site project may need different SFP modules, ISP handoff settings, VPN policies or mounting arrangements even when every location uses the same firewall model.
For distributed rollouts, send FourTeck a simple site schedule with location, WAN circuit type and speed, number of users/devices, required security subscription, and quantity. That helps separate common items from site-specific accessories and makes quote preparation clearer. Availability and delivery coordination remain dependent on the confirmed bill of materials and project timing.
Regional projects can be scoped consistently without assuming identical local conditions
Organisations managing technology across Uganda and Kenya, or across selected East Africa and Africa markets, often want a common firewall standard with locally appropriate connectivity. The FG-90G can be evaluated as part of that standard where the branch performance and interface requirements match. The bill of materials may still differ by country because ISP handoffs, power arrangements, logistics and service requirements are not identical.
FourTeck regional websites can support broader procurement conversations for Kenya business technology requirements, selected Africa projects, UAE technology procurement and Kuwait requirements. These links indicate regional points of contact, not a claim of stock, branch presence or identical warranty handling in every market. Buyers should request a country-specific quote and confirm delivery, licensing and support terms for each destination.
Build the complete secure branch rather than an isolated firewall
Browse business firewall options
Explore networking products
Find FortiSwitch options
Review FortiAP access points
Request product and project assistance
Procurement support centred on the exact deployment
01 — Product selection guidance. FourTeck can help compare the requested model with the workload, WAN speed and branch design so the quote is based on practical capacity rather than a generic firewall label.
02 — Configuration review. A quote can account for subscription bundle, FortiCare term, high-speed interface media, optics, mounting and power requirements. This reduces the risk of receiving the appliance but missing the component needed to connect or install it.
03 — Business IT context. Firewall capacity is considered alongside switches, wireless, VPNs, cloud connectivity, UPS sizing and branch standards where those elements are part of the project.
04 — Uganda delivery coordination. The buyer can provide site and timing requirements for Kampala or other Uganda deployments so availability can be discussed against the actual quantity and bill of materials.
05 — Warranty and service guidance. Rather than assuming one universal warranty statement, the team can clarify the support and service entitlement tied to the exact Fortinet SKU and FortiCare selection shown on the quote.
06 — Project and quantity support. Multi-site or bulk requirements can be reviewed as a structured project, including common configuration, site-specific exceptions, accessories and alternative paths if a requested item changes in availability.
FortiGate 90G buyer questions
01. What is the FortiGate 90G mainly used for?
It is a next-generation firewall for securing and connecting business networks, especially distributed enterprise and branch environments. It can combine firewalling, secure SD-WAN, VPN, application-aware policy and FortiGuard security services on FortiOS. The exact functions available to a buyer depend on the selected software services, support entitlement and configuration, so the appliance should be quoted together with its intended security subscription.
02. How much real security throughput should I plan for?
Do not size from the 28 Gbps raw firewall figure alone. Fortinet publishes 4.5 Gbps IPS, 2.5 Gbps NGFW and 2.2 Gbps threat-protection throughput using specified enterprise traffic mixes, plus 2.6 Gbps SSL inspection under its stated test. Your actual design should consider enabled profiles, encrypted traffic, VPN load, peak utilisation and future WAN growth.
03. Does the FG-90G support 10 Gigabit Ethernet?
Yes. It provides two shared-media pairs that can operate as 10/5/2.5/1GbE RJ45 copper or 10/1GbE SFP+/SFP interfaces. Because each pair shares media, the copper and optical connectors are alternatives rather than separate simultaneous ports. If you plan fibre connectivity, confirm the correct transceiver speed, fibre type and distance when preparing the quote.
04. What is the difference between FG-90G and FG-91G?
The key published difference is local storage. Fortinet lists the FG-91G with a 120 GB SSD, while the FG-90G is the non-storage variant. If local logging or a design requirement depends on internal storage, the 91G should be evaluated. If storage is not needed, the 90G may fit. Other licensing and service requirements still need separate confirmation.
05. Do I need a FortiGuard subscription?
The hardware can be ordered in different commercial configurations, but many advanced security functions are delivered through FortiGuard services and support through FortiCare entitlements. A buyer who needs IPS, malware protection, web filtering or other subscription-based functions should specify the desired security bundle and term. FourTeck can help align the current Fortinet bundle with the intended protection level.
06. Can the 90G be used for secure SD-WAN?
Yes. Fortinet positions the 90G series as a converged NGFW and secure SD-WAN platform. It can use multiple WAN links and apply application-aware steering alongside security policy within FortiOS. A good deployment plan documents each circuit, performance objective, failover condition and critical application so the SD-WAN rules can be designed around business requirements rather than generic link balancing.
07. What accessories might be required?
Common optional items include a rack mount tray, wall-mount components, mounting ear brackets, a second compatible power adapter and Fortinet SFP/SFP+ transceivers or direct-attach cables. The exact accessory list depends on how the firewall will be mounted and connected. Provide the cabinet arrangement, ISP handoff and fibre details before ordering so unnecessary or incompatible accessories are avoided.
08. Is the FortiGate 90G available in Uganda?
FourTeck can prepare Uganda quotations and discuss current availability for the required configuration. Availability may vary by hardware SKU, subscription bundle, FortiCare term, accessories and quantity, so it should be confirmed against the actual bill of materials rather than assumed from the model name. Share your deployment location, quantity and required term for a more accurate procurement response.
09. What information should I send for a project quote?
Send the number of firewalls, internet/WAN speeds, copper or fibre handoffs, estimated user and device counts, required security services, VPN requirements, desired support term, mounting method and delivery location. If the firewall will replace an existing appliance, include that model and any capacity problem you are trying to solve. This gives FourTeck enough context to prepare a cleaner bill of materials.
10. Can FourTeck help with a multi-site Fortinet rollout?
Yes, FourTeck can support quote preparation and configuration review for multi-site requirements. The useful approach is to define a standard branch template, then record any site-specific exceptions such as WAN media, bandwidth, number of users, optics or mounting. Availability, delivery and warranty guidance should be confirmed for the exact project quantities and destinations at quotation stage.
Prepare the right Fortinet configuration before you place the order
For a useful FortiGate 90G quotation, share the WAN speeds and media, number of users and devices, security services you intend to enable, VPN requirements, desired FortiCare term, quantity, mounting method and delivery location. FourTeck can then help review the base appliance, subscriptions, optics and accessories as one procurement package.
- WAN speed and copper/fibre handoff
- Security bundle and support term
- VPN, SD-WAN and branch design requirements
- Quantity, accessories and installation location
Reviews
There are no reviews yet.