Cloud Care Networks
Fortinet5G & LTE Routers

Fortinet FortiGate Rugged 50G-5G 5G Firewall Bundle with 1-Year FortiCare Premium and FortiGuard Enterprise Protection

5GMPN FGR-50G-5G-BDL-809-12
  • Dual SIM
  • 5+ × 1 Gb Ethernet
  • GPS/GNSS
  • Rugged
  • 1 year included
$7,176.59$9,776.80Save $2,600.21

Backordered · ships as soon as it arrives

Included subscription · 1 year
Hardware only−$2,306.071 year3 years+$3,920.325 years+$7,494.72
Add a Cloud Care data plan

First month charged today · No contract · Cancel anytime

1
Request a quote · volume, multi-site or with plans
Compare all 7 configurations

Datasheets & documents

Overview

This bundle (FGR-50G-5G-BDL-809-12) pairs the Fortinet FortiGate Rugged 50G-5G hardware with a 1-year FortiCare Premium and FortiGuard Enterprise Protection subscription. The fanless DIN-rail firewall includes an embedded dual-SIM 5G modem, GPS, six GE RJ45 ports, two SFP slots and redundant 12V-54V DC inputs, and the Enterprise Protection services add IPS, anti-malware, URL/DNS/video filtering, application control, inline CASB, DLP and IoT security from day one.

  • FortiGate Rugged 50G-5G hardware plus 1-year (12-month) FortiCare Premium and FortiGuard Enterprise Protection
  • Enterprise Protection services: IPS, anti-malware with FortiGate Cloud Sandbox, URL/DNS/video filtering, application control, inline CASB, DLP and IoT security
  • Embedded 5G modem with 2 SIM slots (active/passive), 4 SMA WWAN antennas and passive GPS
  • 6 GE RJ45 ports, 2 GE SFP slots, RJ45 serial and console, USB-A 2.0
  • Up to 6 Gbps firewall, 1.1 Gbps threat protection and 5.3 Gbps IPsec VPN throughput
  • Fanless IP40 DIN-rail chassis, -40°C to 75°C, redundant 12V-54V DC inputs
  • IEC 61850-3, IEEE 1613 and EN 50155 certified
  • Order hardware and a full year of security services under one SKU and deploy with protection active from the start

The FGR-50G-5G-BDL-809-12 is the FortiGate Rugged 50G-5G delivered with its security services already in place. Bundle code 809 is FortiCare Premium plus FortiGuard Enterprise Protection, and the -12 suffix sets a 12-month (1-year) term. It suits IT and OT teams that want a rugged 5G firewall deployed with full threat protection rather than ordering hardware and subscriptions separately.

The Enterprise Protection bundle includes IPS with malicious/botnet URL blocking; anti-malware protection covering AV, botnet domains, mobile malware, virus outbreak protection, content disarm and reconstruct, AI-based heuristic AV and FortiGate Cloud Sandbox; URL, DNS and video filtering; anti-spam; AI-based inline malware prevention; data loss prevention; attack surface security with IoT device detection, IoT vulnerability correlation and virtual patching; application control; inline CASB; a one-time FortiConverter configuration conversion; and FortiCare Premium.

The hardware is a fanless, IP40, DIN-rail appliance rated -40°C to 75°C, with an embedded Telit Cinterion FN990A28-HP 5G modem (two SIM slots, active/passive), four SMA WWAN antennas and passive GPS. It is carrier-certified for AT&T, T-Mobile and Verizon, FirstNet Capable (5G) and T-Priority supported. Interfaces include six GE RJ45 ports (four LAN, two WAN), two GE SFP slots, RJ45 serial and console ports, USB-A 2.0, BLE, TPM and a digital I/O module, powered by redundant 12V-54V DC inputs.

The FortiSP5 processor delivers up to 6 Gbps firewall, 2.25 Gbps IPS, 1.25 Gbps NGFW, 1.1 Gbps threat protection and 5.3 Gbps IPsec VPN throughput. IEC 61850-3, IEEE 1613 and EN 50155 certifications support utility and rail deployments. Fortinet publishes the FortiGate Rugged Series data sheet and a QuickStart Guide for this model.

Ideal for

  • Rolling out protected 5G firewalls to utility substations with services active from installation
  • Rail and rolling stock networks needing EN 50155 hardware plus IPS and malware protection
  • Remote OT cabinets and pipelines using 5G WAN with dual SIM failover
  • Industrial sites with IoT and OT devices that need detection and virtual patching
  • Replacing a legacy firewall using the included one-time FortiConverter configuration conversion

Specifications

Bundle

Ips
IPS, Malicious/Botnet URLs
Term
12 months (1 year)
Anti Spam
Included
Bundle Code
809 (EP)
Bundle Name
FortiCare Premium + FortiGuard Enterprise Protection
Inline Casb
Included
Forticare Premium
Included
Additional Services
Device/OS Detection, GeoIPs, Trusted CA Certificates, Internet Services and Botnet IPs, DDNS (v4/v6), Local Protection, PSIRT Check, Anti-Phishing
Application Control
Included
Data Loss Prevention
Included
Forticonverter Service
FortiConverter Service for One Time Configuration Conversion
Anti Malware Protection
AV, Botnet Domains, Mobile Malware, Virus Outbreak Protection, Content Disarm and Reconstruct, AI-based Heuristic AV, FortiGate Cloud Sandbox
Attack Surface Security
IoT Device Detection, IoT Vulnerability Correlation and Virtual Patching, Security Rating, Outbreak Check
Url Dns Video Filtering
URL, DNS and Video Filtering, Malicious Certificate
AI Based Inline Malware Prevention
Included

General

MPN
FGR-50G-5G-BDL-809-12
Brand
Fortinet
Product Name
FortiGate Rugged 50G-5G
Product Type
Ruggedized NGFW with embedded 5G + service bundle
Hardware Model
FGR-50G-5G

Package

DC Cables
Not included
Shipping Weight
6.30 lb
Included Antennas
4x external SMA WWAN antennas, 1x external SMA GPS antenna

Overview

Atp
1.1 Gbps
Ips
2.25 Gbps
Ngfw
1.25 Gbps

Cellular Wireless

MIMO
Yes
Wcdma
B1, B2, B4, B5 (B6, B19), B8 (for EU and APAC regions only)
Regions
All Regions
5G Bands
n1, n2, n3, n5, n7, n8, n12, n13, n14, n18, n20, n25, n26, n28, n29 (SDL), n30, n38, n40, n41, n48, n66, n71, n75 (SDL), n76 (SDL), n77, n78, n79 (PC1.5 support on n41, n77, n78, n79 bands)
Diversity
Yes
GNSS Bias
Yes
LTE Bands
B1, B2, B3, B4, B5, B7, B8, B12, B13, B14, B17, B18, B19, B20, B25, B26, B28, B29 (SDL), B30, B32 (SDL), B34, B38, B39, B40, B41, B42, B43, B46, B48, B66, B71
Modem Model
Telit Cinterion FN990A28-HP (2 SIM Slots, Active/Passive)
Gsm Gprs Edge
—
Umts Hspa Plus
B1, B2, B4, B5, B6, B8, B19
Maximum TX Power
23 dBm (Power Class 3), 26 dBm (Power Class 2 in B41/n41)
Cdma 1xrtt Evdo Rev A
—

Dimensions And Power

Weight
3.97 lbs (1.8 kg)
IP Rating
IP40
Form Factor
DIN-rail
Power Supply
12V-54V DC redundant dual inputs, 2-pin terminal blocks, negative or positive ground, DC cables not included
Maximum Current
12V DC / 2A
Heat Dissipation
82 BTU/h
Antenna Height Width
205 mm x 25 mm
Height Width Length IN
5.47 x 3.52 x 4.80 in
Height Width Length MM
139 x 89.5 x 122 mm
Power Consumption Average Maximum
16 W / 24 W

Modem Certifications

Module Certifications
FCC, IC, RED, NCC, JATE/TELEC, KC, NCC+, RCM, GCF, PTCRB, AT&T, FirstNet, KDDI, KT, Telstra, T-Mobile US, Verizon, T-Priority

Operating Environment

Humidity
5% to 95% non-condensing
Operating Altitude
Up to 10,000 ft (3,048 m)
Storage Temperature
-40°F to 185°F (-40°C to 85°C)
Operating Temperature
-40°F to 167°F (-40°C to 75°C)

Carrier Certifications

Att
Yes
Ptcrb
Yes
Verizon
Yes
T Mobile
Yes

Interfaces And Modules

Processor
FortiSP5
Console Port
1 RJ45
Cellular Modem
5G, GPS
Serial Interface
1 RJ45
Digital I/O Module
Yes
Microsd Card Slot
—
USB Client Server
1 USB-A 2.0
Bypass GE Port Pair
—
Bluetooth Low Energy
Yes
GE LAN WAN Interfaces
6 RJ45
Dedicated GE SFP Slots
2
Trusted Platform Module
Yes

Public Safety Networks

Att Firstnet
FirstNet Capable (5G)
Verizon Frontline
In Progress
T Mobile T Priority
Yes

System Performance And Capacity

Max Fortitokens
500
Firewall Policies
2,000
Max Fortiswitches
8
Concurrent Sessions Tcp
700,000
Firewall Throughput Pps
9 Mpps
Max Fortiaps Total Tunnel
16 / 8
New Sessions Per Second Tcp
85,000
Firewall Latency 64 Byte Udp
2.43 μs
Ipsec VPN Throughput 512 Byte
5.3 Gbps
Virtual Domains Default Maximum
5/5
High Availability Configurations
Active-Active, Active-Passive, Clustering
Ssl Inspection Cps Ips Avg Https
699
Client TO Gateway Ipsec VPN Tunnels
250
Gateway TO Gateway Ipsec VPN Tunnels
200
Application Control Throughput Http 64k
3 Gbps
Ssl Inspection Throughput Ips Avg Https
1.3 Gbps
Ipv4 Firewall Throughput 1518 512 64 Byte Udp
6/6/6 Gbps
Ssl Inspection Concurrent Sessions Ips Avg Https
74,000

Industry Compliance And Certifications

RF
EN 301 908-1 V15.2.1 (2023-01); EN 301 908-2 V13.1.1 (2020-06); EN 301 908-13 V13.2.1 (2022-02); Draft EN 301 908-25 V15.1.1; EN 300 328 V2.2.2 (2019-07); EN 303 413 V1.2.1 (2021-04); EN 18031-1:2024; EN IEC 62311:2020; EN 50665:2017; FCC Part 15 Subpart C 15.247; FCC 47 CFR Part 2.1091; ISED RSS-247 Issue 3; RSS-102 Issue 6
Emc
EN 55032:2015 + A1:2020, Class A; EN 55035:2017 + A11:2020; ETSI EN 301 489-1 V2.2.3 (2019-11); ETSI EN 301 489-17 V3.2.4 (2020-09); ETSI EN 301 489-19 V2.1.1 (2019-04); ETSI EN 301 489-52 V1.2.1 (2021-11)
Rohs
EN IEC 63000:2018, EN 50581:2012
Health And Safety
IEC 62368-1:2014, 2nd Ed.; EN 62368-1:2014; IEC 62368-1:2018, 3rd Ed.; EN IEC 62368-1:2020
Regulatory Compliance
FCC Part 15 Class A, RCM, VCCI Class A, CE, UL/cUL, CB, USGv6/IPv6
Rolling Stock Industry
EN 50155:2021; EN 50121-1:2017; EN 50121-3-2:2016 + A1:2019; EN 50121-4:2016 + A1:2019; EMC, Environmental, Shock and Vibration Certified
Electric Power Industry
IEC 61850-3 and IEEE 1613 Certified

System Performance Enterprise Traffic Mix

Ips Throughput
2.25 Gbps
Ngfw Throughput
1.25 Gbps
Threat Protection Throughput
1.1 Gbps

Questions buyers ask

What does the -BDL-809-12 suffix mean?

Bundle code 809 is FortiCare Premium plus FortiGuard Enterprise Protection, and -12 is a 12-month term. This SKU is the FortiGate Rugged 50G-5G hardware with 1 year of those services.

Which security services are included in Enterprise Protection?

IPS, anti-malware protection (including AI-based heuristic AV and FortiGate Cloud Sandbox), URL, DNS and video filtering, anti-spam, AI-based inline malware prevention, DLP, attack surface security with IoT detection and virtual patching, application control, inline CASB, a one-time FortiConverter conversion and FortiCare Premium.

How is this different from the FGR-50G-5G?

The hardware is identical. The FGR-50G-5G is the appliance alone, while this bundle adds a 1-year FortiCare Premium and FortiGuard Enterprise Protection subscription.

Does it work on US carrier networks?

Yes. The embedded 5G modem is certified for PTCRB, AT&T, T-Mobile and Verizon, is FirstNet Capable (5G) and supports T-Mobile T-Priority. Verizon Frontline is listed as in progress.

What power does the appliance need?

It accepts 12V to 54V DC on redundant dual terminal-block inputs with negative or positive ground, drawing 16 W average and 24 W maximum. DC cables are not included.

Antennas & accessories for Fortinet

More 5G & LTE Routers