Fortinet FortiGate 40F-3G4G Firewall, Hardware Only (FG-40F-3G4G)

Branch sites that cannot count on a stable wired WAN connection need a different kind of security appliance. The FortiGate 40F-3G4G (FG-40F-3G4G) includes an embedded Sierra Wireless EM7565 CAT-12 LTE modem with two SIM card slots, giving you cellular WAN capability built directly into the firewall. Activate a SIM from any major carrier, configure the LTE interface in FortiOS, and you have a live internet path without adding a separate cellular router to the deployment.

Hardware Specifications

The Embedded LTE Module in Practice

The Sierra Wireless EM7565 inside the FG-40F-3G4G supports LTE CAT-12, covering a broad set of LTE bands used by Canadian carriers. The two SIM slots run in active/passive mode: the primary SIM handles all traffic until it loses signal, then FortiOS switches to the backup SIM automatically. Combined with SD-WAN policies, you can configure the LTE interface as a standby path that activates on any primary-link failure, or use it as the sole WAN at pop-up locations where a fixed connection is not yet available. Three external SMA antenna connectors let you position antennas for best signal, which makes a real difference in metal-walled facilities or basement equipment rooms.

Hardware Only: What That Means

This listing covers the physical appliance with no subscriptions attached. FortiOS loads and runs, but active threat prevention requires at least one FortiGuard service subscription. FortiCare support is also purchased separately. License SKUs for the FortiGate 40F-3G4G carry the FC-10-F40FG- prefix; you will find the full set of matching subscriptions on DataCenter360.ca. A nano-SIM from your chosen carrier is also not included, but any SIM supporting the LTE bands listed above will work with the modem.

Who Buys the FG-40F-3G4G

Retail chains and food service groups standardizing on a single branch firewall model use the 3G4G variant when cellular failover is a firm requirement. Field service operations and event venues value the ability to go live on LTE before a permanent circuit is provisioned. MSPs serving clients in areas with unreliable fixed broadband often specify this unit as their default branch appliance. The HA variant (FG-40F-3G4G-HA) is the correct secondary unit for customers running an active-passive pair.

Moving Up: FortiGate 60F

When a branch grows past the 40F's session or throughput ceiling, the FortiGate 60F (FG-60F) provides more LAN ports and higher aggregate throughput at the next step up. Both models share the same FortiOS feature set and management tooling, so scaling is a straightforward hardware replacement without rebuilding policies from scratch.

Buying from DataCenter360.ca

DataCenter360.ca ships the FG-40F-3G4G factory-sealed from Canadian inventory, free to any province, with most orders dispatched same or next business day. As a Fortinet Select Partner with FCP-certified staff, we can confirm carrier LTE band compatibility and help you choose the right FortiGuard subscription before you place the order. Reach out before purchasing if you have questions about supported SIM types or antenna placement at your specific site.

Frequently Asked Questions