FortiGate 40F
A step up from the 30G: 1 Gbps IPS, five GE ports, SSL-VPN and virtual domains, in the same fanless desktop footprint.
Full specs and SKUsFortinet · FortiGate Entry Level
FortiGate 40F vs FortiGate 50G
Of the 55 specifications Fortinet publishes across these two models, 33 differ. The differences are listed first, then what the step up actually buys and which model fits which site, then every row side by side.
The two models
FortiGate 50G
The base 50G: 2.25 Gbps IPS and 1.1 Gbps threat protection from a fanless desktop box, with a TPM and a signed firmware switch.
Full specs and SKUsKey differences
The rows most buyers check first. All 33 differences are in the full table below.
-
IPS Throughput
FortiGate 40F1 Gbps
FortiGate 50G2.25 Gbps
-
NGFW Throughput
FortiGate 40F800 Mbps
FortiGate 50G1.25 Gbps
-
Threat Protection Throughput
FortiGate 40F600 Mbps
FortiGate 50G1.1 Gbps
-
IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP)
FortiGate 40F5 / 5 / 5 Gbps
FortiGate 50G5 / 5 / 4 Gbps
-
Firewall Latency (64 byte UDP)
FortiGate 40F2.97 microseconds
FortiGate 50G2.42 microseconds
-
Firewall Throughput (packets per second)
FortiGate 40F7.5 Mpps
FortiGate 50G6 Mpps
Which one fits
Stepping up from the FortiGate 40F to the FortiGate 50G moves threat-protection throughput from 600 Mbps to 1.1 Gbps (1.8×), IPS throughput from 1 Gbps to 2.25 Gbps (2.3×) and NGFW throughput from 800 Mbps to 1.25 Gbps (1.6×). Neither choice moves the concurrent session table (700,000 against 720,000) or IPsec VPN throughput (4.4 Gbps against 4.5 Gbps), so a site held back by how many flows can be live at once gains nothing from the FG-50G. The FortiGate 40F is in fact ahead on packet-per-second forwarding: 7.5 Mpps against 6 Mpps.
Choose the FortiGate 40F if
- Threat-protection throughput is already enough at 600 Mbps: the FG-50G adds 1.8× you will not use.
- The FG-40F is ahead on packet-per-second forwarding: 7.5 Mpps against 6 Mpps.
- The FG-40F is ahead on the VDOM ceiling: 10 default / 10 maximum against 5 default / 5 maximum.
- Your limit is how many flows can be live at once, which the step up does not move: 700,000 against 720,000.
Choose the FortiGate 50G if
- Threat-protection throughput has to go past 600 Mbps: the FG-50G publishes 1.1 Gbps.
- IPS throughput has to go past 1 Gbps: the FG-50G publishes 2.25 Gbps.
- NGFW throughput has to go past 800 Mbps: the FG-50G publishes 1.25 Gbps.
- Only the FG-50G has Trusted Platform Module.
22 of the 55 published rows are identical — Firewall Policies at 2,000, Gateway-to-Gateway IPsec VPN Tunnels at 200, Client-to-Gateway IPsec VPN Tunnels at 250 and Maximum Number of FortiSwitches Supported at 8 among them — so the choice does not touch any of those.
Full specification comparison
Every published row for both models, grouped the way Fortinet groups them. A dash means the figure is not published for that model.
| Specification | FortiGate 40F | FortiGate 50G |
|---|---|---|
| Hardware | ||
| GE RJ45 WAN Ports | 1 (WAN / DMZ) | 1 |
| GE RJ45 Internal Ports | 3 internal | 3 |
| GE RJ45 FortiLink Ports (default) | 1 | 1 |
| GE RJ45 PoE/PoE+ Ports | Not fitted | Not published |
| Console Port (RJ45) | 1 | 1 |
| USB Ports | 1 | 1 |
| Onboard Storage | Not fitted | Not fitted |
| Included Transceivers | None | Not published |
| Trusted Platform Module (TPM) | Not fitted | Yes |
| Bluetooth Low Energy (BLE) | Not fitted | Yes |
| Signed Firmware Hardware Switch | Not fitted | Yes |
| Wireless Interface | Not fitted - see the FortiWiFi 40F for the wireless variant | Not fitted - see the FortiWiFi 50G for the wireless variant |
| Cellular Modem | Not fitted - see the FortiGate 40F-3G4G for the LTE variant | Not published |
| Antenna Ports (SMA) | Not fitted | Not fitted |
| SIM Slots (nano SIM) | Not fitted | Not fitted |
| System Performance - Enterprise Traffic Mix | ||
| IPS Throughput | 1 Gbps | 2.25 Gbps |
| NGFW Throughput | 800 Mbps | 1.25 Gbps |
| Threat Protection Throughput | 600 Mbps | 1.1 Gbps |
| System Performance | ||
| IPv4 Firewall Throughput (1518 / 512 / 64 byte UDP) | 5 / 5 / 5 Gbps | 5 / 5 / 4 Gbps |
| Firewall Latency (64 byte UDP) | 2.97 microseconds | 2.42 microseconds |
| Firewall Throughput (packets per second) | 7.5 Mpps | 6 Mpps |
| Concurrent Sessions (TCP) | 700,000 | 720,000 |
| New Sessions per Second (TCP) | 35,000 | 85,000 |
| Firewall Policies | 2,000 | 2,000 |
| IPsec VPN Throughput (512 byte) | 4.4 Gbps | 4.5 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 200 | 200 |
| Client-to-Gateway IPsec VPN Tunnels | 250 | 250 |
| Concurrent SSL-VPN Users (recommended maximum, tunnel mode) | 200 | Not supported |
| SSL-VPN Throughput | 490 Mbps | Not supported |
| SSL Inspection Throughput (IPS, average HTTPS) | 310 Mbps | 1.3 Gbps |
| SSL Inspection Connections per Second (IPS, average HTTPS) | 320 | 699 |
| SSL Inspection Concurrent Sessions (IPS, average HTTPS) | 55,000 | 74,000 |
| Application Control Throughput (HTTP 64K) | 990 Mbps | 2.8 Gbps |
| CAPWAP Throughput (HTTP 64K) | 3.5 Gbps | 3.8 Gbps |
| Virtual Domains (VDOMs) | 10 default / 10 maximum | 5 default / 5 maximum |
| Maximum Number of FortiSwitches Supported | 8 | 8 |
| Maximum Number of FortiAPs (total / tunnel mode) | 16 / 8 | 16 / 8 |
| Maximum Number of FortiTokens | 500 | 500 |
| High Availability Configurations | Active-Active, Active-Passive, Clustering | Active-Active, Active-Passive, Clustering |
| Dimensions | ||
| Height x Width x Length | 1.5 x 8.5 x 6.3 in (38.5 x 216 x 160 mm) | 1.6 x 8.5 x 6.3 in (40.5 x 216 x 160 mm) |
| Weight | 2.2 lbs (1 kg) | 2.2 lbs (1.0 kg) |
| Form Factor | Desktop (supports EIA / non-EIA standards) | Desktop (supports EIA / non-EIA standards) |
| Rack Mount Type | Not applicable - optional rack tray, SP-RACKTRAY-02 | Not applicable - optional rack tray, SP-RACKTRAY-02 |
| Power and Environment | ||
| Power Rating | 12 VDC, 3 A | 12 VDC, 3 A |
| Power Source | 100-240 V AC, 50/60 Hz via external DC adapter | 100-240 V AC, 50/60 Hz via external DC adapter |
| Maximum Current | 100 V / 0.2 A, 240 V / 0.1 A | 100 V / 0.4 A, 240 V / 0.2 A |
| Power Consumption | 7.74 W / 9.46 W average / maximum | 8.3 W / 8.9 W average / maximum |
| Heat Dissipation | 52.55 BTU/hr | 30.35 BTU/hr |
| Operating Temperature | 32-104 F (0-40 C) | 32-104 F (0-40 C) |
| Storage Temperature | -31-158 F (-35-70 C) | -31-158 F (-35-70 C) |
| Humidity | 10% to 90% non-condensing | 10% to 90% non-condensing |
| Operating Altitude | Up to 7,400 ft (2,250 m) | Up to 10,000 ft (3,048 m) |
| Noise Level | Fanless, 0 dBA | Fanless, 0 dBA |
| Compliance and Certifications | ||
| Compliance | FCC, ICES, CE, RCM, VCCI, BSMI, UL/cUL, CB | FCC, ISED, CE, UL/cUL, CB |
| Certifications | USGv6 / IPv6 | USGv6 / IPv6 |
Other comparisons in this range
Each step of the FortiGate Entry Level ladder, set against the model above it.
Not sure which one fits?
Tell us the throughput, port count and inspection features you need. We will confirm the right model, licence term and lead time, then quote it.
Request a Quote