Skip to content Skip to navigation Skip to footer

Secure SD-WAN

Fortinet Secure SD-WAN Transforms and Secures WAN

Gartner 2021 Magic Quadrant Secure SD-WAN Summit'21
Secure SD-WAN 

banner background banner dots

Overview

Fortinet FortiGate delivers fast, scalable, and flexible Secure SD-WAN for cloud-first, security-sensitive, and global enterprises. Our Security-Driven Networking approach consolidates SD-WAN, next-generation firewall (NGFW), and advanced routing to:

  • Deliver superior quality of experience at any scale
  • Accelerate network and security convergence, and simplify WAN architecture
  • Orchestrate consistent network and security policies
  • Achieve operational efficiencies through automation, deep analytics, and self-healing

SD-WAN Explained

Improve user experience and simplify operations at the WAN edge with an integrated next-generation firewall (NGFW) and SD-WAN in a single offering.

Watch the video

Available in all form factors including physical and virtual appliances. Flexible capacity enables the highest application experience.

FortiManager can be used to monitor and manage FortiGate appliances and is also available in different form factors including hardware, virtual, and SaaS.

Compare Products

View by:

Hardware appliances

IPSEC VPN Throughput
4.4 Gbps
Max IPSEC Tunnels
200
Threat Protection
600 Mbps
Application Control Throughput
990 Mbps
SSL Inspection Throughput
310 Mbps
WAN Bandwidth
Unrestricted
IPSEC VPN Throughput
6.5 Gbps
Max IPSEC Tunnels
200
Threat Protection
700 Mbps
Application Control Throughput
1.8 Gbps
SSL Inspection Throughput
630 Mbps
WAN Bandwidth
Unrestricted
IPSEC VPN Throughput
7.5 Gbps
Max IPSEC Tunnels
200
Threat Protection
900 Mbps
Application Control Throughput
1.8 Gbps
SSL Inspection Throughput
715 Mbps
WAN Bandwidth
Unrestricted
IPSEC VPN Throughput
11.5 Gbps
Max IPSEC Tunnels
2500
Threat Protection
1 Gbps
Application Control Throughput
2.2 Gbps
SSL Inspection Throughput
1 Gbps
WAN Bandwidth
Unrestricted
IPSEC VPN Throughput
13 Gbps
Max IPSEC Tunnels
2500
Threat Protection
3 Gbps
Application Control Throughput
13 Gbps
SSL Inspection Throughput
4 Gbps
WAN Bandwidth
Unrestricted

FortiGate 40F

The FortiGate/FortiWiFi 40F series provides a fast and secure SD-WAN solution in a compact fanless desktop form factor for enterprise branch offices and mid-sized businesses and protects against cyberthreats with system-on-a-chip acceleration and industry-leading secure SD-WAN in a simple, affordable, and easy to deploy solution.

Learn More

FortiGate 80F

The FortiGate 80F series provides an application-centric, scalable, and secure SD-WAN solution in a compact, fanless, desktop form factor for enterprise branch offices. It protects against cyber threats with system-on-a-chip acceleration and industry-leading Secure SD-WAN in a simple, affordable, and easy to deploy solution. FortiGate 80F series also comes with integrated bypass interface for better availability and in-built WiFi6 and PoE to enable SD-Branch deployment.

Learn More

Hardware appliances

IPSEC VPN Throughput
20 Gbps
Max IPSEC Tunnels
50,000
Threat Protection
5 Gbps
SSL Inspection Throughput
4.8 Gbps
IPSEC VPN Throughput
20 Gbps
Max IPSEC Tunnels
50,000
Threat Protection
7 Gbps
SSL Inspection Throughput
8 Gbps
IPSEC VPN Throughput
48 Gbps
Max IPSEC Tunnels
100,000
Threat Protection
7.1 Gbps
SSL Inspection Throughput
10 Gbps
IPSEC VPN Throughput
55 Gbps
Max IPSEC Tunnels
100,000
Threat Protection
9.1 Gbps
SSL Inspection Throughput
17 Gbps
IPSEC VPN Throughput
55 Gbps
Max IPSEC Tunnels
100,000
Threat Protection
17 Gbps
SSL Inspection Throughput
20 Gbps
IPSEC VPN Throughput
140 Gbps
Max IPSEC Tunnels
200,000
Threat Protection
25 Gbps
SSL Inspection Throughput
30 Gbps
IPSEC VPN Throughput
140 Gbps
Max IPSEC Throughput
200,000
Threat Protection
30 Gbps
SSL Inspection Throughput
34 Gbps
IPSEC VPN Throughput
210 Gbps
Max IPSEC Tunnels
200,000
Threat Protection
45 Gbps
SSL Inspection Throughput
50 Gbps
IPSEC VPN Throughput
310 Gbps
Max IPSEC Tunnels
200,000
Threat Protection
75 Gbps
SSL Inspection Throughput
86 Gbps
Devices/VDOMs (Maximum)
30
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
100
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1000
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1200
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
4000
Sustained Log Rates
150
GB/Day
10
Zero Touch Provisioning
Yes
Third Party Automation
Yes
FMG-BASE to FMG-VM-UL-UG
Devices/VDOMs (Maximum)
10 to Unlimited
Sustained Log Rates
Hardware dependent
GB/Day
1-50
Zero Touch Provisioning
Yes
Third Party Automation
Yes
NGFW Throughput
850 Mbps
Threat Protection Throughput
700 Mbps
VPN Throughput
1 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
1.5 Gbps
Threat Protection Throughput
1.2 Gbps
VPN Throughput
1.5 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
2.5 Gbps
Threat Protection Throughput
2 Gbps
VPN Throughput
3 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
4.5 Gbps
Threat Protection Throughput
3.5 Gbps
VPN Throughput
5.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
NGFW Throughput
9 Gbps
Threat Protection Throughput
7 Gbps
VPN Throughput
6.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adapters), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 Kbytes HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.

Amazon Web Services (AWS), Microsoft Azure, Google, and Oracle support both bring-your-own-license (BYOL) and on-demand (pay-as-you-go). Please see the Marketplace listings for more information:

View by:

Second year in a row Fortinet has been recognized with Gartner Peer Insights Customers Choice for WAN Edge Infrastructure with highest number of customer reviews

This high recognition from our customers affirms that our security driven networking approach enables their organization’s WAN transformation at scale without compromising security to achieve best user experience for all their applications and realize best ROI at reduced cost and complexity. 2020 - a year of crisis has transformed organizations way of conducting business amid uncertainty.  We believe our commitment to customers during these challenging times has led to being the only SD-WAN vendor named in Gartner MQ Leadership, ranked highest for security-sensitive and small footprint retail use case in Gartner Critical capability and now awarded Gartner Peer Insights with highest number (332) of reviews in the WAN Edge segment.

★★★★★
"Lots Of Searching, Moved To Fortigate Secure SD-WAN With Confidence"

"We looked around for nearly 6 months in the SD-WAN world, carefully searching for the right vendor, product, and support. After we spent many, many days of review, we decided to use FortiGate as our solution. This works especially nice when you are already in the FortiGate land, as we were. We primarily chose FortiGate as this would integrate with a lot of our existing infrastructure, especially security. IT also included the more advanced features we wanted like FEC (forward error correction)."

– IT Manager, Large Financial industry

★★★★★
"Best Value SD-WAN Solution Combined With Performance And Support That It Top Notch"

"We have been extremely impressed with the ease of use/setup along with the amazing support that we have come to love with Fortinet. Super cost effective. Also, they have improved over the years how easily can it be managed without having to learn complex commands."

– Network Manager, Large Transportation Enterprise

★★★★★
"FortiGate SD-WAN, Problem Solver And Cost Saver!"

"Near seamless deployment execution and ability to replace many different suppliers/partners devices with a single solution. Near all-in-one capability. Almost couldn't ask for more."

– IT Manager, Large Manufacturing Company

★★★★★
"Extremely Pleased With Fortinet"

"Fortinet has been extremely easy to work with and our account rep has been exceptional. They have bent over backwards to help us get what we needed to redo our entire network within our budget."

– Director of Infrastructure, Healthcare

★★★★★
"A High Achieving Product"

“Fortinets SD-WAN feature set is readily available and easy to integrate with via API. Mass Automation has been relative easy to achieve with great results for our customer and in-house projects. Our experience with Fortinet SD-WAN has shown them to be a very robust and high performing solution which also has the added functionality of Fortinets strength in Security. Fortinet SD-WAN's performance, security and low TCO has made it a popular choice by our customers

– Security Infrastructure Manager, Services

★★★★★
"SDWan Come To Stay And If Is Good Nowadays Imagine In Next Years"

"SD Wan came to simplify infrastructure analyst life. When you think that before we have to balance links manually and choose which one would be responsible for some application. Another benefit is not depend anymore only from dedicated internet links which cost high and without SD Wan we can't perform best with them. When we talk about application, SD wan can give us the best performance with the rule that you think is the bet one for your application (Latency, jitter). The best one is QOS rules witch real works and bring the best performance when we talk about application that are high priority for example Conference rooms used only by executives (CEO, CIO, CFO)."

– Infrastructure Analyst, Large Education/Government

★★★★★
"They Have Very Good And Innovative Products, Reasonable Prices"

“The human team is excellent, they have experience and a good predisposition to problem solving. We started with a solution in company with a supplier, and little by little we got to know the brand and the solutions they gave us. Definitely, we have found robust solutions, in aspects such as communications resilience, management services and security automation. We hope in the following years to be able to continue evaluating the solutions that are most convenient for our company.”

– IT Manager, Large Finacial Industry

★★★★★
"Review For Fortigate Secure SD-WAN"

"We tried to implement sdwan features to speed up new branches release and try to cut link costs. After a scouting between vendors we found very close differences between products. At the end we decided Fortinet because of the have fortigate already installed in branches, sdwan is well integrated in the appliance at no additional cost. We found a good support from the vendor and the best ratio for price, performance, scalability and features."

– Network Engineer Large Financial Industry

★★★★★
"Quickwins Starting SD-WAN"

"It's possible to start using fortigate products really simple, we had quick-wins deploying SD-WAN. We created WAN uplinks with 3 VLAN's where our providers are connected, created a simple rule and we have been able to use the created SD-WAN interface. Policies etc. could be added simple, to manage priority, bandwidth by rules."

– Systems Engineering, Manufacturing

★★★★★
"Fortigate Secure SD-WAN The Way To Go!!"

"Overall the SDWAN implementation how worked well keeping our sites up, the one thing I have had an issue with is when a circuit fails over the VIPs we have setup stop working. That could be a lack of knowledge thing on my end."

– Network Engineer, Energy and Utilities

 
The GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE badge is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved. Gartner Peer Insights Customers’ Choice constitute the subjective opinions of individual end-user reviews, ratings, and data applied against a documented methodology; they neither represent the views of, nor constitute an endorsement by, Gartner or its affiliates.
 

FortiGuard Services for FortiGate Secure SD-WAN

The growth of technologies such as public and private clouds, software-defined wide-area networks (SD-WAN), and DevOps has resulted in increasingly complex IT networks at almost every organization. At the same time, cybersecurity threats have become more sophisticated and fast-moving. Fortinet offers a full range of services and subscriptions to help you simplify and make the most of your SD-WAN deployment with the lowest TCO possible.

Choose the 360 Protection Bundle for your SD-WAN solution. The 360 Protection bundle was designed to simplify SD-WAN operations on top of providing our customers with comprehensive security and operational services to deliver the best protection available while lowering TCO. In addition to the full suite of FortiGuard services and Professional Services subscriptions you see here, you also get 24x7 FortiCare with Advanced Support built-in!

Read on to find out how Fortinet subscriptions and services can help you get the most out of your SD-WAN solution : 

We can help our customers lower their total cost of ownership (TCO) and simplify day-to-day  security operations  through our FortiOps services, which provide cloud-based management, visibility, and automation  across your Fortinet Security Fabric and help you realized the operational benefits of a Fortinet-enabled Secure SD-WAN.  

Operational Services

Cloud-based Management, Visibility, and Operations

FortiGuard

Fortinet Threat Intelligence and Research Organization

Effective best-in-class security requires timely, global intelligence combined with fast decision-making and response across all critical vectors. Fortinet offers proven and one of the most certified artificial intelligence-driven protection available in the market today powered by FortiGuard Labs.

For customers implementing FortiGates as NGFWs, here’s how FortiGuard subscriptions can help:

  • Application Control: Fortinet boasts one of the largest applications database to safeguard your organization from risky application and allows you visibility and control of applications running in your network
  • Intrusion Prevention: Stop unwanted attempts to access your network that target vulnerabilities and configuration gaps. We block over 10 million intrusion attempts per minute.
  • Advanced Threats: Stop malicious files and payloads moving into your network with FortiGuard’s leading advanced malware, antivirus, and sandboxing capabilities. We stop over 35,000 malicious files per minute.

Mission critical security-driven networks deserve the best support available.  FortiCare provides 24x7 support options to help keep your FortiGates up and running.  We also have services to help you recover in the rare moments when bigger bumps seem to come out of nowhere such as our Premium RMA options with 4-hour replacements. 

Want faster resolution?  Choose our Advanced Support option.

Need help to get going with new deployments and integrations?  FortiCare can do it, too, with Professional Services and Resident Engineers!  Contact Sales to find out how.

FortiCare

World-class Global Support and Professional Services

Pro-Tips

  • Request a free threat assessment today to find out how we can help secure your network!
  • Don't forget to add Premium RMA for the fastest way to recover from unexpected bumps. We have global depots to get your parts fast!

View by:

Fuse Community


Fortinet Secure SD-WAN enables better application experience, simplifies WAN operations and reduces costs by migrating from expensive MPLS to broadband connectivity, while also integrating advanced security features.

Enter your data in the calculator below to learn how much you could save with Fortinet Secure SD-WAN.


Number of Sites
Enter Number of Office Locations.
Number of Hubs
Enter number of data centers.
Monthly MPLS Cost Per Site
Enter average monthly cost for each branch office's MPLS WAN link.
MPLS Bandwidth Requirement Per Site
Enter average bandwidth capacity in Mbps for each branch office's MPLS WAN link.
Percentile of MPLS Reduction
Enter the percentage of MPLS links that will be replaced by internet connections.
Monthly Internet Cost Per Site
Enter average monthly cost of internet for every branch and hub.
Internet Bandwidth Available Per Site
Enter the average bandwidth capacity that internet provides for branches and hubs.
Number of Years
Enter the number of years to calculate ROI for.
Secure SD-WAN
Select if NGFW security is a requirement.
Total Savings of over Years
Existing WAN MPLS Cost
SD-WAN Cost (CAPEX + OPEX)
Increase WAN Bandwidth Per Site
Enable Better Security Posture
This calculation is for estimation purposes only and doesn't account for legacy router maintenance cost.

Welcome to the Fortinet Secure SD-WAN Teleworker demo site. This demo shows the dynamic WAN path controller, application SLA enforcement, intelligent application steering and traffic shaping capabilities of Fortinet SD-WAN and how it can help teleworkers in your organization achieve more efficient use of WAN resources, increased connection reliability, and lower TCO.

   

FortiGate FortiOS 6.2 SD-WAN Failover Demo

This video demonstrates how SD-WAN on FortiOS 6.2 can help greatly improve the quality of experience of four popular applications – Dropbox, VoIP, Office 365, and video. Fortinet Secure SD-WAN features a dynamic WAN path controller with a proprietary library of over 5000 applications to help organizations with their digital transformation, WAN OpEx reduction, and branch consolidation efforts.

Watch Now

    

FortiGate Secure SD-WAN Use Cases

As network edges explode, you need consistent security and connectivity. With Secure SD-WAN, you can:

Features and Benefits

Scalable

Application Resilience
Ensures highest level of application availability and performance over any WAN transport

icon benefit fortiattack

Integrated Advanced Security
Converges the most advanced NGFW and routing to deliver consistent security on- and off-network

high performance icon

Scalable, High Performance
Transforms and secures SD-WAN at large scale with no performance impact thanks to the industry's only SD-WAN ASIC

cloud ready icon

Multi-Cloud On-Ramp
Enables secure, fast connectivity and high performance to, in, and between cloud applications  

icon benefits tools

Zero-Touch Provisioning
Enables large scale, faster deployment of Secure SD-WAN

platform support icon

Centralized Orchestration
Centrally manages deployments, configurations, and on-going operations with complete visibility, analytics and reporting

security driven networking | security fabric

Security-Driven Networking

Traditional security strategies can’t keep up with the challenges of your expanding attack surface – from remote work, to mobility, to multi-cloud networks. Fortinet Security-Driven Networking addresses these challenges by tightly integrating network infrastructure with security architecture, meaning your network will remain secure as it scales and changes.

Fortinet News