Cloud Care Networks
1 / 2
Fortinet5G & LTE Routers

Fortinet FortiGate Rugged 70F-3G4G 4G LTE Firewall with 1-Year FortiCare Premium and Enterprise Protection

4G LTEMPN FGR-70F-3G4G-BDL-809-12
  • Dual SIM
  • 5+ × 1 Gb Ethernet
  • GPS/GNSS
  • Rugged
  • 1 year included
$5,954.55$8,112.00Save $2,157.45

Backordered · ships as soon as it arrives

Included subscription · 1 year
1 year5 years+$8,435.62
Add a Cloud Care data plan

First month charged today · No contract · Cancel anytime

1
Request a quote · volume, multi-site or with plans
Compare all 3 configurations

Datasheets & documents

Overview

The FGR-70F-3G4G-BDL-809-12 bundles the Fortinet FortiGate Rugged 70F-3G4G industrial firewall with a 1-year (12-month) FortiCare Premium and FortiGuard Enterprise Protection subscription. The fanless, IP40, DIN-rail appliance pairs an embedded Sierra Wireless EM7565 3G/4G LTE modem with two active/passive SIMs, 6 GE RJ45 ports, 2 SFP slots and up to 8 Gbps firewall throughput, with IPS, anti-malware, web filtering, application control and premium support active from day one.

  • FortiGate Rugged 70F-3G4G hardware with 1-year FortiCare Premium and FortiGuard Enterprise Protection
  • Enterprise Protection includes IPS, anti-malware with FortiGate Cloud Sandbox, URL/DNS/video filtering, DLP, application control and inline CASB
  • Embedded Sierra Wireless EM7565 3G/4G LTE modem with 2 active/passive SIM slots and passive GPS
  • 6 GE RJ45 ports, GE bypass pair on PORT3-4, 2 GE SFP slots, RJ45 serial and console ports
  • Up to 8 Gbps firewall, 6.5 Gbps IPsec VPN and 580 Mbps threat protection throughput
  • Fanless IP40 DIN-rail design rated -40°C to 75°C with 12V to 125V DC redundant inputs
  • IEC 61850-3, IEEE 1613 and EN 50155 certified
  • One SKU covers the hardware and a full year of threat protection and premium support, simplifying procurement for OT sites

This bundle delivers the FortiGate Rugged 70F-3G4G hardware together with one year of FortiCare Premium and FortiGuard Enterprise Protection (bundle code 809, 12-month term). It is built for utilities, rail, manufacturing and other OT environments that need a hardened firewall with cellular WAN and a full security subscription in a single order.

The appliance is fanless, IP40 rated for indoor use and DIN-rail mounted, operating from -40°C to 75°C and certified to IEC 61850-3, IEEE 1613 and EN 50155. It provides 4 GE RJ45 LAN ports, 2 GE RJ45 WAN ports, a GE bypass pair on PORT3-4, 2 GE SFP slots, RJ45 serial and console ports, USB-A 2.0 and MicroSD. The embedded Sierra Wireless EM7565 modem covers 3G/4G LTE across 24 LTE bands with MIMO, diversity, two active/passive SIM slots and passive GPS, and is PTCRB and AT&T, T-Mobile and Verizon certified.

The Enterprise Protection subscription enables IPS with malicious and botnet URL blocking, anti-malware protection including FortiGate Cloud Sandbox and content disarm and reconstruct, URL, DNS and video filtering, anti-spam, AI-based inline malware prevention, data loss prevention, attack surface security with IoT device detection and virtual patching, application control, inline CASB and a one-time FortiConverter configuration conversion, alongside FortiCare Premium support.

On the FortiSoC4 processor the unit reaches up to 8 Gbps firewall, 6.5 Gbps IPsec VPN, 950 Mbps NGFW and 580 Mbps threat protection throughput. Power comes from redundant 12V to 125V DC inputs (DC cables not included). The FortiGate Rugged Series Data Sheet and 70F Series QuickStart Guide cover installation and specifications.

Ideal for

  • Deploying a fully licensed, LTE-connected firewall at remote utility substations and pump stations
  • Protecting rail and rolling stock networks with EN 50155 certified hardware and active threat services
  • Securing factory-floor OT and IoT devices with IPS, application control and virtual patching
  • Adding cellular failover and SD-WAN to industrial sites while consolidating security into one DIN-rail unit
  • Migrating an existing firewall configuration to FortiGate using the included one-time FortiConverter service

Specifications

General

MPN
FGR-70F-3G4G-BDL-809-12
Brand
Fortinet
Product Line
FortiGate Rugged Series
Product Name
FortiGate Rugged 70F-3G4G
Product Type
Ruggedized NGFW hardware plus services bundle
Hardware Model
FGR-70F-3G4G
Environment Class
Ruggedized, indoor

Subscription

Ips
IPS, Malicious/Botnet URLs
Term
1 year (12 months)
Anti Spam
Anti-Spam
Bundle Code
809
Bundle Name
FortiCare Premium and FortiGuard Enterprise Protection (EP)
Inline Casb
Inline CASB
Base Services
Device/OS Detection, GeoIPs, Trusted CA Certificates, Internet Services and Botnet IPs, DDNS (v4/v6), Local Protection, PSIRT Check, Anti-Phishing
Forticonverter
FortiConverter Service for One Time Configuration Conversion
Forticare Premium
FortiCare Premium
Application Control
Application Control
Data Loss Prevention
Data Loss Prevention (DLP)
Anti Malware Protection
AV, Botnet Domains, Mobile Malware, Virus Outbreak Protection, Content Disarm and Reconstruct, AI-based Heuristic AV, FortiGate Cloud Sandbox
Attack Surface Security
IoT Device Detection, IoT Vulnerability Correlation and Virtual Patching, Security Rating, Outbreak Check
Url Dns Video Filtering
URL, DNS and Video Filtering, Malicious Certificate
AI Inline Malware Prevention
AI-based Inline Malware Prevention

Cellular Wireless

MIMO
Yes
Wcdma
Not listed
Regions
All Regions
5G Bands
Not supported
Diversity
Yes
GNSS Bias
Yes
LTE Bands
B1, B2, B3, B4, B5, B7, B8, B9, B12, B13, B18, B19, B20, B26, B28, B29, B30, B32, B41, B42, B43, B46, B48, B66
Modem Model
Sierra Wireless EM7565 (2 SIM Slots, Active/Passive)
Gsm Gprs Edge
Not supported
Maximum TX Power
20 dBm
Umts Hspa Plus Bands
B1, B2, B3, B4, B5, B6, B8, B9, B29
Cdma 1xrtt Evdo Rev A
Not supported

Dimensions And Power

Weight
2.87 lbs (1.3 kg)
IP Rating
IP40
Form Factor
DIN-rail
Power Supply
12V to 125V DC redundant dual inputs, 2 pins per terminal block, negative or positive ground, DC cables not included
Maximum Current
12V DC / 1.67A
Heat Dissipation
68 BTU/h
Dimensions Hwl IN
4.4 x 3.2 x 4.8 in (H x W x L)
Dimensions Hwl MM
111 x 80.5 x 122 mm (H x W x L)
Antenna Height Width
205 mm x 25 mm
Power Consumption Avg Max
18.3 W / 19.9 W

Modem Certifications

Module Certifications
FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB

Operating Environment

Humidity
5% to 95% non-condensing
Operating Altitude
Up to 10,000 ft (3048 m)
Storage Temperature
-40°F to 185°F (-40°C to 85°C)
Operating Temperature
-40°F to 167°F (-40°C to 75°C)

Carrier Certifications

Att
AT&T certified
Ptcrb
PTCRB certified
Verizon
Verizon certified
T Mobile
T-Mobile certified

Interfaces And Modules

Processor
FortiSoC4
Console Port
1 RJ45
Cellular Modem
3G / 4G LTE, GPS
Serial Interface
1 RJ45
Digital I/O Module
Yes
Microsd Card Slot
Yes
USB Client Server
1 USB-A 2.0
Bypass GE Port Pair
PORT3-4 RJ45
Bluetooth Low Energy
Yes
GE LAN WAN Interfaces
6 RJ45
Dedicated GE SFP Slots
2
Trusted Platform Module
Yes

Ordering Configuration

GPS
Passive GPS with 1x external SMA GPS antenna included
USB Port
1x USB port
LAN Ports
4x GE RJ45 LAN ports
SFP Slots
2x SFP slots
SIM Slots
2x SIM slots (Active/Passive)
WAN Ports
2x GE RJ45 WAN ports
Wwan Module
1x embedded 3G/4G LTE wireless WAN module
Microsd Slot
1x MicroSD card slot
Power Inputs
Dual power inputs
Wwan Antennas
2x external SMA WWAN antennas included
Bypass Port Pair
1x GE RJ45 bypass port pair (between PORT3 and PORT4)
Serial Data Port
1x RJ45 serial port (data)
Serial Console Port
1x RJ45 serial port (console)

Public Safety Networks

Att Firstnet
Not listed
Verizon Frontline
Not listed
T Mobile T Priority
Not listed

System Performance And Capacity

Max Fortitokens
500
Firewall Policies
5,000
Max Fortiswitches
24
Ssl VPN Throughput
450 Mbps
Concurrent Sessions Tcp
1M
Firewall Throughput Pps
12 Mpps
Max Fortiaps Total Tunnel
64 / 32
New Sessions Per Second Tcp
35,000
Virtual Domains Default Max
10 / 10
Firewall Latency 64 Byte Udp
6.71 μs
Ipsec VPN Throughput 512 Byte
6.5 Gbps
High Availability Configurations
Active-Active, Active-Passive, Clustering
Ssl Inspection Cps Ips Avg Https
380
Client TO Gateway Ipsec VPN Tunnels
500
Gateway TO Gateway Ipsec VPN Tunnels
200
Application Control Throughput Http 64k
1.1 Gbps
Ssl Inspection Throughput Ips Avg Https
500 Mbps
Concurrent Ssl VPN Users Recommended Max
100
Ipv4 Firewall Throughput 1518 512 64 Byte Udp
8/8/8 Gbps
Ssl Inspection Concurrent Sessions Ips Avg Https
90,000

Enterprise Traffic Mix Performance

Ips Throughput
975 Mbps
Ngfw Throughput
950 Mbps
Threat Protection Throughput
580 Mbps

Industry Compliance And Certifications

RF
EN 301 908-1 V15.1.1 (2021-09); EN 301 908-2 V13.1.1 (2020-06); EN 301 908-13 V13.1.1 (2019-11); ETSI EN 300 328 V2.2.2 (2019-07); EN 303 413 V1.2.1 (2021-04); EN 18031-1:2024; EN IEC 62311:2020; EN 50665:2017; FCC Part 15 Subpart C 15.247; FCC 47 CFR Part 2.1091; ISED RSS-247 Issue 2; RSS-102 Issue 5
Emc
EN 55032:2015 + A11:2020, Class A; EN 55035:2017 + A11:2020; ETSI EN 301 489-1 V2.2.3 (2019-11); ETSI EN 301 489-17 V3.2.4 (2020-09); ETSI EN 301 489-19 V2.1.1 (2019-04); ETSI EN 301 489-52 V1.2.1 (2021-11)
Rohs
EN IEC 63000:2018; EN 50581:2012
Health And Safety
IEC 62368-1:2014, 2nd Ed.; EN 62368-1:2014 + A11:2017; IEC 62368-1: 2018, 3rd Ed.; EN IEC 62368-1:2020 + A11:2020
Regulatory Compliance
FCC Part 15 Class A, RCM, VCCI Class A, CE, UL/cUL, CB
Rolling Stock Industry
EN 50155:2021; EN 50121-1:2017; EN 50121-3-2:2016 + A1:2019; EN 50121-4:2016 + A1:2019; EMC, Environmental, Shock and Vibration Certified
Electric Power Industry
IEC 61850-3 and IEEE 1613 Certified

Questions buyers ask

What does the BDL-809-12 suffix mean?

It identifies the bundle: FortiGate Rugged 70F-3G4G hardware plus FortiCare Premium and FortiGuard Enterprise Protection (bundle code 809) for a 12-month, 1-year term.

Which security services are included?

IPS with malicious/botnet URL blocking, anti-malware protection with FortiGate Cloud Sandbox and content disarm and reconstruct, URL, DNS and video filtering, anti-spam, AI-based inline malware prevention, DLP, attack surface security, application control, inline CASB, a one-time FortiConverter conversion and FortiCare Premium.

Does it support 5G?

No. The embedded Sierra Wireless EM7565 modem supports 3G/4G LTE across 24 LTE bands plus UMTS/HSPA+, with two active/passive SIM slots. No 5G bands are listed.

Is it certified on US carriers?

Fortinet lists PTCRB certification and carrier certification for AT&T, T-Mobile and Verizon.

How is it installed and powered?

It mounts on DIN rail and runs from redundant dual DC inputs accepting 12V to 125V via terminal blocks; DC cables are not included. The FortiGate Rugged 70F Series QuickStart Guide covers installation.

Antennas & accessories for Fortinet

More 5G & LTE Routers