What's New in FortiOS 6.0?
Watch Now
VPN: Scalable, High-Performance, Diverse Crypto VPNs
Protect high-speed data in motion from breaches in a multi-cloud environment
Selecting Your High-Performance VPN SolutionAvailable in:
-
Appliance
-
Virtual Machine
-
Cloud
Scalable High-Speed Diverse Crypto VPNs Overview
As companies look to transform everything from their business operating models to service delivery methods, they are adopting technologies such as mobile computing and cloud to make data and applications available wherever they are needed resulting in an increased digital surface and exposure to data in transit breaches.
Maintaining uniform security policy for all corporate users, applications, devices irrespective of their location and appropriate access control is essential to providing security in a multi-cloud environment. The data in motion must be protected using mutual authentication and confidentiality to protect sensitive corporate data over unprotected networks and provides a defensible proof of security.
Scalable High-Speed Diverse Crypto VPNs News
Scalable High-Speed Diverse Crypto VPNs Videos
|
Scalable High-Speed Diverse Crypto VPNs Product Details
Organizations select FortiGate scalable and high-performance Crypto VPNs to protect users from man-in-the-middle attacks and ultimately data from breaches that can occur while high-speed data is in motion. Fortinet VPN technology provides secure communications across the Internet between multiple networks and endpoints, through both IPsec and Secure Socket Layer (SSL) technologies, leveraging FortiASIC hardware acceleration to provide high-performance communications and data privacy.
Features and Benefits
Hardware assisted encryption
Prevent breaches and secure data in transit at a very high speed.
Scalable Security
Scalable security that is seamlessly integrated with routing.
Comprehensive data communications security
Protects Application to Application, User to Users, User to Machine, Machine to Machine communication.
Diverse VPNs
IPsec or SSL based diverse VPNs to offer flexible secure network choices.
Security Fabric Integration
Share FortiTelemetry information across site-to-site tunnels with required confidentiality.
Unified Management
Simplified, easy-to-manage, single pane of glass to manage large scale crypto VPNs, Routing and NGFW.
Scalable High-Speed Diverse Crypto VPNs Models and Specifications
▼
FortiGate: Chassis-based NGFW
IPsec VPN Throughput |
100 Gbps |
Max G/W to G/W tunnels |
40,000 |
Network Interfaces |
Varied |
IPsec VPN throughput |
100 Gbps |
Max G/W to G/W tunnels |
40,000 |
Network Interfaces |
Varied |
IPsec VPN throughput |
40 Gbps |
Max G/W to G/W tunnels |
40,000 |
Network Interfaces |
Varied |
IPsec VPN throughput |
45 Gbps |
Max G/W to G/W tunnels |
40,000 |
Network Interfaces |
2x 40GE QSFP+, 2x 10GE SFP+, 2x GE RJ45 |
Please see the product page for more information on these and many more Product features.
FortiGate: Ultra high-end NGFW
IPsec VPN throughput |
130 Gbps |
Max G/W to G/W tunnels |
16,000 |
Network Interfaces |
4x 100GE QSFP28, 24x 25GE SFP28, 3x 10GE SFP+,2x GE RJ45 |
IPsec VPN throughput |
160 Gbps |
Max G/W to G/W tunnels |
16,000 |
Network Interfaces |
4x 100GE QSFP28, 24x 25GE SFP28, 3x 10GE SFP+,2x GE RJ45 |
Please see the product page for more information on these and many more Product features.
FortiGate: High-end NGFW
IPsec VPN Throughput |
400 Gbps |
Max G/W to G/W Tunnels |
40,000 |
Network Interfaces |
10x 100GE QSFP28, 16x 10GE SFP+, 2x GE RJ45 |
IPsec VPN Throughput |
280 Gbps |
Max G/W to G/W Tunnels |
40,000 |
Network Interfaces |
6x 100GE QSFP28, 16x 10GE SFP+, 2x GE RJ45 |
IPsec VPN Throughput |
135 Gbps |
Max G/W to G/W Tunnels |
40,000 |
Network Interfaces |
4x 100GE CFP2, 4x 40GE QSFP+ 8x 10GE SFP+, 2x GE RJ45 |
IPsec VPN Throughput |
100 Gbps |
Max G/W to G/W Tunnels |
40,000 |
Network Interfaces |
4x 40GE QSFP+, 20x 10GE SFP+/GE SFP, 8x SFP+, 2x GE RJ45 |
IPsec VPN Throughput |
50 Gbps |
Max G/W to G/W Tunnels |
40,000 |
Network Interfaces |
48x 10GE SFP+/GE SFP, 2x GE RJ45 |
IPsec VPN Throughput |
50 Gbps |
Max G/W to G/W Tunnels |
40,000 |
Network Interfaces |
32x 10GE SFP+/GE SFP, 2x GE RJ45 |
IPsec VPN Throughput |
50 Gbps |
Max G/W to G/W Tunnels |
40,000 |
Network Interfaces |
16x 10GE SFP+/GE SFP, 2x GE RJ45 |
IPsec VPN Throughput |
95 Gbps |
Max G/W to G/W Tunnels |
20,000 |
Network Interfaces |
10x 10GE SFP+, 2x 10GE SFP+ bypass, 34x GE RJ45 |
IPsec VPN Throughput |
65 Gbps |
Max G/W to G/W Tunnels |
20,000 |
Network Interfaces |
6x 10GE SFP+ , 34x GE RJ45 |
IPsec VPN Throughput |
50 Gbps |
Max G/W to G/W Tunnels |
20,000 |
Network Interfaces |
8x 10GE SFP+/GE SFP, 16x GE SFP, 18x GE RJ45 |
IPsec VPN Throughput |
40 Gbps |
Max G/W to G/W Tunnels |
20,000 |
Network Interfaces |
4x 10GE SFP+/GE SFP, 16x GE SFP, 18x GE RJ45 |
IPsec VPN Throughput |
25 Gbps |
Max G/W to G/W Tunnels |
20,000 |
Network Interfaces |
2x 10 GE SFP+, 16x GE SFP, 18x GE RJ45 |
Please see the product page for more information on these and many more Product features.
FortiGate: Mid-range NGFW
IPsec VPN Throughput |
25 Gbps |
Max G/W to G/W Tunnels |
2,000 |
Network Interfaces |
2x 10 GE SFP+, 16x GE SFP, 18x GE RJ45 |
IPsec VPN Throughput |
20 Gbps |
Max G/W to G/W Tunnels |
2,000 |
Network Interfaces |
2x 10 GE SFP+, 8x GE SFP, 4x GE RJ45 Bypass, 22x GE RJ45 |
IPsec VPN Throughput |
20 Gbps |
Max G/W to G/W Tunnels |
2,000 |
Network Interfaces |
2x 10 GE SFP+, 10x GE RJ45, 8x GE SFP |
IPsec VPN Throughput |
20 Gbps |
Max G/W to G/W Tunnels |
2,000 |
Network Interfaces |
18x GE RJ45, 16x GE SFP |
IPsec VPN Throughput |
9 Gbps |
Max G/W to G/W Tunnels |
1 Gbps2,000 |
Network Interfaces |
18x GE RJ45, 4x GE SFP |
IPsec VPN Throughput |
4 Gbps |
Max G/W to G/W Tunnels |
2,000 |
Network Interfaces |
20x GE RJ45, 2x Shared Port Pairs |
Please see the product page for more information on these and many more Product features.
FortiGate: Entry-level NGFW
IPsec VPN Throughput |
2.5 Gbps |
Max G/W to G/W Tunnels |
200 |
Network Interfaces |
14x GE RJ45, 2x Shared Port Pairs |
IPsec VPN Throughput |
2 Gbps |
Max G/W to G/W Tunnels |
200 |
Network Interfaces |
10x GE RJ45 |
IPsec VPN Throughput |
90 Mbps |
Max G/W to G/W Tunnels |
200 |
Network Interfaces |
7x GE RJ45 |
IPsec VPN Throughput |
75 Mbps |
Max G/W to G/W Tunnels |
200 |
Network Interfaces |
5x GE RJ45 |
Please see the product page for more information on these and many more Product features.
▼
Data Sheets
FAQs
What is the difference between routed-based vs policy-based VPN?
A route-based VPN creates a virtual IPsec network interface that applies encryption or decryption as needed to any traffic that interface carries. Route-based VPNs are also known as interface-based VPNs. A policy-based VPN is implemented through a special IPsec firewall policy that applies encryption to traffic accepted by the policy.
How do you select between IPsec vs SSL VPNs?
IPsec VPN operates at the network layer, so its configuration is generally more complex, requiring a greater understanding of potentially complex networking configurations, encryption, and authentication. However, IPsec VPN is the best solution for gateway-to-gateway VPNs connecting two or more private networks together over the Internet
SSL VPN configurations are usually simpler than IPsec VPN configurations. All the complex networking is handled by the network infrastructure and the VPN configuration can focus on high-level communication requirements, access control, security profiles, and endpoint control.