--- title: "Your firewall is the throttle: a 20 Gbps FortiGate inspects 1 Gbps" summary: "FortiGate 100F datasheet throughput with each security engine switched on, where traffic shaping lives, and the Indian price and log rules, as of September 2026." url: https://www.thetechbag.com/blog/bandwidth-throttling-strategic-approach-network-bandwidth-monito format: Note desk: "Network & SASE" published: 2026-04-28 facts_checked: 2026-09-30 author: TechBag (The TechBag Journal) tags: ["bandwidth throttling","traffic shaping","QoS","NetFlow","firewall throughput","FortiGate","threat protection","CERT-In"] cover: https://www.thetechbag.com/blog/covers/bandwidth-throttling-strategic-approach-network-bandwidth-monito.png --- # Your firewall is the throttle: a 20 Gbps FortiGate inspects 1 Gbps *FortiGate 100F datasheet throughput with each security engine switched on, where traffic shaping lives, and the Indian price and log rules, as of September 2026.* Note · Network & SASE · By TechBag · Published 2026-04-28 · Facts checked 2026-09-30 · Canonical: https://www.thetechbag.com/blog/bandwidth-throttling-strategic-approach-network-bandwidth-monito The short version - Throttling is a firewall setting you already own. FortiOS documents shared and per-IP shapers, shaping policies and DSCP marking in its standard administration guide.[1] - The throttle most offices never configured is inspection: a FortiGate 100F rated 20 Gbps moves 1 Gbps with threat protection on.[3] - Size the box on the inspected figure, shape by application, and keep the flow logs for 180 days. The 2024 version of this piece defined bandwidth throttling and listed monitoring tools by type. The question behind it is practical: the office link feels slow, so should you cap users, buy a bigger line, or buy a monitoring product? Usually none of the three comes first. ## Shape by application, after you have looked Shaping lives in the firewall. Fortinet’s FortiOS 7.4 administration guide covers traffic shaping policies, shaping profiles with queuing, shared and per-IP traffic shapers, global prioritisation and DSCP marking.[1] The order that works: read the flow data first, then guarantee bandwidth to voice and the ERP, push backups and updates into a capped class, and keep per-IP caps for guest Wi-Fi. Flow data (NetFlow, sFlow) shows who is using the link; ManageEngine sells it as the NetFlow Analyzer add-on to OpManager.[2] Two claims from the 2024 version are dropped. Throttling does not add security: a shaper decides how fast traffic moves, not whether it is malicious, which is the job of the inspection engines below. And it rarely defers an upgrade for long: if the business-critical class is starved at peak after shaping, the line or the box is too small, and the flow data will show which. ## The throttle nobody configured Every firewall datasheet leads with a figure measured with inspection off. Turn the security engines on and the ceiling falls. **Figure: Switch on threat protection and a 20 Gbps FortiGate 100F carries 1 Gbps, a twentieth of its headline** *FortiGate 100F throughput in Gbps by security engines enabled, datasheet figures as published to September 2026* Firewall only 1518-byte UDP 20 Gbps Intrusion prevention 2.6 Gbps NGFW IPS + application control 1.6 Gbps Threat protection adds malware protection 1 Gbps SSL inspection 1 Gbps | | Value (Gbps) | | --- | --- | | Firewall only | 20 | | Intrusion prevention | 2.6 | | NGFW | 1.6 | | Threat protection | 1 | | SSL inspection | 1 | Source: Fortinet FortiGate 100F datasheet figures as listed by NetworkTigers; firewall figure confirmed by Cloudfy Systems · as of 30 September 2026 · Fortinet's figures use its enterprise traffic mix; your mix will differ Our view Our view: on a 1 Gbps internet line, a 100F with threat protection on is the bottleneck, not the ISP. Before you cap a single user, check whether the firewall is already at its inspected ceiling. If it is, shaping only decides who waits. ## Cost and rules in India An Indian reseller prices the 100F at about ₹60,000 for the hardware and ₹25,000 a year for the Unified Threat Protection bundle, hardware before GST; add 18% GST and the first year is roughly ₹1,00,300.[4] Shaping is part of FortiOS, the operating system the box already runs. CERT-In’s Directions of 28 April 2022 require logs of all ICT systems, firewall logs included, to be kept for 180 days within Indian jurisdiction.[5] How we did this Figures as of 30 September 2026 Throughput figures are Fortinet’s FortiGate 100F datasheet values as reproduced on a reseller listing; Fortinet’s own PDF could not be retrieved, and the 20 Gbps firewall figure matches a second reseller. The rupee total assumes 18% GST on both lines. One model is shown because the point is the gap, not a vendor ranking; TechBag’s firewall guide lists inspected figures for other vendors. Spotted an error? Write to us; corrections are published at the foot of the piece. Sources 1. [Fortinet, FortiOS 7.4.0 Administration Guide: Traffic shaping (policies, profiles, shared and per-IP shapers, DSCP)](https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/19057/traffic-shaping) — undated documentation page 2. [TechBag, ManageEngine OpManager intel page (NetFlow Analyzer add-on, per-device pricing)](https://www.thetechbag.com/manageengine/manageengine-opmanager) — version of 30 September 2026 3. [NetworkTigers, Fortinet FG-100F listing (datasheet throughput: firewall, IPS, NGFW, threat protection, SSL inspection)](https://www.networktigers.com/products/new-fortinet-fg-100f-fortigate-100f-series-20-gb-registrable-unclaimed-firewall) — undated listing 4. [Cloudfy Systems, Fortinet FortiGate pricing in India (100F hardware and UTP bundle; 20 Gbps firewall)](https://cloudfysystems.com/blog/fortinet-fortigate-pricing-india) — 11 June 2026 5. [CERT-In, Directions under section 70B(6) of the IT Act, 2000 (180 days of logs within Indian jurisdiction)](https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf) — 28 April 2022 Related on TechBag: the [firewall guide](https://www.thetechbag.com/browse/network-security-sase/firewall-network-security) compares inspected throughput across vendors; the [OpManager page](https://www.thetechbag.com/manageengine/manageengine-opmanager) covers flow monitoring. **Disclosure.** TechBag is a software reseller: it earns a margin when a reader buys through it, including from vendors named here. The analysis is TechBag’s own; no vendor paid for or saw this piece before publication. Facts are labelled reported, TechBag count or our view. Go deeper on TechBag - [Firewall & network security guide](https://www.thetechbag.com/browse/network-security-sase/firewall-network-security) — inspected throughput, never the raw figure, across vendors - [ManageEngine OpManager](https://www.thetechbag.com/manageengine/manageengine-opmanager) — network monitoring with the NetFlow Analyzer add-on