Choosing the right entry-level firewall for your small office or branch. Based on official datasheets from Fortinet, Palo Alto Networks, and Sophos.
Spec Comparison — Official Datasheets
| Spec | FG-30G | FG-40F | PA-440 | XGS 107 |
|---|---|---|---|---|
| Firewall Throughput | 4 Gbps | 5 Gbps | 3 Gbps | 3.9 Gbps |
| IPS Throughput | 800 Mbps | 1 Gbps | 280 Mbps | 620 Mbps |
| NGFW Throughput | 570 Mbps | 800 Mbps | — | — |
| Concurrent Sessions | 600K | 700K | 95K | — |
| IPsec VPN | 3.5 Gbps | 4.4 Gbps | 800 Mbps | 600 Mbps |
| New Sessions/s | — | — | — | — |
| Form Factor | Desktop, fanless | Desktop, fanless | Desktop, fanless | Desktop, fanless |
Official Datasheet References (downloaded PDFs):
FortiGate 30G Official Datasheet |
FortiGate 40F Official Datasheet |
FortiGate 100F Official Datasheet |
Palo Alto PA-400 Series Official Datasheet |
Palo Alto Enterprise Product Summary
All performance values are “up to” and vary by configuration. Sources: Fortinet official datasheets (FG-30G, FG-40F), Palo Alto Networks PA-440 datasheet, Sophos XGS 107 specifications.
FG-30G vs FG-40F — G-Series vs F-Series
The FG-30G is Fortinet’s newest entry-level G-series with FortiSP5 7nm chip. The FG-40F uses the older SOC4 SPU. Despite the newer chip, the 40F still edges the 30G on firewall throughput (5 vs 4 Gbps) and IPS (1 Gbps vs 800 Mbps). For most 1-10 user deployments with 50-100 Mbps internet links, both perform identically. The 30G is better for new deployments due to longer lifecycle, but the 40F is more widely available and proven.
Palo Alto PA-440
The PA-440 delivers 3 Gbps firewall throughput and 280 Mbps threat prevention. Session capacity is limited at 95K concurrent sessions — significantly lower than either FortiGate model. At approximately $2,500+ fully loaded vs $800 for the FG-40F, the PA-440 costs 3x more for substantially lower IPS and VPN throughput. Palo Alto’s App-ID provides better application visibility, but the performance-to-cost ratio significantly favors FortiGate at the entry level.
Sophos XGS 107
Mid-range IPS performance (620 Mbps) between the two FortiGate options. Sophos Central management is a genuine advantage for multi-site SMB deployments. However, VPN throughput (600 Mbps) trails both FortiGate models.
Verdict
FG-30G for new deployments (longer lifecycle). FG-40F for availability and proven reliability. Both outperform the PA-440 at 1/3 the cost. Sophos XGS 107 is best for Sophos-ecosystem customers.
Official Datasheet References (downloaded PDFs):
FortiGate 30G Official Datasheet |
FortiGate 40F Official Datasheet |
FortiGate 100F Official Datasheet |
Palo Alto PA-400 Series Official Datasheet |
Palo Alto Enterprise Product Summary