Cloud Care Networks
1 / 3
Fortinet5G & LTE Routers

Fortinet FortiGate Rugged 70F-3G4G 4G LTE Industrial Firewall with 5-Year Enterprise Protection Bundle

4G LTEMPN FGR-70F-3G4G-BDL-809-60
  • Dual SIM
  • 5+ × 1 Gb Ethernet
  • GPS/GNSS
  • Rugged
  • 5 years included
$14,390.17$19,604.00Save $5,213.83

Backordered · ships as soon as it arrives

Included subscription · 5 years
Add a Cloud Care data plan

First month charged today · No contract · Cancel anytime

Compare all 3 configurations

Overview

The Fortinet FortiGate Rugged 70F-3G4G is a fanless, DIN-rail next-generation firewall with an embedded 3G/4G LTE modem for industrial and OT networks. This bundle (FGR-70F-3G4G-BDL-809-60) pairs the hardware with a 5-year (60-month) term of FortiCare Premium and FortiGuard Enterprise Protection. It is rated up to 8 Gbps firewall, 6.5 Gbps IPsec VPN and 950 Mbps NGFW throughput. It operates from -40°C to 75°C on redundant 12V to 125V DC inputs.

  • Fanless, ruggedized IP40 DIN-rail appliance rated for -40°C to 75°C operation
  • Embedded 3G/4G LTE module (Sierra Wireless EM7565) with 2 Active/Passive SIM slots, MIMO and passive GPS
  • 6 GE RJ45 ports, a PORT3-4 bypass pair and 2 dedicated GE SFP slots
  • FortiSoC4 processor running FortiOS with built-in Secure SD-WAN
  • Up to 8 Gbps firewall, 6.5 Gbps IPsec VPN and 950 Mbps NGFW throughput
  • 5-year FortiCare Premium and FortiGuard Enterprise Protection subscription included
  • IEC 61850-3, IEEE 1613 and EN 50155 certified, with redundant 12V to 125V DC inputs
  • Protect OT and industrial networks with firewall, IPS, anti-malware, application control and DLP in one appliance

The FortiGate Rugged 70F-3G4G is Fortinet's compact rugged next-generation firewall for substations, rail, industrial sites and remote OT cabinets where an office firewall would not hold up. The fanless IP40 chassis mounts on a DIN rail and runs from -40°C to 75°C. It is certified to IEC 61850-3 and IEEE 1613 for the electric power industry and to EN 50155 for rolling stock. Redundant 12V to 125V DC inputs accept negative or positive ground.

For wired connections, the appliance has six GE RJ45 ports (four LAN, two WAN), a PORT3-PORT4 bypass pair and two dedicated GE SFP slots for copper and fibre uplinks. For cellular WAN or backup, an embedded Sierra Wireless EM7565 LTE module covers 24 LTE bands with MIMO and diversity. It has two Active/Passive SIM slots and is PTCRB certified, with AT&T, T-Mobile and Verizon carrier approval. The rest of the hardware includes: - Passive GPS - RJ45 serial and console ports - USB-A 2.0 and MicroSD - Bluetooth Low Energy - A Trusted Platform Module - A digital I/O module

The firewall runs FortiOS on Fortinet's FortiSoC4 processor with built-in Secure SD-WAN. It is rated up to 8 Gbps firewall, 6.5 Gbps IPsec VPN, 975 Mbps IPS, 950 Mbps NGFW and 580 Mbps threat protection throughput, with 1M concurrent sessions.

The 60-month Enterprise Protection bundle adds these services: - FortiGuard IPS - Anti-malware with FortiGate Cloud Sandbox - URL, DNS and video filtering - Anti-spam - AI-based inline malware prevention - Data loss prevention - Attack surface security for IoT - Application control and inline CASB - A one-time FortiConverter configuration conversion - FortiCare Premium support

Ideal for

  • Securing electric utility substations and IEC 61850 environments
  • Protecting OT networks in manufacturing plants and industrial control cabinets
  • LTE-connected security gateway for rail and rolling stock deployments
  • Remote site and field cabinet firewall with cellular WAN or failover
  • Secure SD-WAN edge for distributed industrial sites

Specifications

General

MPN
FGR-70F-3G4G-BDL-809-60
Brand
Fortinet
Model
FortiGate Rugged 70F-3G4G (FGR-70F-3G4G)
Product Type
Rugged next-generation firewall with 3G/4G LTE
Documentation
Data sheet and QuickStart Guide

Package

DC Cables
DC cables not included
GPS Antenna
1x external SMA GPS antenna
Wwan Antennas
2x external SMA WWAN antennas
Shipping Weight
7.00 lbs

Dimensions Power

Weight
2.87 lbs (1.3 kg)
IP Rating
IP40 (indoor)
Form Factor
DIN-rail
Power Supply
12V-125V DC redundant dual inputs, terminal block, negative or positive ground (DC cables not included)
Dimensions IN
4.4 x 3.2 x 4.8 in (H x W x L)
Dimensions MM
111 x 80.5 x 122 mm (H x W x L)
Maximum Current
12V DC / 1.67A
Heat Dissipation
68 BTU/h
Power Consumption
18.3 W average / 19.9 W maximum
Antenna Dimensions
205 mm x 25 mm (H x W)

Cellular Wireless

MIMO
Yes
Wcdma
Not supported
Regions
All Regions
5G Bands
Not supported
Diversity
Yes
GNSS Bias
Yes
LTE Bands
B1, B2, B3, B4, B5, B7, B8, B9, B12, B13, B18, B19, B20, B26, B28, B29, B30, B32, B41, B42, B43, B46, B48, B66
Modem Model
Sierra Wireless EM7565, 2 SIM slots (Active/Passive)
Gsm Gprs Edge
Not supported
Umts Hspa Plus
B1, B2, B3, B4, B5, B6, B8, B9, B29
Cdma 1xrtt Evdo
Not supported
Maximum TX Power
20 dBm

Performance Notes

General
Up-to values; vary with configuration; provisional
Logging
Measured with logging enabled
Ipsec Test
IPsec VPN tested with AES256-SHA256
Ssl Inspection
Average of HTTPS sessions across cipher suites
Ssl VPN Support
SSL VPN requires FortiOS v7.2.x LTS (not supported from v7.6.0)
Ngfw Measurement
Firewall, IPS and Application Control enabled
Threat Protection Measurement
Firewall, IPS, Application Control and Malware Protection enabled

Interfaces Modules

Processor
FortiSoC4
Console Port
1x RJ45
Cellular Modem
3G / 4G LTE, GPS
Serial Interface
1x RJ45
Digital I/O Module
Yes
Microsd Card Slot
Yes
USB Client Server
1x USB-A 2.0
Bypass GE Port Pair
PORT3-4 RJ45
Bluetooth Low Energy
Yes
GE LAN WAN Interfaces
6x GE RJ45 (4 LAN, 2 WAN)
Dedicated GE SFP Slots
2
Trusted Platform Module
Yes

Industry Compliance

RF
EN 301 908-1/-2/-13, EN 300 328, EN 303 413, EN 18031-1, EN IEC 62311, EN 50665, FCC 15.247, FCC 2.1091, RSS-247 Issue 2, RSS-102 Issue 5
Emc
EN 55032 Class A, EN 55035, ETSI EN 301 489-1/-17/-19/-52
Rohs
EN IEC 63000:2018; EN 50581:2012
Health And Safety
IEC/EN 62368-1 (2nd and 3rd Ed.)
Regulatory Compliance
FCC Part 15 Class A, RCM, VCCI Class A, CE, UL/cUL, CB
Rolling Stock Industry
EN 50155:2021, EN 50121-1/-3-2/-4; EMC, environmental, shock and vibration certified
Electric Power Industry
IEC 61850-3 and IEEE 1613 Certified

Subscription Bundle

Ips
IPS, Malicious/Botnet URLs
Term
5 years (60 months)
Anti Spam
Anti-Spam
Forticare
FortiCare Premium
Bundle Code
809
Bundle Name
FortiCare Premium + FortiGuard Enterprise Protection
Inline Casb
Inline CASB
Base Services
Device/OS Detection, GeoIPs, Trusted CA Certificates, Internet Services and Botnet IPs, DDNS (v4/v6), Local Protection, PSIRT Check, Anti-Phishing
Forticonverter
FortiConverter Service for One Time Configuration Conversion
Application Control
Application Control
Data Loss Prevention
Data Loss Prevention (DLP)
Anti Malware Protection
AV, Botnet Domains, Mobile Malware, Virus Outbreak Protection, CDR, AI-based Heuristic AV, FortiGate Cloud Sandbox
Attack Surface Security
IoT Device Detection, IoT Vulnerability Correlation and Virtual Patching, Security Rating, Outbreak Check
Url Dns Video Filtering
URL, DNS and Video Filtering, Malicious Certificate
AI Inline Malware Prevention
AI-based Inline Malware Prevention

Modem Certifications

Module Certifications
FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB

Operating Environment

Humidity
5% to 95% non-condensing
Operating Altitude
Up to 10,000 ft (3048 m)
Storage Temperature
-40°F to 185°F (-40°C to 85°C)
Operating Temperature
-40°F to 167°F (-40°C to 75°C)

Carrier Certifications

Att
Yes
Ptcrb
Yes
Verizon
Yes
T Mobile
Yes

Enterprise Traffic Mix

Ips Throughput
975 Mbps
Ngfw Throughput
950 Mbps
Threat Protection Throughput
580 Mbps

Public Safety Networks

Att Firstnet
Not listed
Verizon Frontline
Not listed
T Mobile T Priority
Not listed

System Performance Capacity

Max Fortiaps
64 / 32 (total/tunnel)
Max Fortitokens
500
Virtual Domains
10 / 10 (default/maximum)
Firewall Latency
6.71 μs (64 byte, UDP)
Firewall Policies
5,000
High Availability
Active-Active, Active-Passive, Clustering
Max Fortiswitches
24
Ssl Inspection Cps
380 (IPS, avg. HTTPS)
Ssl VPN Throughput
450 Mbps
Ipsec VPN Throughput
6.5 Gbps (512 byte)
Concurrent Sessions Tcp
1M
Firewall Throughput Pps
12 Mpps
Concurrent Ssl VPN Users
100 (recommended maximum)
Ipv4 Firewall Throughput
8/8/8 Gbps (1518/512/64 byte UDP)
Ssl Inspection Throughput
500 Mbps (IPS, avg. HTTPS)
New Sessions Per Second Tcp
35,000
Application Control Throughput
1.1 Gbps (HTTP 64K)
Client TO Gateway Ipsec Tunnels
500
Gateway TO Gateway Ipsec Tunnels
200
Ssl Inspection Concurrent Sessions
90,000 (IPS, avg. HTTPS)

Questions buyers ask

Does the FortiGate Rugged 70F-3G4G support 5G?

No. It has an embedded 3G/4G LTE module (Sierra Wireless EM7565) with 24 LTE bands and no 5G bands.

What does the 5-year Enterprise Protection bundle include?

It covers 60 months of FortiCare Premium and FortiGuard Enterprise Protection. The FortiGuard services are IPS, anti-malware with FortiGate Cloud Sandbox, URL/DNS/video filtering, anti-spam, AI-based inline malware prevention, DLP, attack surface security, application control and inline CASB. A one-time FortiConverter configuration conversion is also included.

Which carriers is the cellular modem approved for?

The modem is PTCRB certified and carries AT&T, T-Mobile and Verizon carrier approvals. It has two SIM slots that work in Active/Passive mode.

What power does it need, and are cables included?

It takes 12V to 125V DC through redundant dual terminal-block inputs, with negative or positive ground. DC cables are not included.

Is SSL VPN supported?

The hardware is rated for 450 Mbps SSL-VPN throughput and 100 users. However, SSL VPN is not supported starting with FortiOS v7.6.0, and Fortinet recommends FortiOS v7.2.x LTS to use it.

Antennas & accessories for Fortinet