With the number of threats accelerating, secure communications between enterprise networks, businesses and partners, and corporations and mobile workers is now more important than ever. Data breaches, information leaks, and infected networks and systems are costing corporations and government agencies billions of dollars every year.
Fortinet VPN technology allows organizations to establish secure communications and data privacy between multiple networks and hosts using IPSec and secure sockets layer (SSL) VPN protocols. Both VPN services leverage custom FortiASIC™ Network Processors to accelerate encryption and decryption of network traffic. Once the traffic has been decrypted, multiple threat inspections - including antivirus, intrusion prevention, application control, email filtering and web filtering - can be applied and enforced for all content traversing the VPN tunnel.
IPSec VPN tunneling is typically performed at Layer 3, or lower, of the OSI network model. To enable remote access, the FortiGate® establishes encrypted network connectivity between a remote node and the internal network. SSL VPN configurations are easier to setup and deploy as they communicate at the highest levels in the OSI model, independent of the underlying network architecture. Since the SSL protocol is already built into most web browsers as HTTPS, no additional endpoint configuration is typically required. Conveniently, both SSL and IPSec VPN tunnels may operate simultaneously on the same FortiGate device.
Fortinet IPSec and SSL VPN technologies in FortiGate platforms is tightly integrated with other security features such as firewall, antivirus, web filtering, and intrusion prevention, providing more comprehensive protection than VPN-only security appliances. FortiGate VPN solutions scale to meet the performance requirements of organizations of any size, from SOHO/ROBO and small businesses to large enterprises and service providers. FortiManager™ centralized management appliances provide the ability to manage complex VPN deployments involving thousands of FortiGate systems from a single console.
We went from spending roughly $31,000 a year in support costs for two network security functionalities to $4,000 a year for five functionalities that are proving to work better. For an organization with a tight IT budget, I don't know how it gets better than that.