Fortinet Introduces the World’s First Hyperscale Firewall
John Maddison, EVP of products and CMO at Fortinet
“Fortinet continues to push the boundaries of hardware-accelerated performance to enable the convergence of security and networking – what we call Security-driven Networking. The FortiGate 4400F Network Firewall delivers unprecedented scale and performance that is up to 13 times better than comparable products. As the only network firewall capable of securing hyperscale data centers and 5G networks, FortiGate 4400F leads the industry in what is possible for data center security.”
Fortinet® (NASDAQ: FTNT), a global leader in broad, integrated and automated cybersecurity solutions, today announced the world’s first hyperscale firewall, FortiGate 4400F , setting new milestones for Security Compute Ratings to deliver unparalleled performance, scalability and security in a single appliance to meet escalating business needs. FortiGate 4400F is powered by Fortinet’s latest seventh generation network processor (NP7) to offer hardware-acceleration, making it the only network firewall that is fast enough to secure hyperscale data centers and 5G networks.
Hyperscale Data Centers Require Hyperscale Security
Today’s most digitally innovative organizations face escalating and often unpredictable capacity needs that are quickly outpacing their security solution’s performance capabilities. As a result, security has become the choke point for traffic entering and exiting most hyperscale data centers, adversely affecting user experience, and bringing productivity to a crawl, causing many network admins to feel pressured by business demands to forego security safeguards. Allowing all traffic to flow freely into and out of an organization’s network without security opens organizations up to the risk of cyberattacks, which can severely damage their brand reputation and cause potential loss in revenue due to extended downtime. While many organizations have successfully deployed hyperscale network architectures, achieving hyperscale security has been a significant challenge. To-date, some vendors claim to implement hyperscale security through multiple firewalls orchestrated together to achieve a hyperscale architecture, which has proven to be cumbersome and expensive. The hardware acceleration via purpose-built NP7 network processors of FortiGate 4400F uniquely delivers the first single compact appliance with security performance and scale that keeps up with the growth of today’s hyperscale data centers and enables the following use cases:
- High Velocity e-Retail: Allows high-velocity e-retail businesses to deliver the best possible user experience for their customers by supporting tens of millions of connections per second, enabling essential layer 4 security, and delivering hardware-accelerated prevention of distributed denial of service (DDoS) attacks.
- Cutting-edge research: Enhances productivity for cutting-edge research facilities and other verticals like oil and gas by supporting the secure transfer of extremely large datasets – also known as elephant flows – of up to 100Gbps. For situations that require encrypting at high speeds, IPsec can be turned on non-intrusively to support high-bandwidth IPsec tunnel flows.
- Financial institutions, cloud providers and other large enterprises: Allows businesses to launch services in the most agile and secure fashion possible to increase productivity and revenue. By accelerating VXLAN-based segmentation, FortiGate 4400F enables super-fast communication between massively scaled services (such as compute, storage, or apps) that are co-hosted on physical and virtualized domains. These large scale segments can be protected with essential Layer 4 or advanced Layer 7 security.
5G Speeds Need Security at Scale that Can Keep Up
Today’s hyperconnected world allows user-to-user, user-to-machine, and machine-to-machine communication, which in turn puts huge demands on security to be delivered at massive scale. As 4G transitions to 5G, these demands will be pushed to their limits as network operation teams must ensure both security and business continuity. Most solutions lack the required scale to overcome IPv4 address scarcity, growing mobile bandwidth demands, and increasing numbers of encrypted tunnels connecting infrastructure, which in turn holds carriers back from being able to support a large set of customers. FortiGate 4400F uniquely addresses these pain points, delivering:
- Carrier-grade network address translation (CGNAT) that enables hyperscale Packet Delivery Network (PDN) while preserving user experience with hardware-accelerated user session setup rates, low latency and hardware-assisted logging for audit and control.
- Critical scale for Security Gateway (SecGW) at 4G and 5G mobile for Radio Access Network (RAN) control to enable services providers to build high capacity networks that maximize return on investment.
- Allows service providers to differentiate their customer offerings by delivering additional value-added services such as parental control with technologies like URL filtering.
FortiGate 4400F vs. Competitors
Below is a comparison of the top firewalls on the market against the FortiGate 4400F series. Security Compute Rating is a benchmark (performance multiplier) that compares FortiGate Network Firewall performance versus the industry average of competing products across various categories that fall within the same price band.
1 Target values - Enabled by a Hyperscale License
2 PAN: Calculated with 1-NPC (100G-NPC) cards, no services and support
3 Juniper: SRX5400E-B2-AC
FortiGate 4400F showcases the industry’s highest performance with Security Compute Ratings up to 13x better than the competition. As a result, organizations can enjoy far greater headroom for digital innovation with Fortinet TCO savings and have the resources to respond to unexpected events.
Powered by Security-driven Networking
FortiGate 4400F leverages security-driven networking principals to enable ultra-scalable, secure distributed networks and hyperscale data centers. Security-driven Networking solutions are not only faster and scale further than the competition, they are also much more cost-effective, delivering the industry’s best price/performance in a compact form factor for additional lower costs associated with lower rack space, power and cooling requirements. Fortinet also offers industry leading automation and orchestration capabilities as part of Fabric Management Center and FortiOS. Additionally, Fortinet continues to be a proponent of Open APIs and is committed to support industry initiatives like OpenConfig with the goal of delivering automation to streamline operations.
The FortiGate 4400F, as a part of an integrated security platform via the Fortinet Security Fabric, also provides security for hybrid data centers as follows:
- Protection from known attacks with AI-powered FortiGuard services including web filtering and intrusion prevention system services.
- Proactive threat detection for any segmentation that a customer plans to adopt with a Security Compute Rating of 2x.
- Full visibility into threats and removes blind spots with SSL inspection including TLS 1.3 that is 6.5x better than competing products.
- Protection of business critical applications and servers by offering virtual patching using high performance consolidated IPS.
“Fortinet’s highly differentiated high-end firewalls enable us to deliver security-driven networking for our customers to protect IT systems, platforms, and applications. FortiGate is a long-term advanced security solution that consolidates point-products and reduces cost and complexity. FortiGate 4400F will uniquely allow us to provide hyperscale security solutions that preserve user experience and business growth for our largest customers.”
- Michael J. McGlynn, Vice President, Global Security at WWT
“Security has long been an issue for organizations with the largest capacity needs - it simply hasn’t been able to keep up, causing many network admins to make the tradeoff between meeting business demands and maintaining a strong security posture. Hyperscale data centers and 5G networks have the biggest need for security that can keep pace with unprecedented user and enterprise demands. Fortinet is delivering security performance figures that far exceed those of competitor solutions to finally give hyperscale organizations the ability to efficiently and effectively secure their business.”
- Zeus Kerravala, Founder and Principal Analyst at ZK Research
- Read more about the announcement and how the FortiGate 4400F delivers security for hyperscale data centers and 5G in the blog.
- Learn more about the FortiGate 4400F and our FortiGate family of Next-Generation Firewalls.
- Find out how the Fortinet Security Fabric platform delivers broad, integrated, and automated protection across an organization’s entire digital infrastructure.
- Learn more about FortiGuard Labs threat research and the FortiGuard Security Subscriptions and Services portfolio.
- Read a small sample of the hundreds of comments and feedback posted by Fortinet customers on the Gartner Peer Insights website for the FortiGate Next-Generation Firewall and about Fortinet being named a 2020 Gartner Peer Insights Customers’ Choice for Network Firewalls.
- Learn more about Fortinet’s free cybersecurity training initiative or about the Fortinet Network Security Expert program, Network Security Academy program, and FortiVet program.
- Engage in our Fortinet user community (Fuse). Share ideas and feedback, learn more about our products and technology, or connect with peers.
- Follow Fortinet on Twitter, LinkedIn, Facebook, YouTube, and Instagram.
Fortinet (NASDAQ: FTNT) secures the largest enterprise, service provider, and government organizations around the world. Fortinet empowers our customers with complete visibility and control across the expanding attack surface and the power to take on ever-increasing performance requirements today and into the future. Only the Fortinet Security Fabric platform can address the most critical security challenges and protect data across the entire digital infrastructure, whether in networked, application, multi-cloud or edge environments. Fortinet ranks #1 in the most security appliances shipped worldwide and more than 455,000 customers trust Fortinet to protect their businesses. Both a technology company and a learning company, the Fortinet Network Security Institute has one of the largest and broadest cybersecurity training programs in the industry. Learn more at https://www.fortinet.com, the Fortinet Blog, or FortiGuard Labs.
Copyright © 2020 Fortinet, Inc. All rights reserved. The symbols ® and ™ denote respectively federally registered trademarks and common law trademarks of Fortinet, Inc., its subsidiaries and affiliates. Fortinet's trademarks include, but are not limited to, the following: Fortinet, FortiGate, FortiGuard, FortiCare, FortiManager, FortiAnalyzer, FortiOS, FortiADC, FortiAP, FortiAppMonitor, FortiASIC, FortiAuthenticator, FortiBridge, FortiCache, FortiCamera, FortiCASB, FortiClient, FortiCloud, FortiConnect, FortiController, FortiConverter, FortiDB, FortiDDoS, FortiExplorer, FortiExtender, FortiFone, FortiCarrier, FortiHypervisor, FortiIsolator, FortiMail, FortiMonitor, FortiNAC, FortiPlanner, FortiPortal, FortiPresence , FortiProxy, FortiRecorder, FortiSandbox, FortiSIEM, FortiSwitch, FortiTester, FortiToken, FortiVoice, FortiWAN, FortiWeb, FortiWiFi, FortiWLC, FortiWLCOS and FortiWLM.
Other trademarks belong to their respective owners. Fortinet has not independently verified statements or certifications herein attributed to third parties and Fortinet does not independently endorse such statements. Notwithstanding anything to the contrary herein, nothing herein constitutes a warranty, guarantee, contract, binding specification or other binding commitment by Fortinet or any indication of intent related to a binding commitment, and performance and other specification information herein may be unique to certain environments. This news release may contain forward-looking statements that involve uncertainties and assumptions, such as statements regarding technology releases among others. Changes of circumstances, product release delays, or other risks as stated in our filings with the Securities and Exchange Commission, located at www.sec.gov, may cause results to differ materially from those expressed or implied in this press release. If the uncertainties materialize or the assumptions prove incorrect, results may differ materially from those expressed or implied by such forward-looking statements and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements. Fortinet assumes no obligation to update any forward-looking statements, and expressly disclaims any obligation to update these forward-looking statements.