Fortinet
FG-40FFortinet FortiGate 40F
List PriceThe Fortinet FortiGate 40F is a compact, fanless desktop next-generation firewall with secure SD-WAN, built for branch offices and mid-sized businesses. System-on-a-chip acceleration delivers 5 Gbps of firewall throughput, 1 Gbps of IPS and 600 Mbps of full threat protection.
It carries five GE RJ45 ports — 1 WAN, 3 internal and 1 FortiLink — and handles 700,000 concurrent sessions with 35,000 new sessions per second. IPsec VPN runs at 4.4 Gbps with up to 200 gateway-to-gateway tunnels, and SSL-VPN at 490 Mbps for up to 200 concurrent users.
The FortiLink port integrates FortiSwitch access hardware under the firewall’s management (up to 8 switches and 16 FortiAPs), and the unit runs silent at 0 dBA from an external power adapter — practical for desks and small comms cupboards.
Key features
- 5 Gbps firewall throughput, 1 Gbps IPS, 800 Mbps NGFW, 600 Mbps threat protection
- 5× GE RJ45 ports — 1 WAN, 3 internal, 1 FortiLink
- IPsec VPN at 4.4 Gbps — 200 gateway-to-gateway and 250 client-to-gateway tunnels
- SSL-VPN at 490 Mbps — up to 200 concurrent tunnel-mode users
- 700,000 concurrent sessions, 35,000 new sessions/second
- Manages the access layer — up to 8 FortiSwitches and 16 FortiAPs
- Fanless, 0 dBA desktop unit, 1 kg
- High availability — active/active, active/passive and clustering
Works with
Frequently asked questions
Hardware only or a bundle?
Hardware only includes the appliance; the FortiGuard security services that power IPS, web filtering and threat protection are subscriptions. The bundles pair the hardware with FortiCare Premium support plus either Unified Threat Protection (UTP) or Enterprise Protection for 1, 3 or 5 years — usually the simpler and cheaper way to buy the first term.
What is the FortiWifi 40F?
The FortiWifi 40F is the same platform with a built-in single radio (2.4 GHz / 5 GHz, 802.11a/b/g/n/ac Wave 2) wireless access point, so a small site needs no separate AP. The FortiGate 40F listed here has no wireless interface.
Is the 40F big enough for my site?
It suits small branches: 5 Gbps of raw firewall throughput but 600 Mbps of full threat protection, which is the realistic ceiling with all inspection on. If the site’s internet connection is near or above that, step up to the FortiGate 60F (10 Gbps firewall, 700 Mbps threat protection).
Sizing a FortiGate deployment? Call 0333 242 1314 or email sales@clisecure.com.
Interfaces and Modules
| GE RJ45 WAN / DMZ Ports | 1 |
|---|---|
| GE RJ45 Internal Ports | 3 |
| GE RJ45 FortiLink Ports | 1 |
| USB Ports | 1 |
| Console (RJ45) | 1 |
System Performance — Enterprise Traffic Mix
| IPS Throughput | 1 Gbps |
|---|---|
| NGFW Throughput | 800 Mbps |
| Threat Protection Throughput | 600 Mbps |
System Performance
| Firewall Throughput (1518 / 512 / 64 byte UDP packets) | 5/5/5 Gbps |
|---|---|
| Firewall Latency (64 byte UDP packets) | 2.97 μs |
| Firewall Throughput (Packets Per Second) | 7.5 Mpps |
| Concurrent Sessions (TCP) | 700,000 |
| New Sessions/Second (TCP) | 35,000 |
| Firewall Policies | 5,000 |
| IPsec VPN Throughput (512 byte) | 4.4 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 200 |
| Client-to-Gateway IPsec VPN Tunnels | 250 |
| SSL-VPN Throughput | 490 Mbps |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 200 |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 310 Mbps |
| SSL Inspection CPS (IPS, avg. HTTPS) | 320 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 55,000 |
| Application Control Throughput (HTTP 64K) | 990 Mbps |
| CAPWAP Throughput (HTTP 64K) | 3.5 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 10 |
| Maximum Number of FortiSwitches Supported | 8 |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 16 / 8 |
| Maximum Number of FortiTokens | 500 |
| High Availability Configurations | Active / Active, Active / Passive, Clustering |
Dimensions
| Height x Width x Length (inches) | 1.5 x 8.5 x 6.3 |
|---|---|
| Height x Width x Length (mm) | 38.5 x 216 x 160 |
| Weight | 2.2 lbs (1 kg) |
| Form Factor | Desktop |
| Input rating | 12Vdc, 3A |
| Power Required | Powered by External DC Power Adapter, 100–240V AC, 50/60 Hz |
| Power Consumption (Average / Maximum) | 7.74 W / 9.46 W |
| Maximum Current | 100V AC / 0.2A, 240V AC / 0.1A |
| Heat Dissipation | 52.55 BTU/hr |
Operating Environment and Certifications
| Operating Temperature | 32–104°F (0–40°C) |
|---|---|
| Storage Temperature | -31–158°F (-35–70°C) |
| Humidity | 10–90% non-condensing |
| Noise Level | Fanless 0 dBA |
| Operating Altitude | Up to 7,400 ft (2,250 m) |
| Compliance | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB |
| Certifications | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN |
Product details
| Brand | Fortinet |
|---|---|
| Part number | FG-40F |
Interfaces and Modules
| GE RJ45 WAN / DMZ Ports | 1 |
|---|---|
| GE RJ45 Internal Ports | 3 |
| GE RJ45 FortiLink Ports | 1 |
| USB Ports | 1 |
| Console (RJ45) | 1 |
System Performance — Enterprise Traffic Mix
| IPS Throughput | 1 Gbps |
|---|---|
| NGFW Throughput | 800 Mbps |
| Threat Protection Throughput | 600 Mbps |
System Performance
| Firewall Throughput (1518 / 512 / 64 byte UDP packets) | 5/5/5 Gbps |
|---|---|
| Firewall Latency (64 byte UDP packets) | 2.97 μs |
| Firewall Throughput (Packets Per Second) | 7.5 Mpps |
| Concurrent Sessions (TCP) | 700,000 |
| New Sessions/Second (TCP) | 35,000 |
| Firewall Policies | 5,000 |
| IPsec VPN Throughput (512 byte) | 4.4 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 200 |
| Client-to-Gateway IPsec VPN Tunnels | 250 |
| SSL-VPN Throughput | 490 Mbps |
| Concurrent SSL-VPN Users (Recommended Maximum, Tunnel Mode) | 200 |
| SSL Inspection Throughput (IPS, avg. HTTPS) | 310 Mbps |
| SSL Inspection CPS (IPS, avg. HTTPS) | 320 |
| SSL Inspection Concurrent Session (IPS, avg. HTTPS) | 55,000 |
| Application Control Throughput (HTTP 64K) | 990 Mbps |
| CAPWAP Throughput (HTTP 64K) | 3.5 Gbps |
| Virtual Domains (Default / Maximum) | 10 / 10 |
| Maximum Number of FortiSwitches Supported | 8 |
| Maximum Number of FortiAPs (Total / Tunnel Mode) | 16 / 8 |
| Maximum Number of FortiTokens | 500 |
| High Availability Configurations | Active / Active, Active / Passive, Clustering |
Dimensions
| Height x Width x Length (inches) | 1.5 x 8.5 x 6.3 |
|---|---|
| Height x Width x Length (mm) | 38.5 x 216 x 160 |
| Weight | 2.2 lbs (1 kg) |
| Form Factor | Desktop |
| Input rating | 12Vdc, 3A |
| Power Required | Powered by External DC Power Adapter, 100–240V AC, 50/60 Hz |
| Power Consumption (Average / Maximum) | 7.74 W / 9.46 W |
| Maximum Current | 100V AC / 0.2A, 240V AC / 0.1A |
| Heat Dissipation | 52.55 BTU/hr |
Operating Environment and Certifications
| Operating Temperature | 32–104°F (0–40°C) |
|---|---|
| Storage Temperature | -31–158°F (-35–70°C) |
| Humidity | 10–90% non-condensing |
| Noise Level | Fanless 0 dBA |
| Operating Altitude | Up to 7,400 ft (2,250 m) |
| Compliance | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB |
| Certifications | ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN |
Product details
| Brand | Fortinet |
|---|---|
| Part number | FG-40F |
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.