The shift toward sustainable technology is increasingly driven by procurement requirements, regulatory mandates, and measurable ESG goals. Consequently, a growing number of organizations now need to provide verified environmental impact data throughout their supply chains. Regulations such as the Corporate Sustainability Reporting Directive (CSRD) and the emerging Digital Product Passport (DPP) are formalizing this requirement, particularly for technology providers.

Fortinet has been building toward this shift by embedding independently verified sustainability data directly into its product portfolio. That effort has now reached a new milestone.

FortiGate 90G Series Achieves Global ISO 14025 EPD Certification

The FortiGate 90G/91G series is now certified under the ISO 14025 standard and published through the International EPD System, providing globally recognized, third-party–verified environmental impact data.

This certification extends Fortinet’s leadership position. Fortinet is now the first and only cybersecurity solutions provider with International Environmental Product Declarations (EPDs) for three consecutive top-selling firewall product families:

• FortiGate 90G series
• FortiGate 50G series
• FortiGate 40F series

Each certification relies on a Life Cycle Assessment (LCA) and is verified in accordance with Product Category Rules (PCR 2024:06), ensuring consistency, transparency, and comparability across products. This shifts sustainability from mere intent to an auditable, standardized data source linked to specific products.

What an ISO 14025 EPD Provides

An EPD is a standardized, third-party verified report that quantifies environmental impact across a product’s full life cycle. For cybersecurity and networking infrastructure, this includes:

• Raw material extraction and component sourcing
• Manufacturing and assembly
• Transportation and distribution
• Operational energy consumption
• End-of-life treatment and disposal

Unlike single-point metrics such as energy-efficiency ratings, EPDs provide comprehensive multidimensional environmental data, including carbon footprint, energy use, water consumption, and resource depletion.

Governed by ISO 14025, EPDs are designed to support transparent comparisons across vendors, enabling procurement teams to evaluate sustainability using consistent, verified standards.

Why EPD Certification Matters for Cybersecurity Infrastructure

Cybersecurity infrastructure is widely adopted across campuses, data centers, and branch offices. These systems influence operational energy use, cooling requirements, and long-term environmental impact. Consequently, procurement expectations are shifting, with organizations now expected to:

• Report Scope 3 emissions across their supply chain
• Meet ESG and sustainability reporting standards
• Qualify for green procurement and government contracts

However, without standardized environmental data, these requirements are difficult to meet. Using ISO-aligned EPDs makes them measurable and defensible.

At the same time, industry pressure is increasing. Data center operators and large technology buyers are actively requiring suppliers to supply life cycle environmental data, especially for high-volume infrastructure parts.

“Fortinet’s publication of a verified Environmental Product Declaration for the FortiGate 40F and FortiGate 50G series is a remarkable achievement. As transparency and sustainability become increasingly critical across industries, this milestone sets a new benchmark for environmental accountability within the cybersecurity sector. For customers like us, having a cybersecurity partner that demonstrates verified environmental performance is increasingly important. As organizations work to reduce the footprint of their entire value chain, understanding the environmental impact of technology products is becoming a key factor in procurement and decision-making. Fortinet’s leadership in publishing third-party–verified data reflects a strong commitment to sustainability and gives us confidence that our cybersecurity partner shares our environmental values and long-term objectives.” — Jorge Luis Juarez Cruz, IT Infrastructure Coordinator, Bradescard

Connecting Sustainability to Operational and Financial Outcomes

The FortiGate 90G series demonstrates how sustainability and performance are directly linked. Built on Fortinet’s ASIC architecture and powered by FortiOS, the FortiGate 90G platform combines firewall, SD-WAN, and security functions into a single device. This integration helps minimize infrastructure clutter while boosting efficiency at scale.

The EPD-backed data supports several measurable outcomes:

• Lower energy consumption and operating costs: Efficient hardware design reduces power usage per unit of throughput, lowering electricity costs and reducing cooling requirements across deployments.
• Extended hardware life cycle: Purpose-built ASIC architecture and optimized system design extend product usability, reducing refresh frequency and capital expenditure.
• Reduced infrastructure footprint through consolidation: Integrated networking and security capabilities eliminate the need for multiple standalone appliances, lowering rack space, energy usage, and management overhead.
• Simplified ESG reporting and compliance: ISO 14025–aligned EPDs provide pre-validated environmental data, reducing the effort required for sustainability reporting, regulatory audits, and procurement qualification.

These are not secondary benefits. They directly impact total cost of ownership (TCO) and long-term operational efficiency.

Sustainability as a Competitive Requirement

Sustainability credentials now influence vendor selection in many markets:

• Government and public sector contracts
• Regulated industries such as finance and healthcare
• Corporate ESG and sustainability efforts

As a result, organizations are increasingly selecting vendors that can provide independently verified environmental credentials, not just high-level commitments. This shift is also impacting financial evaluation. Sustainability metrics are being integrated into risk assessments, procurement scoring, and long-term infrastructure planning.

Vendors without verifiable data face delays, additional validation costs, or exclusion from opportunities.

Fortinet’s Approach: Verified Data Across the Portfolio

The certification of the FortiGate 90G series builds on earlier EPDs for the 40F and 50G families. Together, these form a growing portfolio of products with globally recognized, ISO-aligned environmental validation.

Fortinet is committed to expanding Lifecycle Assessment (LCA) and EPD coverage to more products, aligning sustainability reporting with how infrastructure is used in modern hybrid environments. This strategy ensures that organizations receive consistent, product-level data that supports both operational decisions and regulatory compliance.

The Bottom Line

The FortiGate 90G/91G series is now globally recognized under ISO 14025 through the International EPD System, with independently verified environmental data for its entire life cycle.

Along with similar certifications for the FortiGate 50G and 40F families, this clearly establishes Fortinet as the worldwide leader in measurable, verifiable sustainability in cybersecurity infrastructure.

In a market where sustainability claims are increasingly scrutinized, independently validated data is what sets vendors apart. Fortinet provides this data—at the product level, on a global scale, and in a format that organizations can rely on to create a sustainable digital environment.