Skip to content Skip to navigation Skip to footer

FortiExtender: Secure 5G and LTE Wireless WAN Extender

Providing 5G and LTE Connectivity for Reliable Broadband Access to the Internet

Learn More
Available in:
  • Appliance

The future is wireless, and with 5G and innovative LTE connectivity solutions, your WAN can be faster than ever. Fortinet FortiExtender leverages the scalability and flexibility of LTE (3G and 4G) and 5G wireless WAN to empower you to grow more connected, across operations and devices located anywhere and everywhere.

FortiExtender offers wireless connectivity for nearly any operational network. Whether mobile sites, vehicle fleets, field forces, or OT and IoT environments, a FortiExtender solution exists to help you achieve resilient and high-performance connectivity, anywhere.


Today’s Connectivity Challenges

Establishing and maintaining internet connectivity across an increasingly distributed environment is critical. However, conventional networking approaches include challenges such as:

  • Distributed Device Networks. Networks are sprawling and the number of connected devices is growing
  • Business Continuity. Continuous connectivity is critical for business continuity and competitiveness
  • Network Reliability. Cable/DSL offers less than 99.999% uptime—and it can’t be deployed everywhere
  • Cost. MPLS networks are costly and not scalable for current business needs

Resilient, Fast Connectivity, Everywhere

FortiExtender delivers a wide array of redundancy, performance, and functionality to fit nearly every wireless use case.

  • 5G speed: With FortiExtender 5G, you can enjoy network speeds up to ten times conventional 4G LTE. This assures network performance suitable for nearly every operational task and requirement.
  • High-availability wireless: Deploy FortiExtender to cost-effectively add redundancy and resiliency to your network. FortiExtender offers dual modem, dual SIM appliance options, increasing resiliency by four times. This ensures optimized wireless connectivity and the cellular infrastructure to provide broadband speeds that can be used in a failover or load-balancing configuration. For those locations without wired broadband options, FortiExtender can also serve as the primary internet connection, enabling reliable connectivity for branch, remote, and mobile networks.
  • Flexible Connectivity for SD-WAN Business that want to use multiple WAN connections including SD-WAN, can use FEX as one of those Wireless WAN links with LTE and 5G. Additionally, end users can use the FortiExtender wireless interface to create SD-WAN rules and performance SLA’s.


Flexible deployment and management options

Flexible deployment and management options

FortiExtender offers a wide range of flexible deployment and management options, providing infrastructure leaders with the option to manage appliances using Fortinet FortiGate NGFW, FortiExtender Cloud, or locally at the appliance level.

Secure access service edge (SASE)

Secure access service edge (SASE) at the thin branch

Leverage FortiExtender 5G, LTE, or even LAN Ethernet to onboard users located at pop-up offices and thin branch networks. With FortiExtender, deploying and managing FortiSASE is fast, simple and intuitive.

Learn more about FortiSASE Thin Edge

FortiExtender LTE and 5G Differentiators

Scalable Connectivity Anywhere

FortiExtender and FortiExtender Cloud offer secure, scalable, and cost-effective centralized management for retail and wireless-only use cases

Extending the Fortinet Security Fabric

FortiExtender seamlessly integrates with and extends the utility of SD-Branch solutions with 5G and LTE

Making Mobile Networks High-availability Networks

FortiExtender offers ruggedized, highly available solutions for mobile and IoT/OT use cases

Product Details

FortiExtender provides a reliable WAN connection to a firewall, such as a FortiGate, using the cellular LTE infrastructure (3G, 4G), as well as 5G. These connections are commonly used as a second broadband connection for reliability or increased throughput. But those businesses that want to use multiple WAN connections, including for SD-WAN, can also use FortiExtender for one of those WAN links.

Another common use for FortiExtender is to deploy it as a primary connection for a location where cellular LTE is the preferred broadband option. Retail stores or kiosks processing point-of-sales (POS) transactions might also opt for a highly-secure LTE or 5G network to meet PCI compliance requirements. FortiExtender can also be managed independently, using an attached FortiGate or through the FortiExtender Cloud service. For more information on FortiExtender Cloud, click here.

FortiExtender Models and Specifications

FortiExtender appliances come in several indoor models with different LTE modem performance. All models offer multiple LAN ports and a secondary WAN ethernet port. FortiExtender Appliances can be managed by a FortiGate or from the cloud by the FortiExtender Cloud service.



Model Internal Modem(s) Modem Type Coverage FortiExtender Cloud
FEX-201E Single CAT-6 (300 Mbps) NA, SA, EMEA Yes
FEX-211E Single CAT-12 (600 Mbps) Global Yes

Wireless WAN - FortiExtender

Can I manage a FortiExtender from my FortiGate?

Yes, the FortiExtender can be managed via the FortiGate user interface and appears as a virtual interface.  Also you can manage FortiExtender as a standalone device thru the new FortiExtender cloud.

What are the ways to manage a FortiExtender?

There are three ways to manage a FortiExtender:

  1. FortiGate and FortiManager
  2. FortiExtender Cloud
  3. Local GUI / CLI and this is the least preferred method

How do I get a carrier supported on the FortiExtender?

We are frequently adding new carriers to our list of supported operators. 

  • FortiExtender-20D supports a variety of USB modems and this this is included as part of the release notes
  • FortiExtender-40D-AMEU has an internal modem that works on HSPA+ and 18 LTE bands.  It can be used on most carrier operator networks in Americas and Europe.  

Please note that certain operators may require special certifications for SIM activation.  Please reach out to your local Fortinet sales organization for additional information. 

Can I have both of the SIM cards active and load-balance between them?

FEX-40D-NAM has one radio inside therefore only one SIM card can be active at a time.  You can automatically switch between SIM cards based on data usage or link quality.

Does the FortiExtender have to connect to the WAN port on the FortiGate?

No, the FortiExtender can be connected to any port of the FortiGate or a downstream switch.  This flexibility allows the FortiExtender to be placed at the location that has best signal and the traffic will traverse to the FortiGate thru a CAPWAP tunnel. 

How do I find out which USB modems are supported?

FEX-20D USB modem list can be found here.

What are the options to power FortiExtender Appliances?

FortiExtender Appliances can be powered by Power over Ethernet (PoE) or by DC power.