Products
Fortinet Fortigate 40F Firewall (FG-40F)
FortiGate/FortiWiFi 40F series provides a fast and secure SD-WAN solution in a compact fanless desktop form factor for enterprise branch offices and mid-sized businesses. Protects against cyber threats with system-on-a-chip acceleration and industry-leading secure SDWAN in a simple, affordable, and easy to deploy solution. Fortinet’s Security-Driven Networking approach provides tight integration of the network to the new generation of security.
Model Number: | FortiGate FG 40F BDL |
Type: | Security appliance |
Form Factor: | Desktop |
Wireless Interface: | Single Radio (2.4GHz/5GHz) 802.11 /a/b/g/n/ac-W2 |
SSL-VPN Throughput: | 490 Mbps |
Product Dimensions: | 38.5 x 216 x 160 mm |
Weight: | 2.2 lbs (1 kg) |
Hardware + 1 year license: | FG-40F-BDL-950-12 |
Hardware + 3 year license: | FG-40F-BDL-950-36 |
Hardware + 5 year license: | FG-40F-BDL-950-60 |
Security
• Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement
• Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic
• Prevent and detect against known and unknown attacks using continuous threat intelligence from AI-powered FortiGuard Labs security services
Performance
• Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology
• Provides industry-leading performance and protection for SSL encrypted traffic
Certification
• Independently tested and validated best security effectiveness and performance
• Received unparalleled third-party certifications from NSS Labs
Networking
• Delivers advanced networking capabilities that seamlessly integrate with advanced layer 7 security and virtual domains (VDOMs) to offer extensive deployment flexibility, multi-tenancy and effective utilization of resources
• Delivers high-density, flexible combination of various high-speed interfaces to enable best TCO for customers for data center and WAN deployments
Management
• Includes a management console that is effective, simple to use, and provides comprehensive network automation and visibility
• Provides Zero Touch Integration with Fortinet’s Security Fabric’s Single Pane of Glass Management
• Predefined compliance checklists analyze the deployment and highlight best practices to improve the overall security posture
Security Fabric
• Enables Fortinet and Fabric-ready partners’ products to provide broader visibility, integrated end-to-end detection, threat intelligence sharing, and automated remediation
Firewall | IPS | NGFW | Threat Protection | Interfaces |
5 Gbps | 1 Gbps | 800 Mbps | 600 Mbps | Multiple GE RJ45 | WiFi variants |
FortiGate/FortiWiFi 40F Series
3G/4G WAN Connectivity
The FortiGate 40F Series includes a USB port that allows you to plug in a compatible third-party 3G/4G USB modem, providing additional WAN connectivity or a redundant link for maximum reliability.
Compact and Reliable Form Factor
Designed for small environments, you can place it on a desktop or wall-mount it. It is small, lightweight, yet highly reliable with a superior MTBF (Mean Time Between Failure), minimizing the chance of a network disruption.
Secure Access Layer
- FortiLink protocol enables you to converge security and the network access by integrating the FortiSwitch into the
- FortiGate as a logical extension of the NGFW. These FortiLink enabled ports can be reconfigured as regular ports as needed.
Rear View :
1. | 1 x USB Port | 2. | 1 x Console Port |
3. | 1 x GE RJ45 WAN Port | 4. | 1 x GE RJ45 FortiLink Port |
5. | 3 x GE RJ45 Ethernet Ports |
Next Generation Firewall (NGFW)
- Reduce the complexity and maximize your ROI by integrating threat protection security capabilities into a single high-performance network security appliance, powered by Fortinet’s Security Processing Unit (SPU)
- Full visibility into users, devices, applications across the entire attack surface and consistent security policy enforcement irrespective of asset location
- Protect against network exploitable vulnerabilities with industry-validated IPS that offers low latency and optimized network performance
- Automatically block threats on decrypted traffic using the Industry’s highest SSL inspection performance, including the latest TLS 1.3 standard with mandated ciphers
- Proactively block newly discovered sophisticated attacks in real-time with AI-powered FortiGuard Labs and advanced threat protection services included in the Fortinet Security Fabric
Secure SD-WAN
- Consistent business application performance with accurate detection and dynamic WAN path steering on any bestperforming WAN transport
- Accelerated Multi-cloud access for faster SaaS adoption with cloud-on-ramp
- Self-healing networks with WAN edge high availability, subsecond traffic switchover-based and real-time bandwidth compute-based traffic steering
- Automated Overlay tunnels provides encryption and abstracts physical hybrid WAN making it simple to manage
- Simplified and intuitive workflow with FortiManger for management and zero touch deployment
- Enhanced analytics both real-time and historical provides visibility into network performance and identify anomalies
- Strong security posture with next generation firewall and real- time threat protection
Security Fabric
The industry’s highest-performing cybersecurity platform, powered by FortiOS, with a rich ecosystem designed to span the extended digital attack surface, delivering fully automated, self-healing network security.
Broad: Coordinated detection and enforcement across the entire digital attack surface and lifecycle with converged networking and security across edges, clouds, endpoints and users
Integrated: Integrated and unified security, operation, and performance across different technologies, location, deployment options, and the richest Ecosystem
Automated: Context aware, self-healing network & security posture leveraging cloud-scale and advanced AI to automatically deliver near-real-time, user-to-application coordinated protection across the Fabric
FortiOS™ Operating System
FortiOS, Fortinet’s leading operating system enable the convergence of high performing networking and security across the Fortinet Security Fabric delivering consistent and context-aware security posture across network endpoint, and clouds. The organically built best of breed capabilities and unified approach allows organizations to run their businesses without compromising performance or protection, supports seamless scalability, and simplifies innovation consumption. The release of FortiOS 7 dramatically expands the Fortinet Security Fabric’s ability to deliver consistent security across hybrid deployment models consisting on appliances, software and As-a-Service with SASE, ZTNA and other emerging cybersecurity solutions.
Services
FortiGuard™ Security Services
FortiGuard Labs offers real-time intelligence on the threat landscape, delivering comprehensive security updates across the full range of Fortinet’s solutions. Comprised of security threat researchers, engineers, and forensic specialists, the team collaborates with the world’s leading threat monitoring organizations and other network and security vendors, as well as law enforcement agencies.
FortiCare™ Services
Fortinet is dedicated to helping our customers succeed, and every year FortiCare services help thousands of organizations get the most from their Fortinet Security Fabric solution. We have more than 1,000 experts to help accelerate technology implementation, provide reliable assistance through advanced support, and offer proactive care to maximize security and performance of Fortinet deployments.
FORTIGATE 40F |
FORTIWIFI 40F |
|
Interfaces and Modules | ||
Hardware Accelerated GE RJ45 WAN / DMZ Ports |
1 | |
Hardware Accelerated GE RJ45 Internal Ports |
3 | |
Hardware Accelerated GE RJ45 FortiLink Ports ( Default ) |
1 | |
Hardware Accelerated GE RJ45 PoE / + Ports |
0 | |
Wireless Interface | 0 | Single Radio ( 2.4GHz / 5GHz ) 802.11 / a / b / g / n / ac – W2 |
USB Ports | 1 | |
Console Port ( RJ45 ) ******** |
1 | |
Onboard Storage | 0 | |
Included Transceivers | 0 | |
System Performance – Enterprise Traffic Mix | ||
IPS Throughput 2 | 1 Gbps | |
NGFW Throughput 24 | 800 Mbps | |
Threat Protection Throughput 2,5 | 600 Mbps | |
System Performance and Capacity | ||
IPv4 Firewall Throughput ( 1518/512/64 byte , UDP ) |
5/5/5 Gbps | |
Firewall Latency ( 64 byte , UDP ) | 2.97 us | |
Firewall Throughput ( Packet per Second ) | 7.5 Mpps | |
Concurrent Sessions ( TCP ) | 700,000 | |
New Sessions / Second ( TCP ) | 35,000 | |
Firewall Policies | 5,000 | |
IPsec VPN Throughput ( 512 byte ) ¹ | 4.4 Gbps | |
Gateway – to – Gateway IPsec VPN Tunnels | 200 | |
Client – to – Gateway IPsec VPN Tunnels | 250 | |
SSL – VPN Throughput | 490 Mbps | |
Concurrent SSL – VPN Users [ Recommended Maximum , Tunnel Mode ) |
200 | |
SSL Inspection Throughput ( IPS , avg . HTTPS ) * |
310 Mbps | |
SSL Inspection CPS ( IPS , avg . HTTPS ) ¹ ****** ************* . |
320 | |
SSL Inspection Concurrent Session ( IPS , avg . HTTPS ) * |
55,000 | |
Application Control Throughput ( HTTP 64K ) |
990 Mbps | |
CAPWAP Throughput ( HTTP 64K ) | 3.5 Gbps | |
Virtual Domains ( Default / Maximum ) | 10/10 | |
Maximum Number of FortiSwitches Supported |
8 | |
Maximum Number of FortiAPs ( Total / Tunnel ) |
16/8 | |
Maximum Number of FortiTokens | 500 | |
Maximum Number of Registered FortiClients |
20,000 | |
High Availability Configurations | Active , Active -Active , Passive , Clustering | |
Dimensions and Power | ||
Height x Width x Length (inches) | 15 x 8.5 x 8.3 | |
Height x Width x Length (mm) | 38.5 X 216 X 160 | |
Weight | 2.2 lbs (1 kg) | |
Form Factor | Desktop | |
Input Rating | 12Vdc 3A | |
Power Required | Powered by External DC Power Adapter 100-240V AC 50-80 Hz |
|
Power Consumption (Average/Maximum) |
13.4 W/15.4 W | 14.6 W 16.6 W |
Current (Maximum) | 100VAC/02A240VAC/01 | |
Heat Dissipation | 58.64 BTU/h | 52.55 BTU/h |
Redundant Power Supplies | ||
Operating Environment and Certifications | ||
Operating Temperature | 32-104°F (0-40°C) | |
Storage Temperature | -31-158°F (-35-70°C) | |
Humidity | 10-90% non-condensing | |
Noise Level | Fanless dBA | |
Operating Altitude | Up to 7,400 ft (2,250 m) | |
Compliance | FCC ICES CE RCM VCCI, BSML UL/cUL CB |
|
Certifications | ICSA Labs Firewall Ipsec IPS Antivirus, SSL-VPN |
|
Radio Specifications | ||
Multiple (MU) MIMO | 0 | 3×3 |
Maximum Wi-Fi Speeds | 0 | 1300 Mbos @ 5 GHz 450 Mbps @ 2.4 GHz |
Maximum Tx Power | 0 | 20 dBm |
Antenna Gain | 0 | 3.5 dBi @ 5GHz 5 dBi @ 2.4GHz |
- Overview
-
Security
• Identifies thousands of applications inside network traffic for deep inspection and granular policy enforcement
• Protects against malware, exploits, and malicious websites in both encrypted and non-encrypted traffic
• Prevent and detect against known and unknown attacks using continuous threat intelligence from AI-powered FortiGuard Labs security servicesPerformance
• Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology
• Provides industry-leading performance and protection for SSL encrypted trafficCertification
• Independently tested and validated best security effectiveness and performance
• Received unparalleled third-party certifications from NSS LabsNetworking
• Delivers advanced networking capabilities that seamlessly integrate with advanced layer 7 security and virtual domains (VDOMs) to offer extensive deployment flexibility, multi-tenancy and effective utilization of resources
• Delivers high-density, flexible combination of various high-speed interfaces to enable best TCO for customers for data center and WAN deploymentsManagement
• Includes a management console that is effective, simple to use, and provides comprehensive network automation and visibility
• Provides Zero Touch Integration with Fortinet’s Security Fabric’s Single Pane of Glass Management
• Predefined compliance checklists analyze the deployment and highlight best practices to improve the overall security postureSecurity Fabric
• Enables Fortinet and Fabric-ready partners’ products to provide broader visibility, integrated end-to-end detection, threat intelligence sharing, and automated remediation
Firewall IPS NGFW Threat Protection Interfaces 5 Gbps 1 Gbps 800 Mbps 600 Mbps Multiple GE RJ45 | WiFi variants - Hardware
-
FortiGate/FortiWiFi 40F Series
3G/4G WAN Connectivity
The FortiGate 40F Series includes a USB port that allows you to plug in a compatible third-party 3G/4G USB modem, providing additional WAN connectivity or a redundant link for maximum reliability.
Compact and Reliable Form Factor
Designed for small environments, you can place it on a desktop or wall-mount it. It is small, lightweight, yet highly reliable with a superior MTBF (Mean Time Between Failure), minimizing the chance of a network disruption.
Secure Access Layer
- FortiLink protocol enables you to converge security and the network access by integrating the FortiSwitch into the
- FortiGate as a logical extension of the NGFW. These FortiLink enabled ports can be reconfigured as regular ports as needed.
Rear View :
1. 1 x USB Port 2. 1 x Console Port 3. 1 x GE RJ45 WAN Port 4. 1 x GE RJ45 FortiLink Port 5. 3 x GE RJ45 Ethernet Ports - Deployment
-
Next Generation Firewall (NGFW)
- Reduce the complexity and maximize your ROI by integrating threat protection security capabilities into a single high-performance network security appliance, powered by Fortinet’s Security Processing Unit (SPU)
- Full visibility into users, devices, applications across the entire attack surface and consistent security policy enforcement irrespective of asset location
- Protect against network exploitable vulnerabilities with industry-validated IPS that offers low latency and optimized network performance
- Automatically block threats on decrypted traffic using the Industry’s highest SSL inspection performance, including the latest TLS 1.3 standard with mandated ciphers
- Proactively block newly discovered sophisticated attacks in real-time with AI-powered FortiGuard Labs and advanced threat protection services included in the Fortinet Security Fabric
Secure SD-WAN
- Consistent business application performance with accurate detection and dynamic WAN path steering on any bestperforming WAN transport
- Accelerated Multi-cloud access for faster SaaS adoption with cloud-on-ramp
- Self-healing networks with WAN edge high availability, subsecond traffic switchover-based and real-time bandwidth compute-based traffic steering
- Automated Overlay tunnels provides encryption and abstracts physical hybrid WAN making it simple to manage
- Simplified and intuitive workflow with FortiManger for management and zero touch deployment
- Enhanced analytics both real-time and historical provides visibility into network performance and identify anomalies
- Strong security posture with next generation firewall and real- time threat protection
- Fortinet Security Fabric
-
Security Fabric
The industry’s highest-performing cybersecurity platform, powered by FortiOS, with a rich ecosystem designed to span the extended digital attack surface, delivering fully automated, self-healing network security.
Broad: Coordinated detection and enforcement across the entire digital attack surface and lifecycle with converged networking and security across edges, clouds, endpoints and users
Integrated: Integrated and unified security, operation, and performance across different technologies, location, deployment options, and the richest Ecosystem
Automated: Context aware, self-healing network & security posture leveraging cloud-scale and advanced AI to automatically deliver near-real-time, user-to-application coordinated protection across the FabricFortiOS™ Operating System
FortiOS, Fortinet’s leading operating system enable the convergence of high performing networking and security across the Fortinet Security Fabric delivering consistent and context-aware security posture across network endpoint, and clouds. The organically built best of breed capabilities and unified approach allows organizations to run their businesses without compromising performance or protection, supports seamless scalability, and simplifies innovation consumption. The release of FortiOS 7 dramatically expands the Fortinet Security Fabric’s ability to deliver consistent security across hybrid deployment models consisting on appliances, software and As-a-Service with SASE, ZTNA and other emerging cybersecurity solutions.
Services
FortiGuard™ Security Services
FortiGuard Labs offers real-time intelligence on the threat landscape, delivering comprehensive security updates across the full range of Fortinet’s solutions. Comprised of security threat researchers, engineers, and forensic specialists, the team collaborates with the world’s leading threat monitoring organizations and other network and security vendors, as well as law enforcement agencies.
FortiCare™ Services
Fortinet is dedicated to helping our customers succeed, and every year FortiCare services help thousands of organizations get the most from their Fortinet Security Fabric solution. We have more than 1,000 experts to help accelerate technology implementation, provide reliable assistance through advanced support, and offer proactive care to maximize security and performance of Fortinet deployments.
- Specification
-
FORTIGATE 40F
FORTIWIFI 40F
Interfaces and Modules Hardware Accelerated GE RJ45 WAN /
DMZ Ports1 Hardware Accelerated GE RJ45
Internal Ports3 Hardware Accelerated GE RJ45
FortiLink Ports ( Default )1 Hardware Accelerated GE RJ45
PoE / + Ports0 Wireless Interface 0 Single Radio
( 2.4GHz / 5GHz )
802.11
/ a / b / g / n / ac – W2USB Ports 1 Console Port ( RJ45 )
********1 Onboard Storage 0 Included Transceivers 0 System Performance – Enterprise Traffic Mix IPS Throughput 2 1 Gbps NGFW Throughput 24 800 Mbps Threat Protection Throughput 2,5 600 Mbps System Performance and Capacity IPv4 Firewall Throughput
( 1518/512/64 byte , UDP )5/5/5 Gbps Firewall Latency ( 64 byte , UDP ) 2.97 us Firewall Throughput ( Packet per Second ) 7.5 Mpps Concurrent Sessions ( TCP ) 700,000 New Sessions / Second ( TCP ) 35,000 Firewall Policies 5,000 IPsec VPN Throughput ( 512 byte ) ¹ 4.4 Gbps Gateway – to – Gateway IPsec VPN Tunnels 200 Client – to – Gateway IPsec VPN Tunnels 250 SSL – VPN Throughput 490 Mbps Concurrent SSL – VPN Users
[ Recommended Maximum , Tunnel Mode )200 SSL Inspection Throughput
( IPS , avg . HTTPS ) *310 Mbps SSL Inspection CPS ( IPS , avg . HTTPS ) ¹
****** ************* .320 SSL Inspection Concurrent Session
( IPS , avg . HTTPS ) *55,000 Application Control Throughput
( HTTP 64K )990 Mbps CAPWAP Throughput ( HTTP 64K ) 3.5 Gbps Virtual Domains ( Default / Maximum ) 10/10 Maximum Number of FortiSwitches
Supported8 Maximum Number of FortiAPs
( Total / Tunnel )16/8 Maximum Number of FortiTokens 500 Maximum Number of Registered
FortiClients20,000 High Availability Configurations Active , Active -Active , Passive , Clustering Dimensions and Power Height x Width x Length (inches) 15 x 8.5 x 8.3 Height x Width x Length (mm) 38.5 X 216 X 160 Weight 2.2 lbs (1 kg) Form Factor Desktop Input Rating 12Vdc 3A Power Required Powered by External DC Power Adapter
100-240V AC 50-80 HzPower Consumption
(Average/Maximum)13.4 W/15.4 W 14.6 W 16.6 W Current (Maximum) 100VAC/02A240VAC/01 Heat Dissipation 58.64 BTU/h 52.55 BTU/h Redundant Power Supplies Operating Environment and Certifications Operating Temperature 32-104°F (0-40°C) Storage Temperature -31-158°F (-35-70°C) Humidity 10-90% non-condensing Noise Level Fanless dBA Operating Altitude Up to 7,400 ft (2,250 m) Compliance FCC ICES CE RCM VCCI,
BSML UL/cUL CBCertifications ICSA Labs Firewall Ipsec
IPS Antivirus, SSL-VPNRadio Specifications Multiple (MU) MIMO 0 3×3 Maximum Wi-Fi Speeds 0 1300 Mbos @
5 GHz 450 Mbps @
2.4 GHzMaximum Tx Power 0 20 dBm Antenna Gain 0 3.5 dBi @ 5GHz
5 dBi @ 2.4GHz