Cloud Care Networks
Fortinet5G & LTE Routers

Fortinet FortiGate Rugged 60G-5G Industrial 5G Firewall with 5-Year Enterprise Protection Bundle

5GMPN FGR-60G-5G-BDL-809-60
  • Dual SIM
  • 5+ × 1 Gb Ethernet
  • GPS/GNSS
  • Rugged
  • 5 years included
$19,578.93$26,672.75Save $7,093.82

Backordered · ships as soon as it arrives

Included subscription · 5 years
Hardware only−$12,360.171 year−$9,451.893 years−$4,507.825 years
Add a Cloud Care data plan

First month charged today · No contract · Cancel anytime

1
Request a quote · volume, multi-site or with plans
Compare all 7 configurations

Datasheets & documents

Overview

The Fortinet FortiGate Rugged 60G-5G is a fanless, industrially rugged next-generation firewall with an embedded 5G cellular WAN module. It has two active/passive SIM slots, six GE RJ45 ports, two SFP slots and redundant 12V to 125V DC inputs, and it operates from -40°C to 75°C. This bundle (FGR-60G-5G-BDL-809-60) pairs the hardware with 5 years (60 months) of FortiCare Premium and FortiGuard Enterprise Protection. It suits long-life OT and industrial deployments.

  • Fanless, ruggedized IP40 indoor appliance rated for -40°C to 75°C operation
  • Embedded 5G cellular WAN module (Telit Cinterion FN990A28-HP) with 2 active/passive SIM slots, 4 external SMA antennas and passive GPS
  • 4x GE RJ45 LAN, 2x GE RJ45 WAN, GE bypass port pair (PORT1-2) and 2x GE SFP slots
  • FortiSP5 secure processor with up to 8 Gbps firewall and 7.1 Gbps IPsec VPN throughput
  • Built-in Secure SD-WAN with FortiOS management and security automation
  • Includes 5 years (60 months) of FortiCare Premium and FortiGuard Enterprise Protection
  • Certified to IEC 61850-3, IEEE 1613 and EN 50155
  • Keep industrial sites online over 5G, with a second SIM on standby for active/passive failover

The Fortinet FortiGate Rugged 60G-5G (FGR-60G-5G-BDL-809-60) is an industrially rugged next-generation firewall with an embedded 5G cellular WAN module. This SKU bundles the hardware with 60 months of FortiCare Premium and FortiGuard Enterprise Protection. It is designed for operational technology and industrial networks, where environmental conditions rule out office-grade security appliances. The fanless, IP40 indoor-rated chassis operates from -40°C to 75°C. It mounts on a desktop, DIN rail or wall and runs from 12V to 125V DC redundant dual inputs.

For wired connections it has four GE RJ45 LAN ports, two GE RJ45 WAN ports, a GE bypass port pair between PORT1 and PORT2, and two dedicated GE SFP slots. It also provides RJ45 serial and console ports, USB-A 2.0, a microSD slot, digital I/O and a Trusted Platform Module. The Telit Cinterion FN990A28-HP modem is specified for all regions and covers 5G NR and LTE. It has two active/passive SIM slots, four external SMA antennas and passive GPS. The modem carries PTCRB, AT&T and T-Mobile carrier certification and is FirstNet Capable (5G). Verizon certification is listed as in progress.

Fortinet's FortiSP5 secure processor and FortiOS deliver up to 8 Gbps firewall throughput, 7.1 Gbps IPsec VPN, 2.25 Gbps IPS and 1.1 Gbps threat protection. Secure SD-WAN is built in. The Enterprise Protection bundle includes: • IPS • Anti-malware with FortiGate Cloud Sandbox • URL, DNS and video filtering • Anti-spam • AI-based inline malware prevention • Data loss prevention • Attack surface security for IoT devices • A one-time FortiConverter configuration conversion • FortiCare Premium for the full five-year term

Industry certifications include IEC 61850-3 and IEEE 1613 for the electric power industry and EN 50155 for rolling stock.

Ideal for

  • Securing electrical substations and utility OT networks that require IEC 61850-3 and IEEE 1613 equipment
  • Rail and rolling-stock networks needing EN 50155-certified security appliances
  • Long-life remote industrial sites using 5G as primary or backup WAN under a five-year service term
  • DC-powered field installations with extreme temperature ranges
  • Public-safety and critical-infrastructure deployments on FirstNet Capable (5G) connectivity

Specifications

General

MPN
FGR-60G-5G-BDL-809-60
UPC
195875598100
Brand
Fortinet
Model
FGR-60G-5G
Product Name
FortiGate Rugged 60G-5G
Product Type
Ruggedized NGFW with embedded 5G WWAN

Subscription

Ips
IPS, Malicious/Botnet URLs
Term
60 months (5 years)
Bundle
FortiCare Premium + FortiGuard Enterprise Protection (EP)
Support
FortiCare Premium
Anti Spam
Included
Bundle Code
809
Forticonverter
FortiConverter Service for One Time Configuration Conversion
Data Loss Prevention
Included
Anti Malware Protection
AV, Botnet Domains, Mobile Malware, Virus Outbreak Protection, Content Disarm and Reconstruct, AI-based Heuristic AV, FortiGate Cloud Sandbox
Attack Surface Security
IoT Device Detection, IoT Vulnerability Correlation and Virtual Patching, Security Rating, Outbreak Check
Url Dns Video Filtering
URL, DNS and Video Filtering, Malicious Certificate
AI Inline Malware Prevention
Included

Datasheet Notes

Logging
IPS (Enterprise Mix), Application Control, NGFW and Threat Protection measured with Logging enabled
Ssl VPN
SSL VPN not supported starting with FortiOS v7.6.0; FortiOS v7.2.x LTS recommended
Ipsec VPN Test
IPsec VPN performance tested with AES256-SHA256
Ngfw Measurement
NGFW measured with Firewall, IPS and Application Control enabled
Performance Values
All performance values are “up to” and vary by configuration; provisional and subject to change
Ssl Inspection Method
SSL Inspection values use an average of HTTPS sessions of different cipher suites
Threat Protection Measurement
Threat Protection measured with Firewall, IPS, Application Control and Malware Protection enabled

Cellular Wireless

MIMO
Yes
Wcdma
B1, B2, B4, B5 (B6, B19), B8 (for EU and APAC regions only)
Regions
All Regions
5G Bands
n1, n2, n3, n5, n7, n8, n12, n13, n14, n18, n20, n25, n26, n28, n29 (SDL), n30, n38, n40, n41, n48, n66, n71, n75 (SDL), n76 (SDL), n77, n78, n79 (PC1.5 support on n41, n77, n78, n79 bands)
Diversity
Yes
GNSS Bias
Yes
LTE Bands
B1, B2, B3, B4, B5, B7, B8, B12, B13, B14, B17, B18, B19, B20, B25, B26, B28, B29 (SDL), B30, B32 (SDL), B34, B38, B39, B40, B41, B42, B43, B46, B48, B66, B71
Modem Model
Telit Cinterion FN990A28-HP (2 SIM Slots, Active/Passive)
Gsm Gprs Edge
—
Umts Hspa Plus
B1, B2, B4, B5, B6, B8, B19
Maximum TX Power
23 dBm (Power Class 3), 26 dBm (Power Class 2 in B41/n41)
Cdma 1xrtt Evdo Rev A
—

Dimensions And Power

Weight
2.87 lbs (1.30 kg)
IP Rating
IP40
Form Factor
Desktop / DIN-rail / Wall Mount
Power Supply
12V to 125V DC redundant dual inputs, 2 pins per terminal block, negative or positive ground, DC cables not included
Dimensions IN
1.68 x 8.50 x 6.26 in (H x W x L)
Dimensions MM
42.7 x 216 x 159 mm (H x W x L)
Maximum Current
2.5 A @ 12 V
Heat Dissipation
88.7 BTU/h
Antenna Height X Width
205 mm x 25 mm
Power Consumption Average Maximum
20.75 W / 26 W

Modem Certifications

Module Certifications
FCC, IC, RED, NCC, JATE/TELEC, KC, NCC+, RCM, GCF, PTCRB, AT&T, FirstNet, KDDI, KT, Telstra

Operating Environment

Humidity
5% to 95% non-condensing
Operating Altitude
Up to 10 000 ft (3048 m)
Storage Temperature
-40°F to 185°F (-40°C to 85°C)
Operating Temperature
-40°F to 167°F (-40°C to 75°C)

Carrier Certifications

Att
Yes
Ptcrb
Yes
Verizon
In Progress
T Mobile
Yes

Enterprise Traffic Mix

Ips Throughput
2.25 Gbps
Ngfw Throughput
1.25 Gbps
Threat Protection Throughput
1.1 Gbps

Interfaces And Modules

GPS
Passive GPS (combined with ANT1)
LAN Ports
4x GE RJ45 LAN
Processor
FortiSP5
SIM Slots
2 SIM slots (Active/Passive)
WAN Ports
2x GE RJ45 WAN
Console Port
1 RJ45
Wwan Antennas
4x external SMA WWAN antennas
Cellular Modem
5G, GPS
Serial Interface
1 RJ45
Digital I/O Module
Yes
Microsd Card Slot
Yes
USB Client Server
1 USB-A 2.0
Bypass GE Port Pair
PORT1-2 RJ45
Bluetooth Low Energy
—
GE LAN WAN Interfaces
6 RJ45
Dedicated GE SFP Slots
2
Trusted Platform Module
Yes

Public Safety Networks

Att Firstnet
FirstNet Capable (5G)
Verizon Frontline
In Progress
T Mobile T Priority
In Progress

System Performance And Capacity

Max Fortitokens
500
Firewall Policies
5000
Max Fortiswitches
24
Ssl Inspection Cps
715 (IPS, avg. HTTPS)
Ssl VPN Throughput
—
Concurrent Sessions Tcp
1.4 M
Firewall Throughput Pps
12 Mpps
Concurrent Ssl VPN Users
—
Max Fortiaps Total Tunnel
96 / 48
Ssl Inspection Throughput
1.4 Gbps (IPS, avg. HTTPS)
New Sessions Per Second Tcp
85 000
Firewall Latency 64 Byte Udp
5.82 μs
Ipsec VPN Throughput 512 Byte
7.1 Gbps
Virtual Domains Default Maximum
10 / 10
High Availability Configurations
Active-Active, Active-Active, Clustering
Ssl Inspection Concurrent Sessions
1.4 M (IPS, avg. HTTPS)
Client TO Gateway Ipsec VPN Tunnels
500
Gateway TO Gateway Ipsec VPN Tunnels
200
Application Control Throughput Http 64k
3.6 Gbps
Ipv4 Firewall Throughput 1518 512 64 Byte Udp
8/8/8 Gbps

Industry Compliance And Certifications

RF
EN 301 908-1 V15.2.1 (2023-01); EN 301 908-2 V13.1.1 (2020-06); EN 301 908-13 V13.2.1 (2022-02); Draft EN 301 908-25 V15.1.1; EN 300 328 V2.2.2 (2019-07); EN 303 413 V1.2.1 (2021-04); EN 18031-1:2024; EN IEC 62311:2020; EN 50665:2017; FCC Part 15 Subpart C 15.247; FCC 47 CFR Part 2.1091; ISED RSS-247 Issue 3; RSS-102 Issue 6
Emc
EN 55032:2015 + A1:2020, Class A; EN 55035:2017 + A11:2020; ETSI EN 301 489-1 V2.2.3 (2019-11); ETSI EN 301 489-17 V3.2.4 (2020-09); ETSI EN 301 489-19 V2.1.1 (2019-04); ETSI EN 301 489-52 V1.2.1 (2021-11)
Rohs
EN IEC 63000:2018; EN 50581:2012
Health And Safety
IEC 62368-1:2014, 2nd Ed.; EN 62368-1:2014; IEC 62368-1:2018, 3rd Ed.; EN IEC 62368-1:2020; IEC 61000-4-9 Severity 5 (In Progress)
Regulatory Compliance
FCC Part 15 Class A, RCM, VCCI Class A, CE, UL/cUL, CB; IEC 60812:2018 (In Progress); USGv6/IPv6
Rolling Stock Industry
EN 50155:2021; EN 50121-1:2017; EN 50121-3-2:2016 + A1:2019; EN 50121-4:2016 + A1:2019; EMC, Environmental, Shock and Vibration Certified
Electric Power Industry
IEC 61850-3 and IEEE 1613 Certified

Questions buyers ask

What is included in the FGR-60G-5G-BDL-809-60 bundle?

This bundle includes the FortiGate Rugged 60G-5G hardware and 60 months of FortiCare Premium and FortiGuard Enterprise Protection. Enterprise Protection covers IPS, anti-malware with FortiGate Cloud Sandbox, URL, DNS and video filtering, anti-spam, AI-based inline malware prevention, DLP and attack surface security. It also includes a one-time FortiConverter configuration conversion.

Which US carriers is the 5G modem certified on?

Fortinet lists PTCRB, AT&T and T-Mobile certification as complete, and Verizon certification as in progress. The unit is FirstNet Capable (5G). T-Mobile T-Priority and Verizon Frontline are listed as in progress.

How is the FortiGate Rugged 60G-5G powered?

It uses redundant dual DC inputs rated from 12V to 125V, with 2 pins per terminal block and support for negative or positive ground. DC cables are not included. Average power consumption is 20.75 W, and the maximum is 26 W.

Can it be installed outdoors?

The FGR-60G-5G is a ruggedized indoor appliance with an IP40 rating. It operates from -40°C to 75°C and mounts on a desktop, DIN rail or wall.

Does it support SSL VPN?

SSL VPN is not supported starting with FortiOS v7.6.0. Fortinet recommends FortiOS v7.2.x LTS to access that feature. IPsec VPN supports up to 200 gateway-to-gateway and 500 client-to-gateway tunnels.

Antennas & accessories for Fortinet

More 5G & LTE Routers