Fortinet FortiGate/FortiWiFi 40 F series NGFW Entry level Network SD WAN firewall

Fortigate / Fortiwifi 40F Series are both are same in hardware features, their only difference is in wireless capabilities. These firewalls feature high security and  SD-WAN ( Software Defined - Wide Area Network) solutions in a compact size fanless system form factor. It is an ideal choice for security-driven networks at distributive sites and transforming  WAN architecture at any scale.

KEY POINTS

• Firewall throughput of 5 Gbps up to 1518 UDP bytes
• Support up to 7 lakh concurrent sessions 
• 1 Gbps of Intrusion prevention system for enhances security 
• The throughput of NGFW is upto 800 Mbps
• Threat protection output of 600 Mbps
• AI / ML-powered FortiGuard security 
• Integrate with SD-WAN and ZeroTrust Network Access 
• Soc4 processor chipset for SD-WAN 

SPECIFICATION 

General
Variant		FortiGate		FortiWifi
Model		FG-40F		FWF-40F
Console Port		1
USB Port		1
GE RJ45 Internal Port		3
GE RJ45 WAN / DMZ Port		1
GE RJ45 Fortilink Port		1
SMA Antenna Ports		0			3
Wireless Interfaces		-			Single Radio (2.4GHz/5GHz) 802.11 /a/b/g/n/ac-W2
Performance & Capacity
Firewall Throughput
IPV4 (1518 / 512 / 64 byte, UDP)		5 Gbps
Latency (64 bytes, UDP)		4 μs
PPS (Packet Per Second)		7.4 Mpps
TCP Concurrent Session		700000
New Sessions/Second (TCP)		35000
Firewall Policy		5000
VPN Streams (512 bytes)		4.5 Gbps
IPsec VPN Tunnels	Gateway-to-Gateway	200
	Client-to-Gateway	250
SSL-VPN		490 Mbps
Max.Concurrent SSL-VPN Users		200
SSL Inspection (IPS,Avg.HTTPS)		310 Mbps
SSL Inspection CPS		320
Concurrent session SSL Inspection (IPS,Avg.HTTPS)		55000
Application Control		990 Mbps
NGFW		3.5 Gbps
Virtual Domains (Default / Maximum)		10/10
Max.No.of.Fortiswitch support		8
Max. No.of.FortiAPs (Total / Tunnel)		16/8
Max. No.of.Foretokens		500
Max. No.of. Client (registered)		200
Availability Configurations		Active / Active, Active / Passive, Clustering
Operating Environment
Operating Temperature		0° – 40°C
Storage Temperature		-35° – 70°C
Humidity		10%–90% non-condensing
Altitude		Up to 2,250 m(7,400 ft)
Compliance		FCC Part 15 Class B, C-Tick, VCCI, CE, UL/cUL, CB
Certification:  ICSA Labs: Firewall, IPsec, IPS, Antivirus, SSL-VPN
Dimension & Power
Power Required		100–240V AC, 60–50 Hz (External DC Power Adapter, 12 VDC)
Power Consumption (Avg/Max)		7.74 W / 9.46 W			14.6 W / 16.6 W
Current		100V AC / 0.2A, 240V AC / 0.1A
Heat dissipation		52.55 BTU/hr			56.64 BTU/hr
Noise Level		Fanless 0 dBA
Height x Width x Length		1.44 x 5.5 x 8.52 inch /38.5 x 140 x 216 mm
Weight		1.0 kg
Form Factor		Desktop

SUITABILITY: These FG 40F /FWIFI 40F firewalls are the ideal perfect solution for Small to medium scale business that requires superior security to prevent from cyber threats.It also has unpredictability ability to handle SD-WAN and network security. These entire tasks were handled by the chipset as SOC4 SPU (security Processing Unit ) from Fortinet’s firewall solutions. The purpose of these chips is to build SD-WAN ASICs which provides to accelerate SD-WAN, advance routing, industries-leading security, and increase performance. These appliances are widely used for large-scale enterprise level i.e to provide flexibility of both WAN edge and thin edge platforms. It will help to secure all applications, users, and data from anywhere.

“Fortiwifi 40F & 3G4G integrated wireless interface with dual-band data stream as 2.4 Ghz & 5 Ghz follows by 802.11ac standard  ”

Fig: Deployment of Small office & branch enterprise

Normally, these product comes in several variants of Fortigate 40F, FortiWiFi 40F, Fortigate 40F 3G4G, and FortiWiFi 40F 3G4G.These Fortigate 40F 3G4G and FortiWiFi 40F 3G4G integrate cellular modem with SMA (SubMiniature version A) antenna port and dual nano sim slot. 

Additional Interfaces	Fortigate 40F 3G4G	FortiWiFi 40F 3G4G
Cellular Modem	3G4G LTE	3G4G LTE
Wireless Interfaces		Single Radio (2.4GHz/5GHz), 802.11 a/b/g/n/ac-W2
Sim Slot (Nano)	2	2
SMA Antenna port	3	6
Power Consumption (AVg/Max)	15.8 W / 18.6 W	18.6 W / 19.8 W
Heat dissipation	63.5 BTU/h	67.6 BTU/h
Dimension (HxWxL)	1.6 x 8.5 x 6.3 inch / 40.5 x 216 x 160 mm
Form Factor	Desktop

Table: Shows additional interfaces of Fortigate /Fortiwifi40F 3G4G

PRODUCT INTERFACES

AI/ML security: These AI-powered securities not only provide industry-leading security protection and also decryption at any scale with custom ASIC architecture. This custom architecture provides industrial-leading threat protection along with decryption at any scale. It conducts in-depth network traffic analysis and identifies thousands of applications.  This enables advanced security protection and inspection service for advanced traffic management.

SOC4 PERFORMANCE: A custom SOC4 security processor unit  (SPU) allows these firewalls to provide exceptional threat protection performance with ultra-low latency. With SD-WAN ASICs apart, the performance of the application is lightning faster identification, and steering more than 5K applications by enabling edge WAN.

Overall, This chipset accelerates the overlay performance of VPN IPsec with low latency and avoids delay accessible by users. This SPU  technology ensures a high industry-leading security function and protection from SSL encryption traffic. Enhances SD-Branch transformation with integrated switches and access points to extend security to the access layer.

NETWORKING:-These networking firewalls deliver extensive static /dynamic routing, switching, wireless controller, and high-performance IPsec VPN capabilities such as encrypting/ decrypting. Using the FortiASIC network processor accelerates offloading traffic. Provide a robust and all-in-one solution for organizations by combining network and security functionality. Using ZTNA (ZeroTrust Network Access) enables control of the application anywhere it is hosted using universal application policies. Each time it provides an extended authentication check and enforces policy prior to provide an access to the application. Several deployment options are available, including a Next Generation Firewall and Secure SD-WAN, which maximized versatility. 

Fortiwifi 40F and 3G4G variants are integrated with MU-MIMO technology which is used to handle multiple transmit devices simultaneously. Those two models come up with 3x3 MU MIMO technology and provide the maximum wifi speed range of 1300 Mbps at  5 GHz and 450 Mbps at  2.4 GHz.

Interfaces	Fortiwifi 40F	FortiWifi 40F 3G4G
MU MIMO	3 x 3
Wifi Speed (max)	1300 Mbps @ 5 GHz, 450 Mbps @ 2.4 GHz
Max.Tx power	20 dBm
Antenna Gain	3.5 dBi @ 5GHz, 5 dBi @ 2.4 GHz

SECURITY PROCESSING UNIT (SPU)

This custom-built Security processing unit technology is to enhance security capabilities. It handles sophisticated threats and attacks such as content and connection. This custom SPU delivers exceptional processing power i.e to handle up to 520 Gbps of threat output. These network security solutions detect and block malicious content while avoiding performance bottlenecks.

Advantage ASIC SOC4

These SD-WAN ASIC SOC4s get their performance from Fortinet's proprietary Security Processing Unit (SPU) as content and network processors.

• Identify applications faster and steer them for efficient business operations.
• Significantly accelerates IPsec VPN performance for user experience via a direct network.
• Facilitates best-of-breed NGFW security and high-performance Deep SSL Inspection.
• Enhances SD-Branch transformation with integrated switches and access points to extend security to the access layer.

USES CASES 

SD-WAN  

• FortiGate WAN Edge is powered by a unified security and management framework, which enables the transformation and securing of WANs through a single operating system.
• This solution delivers a superior quality of experience and effective security posture, particularly for work-from-anywhere models, SD-Branch, and cloud-first WAN use cases.
• It enables operational efficiencies at any scale through automation, deep analytics, and self-healing capabilities.

ZTNA  ( ZeroTrust Network Access ) 

• Application access control solution allows for universal application of access policies, regardless of the user's location or the application hosted location.
• Every time it provides comprehensive authentication, checks, and policy enforcement prior to granting access to applications.
• It offers agent-based access through FortiClient or agentless access via a proxy portal for guest users.

HARDWARE INTERFACE

1.1 x USB Port  2. 1 x Console Port 3. 1 x GE RJ45 WAN Port  4. 1 x GE RJ45 FortiLink Port 5. 3 x GE RJ45 Ethernet Ports

Features: SOC4 chipset,desktop form factor and 3G4G modem / wifi 802.11 ac a/b/g/n /ac-W2

 

SOFTWARE 

FortiOS6.2 is to control all the security and networking capabilities across the entire FortiGate platform. The system provides industry-leading protection, as evidenced by its validation from various independent security agencies such as NSS Labs, VB100, AV-Comparatives, and ICSA. Thousands of applications are controlled, exploits are blocked, and real-time URL ratings are used to filter traffic. The system is integrated with an advanced threat protection framework that detects, contains, and blocks advanced attacks automatically within minutes. These OS sync with a different device to manage identities endpoint.It provides a variety of SDN connectors that pull objects from third-party vendors.

 

SERVICE WE GET FROM FORTINET

Fortinet will provide both security and supportive services as FortiGuard and Forticare. These FortiGuard lab services offer real-time intelligent services for the Fortinet firewall platform. They collaborated with world-leading companies and thirty-party vendors to compromise the security threats solutions.To optimize your current security capabilities they provide a bundle package as the FortiGuard Enterprise bundle. These Forticare support services will help to get 24/7  technical support and services to all the Fortinet firewall platforms products. They offer all types of services to small - large-scale businesses based on their requirements.

FORTIGUARD SERVICES FROM FORTIGATE

AI-Powered Security: FortiGuard Labs security threat researchers, engineers, and forensic specialists work to counter threats in real-time with AI-powered and coordinated protection.

Web Security: Advanced URL, DNS, and Video Filtering delivered from the cloud provides complete protection against web-borne perishing attacks.  ZTNA traffic inspection service and posture check service provide per-session access control to applications via the dynamic inline CASB (Cloud Access Security Broker) service. It extends protection to remote and mobile users via FortiClient Fabric Agent.

Content Security: This technology helps you to prevent known and unknown threats and file-based tactic attacks. Ransomware, malware, and credential-based attacks are addressed using CPRL (Compact Pattern Recognition Language), AV, and an inline Sandbox.

Device Security: IT, IIoT, and OT (Operational Technology) devices are protected from vulnerabilities and device-based attacks with advanced security technologies. By providing near-real-time IPS intelligence, this platform monitors ICS/OT/SCADA protocols, identifies threats in real time, and blocks them, while offering automated discovery, segmentation, and pattern identification capabilities. Advanced NOC and SOC management tools attached to NGFW provide simplified and faster time-to-activation

ORDER INFORMATION

Manufacturer of the product is responsible for all warranties, which are dependent on the date of purchase and their validity. At Grabnpay, we take responsibility for ensuring that the products we sell are delivered on time and in their original condition. If you encounter any physical damage or operational issues with your purchase, our team will assist you in finding an appropriate solution. We offer support for device installation, configuration, and management. If you need to claim a warranty, we will guide you through the process of contacting the manufacturer and help you until the process is complete.

Variant	Description
FortiGate 40F	5 x GE RJ45 ports (including 4 x Internal Ports, 1 x WAN Ports)
FortiWiFi 40F	5 x GE RJ45 ports (including 4 x Internal Ports, 1 x WAN Ports), Wireless (802.11a/b/g/n/ac-W2)
FortiGate 40F 3G4G	5 x GE RJ45 ports (Including 1 x WAN port, 4 x Switch ports) with Embedded 3G/4G/LTE wireless wan module, external SMA WAN antennas included.
FortiWiFi 40F 3G4G	5 x GE RJ45 ports (Including 1 x WAN port, 4 x Switch ports) with Embedded 3G/4G/LTE wireless wan module, Wireless (802.11a/b/g/n/acW2), external SMA WWAN and wireless antennas included.