Fortinet FortiGate 50G-5G FG-50G-5G-BDL-950-36 Desktop Firewall, 3-Year Unified Threat Protection (UTP)
Overview
The Fortinet FortiGate 50G Series is Fortinet's branch workhorse: a fanless desktop appliance with one WAN port, three LAN ports and a FortiLink port, offered in several WAN flavours so the same platform can terminate an Ethernet handoff, a fibre link, a DSL line or a 5G cellular service. The FortiGate 50G Series includes multiple variants with different interface, connectivity, storage and hardware configurations; performance specifications should be read from the applicable model. It runs FortiOS with a TPM, Bluetooth Low Energy and a signed-firmware hardware switch, and supports five Virtual Domains and active-active, active-passive or clustered high availability. The FG-50G-5G-BDL-950-36 is the configuration without onboard storage, so logging goes to FortiAnalyzer, FortiGate Cloud or a syslog collector; the FG-51G-5G is the otherwise closely matched model with a 64 GB SSD. FortiOS forwards both IPv4 and IPv6 traffic; Fortinet does not publish a routing-protocol list for this appliance in the datasheet, which is why the specification table records the protocols as not published while stating IPv6 support. This part number is the bundled configuration: the same appliance supplied with a prepaid FortiGuard Unified Threat Protection (UTP) subscription and FortiCare Premium support for 3 years (36 months). The appliance itself is the FG-50G-5G as sold on its own; what the bundle adds is the FortiGuard service entitlement and 24x7x365 support with one-hour response for critical issues.
Technical Details
The Fortinet FortiGate 50G-5G FG-50G-5G-BDL-950-36 is a desktop next-generation firewall with five gigabit Ethernet copper ports and an embedded 5G cellular WAN module with two nano-SIM slots, running FortiOS. Firewall throughput is 5 / 5 / 4 Gbps at 1518, 512 and 64-byte UDP, and threat protection throughput is 1.1 Gbps on the Enterprise Traffic Mix with logging enabled. IPsec VPN throughput is 4.5 Gbps at 512 bytes with AES256-SHA256, and SSL inspection throughput is 1.3 Gbps with IPS on average HTTPS. It holds 720,000 concurrent TCP sessions and opens 85,000 new sessions per second. It operates from 0 to 40 degrees Celsius and is used at a small office or branch site for internet-edge protection, site-to-site VPN, and secure SD-WAN.
Best For
The FG-50G-5G suits a branch office or small site that needs 1.1 Gbps of threat protection throughput with 720,000 concurrent sessions behind it. Its five gigabit Ethernet copper ports and an embedded 5G cellular WAN module with two nano-SIM slots cover the port requirement. Firewall throughput is 5 Gbps at 1518-byte UDP and 4 Gbps at 64 bytes, which is the headroom on uninspected traffic, while 1.1 Gbps is the figure to size against once inspection is on. Choose it over the FG-51G-5G where logging already goes to FortiAnalyzer, FortiGate Cloud or a syslog collector. As a bundled part number it arrives with 3 years (36 months) of FortiGuard Unified Threat Protection (UTP) and FortiCare Premium support already attached, so the services do not need ordering separately.
Not suitable if:
- you need logs and reports retained on the appliance itself, since this configuration has no onboard storage
- you need Power over Ethernet for cameras or access points, since this appliance provides none
- your inspected traffic exceeds 1.1 Gbps, since that is the published threat protection throughput
- you need a hardened appliance for a plant floor or outdoor cabinet, since this unit is rated only from 0 to 40 degrees Celsius
- you need SSL-VPN, since no SSL-VPN throughput or concurrent-user figures are published for this model
- you want a different subscription term or bundle tier, since this part number is fixed at 3 years of Unified Threat Protection (UTP)
FG-50G-5G-BDL-950-36 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 5×1GbE RJ45, 1×embedded 5G WWAN module (2 nano-SIM slots) |
| Max Port Speed | 1 GbE |
| Management & Console Ports | 1×RJ45 console, 1×USB |
| Performance & Scale | |
| Firewall Throughput | 5 / 5 / 4 Gbps (1518 / 512 / 64-byte UDP) |
| Threat Prevention Throughput | 1.1 Gbps (Enterprise Traffic Mix, logging enabled) |
| TLS/SSL Inspection Throughput | 1.3 Gbps (IPS, average HTTPS) |
| IPsec VPN Throughput | 4.5 Gbps (512-byte, AES256-SHA256) |
| Power & Thermal | |
| Power Supply | Powered by external DC power adapter, 100-240V AC, 50/60 Hz; 12V DC, 3A rating; maximum current 100V/0.4A, 240V/0.2A |
| Redundant Power Supply | No |
| Maximum Power Consumption | 8.9 W (8.3 W average) |
| Cooling | Fanless |
| Physical & Environmental | |
| Operating System | FortiOS |
| Form Factor | Desktop |
| Dimensions (H x W x D) | 1.6 × 8.5 × 6.3 in (4.05 × 21.6 × 16.0 cm) |
| Weight | 2.2 lb (1.0 kg) |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Software | |
| Central Management Platform | FortiManager, FortiGate Cloud |
| Routing Protocols & IPv6 | Routing protocols not published; IPv6 supported |
| Other | |
| Maximum Concurrent Sessions | 720,000 (TCP) |
| New Sessions per Second | 85,000 (TCP) |
| Maximum IPsec VPN Tunnels | 200 gateway-to-gateway, 250 client-to-gateway |
| High Availability | Active/Active, Active/Passive, Clustering |
FG-50G-5G-BDL-950-36 Accessories
| Included | 5x External SMA WWAN Antennas, External DC Power Adapter |
| Optional | Rack Mount Tray (SP-RACKTRAY-02), Wall Mount Kit (SP-FG60F-MOUNT-20), Mounting Ear Bracket (SP-EAR-FG90G-10) |
FAQ
Does the Fortinet FortiGate 50G-5G FG-50G-5G-BDL-950-36 support PoE?
No. The FG-50G-5G-BDL-950-36 provides no Power over Ethernet on any port, so cameras, access points and IP phones need their own power source or a PoE switch between them and the firewall. Its interfaces are five gigabit Ethernet copper ports and an embedded 5G cellular WAN module with two nano-SIM slots, all data-only. Within the FortiGate G series PoE appears on separate part numbers, not on this one.
What ports does the FG-50G-5G-BDL-950-36 have?
The FG-50G-5G-BDL-950-36 provides five gigabit Ethernet copper ports and an embedded 5G cellular WAN module with two nano-SIM slots, plus one RJ45 console port. There are no pluggable transceiver slots on this configuration, so the wired interfaces are fixed copper and no optics are ordered against it; the cellular WAN uses the embedded 5G modem and its external antennas. It also has one USB port.
How does high availability work on the Fortinet FortiGate 50G-5G FG-50G-5G-BDL-950-36?
The FG-50G-5G-BDL-950-36 supports Active-Active, Active-Passive and Clustering high-availability modes. An HA pair should be two identical models running the same FortiOS build, and the units synchronise configuration and session state over the HA link. This model has no dedicated HA port, so the HA link runs over a data port.
How much traffic can the FG-50G-5G-BDL-950-36 handle?
Fortinet publishes no user count for the FG-50G-5G-BDL-950-36, so size it on the capacity figures. Firewall throughput is 5 / 5 / 4 Gbps at 1518, 512 and 64-byte UDP. Small packets cost throughput. Threat protection throughput is 1.1 Gbps once IPS, application control and malware protection are enabled, and SSL inspection throughput is 1.3 Gbps; size against those. It holds 720,000 concurrent TCP sessions and opens 85,000 new sessions per second. All values are stated as up to.
What is the difference between the FG-50G-5G-BDL-950-36 and the FG-51G-5G?
Their interface layout and published performance specifications are the same: the FG-51G-5G is the otherwise closely matched model with a 64 GB SSD. Fortinet publishes one set of dimensions, weight and power figures for both models. Both run the same FortiOS build and take the same FortiGuard subscriptions.
What is included in the FG-50G-5G-BDL-950-36 bundle?
The FG-50G-5G-BDL-950-36 is the appliance plus a prepaid FortiGuard Unified Threat Protection (UTP) subscription and FortiCare Premium support, both for a term of 3 years (36 months). Unified Threat Protection (UTP) covers IPS, anti-malware, URL and DNS filtering, and anti-spam. AI-based inline malware prevention, data loss prevention and Attack Surface Security are Enterprise Protection services, not UTP ones. Video filtering and Content Disarm and Reconstruct are not available on this series. FortiCare Premium provides 24x7x365 availability with one-hour response for critical issues and next-business-day response for everything else.
Does the FG-50G-5G-BDL-950-36 require a subscription to operate?
No. Core firewall, routing and networking functions can continue to operate without an active FortiGuard subscription, while subscription-based security intelligence, updates and services require an active subscription. The FG-50G-5G-BDL-950-36 ships with a prepaid FortiGuard Unified Threat Protection (UTP) subscription and FortiCare Premium support for 3 years (36 months); when that term ends, the FortiGuard intelligence and the support entitlement lapse and can be renewed.
What condition is the FG-50G-5G-BDL-950-36 sold in, and what warranty applies?
Network Devices Inc. supplies the FG-50G-5G-BDL-950-36 new and factory sealed, in original Fortinet packaging with the standard accessories. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Because the unit is new rather than renewed, it is eligible for Fortinet registration and for FortiCare and FortiGuard entitlements ordered against it, which is not always the case with refurbished stock. Orders ship from our New Jersey and Texas warehouses.
