Compact, fanless desktop next-generation firewall with SoC4 acceleration, integrated SD-WAN, and 5x GE RJ45 ports — full NGFW protection for small offices, branch, and retail sites at the entry of the FortiGate G/F desktop line.


The configurations most customers buy: the appliance on its own, bundled with FortiGuard protection, or the protection subscription to renew. The complete catalog is further down.
| Configuration | Price & action |
|---|---|
| FortiGate 40F desktop appliance. License not included. | View productFG-40F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-40F-BDL-809-12 | View productFG-40F-BDL-809-36 | View productFG-40F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-40F-BDL-950-12 | View productFG-40F-BDL-950-36 | View productFG-40F-BDL-950-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-0040F-809-02-12 | View productFC-10-0040F-809-02-36 | View productFC-10-0040F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-0040F-950-02-12 | View productFC-10-0040F-950-02-36 | View productFC-10-0040F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-0040F-928-02-12 | View productFC-10-0040F-928-02-36 | View productFC-10-0040F-928-02-60 |
| What's included | ATP | UTP | Enterprise |
|---|---|---|---|
| FortiGuard IPS | ✓ | ✓ | ✓ |
| Advanced malware protection / sandbox | ✓ | ✓ | ✓ |
| Application control | ✓ | ✓ | ✓ |
| Web, URL & DNS filtering | — | ✓ | ✓ |
| Antispam & outbreak protection | — | ✓ | ✓ |
| Data Loss Prevention (DLP) | — | — | ✓ |
| AI inline malware & attack-surface | — | — | ✓ |
| FortiCare Premium support | ✓ | ✓ | ✓ |
UTP includes everything in ATP plus web/DNS filtering and antispam; Enterprise includes everything in UTP plus DLP and AI-based inline protection. All bundles include FortiCare Premium support.
The FortiGate 40F is a compact, fanless desktop next-generation firewall built on Fortinet's SoC4 secure SD-WAN ASIC. It delivers 600 Mbps of threat protection, 5 Gbps firewall throughput, 700,000 concurrent sessions, and integrated SD-WAN — complete FortiGuard-powered security for small offices, branch, and retail sites that need enterprise-grade protection in a quiet, low-power form factor. FortiLink centrally manages connected FortiSwitch and FortiAP units from the same console. For wireless WAN or a built-in access point, see the FortiGate 40F-3G4G (integrated LTE) or the FortiWiFi 40F (integrated Wi-Fi).

A quick guide to choosing the right enterprise FortiGate.
| IPv4 firewall throughput (1518 / 512 / 64 byte, UDP) | 5 / 5 / 5 Gbps |
| Firewall latency (64 byte, UDP) | 2.97 µs |
| Firewall throughput (packets/sec) | 7.5 Mpps |
| Concurrent sessions (TCP) | 700,000 |
| New sessions/second (TCP) | 35,000 |
| Firewall policies | 2,000 |
| IPS throughput | 1 Gbps |
| NGFW throughput | 800 Mbps |
| Threat protection throughput | 600 Mbps |
| IPsec VPN throughput (512 byte) | 4.4 Gbps |
| Gateway-to-gateway IPsec VPN tunnels | 200 |
| Client-to-gateway IPsec VPN tunnels | 250 |
| SSL-VPN throughput | 490 Mbps |
| SSL inspection throughput (IPS, avg. HTTPS) | 310 Mbps |
| SSL inspection concurrent sessions | 55,000 |
| Application control throughput (HTTP 64K) | 990 Mbps |
| CAPWAP throughput (HTTP 64K) | 3.5 Gbps |
| Virtual domains (default / max) | 10 / 10 |
| Managed FortiAPs (total / tunnel) | 16 / 8 |
| Managed FortiSwitches | 8 |
| Maximum FortiTokens | 500 |
| High availability | Active-Active, Active-Passive, Clustering |
| Hardware acceleration | SoC4 (SP SD-WAN ASIC) |
| Wireless (Wi-Fi) | Not included (see FortiWiFi 40F) |
| Cellular modem | Not included (see FortiGate 40F-3G4G) |
| Interfaces | 1x GE RJ45 WAN, 3x GE RJ45 internal, 1x GE RJ45 FortiLink, 1x USB, 1x RJ45 console |
| Onboard storage | None |
| Power supply | External DC power adapter (100–240V AC input, 50/60 Hz) |
| Power consumption (avg / max) | 7.74 W / 9.46 W |
| Heat dissipation | 52.55 BTU/h |
| Form factor | Desktop (wall-mount optional), fanless |
| Dimensions (H x W x L) | 1.5 x 8.5 x 6.3 in (38.5 x 216 x 160 mm) |
| Weight | 2.2 lbs (1 kg) |
| Operating temperature | 32–104°F (0–40°C) |
Source: official Fortinet FortiGate / FortiWiFi 40F Series datasheet (FortiGate 40F column) + Fortinet Product Matrix (May 2026).
Download the full datasheet
Every Fortinet purchase from DataCenter360.ca is backed by hands-on services across the full lifecycle — from rollout to round-the-clock protection.
All four 40F-series models share the same SoC4 platform and firewall performance. The 3G4G models add an integrated 3G/4G LTE modem; the FortiWiFi models add an integrated Wi-Fi access point. The base 40F is wired-only.
The 40F is the entry point of the G/F-series desktop line. Step up to the 60F or 80F for higher throughput, more ports, and larger session capacity. Same FortiOS and FortiGuard services across the range.
Every available SKU for the FG-40F: hardware, protection bundles, subscriptions, services, cloud, support and RMA. In stock, brand new, shipped from Canada; licensing delivered electronically worldwide.
| Configuration | Price & action |
|---|---|
| FortiGate 40F desktop appliance. License not included. | View productFG-40F |
| Bundle | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Appliance + Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFG-40F-BDL-809-12 | View productFG-40F-BDL-809-36 | View productFG-40F-BDL-809-60 |
| Appliance + Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFG-40F-BDL-950-12 | View productFG-40F-BDL-950-36 | View productFG-40F-BDL-950-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Enterprise Protection Full FortiGuard suite: IPS, AMP, DLP, URL/DNS filtering & FortiCare Premium | View productFC-10-0040F-809-02-12 | View productFC-10-0040F-809-02-36 | View productFC-10-0040F-809-02-60 |
| Unified Threat Protection (UTP) IPS, anti-malware, web/DNS/video filtering, anti-spam & FortiCare Premium | View productFC-10-0040F-950-02-12 | View productFC-10-0040F-950-02-36 | View productFC-10-0040F-950-02-60 |
| Advanced Threat Protection IPS, advanced malware protection, sandboxing & FortiCare Premium | View productFC-10-0040F-928-02-12 | View productFC-10-0040F-928-02-36 | View productFC-10-0040F-928-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| FortiConverter License conversion & configuration migration assistance | View productFC-10-0040F-189-02-12 | — | — |
| FortiCare Essential Business-hours support, firmware updates & next-business-day hardware replacement | View productFC-10-0040F-314-02-12 | View productFC-10-0040F-314-02-36 | View productFC-10-0040F-314-02-60 |
| FortiCare Premium 24×7 TAC, advanced hardware replacement & firmware updates | View productFC-10-0040F-247-02-12 | View productFC-10-0040F-247-02-36 | View productFC-10-0040F-247-02-60 |
| FortiCare Elite Priority TAC queue, quarterly reviews & dedicated team | View productFC-10-0040F-284-02-12 | View productFC-10-0040F-284-02-36 | View productFC-10-0040F-284-02-60 |
| FortiCare Premium → Elite Upgrade Upgrade from FortiCare Premium to Elite mid-term | View productFC-10-0040F-204-02-12 | View productFC-10-0040F-204-02-36 | View productFC-10-0040F-204-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Advanced Malware Protection Cloud sandbox-powered advanced malware protection | View productFC-10-0040F-100-02-12 | View productFC-10-0040F-100-02-36 | View productFC-10-0040F-100-02-60 |
| AI Inline Malware Prevention AI-powered inline malware prevention (Enterprise-tier) | View productFC-10-0040F-577-02-12 | View productFC-10-0040F-577-02-36 | View productFC-10-0040F-577-02-60 |
| FortiGuard IPS FortiGuard IPS signatures & threat-intelligence updates | View productFC-10-0040F-108-02-12 | View productFC-10-0040F-108-02-36 | View productFC-10-0040F-108-02-60 |
| URL, DNS & Video Filtering URL category, DNS filtering & video content control | View productFC-10-0040F-112-02-12 | View productFC-10-0040F-112-02-36 | View productFC-10-0040F-112-02-60 |
| OT Security OT/ICS protocol decoders & industrial threat feeds | View productFC-10-0040F-159-02-12 | View productFC-10-0040F-159-02-36 | View productFC-10-0040F-159-02-60 |
| Data Loss Prevention DLP profiles, sensitive-data detection & compliance reporting | View productFC-10-0040F-589-02-12 | View productFC-10-0040F-589-02-36 | View productFC-10-0040F-589-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| SD-WAN Service Bundle SD-WAN cloud-on-ramp, app steering, SLA analytics & FortiCare Premium | View productFC-10-0040F-1337-02-12 | View productFC-10-0040F-1337-02-36 | View productFC-10-0040F-1337-02-60 |
| SD-WAN Bundle (no FortiCare) SD-WAN orchestration & analytics bundle, FortiCare not included | View productFC-10-0040F-1387-02-12 | View productFC-10-0040F-1387-02-36 | View productFC-10-0040F-1387-02-60 |
| FortiGate Cloud FortiGate Cloud log retention, topology map & reporting | View productFC-10-0040F-131-02-12 | View productFC-10-0040F-131-02-36 | View productFC-10-0040F-131-02-60 |
| FortiAnalyzer Cloud FortiAnalyzer Cloud: 1-year log retention & analytics | View productFC-10-0040F-585-02-12 | View productFC-10-0040F-585-02-36 | View productFC-10-0040F-585-02-60 |
| SOCaaS SOCaaS 24×7 threat monitoring, triage & response | View productFC-10-0040F-464-02-12 | View productFC-10-0040F-464-02-36 | View productFC-10-0040F-464-02-60 |
| Managed FortiGate Managed FortiGate NOC service operated by Fortinet | View productFC-10-0040F-660-02-12 | View productFC-10-0040F-660-02-36 | View productFC-10-0040F-660-02-60 |
| License | 1 Year | 3 Years | 5 Years |
|---|---|---|---|
| Next-Calendar-Day RMA Next-calendar-day hardware replacement dispatch | View productFC-10-0040F-210-02-12 | View productFC-10-0040F-210-02-36 | View productFC-10-0040F-210-02-60 |
| 4-Hour Delivery RMA 4-hour hardware delivery replacement | View productFC-10-0040F-211-02-12 | View productFC-10-0040F-211-02-36 | View productFC-10-0040F-211-02-60 |
| 4-Hour Delivery + Onsite RMA 4-hour hardware delivery plus on-site engineer | View productFC-10-0040F-212-02-12 | View productFC-10-0040F-212-02-36 | View productFC-10-0040F-212-02-60 |
| Secure RMA Secure RMA with data sanitization on returned unit | View productFC-10-0040F-301-02-12 | View productFC-10-0040F-301-02-36 | View productFC-10-0040F-301-02-60 |
Mount the 40F on a desk, in a rack tray, or on a DIN rail.
The FortiGate 40F is a current-generation 40F-series model, fully supported with active FortiGuard and FortiCare subscriptions available for 1, 3, and 5-year terms.
Firewall performance is identical — both run on the same SoC4 platform. The base 40F is wired-only. The 40F-3G4G adds an integrated 3G/4G LTE modem with two nano-SIM slots and three SMA cellular antennas, for wireless WAN as a primary uplink or automatic failover.
No. The FortiGate 40F is a wired-only appliance. For an integrated Wi-Fi access point, choose the FortiWiFi 40F; for cellular WAN, choose the FortiGate 40F-3G4G.
The FortiGate 40F has 5x GE RJ45 ports: 1 WAN, 3 internal, and 1 FortiLink, plus 1 USB and an RJ45 console port. It has no onboard SSD.
Most small sites choose UTP for web, DNS, and video filtering on top of IPS and anti-malware. ATP covers core threat protection only. Enterprise adds DLP, AI-based inline malware prevention, and the full SASE service set.