In short
The FortiGate 40F is a desktop next-generation firewall for small offices: 5 gigabit ports, 600 Mbps threat protection, and a 3G4G version with a built-in LTE modem for backup or primary internet. HA pair codes are available. Security services are FortiGuard subscriptions. Forever Systems, a Fortinet Advocate Partner, can quote, supply and install it.
Order the FortiGate 40F
Add products and licences to your basket, then check out when you are ready.
What the FortiGate 40F is
The 40F sits in the Fortinet Entry-Level (Branch) group, between the 30G and the 50G. It has five gigabit RJ45 ports (one WAN, four internal), runs FortiOS with integrated SD-WAN, and in the 3G4G version adds an embedded 3G/4G/LTE wireless WAN module with three external antennas, so a site can run on mobile data or fail over to it when the fixed line drops.
Fortinet still lists the 40F in its current models table, and every 40F part number below is current.
FortiGate 40F models and part numbers
Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.
| Part number | Model | Vendor description | Key specs | What you order with it | Status | Basket |
|---|---|---|---|---|---|---|
| FG-40F | FG-40F | FortiGate-40F 5 x GE RJ45 ports (including , 1 x WAN Port, 4 x Internal Ports) | 5 x GE RJ45 ports (including , 1 x WAN Port, 4 x Internal Ports); desktop | Optional: FortiGuard and FortiCare services for FortiGate-40F | Current | |
| FG-40F-HA | FG-40F | FortiGate-40F 5 x GE RJ45 ports (including , 1 x WAN Port, 4 x Internal Ports).FG-XX-HA SKUs must to be bought in pairs and entitle HA pair to leverage single service contracts. (limited to… | 5 x GE RJ45 ports (including , 1 x WAN Port, 4 x Internal Ports); desktop | Optional: FortiGuard and FortiCare services for FortiGate-40F | Current | |
| FG-40F-3G4G | FG-40F-3G4G | FortiGate-40F-3G4G 5 x GE RJ45 ports (including 1 x WAN Port, 4 x Internal Ports) with Embedded 3G/4G/LTE wireless wan module, 3 external SMA WWAN antennas included | 5 x GE RJ45 ports (including 1 x WAN Port, 4 x Internal Ports) with Embedded 3G/4G/LTE wireless wan module, 3 external SMA WWAN antennas included; desktop | Optional: FortiGuard and FortiCare services for FortiGate-40F-3G4G | Current | |
| FG-40F-3G4G-HA | FG-40F-3G4G | FortiGate-40F-3G4G 5 x GE RJ45 ports (including 1 x WAN Port, 4 x Internal Ports) with Embedded 3G/4G/LTE wireless wan module, 3 external SMA WWAN antennas included.FG-XX-HA SKUs must to be bought… | 5 x GE RJ45 ports (including 1 x WAN Port, 4 x Internal Ports) with Embedded 3G/4G/LTE wireless wan module, 3 external SMA WWAN antennas included; desktop | Optional: FortiGuard and FortiCare services for FortiGate-40F-3G4G | Current |
Add the FortiGate 40F to your basket
Add it and anything else you need, then check out when you are ready.
Choosing a 40F variant
| Part number | What it is | Choose it when |
|---|---|---|
| FG-40F | 5 x GE RJ45 (1 WAN, 4 internal) | A single fixed internet line |
| FG-40F-HA | FG-40F sold for an HA pair | Two firewalls for resilience, sharing one service contract |
| FG-40F-3G4G | FG-40F with embedded 3G/4G/LTE module and 3 antennas | You want 4G backup without a separate router, or a site with no fixed line |
| FG-40F-3G4G-HA | FG-40F-3G4G sold for an HA pair | Resilient pair with built-in LTE |
HA pair part numbers. Fortinet -HA codes "must be bought in pairs and entitle HA pair to leverage single service contracts (limited to Enterprise, UTP, and ATP bundles only)". Order two units of the -HA code for an active-passive or active-active cluster; we confirm the subscription for the pair at quote. We check the LTE bands against your mobile network when we quote.
FortiGate 40F specifications
| Figure | FortiGate 40F (all variants) |
|---|---|
| Threat protection | 600 Mbps |
| NGFW | 800 Mbps |
| IPS | 1 Gbps |
| Firewall (1518 / 512 / 64 byte UDP) | 5 / 5 / 5 Gbps |
| IPsec VPN (512 byte) | 4.4 Gbps |
| Concurrent sessions (TCP) | 700 000 |
| FortiAP access points managed (total / tunnel) | 16 / 8 |
| FortiSwitch switches managed | 8 |
| Form factor | Desktop |
Figures are Fortinet data-sheet figures. Fortinet: "All performance values are 'up to' and vary depending on system configuration." Threat protection is measured with firewall, IPS, application control and malware protection enabled, so it is the figure to size on. Source: FortiGate 40F Series Data Sheet (FG-40F-DAT-R49, 1 Oct 2026) (opens in a new tab).
Feature note. Fortinet: CDR, DNS/video filtering and inline CASB are "not available for FortiGate/FortiWiFi 40F, 60E, 60F, 80E, and 90E series from 7.4.4 onwards". If you need them, check the feature notes in the data sheet of each model you shortlist; we confirm them at quote.
Not sure what you need?
Tell us about your sites and we will recommend the right kit and licences.
Subscriptions and support
The security services that make a FortiGate firewall a next-generation firewall come as FortiGuard subscriptions: the Advanced Threat Protection (ATP), Unified Threat Protection (UTP) or Enterprise Protection (ENT) bundle, the SD-WAN bundle, or single services, for 1, 3 or 5 years. Fortinet says "All bundles include FortiCare Premium Services"; FortiCare support can also be bought on its own. FortiGuard bundles compared explains what each bundle adds.
What you order with it
Subscription and support part numbers for the hardware above. We confirm the right tier, term and quantity at quote.
FortiGuard and FortiCare services for FortiGate-40F
| Part number | Description | Term | Basket |
|---|---|---|---|
| FC-10-0040F-247-02-12 | FortiGate-40F 1 Year FortiCare Premium Support | 1 year | |
| FC-10-0040F-247-02-36 | FortiGate-40F 3 Year FortiCare Premium Support | 3 years | |
| FC-10-0040F-247-02-60 | FortiGate-40F 5 Year FortiCare Premium Support | 5 years | |
| FC-10-0040F-284-02-12 | FortiGate-40F 1 Year FortiCare Elite Support | 1 year | |
| FC-10-0040F-284-02-36 | FortiGate-40F 3 Year FortiCare Elite Support | 3 years | |
| FC-10-0040F-284-02-60 | FortiGate-40F 5 Year FortiCare Elite Support | 5 years | |
| FC-10-0040F-314-02-12 | FortiGate-40F 1 Year FortiCare Essential Support | 1 year | |
| FC-10-0040F-314-02-36 | FortiGate-40F 3 Year FortiCare Essential Support | 3 years | |
| FC-10-0040F-314-02-60 | FortiGate-40F 5 Year FortiCare Essential Support | 5 years | |
| FC-10-0040F-809-02-12 | FortiGate-40F 1 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 1 year | |
| FC-10-0040F-809-02-36 | FortiGate-40F 3 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 3 years | |
| FC-10-0040F-809-02-60 | FortiGate-40F 5 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 5 years | |
| FC-10-0040F-928-02-12 | FortiGate-40F 1 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 1 year | |
| FC-10-0040F-928-02-36 | FortiGate-40F 3 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 3 years | |
| FC-10-0040F-928-02-60 | FortiGate-40F 5 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 5 years | |
| FC-10-0040F-950-02-12 | FortiGate-40F 1 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and… | 1 year | |
| FC-10-0040F-950-02-36 | FortiGate-40F 3 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and… | 3 years | |
| FC-10-0040F-950-02-60 | FortiGate-40F 5 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and… | 5 years | |
| FC-10-0040F-1337-02-12 | FortiGate-40F 1 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, SASE Secure Private Access (SPA) Connector… | 1 year | |
| FC-10-0040F-1337-02-36 | FortiGate-40F 3 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, SASE Secure Private Access (SPA) Connector… | 3 years | |
| FC-10-0040F-1337-02-60 | FortiGate-40F 5 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, SASE Secure Private Access (SPA) Connector… | 5 years |
FortiGuard and FortiCare services for FortiGate-40F-3G4G
| Part number | Description | Term | Basket |
|---|---|---|---|
| FC-10-F40FG-247-02-12 | FortiGate-40F-3G4G 1 Year FortiCare Premium Support | 1 year | |
| FC-10-F40FG-247-02-36 | FortiGate-40F-3G4G 3 Year FortiCare Premium Support | 3 years | |
| FC-10-F40FG-247-02-60 | FortiGate-40F-3G4G 5 Year FortiCare Premium Support | 5 years | |
| FC-10-F40FG-284-02-12 | FortiGate-40F-3G4G 1 Year FortiCare Elite Support | 1 year | |
| FC-10-F40FG-284-02-36 | FortiGate-40F-3G4G 3 Year FortiCare Elite Support | 3 years | |
| FC-10-F40FG-284-02-60 | FortiGate-40F-3G4G 5 Year FortiCare Elite Support | 5 years | |
| FC-10-F40FG-314-02-12 | FortiGate-40F-3G4G 1 Year FortiCare Essential Support | 1 year | |
| FC-10-F40FG-314-02-36 | FortiGate-40F-3G4G 3 Year FortiCare Essential Support | 3 years | |
| FC-10-F40FG-314-02-60 | FortiGate-40F-3G4G 5 Year FortiCare Essential Support | 5 years | |
| FC-10-F40FG-809-02-12 | FortiGate-40F-3G4G 1 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 1 year | |
| FC-10-F40FG-809-02-36 | FortiGate-40F-3G4G 3 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 3 years | |
| FC-10-F40FG-809-02-60 | FortiGate-40F-3G4G 5 Year Enterprise Protection (IPS, DLP, AMP, Antispam, AI-Based Malware Prevention, Application Control, URL/DNS/Video Filtering… | 5 years | |
| FC-10-F40FG-928-02-12 | FortiGate-40F-3G4G 1 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 1 year | |
| FC-10-F40FG-928-02-36 | FortiGate-40F-3G4G 3 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 3 years | |
| FC-10-F40FG-928-02-60 | FortiGate-40F-3G4G 5 Year Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium) | 5 years | |
| FC-10-F40FG-950-02-12 | FortiGate-40F-3G4G 1 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam… | 1 year | |
| FC-10-F40FG-950-02-36 | FortiGate-40F-3G4G 3 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam… | 3 years | |
| FC-10-F40FG-950-02-60 | FortiGate-40F-3G4G 5 Year Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam… | 5 years | |
| FC-10-F40FG-1337-02-12 | FortiGate-40F-3G4G 1 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, SASE Secure Private Access (SPA) Connector… | 1 year | |
| FC-10-F40FG-1337-02-36 | FortiGate-40F-3G4G 3 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, SASE Secure Private Access (SPA) Connector… | 3 years | |
| FC-10-F40FG-1337-02-60 | FortiGate-40F-3G4G 5 Year SD-WAN Service Bundle (SD-WAN Underlay & Application Monitoring, Overlay Orchestration, SASE Secure Private Access (SPA) Connector… | 5 years |
Hardware plus bundle part numbers
Fortinet also sells the hardware and a bundle as one part number: -BDL-950 codes are the hardware plus FortiCare Premium and FortiGuard Unified Threat Protection, and -BDL-809 codes the hardware plus FortiCare Premium and FortiGuard Enterprise Protection, each for 1, 3 or 5 years. They are an alternative to ordering the appliance and the bundle as two lines.
| Part number | Fortinet description | Term | Basket |
|---|---|---|---|
| FG-40F-BDL-809-12 | FortiGate-40F Hardware plus 1 Year FortiCare Premium and FortiGuard Enterprise Protection | 1 year | |
| FG-40F-BDL-809-36 | FortiGate-40F Hardware plus 3 Year FortiCare Premium and FortiGuard Enterprise Protection | 3 years | |
| FG-40F-BDL-809-60 | FortiGate-40F Hardware plus 5 Year FortiCare Premium and FortiGuard Enterprise Protection | 5 years | |
| FG-40F-BDL-950-12 | FortiGate-40F Hardware plus 1 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 1 year | |
| FG-40F-BDL-950-36 | FortiGate-40F Hardware plus 3 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 3 years | |
| FG-40F-BDL-950-60 | FortiGate-40F Hardware plus 5 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 5 years | |
| FG-40F-3G4G-BDL-809-12 | FortiGate-40F-3G4G Hardware plus 1 Year FortiCare Premium and FortiGuard Enterprise Protection | 1 year | |
| FG-40F-3G4G-BDL-809-36 | FortiGate-40F-3G4G Hardware plus 3 Year FortiCare Premium and FortiGuard Enterprise Protection | 3 years | |
| FG-40F-3G4G-BDL-809-60 | FortiGate-40F-3G4G Hardware plus 5 Year FortiCare Premium and FortiGuard Enterprise Protection | 5 years | |
| FG-40F-3G4G-BDL-950-12 | FortiGate-40F-3G4G Hardware plus 1 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 1 year | |
| FG-40F-3G4G-BDL-950-36 | FortiGate-40F-3G4G Hardware plus 3 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 3 years | |
| FG-40F-3G4G-BDL-950-60 | FortiGate-40F-3G4G Hardware plus 5 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) | 5 years |
Accessories
Accessories Fortinet lists for this range (rack and wall mounting, power, console cables and FortiToken hardware tokens for MFA):
| Part number | Vendor description | Type | Basket |
|---|---|---|---|
| FTK-210-20 | FortiToken-210 Twenty pieces one-time password token, time based password generator. Perpetual license, Compatible with FortiGate, FortiAuthenticator and FortiToken… | FortiToken hardware token | |
| FTK-210-5 | FortiToken-210 Five pieces one-time password token, time based password generator. Perpetual license, Compatible with FortiGate, FortiAuthenticator and FortiToken… | FortiToken hardware token | |
| FTK-310-5 | FortiToken-310 5 USB tokens for PKI certificate and client software. Perpetual license. | FortiToken hardware token | |
| FTK-411-20 | FortiToken-411 Twenty pieces of 2FA USB-C interfaced security key that supports FIDO U2F/FIDO2 | FortiToken hardware token | |
| FTK-411-5 | FortiToken-411 Five pieces of 2FA USB-C interfaced security key that supports FIDO U2F/FIDO2 | FortiToken hardware token | |
| SP-CONSOLE-USB-10 | Pack of 10 cables, USB to R45 console port. | Accessory | |
| SP-FG-40F-PA-10 | AC power adaptor Pack of 10 AC power adaptors for FG/FWF-40F & FG/FWF-50F series, come with interchangeable EU, UK and US/JP power plugs | Power adaptor | |
| SP-FG60F-MOUNT-20 | wall mount kits for FG/FWF-40F, FG/FWF-60F, FG70/71F, FG/FWF-80F and FG-90G series Pack of 20 wall mount kits for FG/FWF-30G, FG/FWF-50G series, FG/FWF-60F series , and… | Mounting | |
| SP-RACKTRAY-02 | Rack mount tray for all FortiGate E, F and G series desktop models (except 30G) and backward compatible with SP-RackTray-01. For list of compatible FortiGate products… | Mounting |
Is the FortiGate 40F end of life?
No end of order has been announced for the 40F part numbers listed here, and Fortinet still shows the 40F in its current models table.
The FortiWiFi 40F is different: it is not in the 40F data sheet's ordering table. For a desktop FortiGate firewall with built-in Wi-Fi, see the FortiWiFi 50G or FortiWiFi 70G. Lifecycle dates for older models are on Fortinet end of life.
How to order
How ordering works. Press Add next to a part number and it goes into your basket; where a security subscription or support contract goes with the firewall, you choose it in the same step. Add any accessories, then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the firewalls, VPNs and policies as a project, with the scope confirmed at quote (see network installation).
Vendor sources
How we can help with your network
Forever Systems can design, supply, stage, install and configure the network around the hardware you buy here, as a project or one step at a time.
- Design: we look at your sites, users and existing kit and size the switches, wireless and firewalls to fit
- Supply: every order gets a personalised quote by part number, with the subscriptions and support each product needs
- Stage: we can pre-configure and label equipment before it reaches site
- Install: we can rack and mount switches, access points and firewalls on site
- Configure: VLANs, wireless, firewall policy, VPNs and management platforms set up and documented at handover
Scope is confirmed at quote, so you only pay for the parts of the project you need.
Frequently asked questions
What is the FortiGate 40F?
A Fortinet desktop next-generation firewall with 5 gigabit RJ45 ports and 600 Mbps threat protection, for small offices and branches. The FG-40F-3G4G adds a built-in 3G/4G/LTE modem.
Is the FortiGate 40F end of life?
Not at the time of writing: the FG-40F, FG-40F-HA, FG-40F-3G4G and FG-40F-3G4G-HA part numbers are current and Fortinet lists the 40F in its current models table. The FortiWiFi 40F is no longer in the data sheet's ordering table.
What does FG-40F-HA mean?
It is the FG-40F sold for a high availability pair. Fortinet says HA codes must be bought in pairs and let the pair share one service contract for the ENT, UTP and ATP bundles.
What is the threat protection throughput of the FortiGate 40F?
600 Mbps, from the Fortinet data sheet, with firewall, IPS, application control and malware protection enabled.
Is there a FortiWiFi 40F?
Fortinet no longer lists a FortiWiFi 40F in the 40F data sheet's ordering table. The FortiWiFi 50G (FWF-50G-E) is the desktop Wi-Fi model to look at.
Ready to order?
Build your basket and check out when you are ready.