Fortinet FortiExtender 311F in Uganda
An indoor CAT16 LTE wireless WAN router for resilient branch connectivity, cellular backup, remote-site access, and Fortinet-managed network edge deployments.
The FEX-311F combines a single dual-SIM 3G/4G LTE modem, Gigabit Ethernet, a 1GbE SFP interface, external antennas, GPS/GNSS capability and flexible Fortinet management options. For Uganda projects, the most important planning questions are cellular coverage, carrier compatibility, management architecture, power method and whether the site uses LTE as its primary WAN path or as a failover route.
Fortinet
FEX-311F
Indoor LTE gateway
CAT16 3G/4G LTE
Dual SIM
Contact for current options
A practical cellular WAN edge for business sites that cannot rely on a single fixed connection
The Fortinet FortiExtender 311F is built for organisations that need to add cellular WAN to an existing network architecture without treating LTE as an isolated consumer hotspot. It is an indoor broadband wireless WAN router with a CAT16 modem and dual SIM capability, designed to support 3G/4G LTE connectivity for global carrier environments. That makes it relevant to branch offices, retail locations, service counters, remote facilities, temporary project sites and other installations where a conventional wired circuit may be unavailable, slow to provision or unsuitable as the only path to the internet.
Its business value comes from deployment flexibility. A company can use cellular as a primary WAN service where fixed connectivity is impractical, as a secondary route for continuity, or as an out-of-band access path for remote management. Fortinet also positions FortiExtender within its Secure Networking architecture, so the device can form part of a larger design that includes FortiGate security, Secure SD-WAN and centralised management. The exact management approach should be selected against the organisation’s FortiOS version, operational model and licensing plan rather than assumed at purchase time.
The hardware gives IT teams more connectivity choices than a basic cellular modem. The FEX-311F provides five Gigabit Ethernet RJ45 ports for WAN and LAN functions together with a 1GbE SFP port, a USB 2.0 Type-A port, Bluetooth capability, GPS/GNSS support and four external SMA antennas. IEEE 802.3at PoE powering is supported, which can make placement easier when the best cellular signal is not beside the firewall or switch. Fortinet documents the model as an indoor wall-mount or desktop device.
For Uganda deployment planning, the biggest practical consideration is not simply the theoretical CAT16 speed. Real throughput depends on the operator, available LTE bands, network congestion, signal strength, antenna positioning, SIM/data plan and site conditions. Buyers should therefore treat the modem’s headline capability as an upper technical limit, then design around the expected local service quality. FourTeck can assist with model selection, accessory review, Fortinet integration questions and quote preparation before procurement.
Business outcomes supported by the FEX-311F architecture
01
Add WAN resilience without waiting for another fixed circuit
Cellular connectivity can provide a second path when a wired service fails or is still being installed. In a properly designed branch, that reduces dependence on one physical access method and gives IT teams another option for maintaining core applications, remote administration and essential transactions.
02
Place the cellular gateway where the signal is stronger
PoE support and Ethernet-based placement mean the device does not have to sit beside the firewall if another indoor position offers better LTE reception. This can be more practical than relying on long RF antenna runs, which can introduce losses and complicate installation.
03
Use two SIM profiles for operator or plan flexibility
Dual-SIM capability allows organisations to design active/passive cellular strategies based on disconnect conditions, signal health or data-plan rules. The practical result is more choice when one mobile service is unavailable or undesirable, subject to the configured policies and local carrier support.
04
Integrate cellular access with Fortinet network operations
FortiExtender is designed to work alongside FortiGate and Fortinet management tools. That can simplify operational ownership for organisations already standardised on Fortinet, because cellular links can be incorporated into security, SD-WAN and branch management processes instead of being treated as an unmanaged side connection.
05
Support several local wired devices
Multiple Gigabit Ethernet ports let the gateway participate in more than a single-link deployment. This is valuable at compact branches or remote equipment areas where the WAN gateway must interface with firewalls, switches or other local network components.
06
Create a better procurement path for temporary and distributed sites
A cellular WAN device can help project teams activate new locations before permanent circuits are ready, keep pop-up or leased spaces connected, and standardise a repeatable backup approach across multiple branches. The benefit is strongest when the SIM, data plan, management and security design are standardised with the hardware.
The FEX-311F is most useful when LTE must behave like a managed business WAN, not an emergency consumer hotspot.
Fortinet combines cellular radio capability with wired WAN/LAN interfaces and its broader network-management ecosystem. The important distinction for buyers is operational: the device is designed to be installed as part of a managed network architecture, with deliberate policies for primary connectivity, failover, SIM switching, security and remote administration.
FortiExtender 311F technical details
| Specification | FEX-311F |
|---|---|
| Product type | Indoor broadband wireless WAN router / LTE gateway |
| Cellular modem | 1 internal modem, LTE CAT16 |
| Rated cellular throughput | Up to 1 Gbps downlink / 150 Mbps uplink; network and carrier dependent |
| SIM | Dual SIM |
| Antennas | 4 external SMA antennas |
| Ethernet | 5 × Gigabit Ethernet RJ45 ports for WAN/LAN functions plus 1 × 1GbE SFP |
| USB | 1 × USB 2.0 Type-A |
| Bluetooth | 2.4 GHz, maximum transmit power 10 dBm |
| GPS/GNSS | Supported; GPS antenna interface documented |
| PoE powered | IEEE 802.3at, 25.5 W |
| Power | 12V/3A in current Fortinet specification references; confirm region-appropriate adapter/accessory requirement |
| Average / maximum consumption | 14.11 W average / 16.05 W maximum |
| Mounting | Wall mount or desktop |
| Environment | Indoor |
| Dimensions | 46.5 × 190 × 199 mm, excluding antenna length |
| Weight | 0.933 kg |
| Operating temperature | 0°C to 40°C |
| Storage temperature | -20°C to 70°C |
| Regional compatibility | Global model designation; practical carrier access remains operator and firmware dependent |
Which specifications matter most when buying?
For most buyers, the modem category, SIM strategy, port design and power method will affect the project more than physical dimensions. CAT16 establishes the radio’s potential performance class, but it does not guarantee a particular speed at a Uganda site. A buyer should first validate the target mobile operator, LTE coverage and expected signal quality. Next, decide whether one SIM will be enough or whether the project requires a second SIM for an alternate plan or operator. The dual-SIM feature is useful only when the operational policy and data plans are designed around it.
The Ethernet and SFP interfaces become important when the device must feed a FortiGate, support a redundant network path or be positioned some distance from the main network equipment. PoE can simplify that placement, while the SFP interface can be useful where fibre is preferred. Finally, confirm the management model and firmware compatibility. A technically suitable radio can still create operational friction if the existing FortiGate software, cloud-management subscription or deployment workflow is not planned in advance.
Five questions to answer before requesting a quote
01 What workload will use the cellular link?
Decide whether LTE will carry the full branch workload, only selected SD-WAN traffic, emergency connectivity, point-of-sale traffic or remote management. This changes data-plan sizing, failover policy and the performance expectations placed on the mobile service.
02 How much performance and data capacity does the site need?
Estimate normal throughput, peak usage and monthly data consumption. CAT16 capability does not remove carrier quotas or network congestion. A backup connection that only carries critical traffic can use a different data plan from a site that runs entirely over LTE.
03 What must the gateway integrate with?
Share the FortiGate model, FortiOS version, switching design, VLAN requirements, SFP expectations and any existing central management. Compatibility review reduces the risk of discovering after delivery that a firmware upgrade, management subscription or cabling change is required.
04 Is the project staying on LTE or moving toward 5G?
The FEX-311F is a 3G/4G LTE product. If a new project has a defined 5G roadmap, compare a current FortiExtender 5G model before committing. If LTE coverage is stronger and the application does not need 5G, CAT16 may remain a practical fit.
05 What installation, support and delivery expectations apply?
Confirm whether PoE is available, whether an external power adapter is needed, where the unit will be mounted, who provides SIMs and antennas, and what FortiCare or cloud-management coverage is desired. For multi-site rollouts, provide the quantity and proposed deployment schedule so the quote can reflect project needs.
Where an LTE gateway can solve a real operational problem
Branch-office backup connectivity
A bank office, service location, clinic, professional office or distributed corporate branch may already have fibre or fixed broadband but still need another WAN path. The FEX-311F can supply LTE connectivity that is then integrated into a FortiGate or other supported network design. Dual SIM capability gives the architect a way to consider an alternate operator, while SD-WAN policy can determine which applications move to cellular during a fixed-line outage. The configuration note is important: failover behaviour, link monitoring, firewall policy and data-plan limits should be tested before the site is considered resilient.
Retail, kiosk and transaction sites
Retail counters, kiosks and compact service points often have limited space and a strong dependency on connectivity for transaction systems, inventory, cloud applications or remote support. An indoor cellular gateway can provide a primary link for a location without practical fixed access or a secondary connection for continuity. The multiple Ethernet interfaces support structured integration with local networking equipment. Buyers should confirm the expected application traffic, SIM plan and whether payment or business systems require specific security segmentation on the attached firewall.
Temporary project offices and rapid site activation
Construction offices, events, temporary logistics points and newly opened business premises may need network access before a permanent circuit can be installed. LTE can shorten that dependency by using mobile coverage already available at the site. The gateway’s wall or desktop installation and PoE capability can also help place it where signal quality is better. For this use case, the buyer should check whether the device will later become a backup link after fixed broadband arrives, because that changes the long-term management and data-plan strategy.
Remote management and out-of-band paths
IT teams sometimes need a communications route that remains available when the primary network path is down or being serviced. Fortinet positions FortiExtender for out-of-band management scenarios as part of its broader wireless WAN portfolio. The goal is not to bypass normal security controls but to create a deliberate secondary path for operations. The deployment should define which devices are reachable, how access is authenticated, what happens when the main circuit returns and how the cellular service is monitored centrally.
CAT16 LTE performance is a capability ceiling, not a site-speed promise
The defining radio feature of the FEX-311F is its LTE CAT16 modem. Fortinet specifies a rated downlink capability of up to 1 Gbps and uplink up to 150 Mbps. Those figures describe what the modem technology can support under appropriate network conditions; they are not a guaranteed speed for every mobile operator or deployment. In business planning, this distinction matters because a buyer may incorrectly size an LTE solution around the modem category while overlooking the mobile network that actually delivers the service.
Cellular performance is affected by coverage, spectrum bands, tower loading, backhaul, indoor attenuation, antenna position, service-plan controls and operator provisioning. A site deep inside a concrete building may perform very differently from an office near a strong LTE cell even with identical hardware. This is one reason FortiExtender’s Ethernet and PoE deployment flexibility is valuable: the gateway can be placed where the cellular signal is better while remaining linked to the main network equipment over Ethernet.
For an enterprise, the best planning method is to define the minimum acceptable application performance and then test the target operator at the intended installation point. If the connection is only for failover, prioritise business-critical traffic during an outage rather than assuming the LTE link should carry every workload unchanged. If it is the primary WAN, review data caps, contention and monthly usage more closely. This turns CAT16 from a marketing number into a practical design parameter.
Dual SIM gives the network architect another resilience lever
Dual-SIM hardware can be valuable when a business wants to use two cellular service profiles, especially when the preferred operator may not have equal coverage everywhere. Fortinet documents SIM-switching behaviour across FortiExtender deployments based on disconnect conditions, signal thresholds, data-plan conditions and link health. The exact policy should be configured to the site’s operating requirements and validated against the software release being used.
The important limitation is that two SIM slots do not automatically create two simultaneous high-speed links on a single-modem platform. The FEX-311F uses one internal modem. In practical terms, the second SIM is usually part of an active/passive resilience strategy rather than an active/active dual-modem design. Buyers who require concurrent carrier links should compare a dual-modem model instead of assuming dual SIM and dual modem are equivalent.
Use a second SIM as an alternate cellular service path when configured policies trigger a switch.
Choose SIM-switch conditions that reflect signal quality, connection state or data-plan considerations.
Standardise the same resilience logic across distributed sites when carrier availability differs by location.
Fortinet integration should be planned as carefully as the cellular service
FortiExtender is designed to extend cellular connectivity into Fortinet-managed networks. In FortiGate-managed deployments, the cellular gateway can appear as a network interface that the firewall can incorporate into security and routing policies. Fortinet also offers FortiEdge Cloud management for fleets of FortiExtender devices and FortiManager support in broader branch management workflows. The right choice depends on who operates the network, how many sites are involved and how the organisation already manages Fortinet infrastructure.
For a single branch, direct FortiGate integration may be the simplest operational model. For a distributed organisation, cloud or central management can make inventory, grouping and configuration easier. Licensing is therefore part of the product decision, not an afterthought. Fortinet’s ordering guidance lists FortiCare and cloud-management options separately for the FEX-311F class, so buyers should define the desired management and support term before requesting commercial pricing.
Software compatibility also deserves attention. Fortinet publishes supported-hardware information and compatibility guidance for FortiExtender OS and FortiGate-managed deployments. A project team should check the FortiOS release on the target firewall, the intended FortiExtender firmware and the planned management mode. That prevents a common procurement problem: buying hardware that is physically correct but requires an unexpected software upgrade or operational change at installation time.
Buyer decision checklist
- Record the FortiGate model and current FortiOS version.
- Choose FortiGate-managed, standalone or cloud-managed operation as appropriate.
- Confirm whether a FortiEdge Cloud license or FortiCare support term is required.
- Plan VLAN, routing, SD-WAN and firewall policies before the install date.
- Set device credentials securely, especially before enabling Bluetooth access.
What buyers should check before purchase
| Risk | What to confirm | Why it matters | What to share with FourTeck |
|---|---|---|---|
| Wrong cellular assumption | Operator, LTE bands, signal and data plan | Global-model status does not guarantee identical service on every carrier or site. | Preferred operator and installation address/city |
| Incorrect management design | FortiGate model, software and cloud-management requirement | Licensing and firmware choices affect deployment. | Current Fortinet environment and desired control method |
| Missing accessory or power item | PoE availability, adapter requirement, cabling and SFP | The gateway must be powered and connected correctly at the planned location. | PoE switch/injector details and required accessory list |
| Poor lifecycle fit | LTE versus 5G roadmap, quantity and support expectations | A new long-term deployment may be better served by another current model if 5G is required. | Project horizon, expected growth and rollout quantity |
A careful review is particularly important because the FEX-311F sits between several buying categories: it is not merely a modem, but it is also not a 5G gateway or a dual-modem active/active appliance. It can be an excellent fit when CAT16 LTE, dual SIM and Fortinet integration are the required combination. It can be the wrong fit when a project actually requires simultaneous carrier aggregation across two modems, outdoor ruggedisation, vehicle mounting, built-in Wi-Fi or a defined 5G service path.
Planning supply for Uganda business networks
FortiExtender availability can vary by distribution cycle, project quantity and the specific support or management bundle required. FourTeck can review the requested FEX-311F configuration, check the accessory list, prepare a current quotation and coordinate delivery planning for Uganda. For organisations integrating the unit with FortiGate, share the firewall model and software version so the technical conversation can include management compatibility rather than focusing only on hardware supply.
For Kampala projects, it is also useful to confirm the mobile operator and the intended installation environment before finalising the order. FourTeck can help structure the quote around the gateway, required power components, applicable FortiCare options and any FortiEdge Cloud licensing requested by the project. Warranty coverage and support terms should be verified against the selected commercial offer rather than assumed from the hardware name alone.
For multi-site or phased deployments, provide expected quantities and target dates. This allows availability and delivery coordination to be discussed at project level. FourTeck does not need the buyer to commit to one mobile operator before the first conversation, but knowing the likely carriers, signal constraints and whether LTE is primary or backup will make the recommendation more useful.
Uganda location coverage
FourTeck can support quotation and delivery coordination for business buyers in Kampala and project requirements serving Entebbe, Jinja, Mbarara and Gulu. Cellular deployment quality should be checked at the actual site because coverage can differ significantly even within the same city. For distributed organisations, a useful approach is to test representative locations, document the preferred mobile operator and fallback SIM, then standardise the network configuration while allowing carrier choices to vary where local signal conditions require it.
East Africa and regional availability planning
Organisations operating across East Africa often need the same network design to work across several mobile operators and procurement markets. Fortinet lists the FEX-311F as a global model, which can simplify hardware standardisation, but a regional rollout should still validate carrier access, SIM provisioning, LTE bands, data plans, firmware and local support expectations in each target country.
FourTeck can discuss Uganda requirements alongside projects that also involve Kenya or selected East Africa and Africa markets. Regional buyers can use FourTeck Uganda, FourTeck Kenya and FourTeck Africa as relevant procurement contact points. UAE and Kuwait projects can also reference FourTeck UAE and FourTeck Kuwait.
A regional rollout benefits from a common build document: define the gateway model, firmware baseline, FortiGate compatibility, management platform, cabling, power arrangement, SIM policy and test procedure. Localise only the parts that truly differ, such as carrier choice, subscription terms and delivery coordination. That approach gives the IT team repeatability without pretending mobile-network conditions are identical across countries.
Useful comparison paths before you finalise the gateway
Procurement support that focuses on getting the configuration right
01. Product selection guidance: FourTeck can compare the LTE model against 5G, dual-modem or rugged alternatives when the requirement is not yet fixed.
02. Configuration review: buyers can share FortiGate models, management preferences, carrier plans and site constraints before the quote is finalised.
03. Quote assistance: the commercial request can include hardware, support subscriptions, cloud-management licensing and accessories instead of leaving critical line items to be discovered later.
04. Business IT context: branch WAN design is considered as a system involving the cellular service, firewall, switching, security policy, power and deployment environment.
05. Uganda delivery coordination: availability and project quantities can be discussed for the intended rollout rather than assumed from a generic catalogue listing.
06. Alternative matching: if the 311F is not the best lifecycle or performance fit, FourTeck can help identify a more suitable FortiExtender path.
Questions buyers commonly ask about the FEX-311F
01. What is the FortiExtender 311F mainly used for?
It is an indoor 3G/4G LTE wireless WAN gateway for business networks. Typical roles include primary cellular connectivity at locations without suitable fixed broadband, backup WAN for branch continuity, temporary-site connectivity and a cellular path for remote management. It is especially relevant to organisations already using Fortinet networking because it can be integrated into supported FortiGate and Fortinet management workflows.
02. Does the FEX-311F support 5G?
No. The FEX-311F is a CAT16 3G/4G LTE model rather than a 5G gateway. For a project that requires 5G Sub-6GHz service, compare a current FortiExtender 5G model such as the 511G family. If LTE coverage, cost and application demand already meet the requirement, CAT16 may still be a sensible business choice. The decision should be based on the planned lifecycle and local network availability.
03. What does dual SIM mean on this model?
The FEX-311F has a single internal modem with dual SIM capability. That lets the network use two SIM profiles in an active/passive switching design, subject to configuration. It is not the same as a dual-modem unit running two cellular radios simultaneously. If your project needs active/active links, load balancing across two modems or traffic separation between two cellular radios, ask FourTeck to compare a dual-modem model.
04. Can it work with Uganda mobile operators?
Fortinet identifies the FEX-311F as a global model, but practical service still depends on the selected operator, supported LTE bands, SIM provisioning, firmware, coverage and carrier policy. Before rollout, test the target service at the actual site and confirm the operator’s device-access requirements. For multi-site deployments, one carrier may not be the best option at every location, which is where dual-SIM planning can be useful.
05. Does it need a FortiGate?
Not every FortiExtender design requires a FortiGate at the same physical site, but FortiGate integration is a major use case and can simplify security and WAN policy for organisations already using Fortinet. Fortinet also provides standalone and cloud-management options across its FortiExtender platform. The best choice depends on the network architecture, FortiOS compatibility, management requirements and any cloud licensing selected for the project.
06. How is the gateway powered?
The FEX-311F supports IEEE 802.3at PoE powering, documented at 25.5 W, and Fortinet specification material also lists external DC power. Power-accessory requirements can differ by region and commercial bundle, so confirm whether your site will use PoE or needs a compatible external adapter. This is worth resolving at quotation stage because placement near the best LTE signal may determine the most practical power method.
07. What speed should we expect?
The CAT16 modem is rated up to 1 Gbps download and 150 Mbps upload, but real throughput will usually be lower and varies with network spectrum, signal quality, tower congestion, operator limits, indoor placement and the subscribed service. Plan the project around the minimum performance required by business applications and validate with the intended mobile network rather than treating the radio’s theoretical maximum as a service guarantee.
08. Do we need a FortiEdge Cloud license or FortiCare?
That depends on how you want to manage and support the device. Fortinet’s ordering information includes FortiCare support and FortiEdge Cloud management options for this product class. If the gateway will be managed through FortiEdge Cloud, include the appropriate subscription in the quote. If your organisation has another supported management model, the commercial package can differ. Share the preferred support term and management workflow with FourTeck.
09. What information should we send for a Uganda quote?
Provide the quantity, installation location, preferred mobile operator if known, whether LTE is primary or backup, expected monthly data use, FortiGate model and software version, PoE availability, management preference and desired support term. Mention if the project is part of a larger branch rollout. Those details help FourTeck identify accessories, licensing and alternative models that should be considered before a final commercial offer is prepared.
Build the cellular WAN quote around your actual branch requirement
Tell FourTeck how the LTE link will be used and we can help structure the product, accessory, support and management requirements for a Uganda deployment. The useful starting point is the network design, not only the model number.
- Required quantity and rollout schedule
- Primary or backup WAN role
- Preferred mobile operator or SIM plan
- FortiGate model and FortiOS version
- PoE or external-power preference
- Cloud-management and support term
Reviews
There are no reviews yet.