FortiWiFi 40F
FortiGate 40F with an integrated access point — one box for a small site
- Threat protection
- 600 Mbps
- IPsec VPN
- 4.4 Gbps
- Wireless
- Integrated AP
Front panel
- RJ45 copper
The FortiWiFi 40F is a FortiGate 40F with a wireless radio built in. The firewall specifications are identical — 600 Mbps of threat protection, 4.4 Gbps of IPsec VPN and 700,000 concurrent sessions — so everything that applies to the FortiGate 40F applies here unchanged.
Choose this over the FortiWiFi 50G only if you specifically need the F-series 3G4G variant alongside wireless — a small site that is both cellular-connected and wireless-served. On every inspection metric the 50G is ahead, and on FortiOS 7.6.0 and later the 40F loses SSL VPN entirely because of its 2 GB of RAM, which matters if anyone works remotely from that site.
Highlights
- Identical firewall specification to the FortiGate 40F
- Integrated access point — no separate AP or controller
- Manages up to 16 additional FortiAPs as the site grows
- Region-locked SKU — we confirm the correct part number
Typical deployments
- Cellular-connected small sites that also need wireless
- Estates already standardised on the 40F where spares consistency wins
- Temporary and pop-up locations
The numbers, with their conditions
Every figure below is Fortinet's own, with the test conditions it was measured under.
Performance
Fortinet's published figures. Firewall throughput is measured on UDP with no inspection enabled — size your deployment on threat protection throughput instead, which is measured with firewall, IPS, application control and malware protection all running against an enterprise traffic mix.
| Firewall throughput (1518 / 512 / 64 byte UDP) | 5 / 5 / 5 Gbps |
|---|---|
| IPsec VPN throughput (512 byte)IPsec VPN performance test uses AES256-SHA256. | 4.4 Gbps |
| IPS throughput (enterprise mix)IPS, application control, NGFW and threat protection are measured with logging enabled. | 1 Gbps |
| NGFW throughput (enterprise mix)NGFW performance is measured with firewall, IPS and application control enabled, enterprise mix traffic. | 800 Mbps |
| Threat protection throughput (enterprise mix)Threat protection performance is measured with firewall, IPS, application control and malware protection enabled, enterprise mix traffic. | 600 Mbps |
| SSL inspection throughput (IPS, avg. HTTPS)SSL inspection performance values use an average of HTTPS sessions of different cipher suites. | 310 Mbps |
| Application control throughput (HTTP 64K) | 990 Mbps |
| Firewall latency | 2.97 µs |
Capacity
| Concurrent sessions | 700,000 |
|---|---|
| New sessions / second | 35,000 |
| Firewall policies | 2,000 |
| Max gateway-to-gateway IPsec tunnels | 200 |
| Max client-to-gateway IPsec tunnels | 250 |
| SSL VPN throughput | — |
| Concurrent SSL VPN users (recommended max, tunnel mode) | — |
| Virtual domains (default / max) | 10 / 10 |
Security Fabric capacity
How much of the rest of the Fabric this model manages directly, with no separate controller.
| Max managed FortiAPs (total / tunnel) | 16 / 8 |
|---|---|
| Max managed FortiSwitches | 8 |
| Max FortiTokens | 500 |
Hardware
| Interfaces | 5x GE RJ45 |
|---|---|
| Local storage | — |
| Power supplies | Single AC PS |
| Form factor | Desktop |
| Variants | WiFi, 3G4G |
Wireless
Fortinet does not publish the wireless radio generation per model in the Product Matrix, and the radio and permitted transmit power vary by regional SKU. We confirm the exact wireless specification and the correct regional part number against your country before ordering — a wrong-region FortiWiFi is not a returnable configuration error.
| Integrated access point | Yes — this is the wireless variant of the FortiGate 40F |
|---|---|
| Radio generation | Varies by model and regional SKU — confirmed at quote |
| Regulatory domain | Region-locked SKU — must match country of deployment |
Sources
- Fortinet Product Matrix (July 2026) — retrieved 2026-09-01
- Fortinet product line overview — retrieved 2026-09-01
Reproduced from Fortinet published documentation and subject to change without notice. Where a figure is load-bearing for your design, ask us to confirm it in writing before you order — we will.