FortiExtender 5G and LTE WAN for FortiGate firewalls

Fortinet router or FortiExtender?

Fortinet describes FortiExtender as "cellular gateways and routers" that "provide secure 5G/LTE connectivity for any deployment". In a typical branch the FortiGate firewall does the routing, SD-WAN and security, and the FortiExtender device supplies the mobile connection:

• Backup for a fixed line: the FortiGate fails over to 5G or LTE if the fibre or broadband drops.
• Main connection: for sites with no fixed line yet, pop-up sites, kiosks and vehicles.
• Out-of-band management: a separate path to reach equipment when the main network is down.

If you want the modem in the firewall itself, Fortinet also makes FortiGate models with built-in cellular: the FG-50G-5G, FG-51G-5G and FortiWiFi 50G-5G-II (FWF-50G-5G-II-E), all 5G, on the FortiGate 50G page and the FG-40F-3G4G (LTE) on the FortiGate 40F page. A separate FortiExtender device lets you place the modem where the signal is best.

FortiExtender models compared

From the FortiExtender data sheet (opens in a new tab) and its ordering information:

The -E and -EA suffixes are Fortinet's regional versions; we quote the one for UK networks.

Placing the gateway for the best signal

Fortinet's data sheet explains that FortiExtender devices avoid "lengthy, expensive, and lossy antenna cables": the unit runs on Power over Ethernet, so it can sit up to 100 metres from the FortiGate or network switch wherever the 5G or LTE signal is strongest, such as a window or the roof. Models with an SFP port (the 511G and 511G-WiFi) can go further over fibre. Where a PoE switch port is not available, add a GPI-130 PoE injector or a mains adapter from the accessories below.

We can survey the signal on site and install the gateway, with the scope confirmed at quote.

Dual SIM, dual modem and failover

• Dual SIM models keep one SIM active and the other on standby, switching "based on data plan, disconnects, signal strength, and link health", in Fortinet's words.
• Dual modem models (the Vehicle 212F) run two cellular links at once for load balancing or traffic separation; Fortinet says dual-SIM and dual-modem options enable "up to four different ISPs".
• Wired WAN: the Ethernet WAN port can take a DSL or cable modem as another link.
• VRRP: where a pair of FortiGate firewalls is not possible, the FortiExtender device can take over as the NAT firewall if the FortiGate fails, and hand back when it is restored.
• LAN extension: Fortinet says "You don't need a FortiGate on site": Enhanced LAN Extension extends the network of a remote FortiGate firewall to a standalone FortiExtender device over VXLAN "with no extra license needed".

SIMs and data plans come from your mobile network, not from Fortinet. Tell us which networks you use and we check the model's bands and modem suit them.

Managing FortiExtender devices

• From the FortiGate: Fortinet says that "Once connected to a FortiGate, either directly or remotely over VxLAN, FortiExtender appears as a regular network interface in FortiOS management", so FortiGuard protection applies to it like any other FortiGate interface.
• FortiManagement Cloud (formerly FortiEdge Cloud), which Fortinet says "consolidates control of standalone FortiSwitch, FortiAP, FortiExtender, and FortiGate devices".
• FortiManager, to combine wireless WAN, firewall and branch management in one place. See FortiManager and FortiAnalyzer.

FortiExtender models and part numbers

Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.

FortiCare support and accessories

FortiExtender devices need no licence to run. Fortinet offers FortiCare Premium support per unit for 1, 3 or 5 years; the configurator offers it when you add a model, or you can add it from the table below. Power adapters and PoE injectors are listed in Fortinet's FortiExtender ordering information:

The UK adapter is a 10-pack in Fortinet's description; for one or two units we can quote the right power option at quote.

What you order with it

Subscription and support part numbers for the hardware above. We confirm the right tier, term and quantity at quote.

FortiCare for FortiExtender-101G

FortiCare for FortiExtender-211G

FortiCare for FortiExtender-511G

FortiCare for FortiExtender-511G-WIFI

FortiCare for FortiExtenderWAN-50G-EA

FortiCare for FortiExtender-201F-EA

FortiCare for FortiExtender-200F

FortiCare for FortiExtenderVehicle-211F

FortiCare for FortiExtenderVehicle-212F

FortiCare for FortiExtenderVehicle-511G

FortiCare for FortiExtenderRugged-511G

How to order

How ordering works. Press Add next to a part number and it goes into your basket; where the hardware needs a subscription or takes optional support, you pick it in the same step. Add any modules or accessories, then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure FortiExtender gateways with your FortiGate firewalls and SD-WAN as a project, with the scope confirmed at quote (see network installation).

Not sure which model fits? Contact us with your sites, line types and user numbers, and we will suggest a bill of materials.

Vendor sources

• FortiExtender Series Data Sheet (FEXT-DAT-R57, 31 Aug 2026) (opens in a new tab)
• FortiExtender Rugged and Vehicle Series Data Sheet (FEXR-DAT-R08, 5 Aug 2026) (opens in a new tab)
• Fortinet FortiExtender product page (opens in a new tab)