Compact desktop next-generation firewall with an integrated 3G/4G LTE modem, SoC4 acceleration, integrated SD-WAN, 5x GE RJ45 ports, and dual nano-SIM slots — wireless WAN backup or primary connectivity for small and remote sites.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 40F-3G4G desktop appliance with integrated 3G/4G LTE. License not included. | View productFG-40F-3G4G |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + bundle | View productFG-40F-3G4G-BDL-809-12 | View productFG-40F-3G4G-BDL-809-36 | View productFG-40F-3G4G-BDL-809-60 |
| Appliance + bundle | View productFG-40F-3G4G-BDL-950-12 | View productFG-40F-3G4G-BDL-950-36 | View productFG-40F-3G4G-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F40FG-809-02-12 | View productFC-10-F40FG-809-02-36 | View productFC-10-F40FG-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F40FG-950-02-12 | View productFC-10-F40FG-950-02-36 | View productFC-10-F40FG-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F40FG-928-02-12 | View productFC-10-F40FG-928-02-36 | View productFC-10-F40FG-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 40F-3G4G is a compact, fanless desktop next-generation firewall built on Fortinet's SoC4 secure SD-WAN ASIC, with an integrated 3G/4G LTE modem and two nano-SIM slots. It delivers 600 Mbps of threat protection, 5 Gbps firewall throughput, 700,000 concurrent sessions, and integrated SD-WAN over wired and cellular links. The built-in LTE modem provides wireless WAN as a primary uplink for sites with no wired broadband, or as automatic failover for branch and retail locations that cannot afford downtime — with no external dongle to manage. For an integrated Wi-Fi access point alongside LTE, choose the FortiWiFi 40F-3G4G.

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 5 / 5 / 5 Gbps |
| Firewall latency (64 byte, UDP) | 2.97 µs |
| Firewall throughput (packets/sec) | 7.5 Mpps |
| Concurrent sessions (TCP) | 700,000 |
| New sessions/second (TCP) | 35,000 |
| Firewall policies | 2,000 |
| IPS throughput | 1 Gbps |
| NGFW throughput | 800 Mbps |
| Threat protection throughput | 600 Mbps |
| IPsec VPN throughput (512 byte) | 4.4 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 200 |
| Client-to-gateway IPsec VPN tunnels | 250 |
| SSL-VPN throughput | 490 Mbps |
| SSL inspection throughput (IPS, avg. HTTPS) | 310 Mbps |
| SSL inspection concurrent sessions | 55,000 |
| Application control throughput (HTTP 64K) | 990 Mbps |
| CAPWAP throughput (HTTP 64K) | 3.5 Gbps |
| Virtual domains (default / max) | 10 / 10 |
| Managed FortiAPs (total / tunnel) | 16 / 8 |
| Managed FortiSwitches | 8 |
| Maximum FortiTokens | 500 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | SoC4 (SP SD-WAN ASIC) |
| Cellular modem | Integrated 3G/4G LTE (LTE Cat-12) |
| SIM slots | 2x Nano-SIM (active / passive) |
| Cellular antenna ports | 3x SMA |
| Wireless (Wi-Fi) | Not included (see FortiWiFi 40F-3G4G) |
| Interfaces | 1x GE RJ45 WAN, 3x GE RJ45 internal, 1x GE RJ45 FortiLink, 1x USB, 1x RJ45 console |
| Onboard storage | None |
| Power supply | External DC power adapter (100–240V AC input, 50/60 Hz) |
| Power consumption (avg / max) | 15.8 W / 18.6 W |
| Heat dissipation | 63.5 BTU/h |
| Form factor | Desktop (wall-mount optional), fanless |
| Dimensions (H x W x L) | 1.6 x 8.5 x 6.3 in (40.5 x 216 x 160 mm) |
| Weight | 2.2 lbs (1 kg) |
| Operating temperature | 32–104°F (0–40°C) |
Source: official Fortinet FortiGate / FortiWiFi 40F Series datasheet (FortiGate 40F-3G4G column) + Fortinet Product Matrix (May 2026).
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
All four 40F-series models share the same SoC4 platform and firewall performance. The 3G4G models add an integrated 3G/4G LTE modem; the FortiWiFi models add an integrated Wi-Fi access point.
The 40F-3G4G is the entry point of the G/F-series desktop line with built-in LTE. Step up to the 60F or 80F for higher throughput, more ports, and larger session capacity. Same FortiOS and FortiGuard services across the range.
Every available SKU for the FG-40F-3G4G: hardware, protection bundles, subscriptions, services, cloud, support and RMA. In stock, brand new, shipped from Canada; licensing delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 40F-3G4G desktop appliance with integrated 3G/4G LTE. License not included. | View productFG-40F-3G4G |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + bundle | View productFG-40F-3G4G-BDL-809-12 | View productFG-40F-3G4G-BDL-809-36 | View productFG-40F-3G4G-BDL-809-60 |
| Appliance + bundle | View productFG-40F-3G4G-BDL-950-12 | View productFG-40F-3G4G-BDL-950-36 | View productFG-40F-3G4G-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-F40FG-809-02-12 | View productFC-10-F40FG-809-02-36 | View productFC-10-F40FG-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-F40FG-950-02-12 | View productFC-10-F40FG-950-02-36 | View productFC-10-F40FG-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-F40FG-928-02-12 | View productFC-10-F40FG-928-02-36 | View productFC-10-F40FG-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-F40FG-189-02-12 | — | — |
| FortiCare Essential Business-hours support, firmware updates & next-business-day hardware replacement | View productFC-10-F40FG-314-02-12 | View productFC-10-F40FG-314-02-36 | View productFC-10-F40FG-314-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-F40FG-247-02-12 | View productFC-10-F40FG-247-02-36 | View productFC-10-F40FG-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-F40FG-284-02-12 | View productFC-10-F40FG-284-02-36 | View productFC-10-F40FG-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-F40FG-204-02-12 | View productFC-10-F40FG-204-02-36 | View productFC-10-F40FG-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-F40FG-100-02-12 | View productFC-10-F40FG-100-02-36 | View productFC-10-F40FG-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-F40FG-577-02-12 | View productFC-10-F40FG-577-02-36 | View productFC-10-F40FG-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-F40FG-108-02-12 | View productFC-10-F40FG-108-02-36 | View productFC-10-F40FG-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-F40FG-112-02-12 | View productFC-10-F40FG-112-02-36 | View productFC-10-F40FG-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-F40FG-159-02-12 | View productFC-10-F40FG-159-02-36 | View productFC-10-F40FG-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-F40FG-589-02-12 | View productFC-10-F40FG-589-02-36 | View productFC-10-F40FG-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-F40FG-1337-02-12 | View productFC-10-F40FG-1337-02-36 | View productFC-10-F40FG-1337-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-F40FG-1387-02-12 | View productFC-10-F40FG-1387-02-36 | View productFC-10-F40FG-1387-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-F40FG-131-02-12 | View productFC-10-F40FG-131-02-36 | View productFC-10-F40FG-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-F40FG-585-02-12 | View productFC-10-F40FG-585-02-36 | View productFC-10-F40FG-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-F40FG-464-02-12 | View productFC-10-F40FG-464-02-36 | View productFC-10-F40FG-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-F40FG-660-02-12 | View productFC-10-F40FG-660-02-36 | View productFC-10-F40FG-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-F40FG-210-02-12 | View productFC-10-F40FG-210-02-36 | View productFC-10-F40FG-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-F40FG-211-02-12 | View productFC-10-F40FG-211-02-36 | View productFC-10-F40FG-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-F40FG-212-02-12 | View productFC-10-F40FG-212-02-36 | View productFC-10-F40FG-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-F40FG-301-02-12 | View productFC-10-F40FG-301-02-36 | View productFC-10-F40FG-301-02-60 |
Mount the 40F-3G4G on a desk, in a rack tray, or on a DIN rail.
The FortiGate 40F-3G4G is a current-generation 40F-series model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
Firewall performance is identical — both run on the same SoC4 platform. The 40F-3G4G adds an integrated 3G/4G LTE modem with two nano-SIM slots and three SMA cellular antennas, for wireless WAN as a primary uplink or automatic failover. The base 40F is wired-only.
No. The FortiGate 40F-3G4G is wired plus cellular only. For an integrated Wi-Fi access point alongside the LTE modem, choose the FortiWiFi 40F-3G4G.
Yes. The integrated LTE modem works as a primary internet uplink for sites with no wired broadband, and as automatic SD-WAN failover when a wired link goes down. Dual nano-SIM slots (active / passive) support carrier redundancy.
Most small sites choose UTP for web, DNS, and video filtering on top of IPS and anti-malware. ATP covers core threat protection only. Enterprise adds DLP, AI-based inline malware prevention, and the full SASE service set.