The FortiGate 40F is Fortinet's entry-level desktop NGFW for small offices, branch locations, and distributed retail or healthcare sites. It handles up to 700,000 concurrent sessions with 5 Gbps of firewall throughput and 1 Gbps of IPS inspection, which covers most small office internet connections comfortably. The fanless design and compact footprint mean it fits on a desk or mounts to a wall without needing rack space or active cooling.

Yes. SD-WAN is built into FortiOS and comes standard on every FortiGate at no extra cost. The 40F uses Fortinet's purpose-built SD-WAN ASIC (SP4) to handle application identification, traffic steering across WAN links, and IPsec VPN acceleration. There is no separate appliance to buy and no additional SD-WAN license required.

Fortinet offers several FortiGuard bundles for the 40F. The Enterprise Protection bundle is the most complete, covering IPS, anti-malware, URL and DNS filtering, anti-spam, AI-based inline malware prevention, data loss prevention, and attack surface visibility. Unified Threat Protection and Advanced Threat Protection bundles are available for lighter budgets. All bundles include FortiCare Premium support with 24/7 coverage and one-hour response for critical issues.

Yes. The FortiGate 40F-3G4G adds an embedded Sierra Wireless EM7565 modem with two nano SIM slots and LTE CAT-12 support, covering most major LTE bands worldwide. It is a good fit for sites where wired WAN is unreliable or where a cellular failover connection is required. A built-in WiFi variant is not part of the 40F lineup, but FortiAP wireless access points connect directly to the FortiGate through the FortiLink port and are managed as a logical extension of the firewall.

The 40F can be managed through the on-device FortiOS web interface, FortiManager for centralized multi-site management at scale, or FortiGate Cloud for smaller deployments that want a SaaS dashboard with log retention and analytics without an on-premises management server. FortiManager is the right pick if you are running multiple branch locations from a central IT team and need consistent policy enforcement and automated workflows across all sites.

Yes. The 40F supports active-active, active-passive, and clustering HA configurations. Fortinet sells dedicated HA SKUs, the FG-40F-HA and FG-40F-3G4G-HA, which must be purchased in pairs. The HA pair shares a single service contract, keeping licensing straightforward when you are running redundant units at a site.