Original price was: CAD$11,571.36.CAD$7,795.45Current price is: CAD$7,795.45.
Securing a remote pipeline station or off-grid substation over a cellular uplink is a different problem than securing a campus branch. The attack surface includes the LTE link itself, vendor remote-access tunnels, and engineering workstations that occasionally connect over VPN from untrusted locations. The FortiGateRugged 70F-3G4G Enterprise bundle is built for exactly this scenario: dual-SIM LTE with active/passive carrier failover, GPS time-sync for OT protocols, IEC 61850-3/IEEE 1613 hardware certification, and the full FortiGuard Enterprise Protection stack including cloud sandboxing, DLP, and OT Security service, all active from the moment the unit is registered.
FGR-70F-3G4G-BDL-809-12 ships the FortiGateRugged 70F-3G4G appliance with a 1-Year FortiCare Premium subscription and a 1-Year FortiGuard Enterprise Protection subscription. FortiCare Premium delivers 24×7 TAC, next-day hardware replacement, and firmware updates for the term. Enterprise Protection activates every FortiGuard security service in one annual renewal, with no add-ons to purchase separately.
| Processor | FortiSoC4 (OT-aware custom Fortinet ASIC) |
| GE RJ45 Interfaces | 6x GE RJ45 |
| Hardware Bypass Pair | PORT3 and PORT4 (fail-open on power loss) |
| GE SFP Slots | 2x dedicated GE SFP |
| Cellular Modem | 3G / 4G LTE with GPS (Sierra Wireless EM7565) |
| SIM Slots | 2 (active/passive dual-carrier failover) |
| LTE Bands | B1/B2/B3/B4/B5/B7/B8/B9/B12/B13/B18/B19/B20/B26/B28/B29/B30/B32/B41/B42/B43/B46/B48/B66 |
| Bluetooth Low Energy (BLE) | Yes |
| Serial Interface | 1x RJ45 |
| USB | 1x USB 2.0 (client/server) |
| Console Port | 1x RJ45 |
| Trusted Platform Module | Yes |
| Digital I/O Module (DIO) | Yes |
| Micro SD Card Slot | Yes |
| Firewall Throughput | 8 Gbps (1518 / 512 / 64-byte UDP) |
| IPS Throughput | 975 Mbps |
| NGFW Throughput | 950 Mbps |
| Threat Protection | 580 Mbps |
| IPsec VPN Throughput | 6.5 Gbps |
| Concurrent Sessions | 1 million |
| New Sessions/Second | 35,000 |
| Firewall Policies | 5,000 |
| SSL Inspection Throughput | 500 Mbps |
| App Control Throughput | 1.1 Gbps |
| Virtual Domains | 10 (default / max) |
| Form Factor | DIN-rail, IP40 |
| Dimensions (H x W x L) | 4.8 x 3.2 x 4.4 in (122 x 80.5 x 111 mm) |
| Weight | 2.87 lbs (1.3 kg) |
| Operating Temperature | -40 to 75 degrees C |
| Power | DC 12V / 1.67A, 18.3W avg / 19.9W max (68 BTU/h) |
| Industry Certifications | IEC 61850-3, IEEE 1613 (Electric Power); EN 50155 (Railway) |
Enterprise (809) extends UTP with four services that matter most when the uplink is cellular and the protected assets are OT systems. Cloud Sandboxing detonates unknown files received through remote-access VPNs before they reach engineer workstations. DLP prevents sensitive SCADA configuration files and plant data from leaving the network. OT Security adds industrial protocol decoders and OT-specific vulnerability signatures for Modbus, DNP3, IEC 61850, and similar protocols. Attack Surface Management continuously maps exposed services and flags drift from baseline.
| Service | ATP (811) | UTP (950) | Enterprise (809) |
|---|---|---|---|
| FortiCare Premium (24×7 TAC + NDR) | ✓ | ✓ | ✓ |
| IPS (Intrusion Prevention) | ✓ | ✓ | ✓ |
| Application Control | ✓ | ✓ | ✓ |
| Anti-Malware / AV | ✓ | ✓ | ✓ |
| Web Filtering | ✓ | ✓ | ✓ |
| URL / DNS Filtering | — | ✓ | ✓ |
| Anti-Spam | — | ✓ | ✓ |
| FortiCloud Management (basic) | — | ✓ | ✓ |
| DLP (Data Loss Prevention) | — | — | ✓ |
| Cloud Sandbox (FortiSandbox) | — | — | ✓ |
| OT Security Service | — | — | ✓ |
| Attack Surface Management | — | — | ✓ |
| Advanced Anti-Virus (AI/ML) | — | — | ✓ |
This bundle is designed for organizations with both remote connectivity requirements and regulatory compliance obligations. Canadian utilities subject to NERC CIP or provincial cybersecurity directives need OT Security signatures and IPS running over every link, including cellular backhaul. Mining operations with remote processing sites need DLP to prevent plant data exfiltration. Managed security providers deploying FGR-70F-3G4G appliances at client sites across Canada benefit from the Enterprise scope because it eliminates the need to manage individual add-on service SKUs at each site.
The same Enterprise protection is available in longer terms: FGR-70F-3G4G-BDL-809-36 (3-year) and FGR-70F-3G4G-BDL-809-60 (5-year) are in stock. For sites where budget favors UTP coverage, the FGR-70F-3G4G-BDL-950-12 covers the core FortiGuard stack without DLP and sandboxing. For 5G cellular capability combined with FortiSP5 throughput, the FGR-70G-BDL-809-12 is the natural next step.
DataCenter360.ca ships the FGR-70F-3G4G-BDL-809-12 brand new, free within Canada in 0 to 1 business days. As a Fortinet Select Partner and MSSP with experience in Canadian OT deployments, we support purchase orders, net terms, and multi-site pricing. Contact us for carrier SIM compatibility advice or help designing a dual-WAN failover topology before you order.
Enterprise (809) adds DLP, Cloud Sandboxing, FortiGuard OT Security (Modbus/DNP3/IEC 61850 protocol decoders and OT-specific vulnerability signatures), Attack Surface Management, and Advanced AI/ML Anti-Virus to the full UTP service stack. For remote sites receiving files over VPN or cellular, sandboxing and DLP are particularly important because there is no other perimeter beyond the firewall.
The built-in Sierra Wireless EM7565 modem accepts two SIM cards in active/passive mode. One carrier handles all traffic; the second is on standby. If the active carrier has an outage, the modem fails over to the passive SIM automatically. Loading SIMs from two different carriers, for example Rogers and Bell, protects against single-carrier outages common in remote regions.
Yes. The PORT3/PORT4 bypass pair operates at the hardware level, independent of the FortiGuard service stack. If the appliance loses power or has a software fault, the bypass engages and traffic continues through the protected segment. This is fixed hardware behavior and is not affected by which subscription tier is installed.
The FGR-70F-3G4G provides technical controls relevant to NERC CIP, including IPS, segmentation, logging, and with the Enterprise bundle, OT Security signatures and DLP. Meeting NERC CIP also requires administrative and operational controls beyond any single device. Consult a certified NERC CIP assessor for a full compliance gap analysis.
Yes. FGR-70F-3G4G-BDL-809-36 (3-year) and FGR-70F-3G4G-BDL-809-60 (5-year) are both in stock at DataCenter360.ca. Multi-year terms lock in the current annual price, which is useful for remote OT deployments where procurement windows are infrequent.
| Weight | 2.72 kg |
|---|---|
| Dimensions | 41 × 36 × 28 cm |
| Manufacturer | Fortinet |
| Model | FortiGateRugged-70F-3G4G |
| GTIN | 195875311983 |
| Product Type | |
| Product Group | |
| End of Order Date (EOO) | Not published yet |
| Last Service Extension Date (LSED) | Not published yet |
| End of Support Date (EOS) | Not published yet |
| Product Family | FG-10 to FG-100 |
| MPN | FGR-70F-3G4G-BDL-809-12 |
| 5 star | 0% | |
| 4 star | 0% | |
| 3 star | 0% | |
| 2 star | 0% | |
| 1 star | 0% |
Sorry, no reviews match your current selections