Cloud Care Networks
Fortinet5G & LTE Routers

Fortinet FortiGate Rugged 70G-5G Industrial 5G Firewall with 1-Year FortiCare Premium and Enterprise Protection

5GMPN FGR-70G-5G-BDL-809-12
  • Dual SIM
  • 5+ × 1 Gb Ethernet
  • GPS/GNSS
  • Rugged
  • 1 year included
$7,933.16$10,807.50Save $2,874.34

Backordered · ships as soon as it arrives

Included subscription · 1 year
Hardware only−$2,769.541 year3 years+$4,708.235 years+$9,001.02
Add a Cloud Care data plan

First month charged today · No contract · Cancel anytime

1
Request a quote · volume, multi-site or with plans
Compare all 7 configurations

Datasheets & documents

Overview

The Fortinet FortiGate Rugged 70G-5G (FGR-70G-5G-BDL-809-12) is a fanless, DIN-rail next-generation firewall for industrial networks and OT sites. It has an embedded 5G modem with two SIM slots (Active/Passive), passive GPS and six GE RJ45 ports. It is rated from -40°C to 75°C and runs on redundant 12V to 125V DC inputs. This bundle includes the hardware plus a 1-year (12-month) term of FortiCare Premium and FortiGuard Enterprise Protection.

  • Fanless, ruggedized DIN-rail appliance, IP40, rated -40°C to 75°C operating
  • Embedded Telit Cinterion FN990A28-HP 5G modem with 2 SIM slots (Active/Passive), 4 external SMA WWAN antennas and passive GPS
  • 6 GE RJ45 ports (4 LAN, 2 WAN), GE bypass pair on PORT1-2, 2 GE SFP slots, RJ45 serial and console ports
  • FortiSP5 secure processor: 8 Gbps firewall, 7.1 Gbps IPsec VPN, 2.5 Gbps IPS, 1.3 Gbps threat protection
  • Built-in secure SD-WAN with FortiOS and consolidated FortiGuard AI-powered security services
  • Redundant 12V to 125V DC dual inputs, 16 W average power consumption
  • Includes 1-year (12-month) FortiCare Premium and FortiGuard Enterprise Protection subscription
  • Deploy security at substations, rail, maritime and factory sites with IEC 61850-3, IEEE 1613, EN 50155 and DNV Type Approval certifications

The FortiGate Rugged 70G-5G is a fanless next-generation firewall built for the harsh conditions found in industrial networks and operational technology (OT) environments. It combines firewall, VPN, secure SD-WAN and FortiGuard AI-powered security services in one DIN-rail appliance. This SKU, FGR-70G-5G-BDL-809-12, pairs the hardware with a 12-month term of FortiCare Premium and FortiGuard Enterprise Protection.

The unit has four GE RJ45 LAN ports and two GE RJ45 WAN ports. A GE bypass port pair links PORT1 and PORT2. It also has two SFP slots, RJ45 serial (data) and console ports, one USB-A 2.0 port, a MicroSD slot, a digital I/O module, Bluetooth Low Energy and a TPM. WAN backup and primary cellular links come from an embedded Telit Cinterion FN990A28-HP 5G modem with two SIM slots (Active/Passive). The modem uses four external SMA WWAN antennas and adds passive GPS with its own SMA antenna. It is carrier-certified for AT&T, T-Mobile and Verizon, is PTCRB certified, and is FirstNet Capable (5G).

Fortinet's FortiSP5 secure processor delivers up to 8 Gbps IPv4 firewall throughput and 7.1 Gbps IPsec VPN. It rates 2.5 Gbps IPS, 1.5 Gbps NGFW and 1.3 Gbps threat protection, with up to 1.4 million concurrent sessions. The Enterprise Protection bundle adds: • IPS • Anti-malware with FortiGate Cloud Sandbox • URL, DNS and video filtering • Application control • Inline CASB • Data loss prevention • IoT device detection and virtual patching

The enclosure is IP40 rated for indoor use. It operates from -40°C to 75°C and up to 3048 m altitude, and draws 16 W on average. Certifications include IEC 61850-3 and IEEE 1613 for the electric power industry, EN 50155 for rolling stock, and IEC 60945 with DNV Type Approval for maritime use. A data sheet and QuickStart Guide are available for deployment planning.

Ideal for

  • Electric utility substations needing IEC 61850-3 / IEEE 1613 certified firewalling with 5G backhaul
  • Rail and rolling-stock networks requiring EN 50155 certified security appliances
  • Maritime and vessel networks with DNV Type Approval requirements
  • Factory floor and OT segmentation in DIN-rail control cabinets
  • Remote industrial sites using 5G as primary or failover WAN with secure SD-WAN

Specifications

General

MPN
FGR-70G-5G-BDL-809-12
UPC
195875598148
Brand
Fortinet
Model
FGR-70G-5G
Device Type
Rugged next-generation firewall with 5G WAN
Product Name
FortiGate Rugged 70G-5G

Overview

Atp
1.3 Gbps
Ips
2.5 Gbps
Ngfw
1.5 Gbps

Subscription

Ips
IPS, Malicious/Botnet URLs
Term
12 months (1 year)
Bundle
FortiCare Premium + FortiGuard Enterprise Protection (EP)
Anti Spam
Anti-Spam
Bundle Code
Bundle code 809
Inline Casb
Inline CASB
Base Services
Device/OS Detection, GeoIPs, Trusted CA Certificates, Internet Services and Botnet IPs, DDNS (v4/v6), Local Protection, PSIRT Check, Anti-Phishing
Forticonverter
FortiConverter Service for One Time Configuration Conversion
Forticare Premium
FortiCare Premium
Application Control
Application Control
Data Loss Prevention
Data Loss Prevention (DLP)
Anti Malware Protection
AV, Botnet Domains, Mobile Malware, Virus Outbreak Protection, CDR, AI-based Heuristic AV, FortiGate Cloud Sandbox
Attack Surface Security
IoT Device Detection, IoT Vulnerability Correlation and Virtual Patching, Security Rating, Outbreak Check
Url Dns Video Filtering
URL, DNS and Video Filtering, Malicious Certificate
AI Inline Malware Prevention
AI-based Inline Malware Prevention

Cellular Wireless

MIMO
Yes
Wcdma
B1, B2, B4, B5 (B6, B19), B8 (for EU and APAC regions only)
Regions
All Regions
5G Bands
n1, n2, n3, n5, n7, n8, n12, n13, n14, n18, n20, n25, n26, n28, n29 (SDL), n30, n38, n40, n41, n48, n66, n71, n75 (SDL), n76 (SDL), n77, n78, n79 (PC1.5 support on n41, n77, n78, n79)
Diversity
Yes
GNSS Bias
Yes
LTE Bands
B1, B2, B3, B4, B5, B7, B8, B12, B13, B14, B17, B18, B19, B20, B25, B26, B28, B29 (SDL), B30, B32 (SDL), B34, B38, B39, B40, B41, B42, B43, B46, B48, B66, B71
SIM Slots
2x SIM slots (Active/Passive)
Modem Model
Telit Cinterion FN990A28-HP (2 SIM Slots, Active/Passive)
Gsm Gprs Edge
—
Umts Hspa Plus
B1, B2, B4, B5, B6, B8, B19
Maximum TX Power
23 dBm (Power Class 3), 26 dBm (Power Class 2 in B41/n41)
Cdma 1xrtt Evdo Rev A
—

Dimensions And Power

Weight
3.97 lbs (1.8 kg)
IP Rating
IP40
Form Factor
DIN-rail
Antenna Size
205 mm x 25 mm (H x W)
Power Supply
12V to 125V DC redundant dual inputs, 2 pins per terminal block, negative or positive ground, DC cables not included
Dimensions IN
5.47 x 3.52 x 4.8 in (H x W x L)
Dimensions MM
139 x 89.5 x 122 mm (H x W x L)
Maximum Current
12V DC / 2A
Heat Dissipation
82 BTU/h
Power Consumption
16 W average / 24 W maximum

Modem Certifications

Module Certifications
FCC, IC, RED, NCC, JATE/TELEC, KC, NCC+, RCM, GCF, PTCRB, AT&T, FirstNet, KDDI, KT, Telstra, T-Mobile US, Frontline

Operating Environment

Humidity
5% to 95% non-condensing
Operating Altitude
Up to 10 000 ft (3048 m)
Storage Temperature
-40°F to 185°F (-40°C to 85°C)
Operating Temperature
-40°F to 167°F (-40°C to 75°C)

Carrier Certifications

Att
Yes
Ptcrb
Yes
Verizon
Yes
T Mobile
Yes

Interfaces And Modules

Processor
FortiSP5
GPS Antenna
Passive GPS, 1x external SMA GPS antenna
Console Port
1x RJ45
Wwan Antennas
4x external SMA WWAN antennas
Cellular Modem
5G, GPS
Serial Interface
1x RJ45
Digital I/O Module
Yes
Microsd Card Slot
Yes
USB Client Server
1x USB-A 2.0
Bypass GE Port Pair
PORT1-2 RJ45
Bluetooth Low Energy
Yes
GE LAN WAN Interfaces
6x GE RJ45 (4 LAN, 2 WAN)
Transceivers Included
—
Dedicated GE SFP Slots
2
Trusted Platform Module
Yes

Public Safety Networks

Att Firstnet
FirstNet Capable (5G)
Verizon Frontline
In Progress
T Mobile T Priority
In Progress

System Performance And Capacity

Max Fortiaps
96 / 48 (Total/Tunnel)
Max Fortitokens
500
Virtual Domains
10 / 10 (Default/Maximum)
Firewall Latency
5.82 μs (64 byte, UDP)
Firewall Policies
5000
Max Fortiswitches
24
Ssl Inspection Cps
715 (IPS, avg. HTTPS)
Ssl VPN Throughput
—
Ipsec VPN Throughput
7.1 Gbps (512 byte)
Concurrent Sessions Tcp
1.4 M
Firewall Throughput Pps
12 Mpps
Concurrent Ssl VPN Users
—
Ipv4 Firewall Throughput
8/8/8 Gbps (1518/512/64 byte UDP)
Ssl Inspection Throughput
1.4 Gbps (IPS, avg. HTTPS)
New Sessions Per Second Tcp
85 000
Application Control Throughput
3.6 Gbps (HTTP 64K)
Client TO Gateway Ipsec Tunnels
500
Gateway TO Gateway Ipsec Tunnels
200
High Availability Configurations
Active-Active, Active-Active, Clustering
Ssl Inspection Concurrent Sessions
1.4 M (IPS, avg. HTTPS)

Industry Compliance And Certifications

RF
EN 301 908-1 V15.2.1 (2023-01); EN 301 908-2 V13.1.1 (2020-06); EN 301 908-13 V13.2.1 (2022-02); Draft EN 301 908-25 V15.1.1; EN 300 328 V2.2.2 (2019-07); EN 303 413 V1.2.1 (2021-04); EN 18031-1:2024; EN IEC 62311:2020; EN 50665:2017; FCC Part 15 Subpart C 15.247; FCC 47 CFR Part 2.1091; ISED RSS-247 Issue 3; RSS-102 Issue 6
Emc
EN 55032:2015 + A1:2020, Class A; EN 55035:2017 + A11:2020; ETSI EN 301 489-1 V2.2.3 (2019-11); ETSI EN 301 489-17 V3.2.4 (2020-09); ETSI EN 301 489-19 V2.1.1 (2019-04); ETSI EN 301 489-52 V1.2.1 (2021-11)
Rohs
EN IEC 63000:2018, EN 50581:2012
Health And Safety
IEC 62368-1:2014, 2nd Ed.; EN 62368-1:2014; IEC 62368-1:2018, 3rd Ed.; EN IEC 62368-1:2020
Maritime Industry
IEC 60945, 4th Edition (2002); IACS UR E10, Edition 10; DNV Type Approval
Regulatory Compliance
FCC Part 15 Class A, RCM, VCCI Class A, CE, UL/cUL, CB, USGv6/IPv6
Rolling Stock Industry
EN 50155:2021; EN 50121-1:2017; EN 50121-3-2:2016 + A1:2019; EN 50121-4:2016 + A1:2019; EMC, Environmental, Shock and Vibration Certified
Electric Power Industry
IEC 61850-3 and IEEE 1613 Certified

System Performance Enterprise Traffic Mix

Ips Throughput
2.5 Gbps
Ngfw Throughput
1.5 Gbps
Threat Protection Throughput
1.3 Gbps

Questions buyers ask

What does the FGR-70G-5G-BDL-809-12 bundle include?

It includes the FortiGate Rugged 70G-5G hardware plus a 12-month term of FortiCare Premium and FortiGuard Enterprise Protection. The Enterprise Protection services cover IPS, anti-malware with FortiGate Cloud Sandbox, URL/DNS/video filtering, anti-spam, AI-based inline malware prevention, DLP, attack surface security, application control and Inline CASB.

Which US carriers is the 5G modem certified for?

The embedded Telit Cinterion FN990A28-HP modem lists carrier certification for AT&T, T-Mobile and Verizon, plus PTCRB. The unit is FirstNet Capable (5G). T-Mobile T-Priority and Verizon Frontline certification are listed as in progress.

How is the unit powered and mounted?

It mounts on a DIN rail. It accepts 12V to 125V DC through redundant dual inputs, using 2-pin terminal blocks with negative or positive ground. DC cables are not included. Average power consumption is 16 W, with a maximum of 24 W.

Can it be installed outdoors or in extreme temperatures?

The enclosure is rated IP40 for indoor installation. It operates from -40°C to 75°C (-40°F to 167°F) at 5% to 95% non-condensing humidity, and up to 3048 m altitude. Its fanless design suits sealed industrial cabinets.

Does it support SSL VPN?

Fortinet notes that the SSL VPN feature is not supported starting with FortiOS v7.6.0. It recommends the FortiOS v7.2.x LTS release to access SSL VPN on affected models. IPsec VPN is supported at up to 7.1 Gbps, with 200 gateway-to-gateway and 500 client-to-gateway tunnels.

Antennas & accessories for Fortinet

More 5G & LTE Routers