Cloud Care Networks
Fortinet5G & LTE Routers

Fortinet FortiGate 40F-3G4G Next-Generation Firewall with Embedded 4G LTE Modem

4G LTEMPN FG-40F-3G4G
  • 5+ × 1 Gb Ethernet
$1,074.64$1,464.00Save $389.36

Backordered · ships as soon as it arrives

Add a Cloud Care data plan

First month charged today · No contract · Cancel anytime

1
Request a quote · volume, multi-site or with plans

Datasheets & documents

Overview

The Fortinet FortiGate 40F-3G4G (FG-40F-3G4G) is a compact, fanless next-generation firewall with a built-in Sierra Wireless EM7565 LTE Cat-12 modem and two nano SIM slots. It combines firewalling, SD-WAN, network controller and FortiGuard security services in one desktop appliance. With 5 GE RJ45 ports, up to 5 Gbps firewall throughput and 800 Mbps NGFW throughput, it suits branch offices, retail sites and remote locations that need secure wired and 4G LTE WAN connectivity.

  • Embedded Sierra Wireless EM7565 LTE Cat-12 modem with 3G fallback
  • Dual nano SIM slots (active/passive) and 3 SMA antenna ports, external WWAN antennas included
  • 5 hardware-accelerated GE RJ45 ports: 1 WAN/DMZ, 3 internal, 1 FortiLink (default)
  • Up to 5 Gbps firewall, 1 Gbps IPS, 800 Mbps NGFW and 600 Mbps threat protection throughput
  • Up to 4.4 Gbps IPsec VPN throughput with 200 gateway-to-gateway and 250 client-to-gateway tunnels
  • SD-WAN and network controller included in FortiOS at no extra cost
  • Fanless 0 dBA desktop chassis drawing 15.8 W average
  • Bring secure internet to sites without wired service using the built-in LTE Cat-12 modem

The FortiGate 40F-3G4G is Fortinet's entry branch firewall with cellular WAN built in. It runs FortiOS, Fortinet's converged networking and security operating system, and includes SD-WAN and network controller functions in the appliance at no extra cost. Performance comes from Fortinet's SD-WAN-based ASIC and an embedded multi-core processor, delivering up to 5 Gbps IPv4 firewall throughput, 1 Gbps IPS, 800 Mbps NGFW and 600 Mbps threat protection throughput.

The embedded Sierra Wireless EM7565 modem supports LTE Category 12 across a broad set of LTE bands, including B2, B4, B5, B12, B13, B30, B41, B48 and B66, plus UMTS/HSPA+ fallback. Two nano SIM slots operate in active/passive mode, and three SMA antenna ports connect the included external WWAN antennas. The LTE link can serve as primary internet at sites without wired service or as a backup path alongside a wired WAN.

For wired networking, the unit provides five hardware-accelerated GE RJ45 ports: one WAN/DMZ port, three internal ports and one FortiLink port by default, along with a USB port and an RJ45 console port. It supports 200 gateway-to-gateway and 250 client-to-gateway IPsec VPN tunnels with up to 4.4 Gbps IPsec throughput, up to 700,000 concurrent TCP sessions, 10 virtual domains, and management of up to 8 FortiSwitches and 16 FortiAPs. High availability is available in active-active, active-passive and clustering configurations.

The fanless 0 dBA chassis measures 1.6 x 8.5 x 6.3 inches, weighs 2.2 lbs and draws 15.8 W on average from an external 12 V DC adapter. Fortinet's datasheet and QuickStart Guide cover deployment details. Note that SSL VPN is not supported on FortiOS 7.6.0 and above.

Ideal for

  • Branch offices needing a firewall with LTE backup for wired broadband
  • Retail stores and kiosks where cellular is the primary WAN
  • Temporary or construction sites without fixed-line internet
  • Distributed enterprises standardizing on FortiOS SD-WAN at small sites
  • Remote facilities that need secure IPsec VPN back to headquarters

Specifications

General

MPN
FG-40F-3G4G
Brand
Fortinet
Product Name
FortiGate 40F-3G4G
Product Type
Next-Generation Firewall with Embedded 3G/4G LTE
Operating System
FortiOS

Package

Wwan Antennas
External SMA WWAN antennas included
Shipping Weight
2.20 lbs

Modem 3g4g

MIMO
Yes
Wcdma
—
Regions
All Regions
Diversity
Yes
GNSS Bias
Yes
LTE Bands
B1, B2, B3, B4, B5, B7, B8, B9, B12, B13, B18, B19, B20, B26, B28, B29, B30, B32, B41, B42, B43, B46, B48, B66
Modem Model
Sierra Wireless EM7565 (2 SIM Slots, Active/Passive)
LTE Category
LTE Cat-12
Gsm Gprs Edge
—
Umts Hspa Plus
B1, B2, B4, B5, B6, B8, B9, B19
Maximum TX Power
20 dBm
Cdma 1xrtt Evdo Rev A
—
Module Certifications
FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB

Dimensions And Power

Weight
2.2 lbs (1 kg)
Form Factor
Desktop
Input Rating
12 V DC, 3 A
Power Required
Powered by external DC power adapter, 100-240V AC, 50/60 Hz
Current Maximum
100V AC / 0.3A, 240V AC / 0.2A
Heat Dissipation
63.5 BTU/h
Dimensions H W L IN
1.6 x 8.5 x 6.3 in
Dimensions H W L MM
40.5 x 216 x 160 mm
Power Consumption Avg Max
15.8 W / 18.6 W

Interfaces And Modules

USB Ports
1 x USB Port
Cellular Modem
3G/4G LTE
SIM Slots Nano
2 x Nano SIM Slots
Onboard Storage
None
Antenna Ports Sma
3 x SMA Antenna Ports
Console Port Rj45
1 x RJ45 Console Port
GE Rj45 PoE Ports
0 PoE/+ Ports
Wireless Interface
None
Bluetooth Low Energy
—
GE Rj45 WAN Dmz Ports
1 x Hardware Accelerated GE RJ45 WAN/DMZ Port
Included Transceivers
None
GE Rj45 Internal Ports
3 x Hardware Accelerated GE RJ45 Internal Ports
Trusted Platform Module
—
GE Rj45 Fortilink Ports Default
1 x Hardware Accelerated GE RJ45 FortiLink Port (Default)
Signed Firmware Hardware Switch
—

System Performance And Capacity

Max Fortitokens
500
Firewall Policies
2,000
Ssl VPN Throughput
490 Mbps (not supported on FortiOS 7.6.0 and above)
Concurrent Sessions Tcp
700,000
Firewall Throughput Pps
7.5 Mpps
Max Fortiaps Total Tunnel
16 / 8
Capwap Throughput Http 64k
3.5 Gbps
Max Fortiswitches Supported
8
New Sessions Per Second Tcp
35,000
Firewall Latency 64 Byte Udp
2.97 μs
Ipsec VPN Throughput 512 Byte
4.4 Gbps
Virtual Domains Default Maximum
10 / 10
High Availability Configurations
Active-Active, Active-Passive, Clustering
Ssl Inspection Cps Ips Avg Https
320
Client TO Gateway Ipsec VPN Tunnels
250
Concurrent Ssl VPN Users Tunnel Mode
200 (recommended maximum)
Gateway TO Gateway Ipsec VPN Tunnels
200
Application Control Throughput Http 64k
990 Mbps
Ssl Inspection Throughput Ips Avg Https
310 Mbps
Ipv4 Firewall Throughput 1518 512 64 Byte Udp
5 / 5 / 5 Gbps
Ssl Inspection Concurrent Sessions Ips Avg Https
55,000

Operating Environment And Certifications

Humidity
10% to 90% non-condensing
Compliance
FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB
Noise Level
Fanless 0 dBA
Certifications
USGv6/IPv6
Operating Altitude
Up to 7,400 ft (2,250 m)
Storage Temperature
-31°F to 158°F (-35°C to 70°C)
Operating Temperature
32°F to 104°F (0°C to 40°C)

System Performance Enterprise Traffic Mix

Ips Throughput
1 Gbps
Ngfw Throughput
800 Mbps
Threat Protection Throughput
600 Mbps

Questions buyers ask

Does the FortiGate 40F-3G4G support 5G?

No. It has an embedded Sierra Wireless EM7565 modem supporting 4G LTE Category 12 with 3G UMTS/HSPA+ fallback. It is an LTE device, not 5G.

How many SIM cards does it take?

It has two nano SIM slots that operate in active/passive mode, so a second SIM can take over if the primary connection is unavailable.

Are antennas included?

Yes. External SMA WWAN antennas are included and connect to the unit's three SMA antenna ports.

What throughput can I expect with security features enabled?

Fortinet rates it at up to 800 Mbps NGFW throughput and 600 Mbps threat protection throughput with an enterprise traffic mix, and up to 5 Gbps raw IPv4 firewall throughput. All values are up-to figures that vary with configuration.

Does it support SSL VPN?

SSL VPN is rated at 490 Mbps on earlier FortiOS releases, but it is not supported on FortiOS 7.6.0 and above. IPsec VPN is supported with up to 200 gateway-to-gateway and 250 client-to-gateway tunnels.

Antennas & accessories for Fortinet

More 5G & LTE Routers