Fortinet SD-WAN (2024)

Overview

Long-time cybersecurity vendor, Fortinet, has introduced Secure SD-WAN, an SD-WAN appliance with built-in security. We recently had the opportunity to chat with the Fortinet team about the solution and here are some of the insights we gained.

Secure SD-WAN comes in a range of form factors from the FortiGate/FortiWiFi 30E at the low end (35 Mbits/s VPN throughput) to the FortiGate 300E at the high end (20 Gbits/s VPN throughput). Virtual appliances are also available.The SD-WAN capabilities are provided in a software upgrade, version 6.2 of Fortigate, and at no cost to existing Fortinet customers.

The solution doesn’t seem to be as integrated as other SD-WANs and requires buying into the Fortinet environment. Thus adopting Fortinet’s Secure SD-WAN involves deploying a range of additional Fortinet solutions:

    • FortiDeploy is needed to configure and deploy the SD-WAN
    • FortiManager manages up to 100,000 Fortinet devices
    • FortiGate is the actual NGFW and SD-WAN CPE

There are also several additional security, SIEM, and authentication platforms. The presence of a complete solution is in principle a “good” thing, I believe for most organizations. There will be those that prefer to mix-and-match third-party products or consider a secure SD-WAN that was built with SD-WAN in mind, right from the start.

Security and SD-WAN Together

Secure SD-WAN is part of the growing trend of solutions that integrate security and SD-WAN. Like other SD-WAN appliances, Fortinet Secure SD-WAN is transport agnostic. It uses the Internet (or any other available transport) to construct the SD-WAN.

In terms of networking, Fortinet providesthe usual suite of SD-WAN features including active/active forutilizing all capacity of multiple Internet connections, application awareness, traffic steering, and zero-touch provisioning. In addition, Fortinet has included advanced capabilities, such as forward error correction (FEC) to compensate for packet loss andWAN optimization capabilitiesto improve throughput.

On the security front,Fortinet’s Secure SD-WAN solution also includes a next-generation firewall (NGFW) for security. Users can establish secure VPN overlays between sites.With Fortinet’s Secure SD-WAN solution, customers also get threat protection and threat detection capabilities, as well as IPS, web filtering, sandboxing and SSL inspection. Because Fortinet delivers SD-WAN in its FortiGate Next-Generation Firewalls, existing customers can simply upgrade their software and get a complete SD-WAN stack right at their branch within minutes. Management for both network and security is through a single-pane-of-glass. However,for customers that do not have Fortinet in place already, installing their platform for SD-WAN is quite a bit more complex than companies that offer platforms that were built as SD-WAN from the start.

Performance is Key

Traditionally, one of the major problems of running networking and security in a single appliance has been the performance impact. As traffic levels grow, more CPU cycles are needed to inspect and, with encrypted traffic, decrypt the traffic. The result is that all too often organizations need to upgrade appliances or inspect less traffic.

Fortinet says it’s addressed this problem with the industry’s first SD-WAN ASIC. The company’s SOC4 application-specific integrated circuit (ASIC) enables what Fortinet claims is the fastest application steering in the industry. This includes SSL/TLS inspection with “the lowest” possible performance degradation. Additional related features include WAN path remediation, tunnel bandwidth aggregation, and automatic failover capabilities. Note: SASE Experts has not yet tested the SOC4 to verify these claims.

With the SOC4, Fortinet can deliver fast SD-WAN security performance. This includes acceleration for responsive overlay VPN and a better overall WAN user experience across the enterprise. Fortinet claims that its cloud overlay controller orchestration, powered by the company’s 360 Protection Bundle subscription service, simplifies overlay VPN deployment with cloud-based automated provisioning.

Fortinet Secure SD-WAN uses “first-packet identification” to intelligently identify applications on the very first packet of data traffic. It’s a claim similar to what we’ve seen from other vendors, most notably Silver Peak. The broad application awareness helps network teams see which applications are being used across the enterprise, enabling them to make well-informed decisions regarding SD-WAN policies. Fortinet claims its Secure SD-WAN references an application control database of over 5,000 applications, a number that grows as both the threat landscape and digital network evolve.

Being application aware opens the doors to automated path intelligence—prioritizing routing across network bandwidth based on the specific application and user. Offering a per-application level SLA, Fortinet Secure SD-WAN automated path intelligence dynamically selects the best WAN link/connection for the situation.

The Bottom Line

We’re excited to see Fortinet enter into the SD-WAN space. The integration of security and SD-WAN is critical and having the security expertise of a leader, like Fortinet, is no doubt a plus. Requiring a broad Fortinet infrastructure is something to keep in mind when evaluating their SD-WAN solution.As mentioned, SD-WAN functionality is offered in version 6.2, which has not been on the market long enough to have enough time to prove itself in the market. But for companies with Fortinet firewalls already in place, or considering Fortinet as a security platform, their SD-WAN makes them worth considering in your evaluation process.

Additional Information

For additional information related to Fortinet SD-WAN, check out the following:

Fortinet’s site is here:www.fortinet.com

Return to the SD-WAN Buyers Guide.

Fortinet SD-WAN (2024)
Top Articles
5 steps to make $500 a month in dividends - Fresh Dividends
Lambert Jacobsz, 1629 - The Prophet of Bethel Meets the Man of God from Judah - fine art print
Unit 30 Quiz: Idioms And Pronunciation
Fat Hog Prices Today
Math Playground Protractor
Fully Enclosed IP20 Interface Modules To Ensure Safety In Industrial Environment
Mama's Kitchen Waynesboro Tennessee
Chalupp's Pizza Taos Menu
Die Windows GDI+ (Teil 1)
Costco The Dalles Or
360 Training Alcohol Final Exam Answers
What happens if I deposit a bounced check?
Aries Auhsd
Progressbook Brunswick
Jessica Renee Johnson Update 2023
Qhc Learning
7 Fly Traps For Effective Pest Control
Po Box 35691 Canton Oh
Locate At&T Store Near Me
Andhrajyothy Sunday Magazine
Divina Rapsing
Lowe's Garden Fence Roll
Abby's Caribbean Cafe
20 Different Cat Sounds and What They Mean
The Largest Banks - ​​How to Transfer Money With Only Card Number and CVV (2024)
Yugen Manga Jinx Cap 19
Weldmotor Vehicle.com
Bleacher Report Philadelphia Flyers
SOGo Groupware - Rechenzentrum Universität Osnabrück
Annapolis Md Craigslist
Town South Swim Club
Craigslist/Phx
Pixel Combat Unblocked
Advance Auto Parts Stock Price | AAP Stock Quote, News, and History | Markets Insider
Mobile Maher Terminal
Joe's Truck Accessories Summerville South Carolina
The Legacy 3: The Tree of Might – Walkthrough
Andhra Jyothi Telugu News Paper
Can You Buy Pedialyte On Food Stamps
10 games with New Game Plus modes so good you simply have to play them twice
Taylor University Baseball Roster
Here's Everything You Need to Know About Baby Ariel
Vérificateur De Billet Loto-Québec
Goats For Sale On Craigslist
Gary Vandenheuvel Net Worth
The Average Amount of Calories in a Poke Bowl | Grubby's Poke
Take Me To The Closest Ups
Craigslist Cars For Sale By Owner Memphis Tn
The 5 Types of Intimacy Every Healthy Relationship Needs | All Points North
Factorio Green Circuit Setup
login.microsoftonline.com Reviews | scam or legit check
Latest Posts
Article information

Author: Neely Ledner

Last Updated:

Views: 6152

Rating: 4.1 / 5 (62 voted)

Reviews: 85% of readers found this page helpful

Author information

Name: Neely Ledner

Birthday: 1998-06-09

Address: 443 Barrows Terrace, New Jodyberg, CO 57462-5329

Phone: +2433516856029

Job: Central Legal Facilitator

Hobby: Backpacking, Jogging, Magic, Driving, Macrame, Embroidery, Foraging

Introduction: My name is Neely Ledner, I am a bright, determined, beautiful, adventurous, adventurous, spotless, calm person who loves writing and wants to share my knowledge and understanding with you.