Fortinet FortiGate 40F Firewall, Hardware Only (FG-40F)

Five ports and a purpose-built SD-WAN ASIC in a 1.5-inch desktop enclosure: the FortiGate 40F (FG-40F) delivers 5 Gbps firewall throughput, 1 Gbps IPS, and 600 Mbps full threat protection — capabilities that comfortably cover any branch internet connection up to 500 Mbps under simultaneous FortiGuard inspection. This listing is the appliance only, with no FortiCare or FortiGuard subscriptions included.

What’s in the Box

The FG-40F ships with the appliance unit, an external DC power adapter (12Vdc, 3A; universal 100–240V AC input), a console cable, and rubber feet for desktop use. No SFP transceivers, rack brackets, or wall-mount hardware are included. The unit is factory-sealed and backed by Fortinet’s standard hardware warranty, which requires an active FortiCare contract to remain valid.

Hardware Specifications

Where the 40F Performs Best

The FG-40F is built for branch offices and SMBs running up to 75 users on connections in the 100 to 500 Mbps range. At full threat inspection (IPS + App Control + Malware Protection), it sustains 600 Mbps — enough for most broadband or fibre services without a throughput bottleneck. The FortiLink port integrates directly with up to 8 FortiSwitches and 16 FortiAPs through the Security Fabric, so campus expansion stays within the same management pane.

Built-in SD-WAN allows two WAN links to run simultaneously for load balancing and automatic failover, with no additional licensing. Up to 200 gateway-to-gateway IPsec tunnels and 250 client-to-gateway tunnels cover both inter-site connectivity and remote worker VPN without adding infrastructure.

Hardware Alone — What That Means

Buying the appliance without a subscription means you receive the hardware and FortiOS, but firmware updates, threat intelligence feeds, and Fortinet warranty support all require an active FortiCare contract. For most deployments, the 1-year UTP bundle (FC-10-0040F-950-02-12) is the standard starting point — it covers IPS, App Control, URL and DNS filtering, anti-malware, and FortiCare Premium support in a single SKU. The 1-year Enterprise bundle (FC-10-0040F-809-02-12) adds AI-based inline sandbox analysis and advanced threat correlation. Both are available separately on DataCenter360.ca.

Who Runs the FortiGate 40F

Retail locations, medical clinics, law offices, and professional services firms with 25 to 75 users make up the core install base. MSPs deploying managed branch stacks consistently choose the 40F for its template-friendly FortiOS consistency and low per-site cost. The unit supports HA clustering — a second FG-40F-HA can be added as the standby node at any time, sharing the existing service contract.

Moving Up: FortiGate 60F

If SSL inspection throughput becomes the constraint (the FG-40F peaks at 310 Mbps under full HTTPS decryption), the FortiGate 60F (FG-60F) is the direct next step. The 60F provides higher SSL and NGFW throughput and additional LAN ports for environments that have grown beyond four internal segments. Both models run identical FortiOS, so configuration migration is clean.

Buying from DataCenter360.ca

DataCenter360.ca stocks the FG-40F from Canadian inventory and ships free to every province in 0–1 business days. Units arrive factory-sealed with full Fortinet Canada warranty. As an authorized Fortinet Select Partner, our FCP-certified team is available before purchase to match the right subscription tier, quote a multi-unit deployment, or help plan an HA configuration — reach out before you order if you have a specific project in mind.

Frequently Asked Questions