Fortinet FGR-70G-5G-DUAL-BDL-809-60 DIN-Rail Firewall, 5-Year Enterprise Protection
Overview
The Fortinet FortiGate Rugged Series brings FortiOS to the plant floor: fanless, DIN-rail mounted, IP40-rated appliances that run from -40 to 75 degrees Celsius on redundant DC inputs, certified to IEC 61850-3 and IEEE 1613 for electric power substations and to EN 50155 and EN 50121 for rail. The constraint to know before specifying one is SSL-VPN: the datasheet publishes no SSL-VPN throughput or concurrent-user figure for this model, so plan remote access on IPsec VPN. Fortinet marks the performance figures for this model as provisional and subject to change. The FGR-70G-5G-DUAL-BDL-809-60 is the configuration without onboard storage, so logging goes to FortiAnalyzer, FortiGate Cloud or a syslog collector; the FGR-70G has no cellular modem and differs in physical dimensions, weight and power consumption. FortiOS forwards both IPv4 and IPv6 traffic; Fortinet does not publish a routing-protocol list for this appliance in the datasheet, which is why the specification table records the protocols as not published while stating IPv6 support. This part number is the bundled configuration: the same appliance supplied with a prepaid FortiGuard Enterprise Protection subscription and FortiCare Premium support for 5 years (60 months). The appliance itself is the FGR-70G-5G-DUAL as sold on its own; what the bundle adds is the FortiGuard service entitlement and 24x7x365 support with one-hour response for critical issues.
Technical Details
The Fortinet FortiGate Rugged 70G-5G-DUAL FGR-70G-5G-DUAL-BDL-809-60 is a DIN-rail industrial next-generation firewall with six gigabit Ethernet copper ports, two gigabit SFP slots and two embedded 5G cellular modems with GPS, running FortiOS on the FortiSP5 processor. Firewall throughput is 8 / 8 / 8 Gbps at 1518, 512 and 64-byte UDP, and threat protection throughput is 1.3 Gbps on the Enterprise Traffic Mix with logging enabled. IPsec VPN throughput is 7.1 Gbps at 512 bytes with AES256-SHA256, and SSL inspection throughput is 1.4 Gbps with IPS on average HTTPS. It holds 1.4 million concurrent TCP sessions and opens 85,000 new sessions per second. It operates from -40 to 75 degrees Celsius on redundant DC inputs and is used in OT and industrial networks to segment PLC and SCADA traffic at the plant floor, in a substation, or in a remote cabinet.
Best For
The FGR-70G-5G-DUAL suits an OT or industrial network that needs 1.3 Gbps of threat protection throughput with 1.4 million concurrent sessions behind it. Its six gigabit Ethernet copper ports with a bypass port pair on ports 1 and 2, two gigabit SFP slots and two embedded 5G cellular modems with GPS cover the port requirement. Firewall throughput is 8 Gbps at 1518-byte UDP and 8 Gbps at 64 bytes, which is the headroom on uninspected traffic, while 1.3 Gbps is the figure to size against once inspection is on. Choose it over the FGR-70G where the site needs embedded 5G cellular WAN links. As a bundled part number it arrives with 5 years (60 months) of FortiGuard Enterprise Protection and FortiCare Premium support already attached, so the services do not need ordering separately.
Not suitable if:
- you need logs and reports retained on the appliance itself, since this configuration has no onboard storage
- you need Power over Ethernet for cameras or access points, since this appliance provides none
- your inspected traffic exceeds 1.3 Gbps, since that is the published threat protection throughput
- you need SSL-VPN remote access, since the datasheet publishes no SSL-VPN throughput or user figure for this model
- you want a different subscription term or bundle tier, since this part number is fixed at 5 years of Enterprise Protection
FGR-70G-5G-DUAL-BDL-809-60 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 6×1GbE RJ45, 2×1GbE SFP, 2×embedded 5G WWAN modules (2 SIM slots) |
| Max Port Speed | 1 GbE |
| Management & Console Ports | 1×RJ45 console, 1×RJ45 serial, 1×USB |
| Performance & Scale | |
| Firewall Throughput | 8 / 8 / 8 Gbps (1518 / 512 / 64-byte UDP) |
| Threat Prevention Throughput | 1.3 Gbps (Enterprise Traffic Mix, logging enabled) |
| TLS/SSL Inspection Throughput | 1.4 Gbps (IPS, average HTTPS) |
| IPsec VPN Throughput | 7.1 Gbps (512-byte, AES256-SHA256) |
| Power & Thermal | |
| Power Supply | 12V to 125V DC redundant dual inputs, 2 pins per terminal block, negative or positive ground; DC cables not included |
| Redundant Power Supply | Yes |
| Maximum Power Consumption | 26.2 W (25 W average) |
| Cooling | Fanless |
| Physical & Environmental | |
| Operating System | FortiOS |
| Form Factor | DIN-rail |
| Dimensions (H x W x D) | 5.47 × 4.1 × 4.8 in (13.9 × 10.4 × 12.2 cm) |
| Weight | 4.63 lb (2.1 kg) |
| Operating Temperature | -40°F to 167°F (-40°C to 75°C) |
| Software | |
| Central Management Platform | FortiManager, FortiGate Cloud |
| Routing Protocols & IPv6 | Routing protocols not published; IPv6 supported |
| Other | |
| Maximum Concurrent Sessions | 1,400,000 (TCP) |
| New Sessions per Second | 85,000 (TCP) |
| Maximum IPsec VPN Tunnels | 200 gateway-to-gateway, 500 client-to-gateway |
| High Availability | Active/Active, Active/Passive, Clustering |
FGR-70G-5G-DUAL-BDL-809-60 Accessories
| Included | Dual 5G cellular modules; Passive GPS antenna; External SMA WWAN antennas; MicroSD slot; Digital I/O module |
| Optional – Transceivers | FN-TRAN-GC, FN-TRAN-LX, FR-TRAN-SX, FR-TRAN-ZX, FN-TRAN-FX |
| Optional – Power | FortiPSU Rugged DIN Rail 240W PSU (SP-RGDIN-240-PS) |
FAQ
Does the Fortinet FortiGate Rugged 70G-5G-DUAL FGR-70G-5G-DUAL-BDL-809-60 support PoE?
No. The FGR-70G-5G-DUAL-BDL-809-60 provides no Power over Ethernet on any port, so cameras, access points and IP phones need their own power source or a PoE switch between them and the firewall. Its interfaces are six gigabit Ethernet copper ports with a bypass port pair on ports 1 and 2, two gigabit SFP slots and two embedded 5G cellular modems with GPS, all data-only. Within the FortiGate G series PoE appears on separate part numbers, not on this one.
What transceivers do the SFP slots on the FGR-70G-5G-DUAL-BDL-809-60 use?
The appliance has two dedicated GE SFP slots alongside its six gigabit RJ45 ports. Fortinet lists the compatible transceiver modules, including extended-temperature variants, in the ordering information. No transceivers are fitted at the factory. Transceivers are sold separately.
How does high availability work on the Fortinet FortiGate Rugged 70G-5G-DUAL FGR-70G-5G-DUAL-BDL-809-60?
The FGR-70G-5G-DUAL-BDL-809-60 supports Active-Active, Active-Passive and Clustering high-availability modes. An HA pair should be two identical models running the same FortiOS build, and the units synchronise configuration and session state over the HA link. This model has no dedicated HA port, so the HA link runs over a data port.
What are the environmental ratings of the FGR-70G-5G-DUAL-BDL-809-60?
The FGR-70G-5G-DUAL-BDL-809-60 operates from -40 to 75 degrees Celsius and is rated IP40. It is fanless, mounts on a DIN rail, and takes redundant dual DC inputs on a two-pin terminal block with either negative or positive ground; DC cables are not supplied. It is certified to IEC 61850-3 and IEEE 1613 for electric power substations, and to EN 50155 for rail. It is built on the FortiSP5 processor and includes a Digital I/O Module (DIO) and a MicroSD card slot.
What is the difference between the FGR-70G-5G-DUAL-BDL-809-60 and the FGR-70G?
Their published performance specifications are the same, but their hardware and interface features differ: the FGR-70G-5G-DUAL-BDL-809-60 includes cellular connectivity, while the FGR-70G does not. They also differ in physical dimensions, weight and power consumption. Both run the same FortiOS build and take the same FortiGuard subscriptions.
What is included in the FGR-70G-5G-DUAL-BDL-809-60 bundle?
The FGR-70G-5G-DUAL-BDL-809-60 is the appliance plus a prepaid FortiGuard Enterprise Protection subscription and FortiCare Premium support, both for a term of 5 years (60 months). Enterprise Protection covers IPS, anti-malware, URL, DNS and video filtering, anti-spam, AI-based inline malware prevention, data loss prevention (full features when running FortiOS 7.4.1, per Fortinet) and Attack Surface Security, along with the FortiConverter configuration-conversion service. OT Security and the SD-WAN and SASE services are not part of this bundle. FortiCare Premium provides 24x7x365 availability with one-hour response for critical issues and next-business-day response for everything else.
Does the FGR-70G-5G-DUAL-BDL-809-60 require a subscription to operate?
No. Core firewall, routing and networking functions can continue to operate without an active FortiGuard subscription, while subscription-based security intelligence, updates and services require an active subscription. The FGR-70G-5G-DUAL-BDL-809-60 ships with a prepaid FortiGuard Enterprise Protection subscription and FortiCare Premium support for 5 years (60 months); when that term ends, the FortiGuard intelligence and the support entitlement lapse and can be renewed.
What condition is the FGR-70G-5G-DUAL-BDL-809-60 sold in, and what warranty applies?
Network Devices Inc. supplies the FGR-70G-5G-DUAL-BDL-809-60 new and factory sealed, in original Fortinet packaging with the standard accessories. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Because the unit is new rather than renewed, it is eligible for Fortinet registration and for FortiCare and FortiGuard entitlements ordered against it, which is not always the case with refurbished stock. Orders ship from our New Jersey and Texas warehouses.
