Fortinet FortiExtender.
5G and LTE WAN That Moves With Your Business.
FortiExtender indoor 5G and LTE gateways deliver reliable cellular WAN connectivity for branch offices, retail,
healthcare, and industrial sites. Manage it directly through FortiOS as a native part of your Security Fabric, with a
model built for primary WAN, failover backup, or remote FortiGate management.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
FortiExtender at a Glance
5G and LTE Performance
The FortiExtender 511G and 511G-WiFi deliver 5G Sub-6GHz connectivity with 4x4 MIMO, IPsec VPN
throughput up to 920 Mbps, and LAN-WAN NAT at 950 Mbps. The FortiExtender WAN 50G reaches 7 Gbps
download and 2.5 Gbps upload in 5G Sub-6 SA mode, making it the right choice for high-throughput edge
deployments. LTE models range from CAT-6 (300 Mbps DL) up to CAT-12 (600 Mbps DL) for locations where 5G
is not yet available.
Carrier Flexibility
All models support dual-SIM slots with intelligent failover across carriers based on signal strength,
data plan, and link health. Select models add eSIM, and the dual-modem FEX-202F-AM keeps two active
cellular links simultaneously for active-active load balancing and high-availability. Carrier
certifications include AT&T, Verizon, T-Mobile, and PTCRB across the lineup, with CBRS (Band 48 and
5G N48) support for Private 5G and LTE deployments.
Flexible Deployment
Every FortiExtender model is powered over Ethernet (PoE 802.3af or 802.3at) so you can run a standard
CAT cable up to 100 meters from the FortiGate or network switch to the spot with the best cellular
signal, no antenna cables needed. Models with an SFP port extend that reach beyond 100 meters over
fiber. Wall-mount and desktop form factors are available, and the compact enclosure fits neatly on a
shelf, above a drop ceiling, or in a wiring closet.
Security Fabric Integration
FortiExtender appears as a standard interface in FortiOS, so your team manages it alongside every other
FortiGate interface with no additional tools or licenses. LAN Extension mode uses VxLAN over IPsec to
stretch the Layer 2 broadcast domain of a remote FortiGate to a standalone FortiExtender, supporting
over 1,000 units per firewall. VRRP support provides FortiGate high-availability without a full HA pair
at the branch, and cloud management is available through FortiManager and the Fortinet portal.
Not Sure Which FortiExtender Is Right for Your Site?
Our certified Fortinet engineers can walk you through the full lineup and match you to the right model
based on your carrier, bandwidth needs, and deployment environment. We stock the complete FortiExtender
series and ship same day.
The FortiExtender is a Fortinet indoor 5G and LTE cellular gateway that adds wireless
WAN connectivity to your network. It can act as a primary internet connection for locations without
wired broadband, as a failover backup link for an existing connection, or as out-of-band management
access to a remote FortiGate. Once connected to a FortiGate, it appears as a regular network interface
in FortiOS, so there is no separate dashboard to manage.
Dual-SIM models (such as the FEX-101G, FEX-211G, and FEX-511G) hold two SIM cards but
use one modem. The second SIM is available for automatic failover if the primary carrier loses signal
or exhausts its data plan. The dual-modem FEX-202F-AM has two complete modems, each with its own SIM
slots, so both cellular links can be active at the same time. This enables active-active load
balancing, traffic isolation, and faster failover without waiting for a modem to switch carriers.
No. FortiExtender can run in standalone mode using Enhanced LAN Extension, which
creates a VxLAN tunnel back to a centrally located FortiGate over the internet. This lets you deploy
security at a remote site without placing a FortiGate at that location. In LAN Extension mode, the
FortiExtender extends the Layer 2 broadcast domain of the central FortiGate, and one FortiGate can
manage over 1,000 FortiExtender units this way. A local FortiGate is only required if you need
on-premises firewall enforcement at the branch.
Four models in the current lineup support 5G. The FortiExtender WAN 50G (FEW-50G-AM
for North America, FEW-50G-EA for EMEA/APAC) delivers the highest throughput with up to 7 Gbps
download in 5G Sub-6 SA mode and 8 internal antennas. The FortiExtender 511G and 511G-WiFi both use a
5G Sub-6GHz module with 4x4 MIMO, add an SFP port for fiber runs over 100 meters, and the 511G-WiFi
also includes concurrent Wi-Fi 6 for local wireless coverage. The remaining models (FEX-101G,
FEX-201F, FEX-202F, FEX-211G) are LTE only.
Yes, and this is one of the most common deployments. FortiExtender integrates with
Fortinet Secure SD-WAN so the FortiGate can monitor both your primary wired WAN and the cellular link
simultaneously. When the primary connection drops or degrades below a defined threshold, FortiGate
automatically routes traffic through FortiExtender without manual intervention. Because FortiExtender
uses PoE power and a standard Ethernet cable, it is easy to add to an existing site without rewiring.
Models with an Ethernet WAN port also allow you to combine a wired ISP and cellular for additional
redundancy from a single device.
Ready to Add Reliable Cellular WAN to Your Fortinet Network?
Firewalls.com stocks the full FortiExtender lineup and ships same day on orders placed by 3pm EST. Our
U.S.-based Fortinet-certified engineers are available to help you choose the right model, handle carrier
selection questions, and configure the device before it ships. Call, chat, or submit a quote request and
we will get back to you within the hour.
For more information about the Fortinet FortiExtender-211G, please contact us at info@firewalls.com or call 866-403-5305. Our team is ready to assist you!
Login and Registration Form
Existing User