SD-WAN Explained
Improve user experience and simplify operations at the WAN edge with an integrated next-generation firewall (NGFW) and SD-WAN in a single offering.
Watch the videoSecure SD-WAN
Fortinet Secure SD-WAN Transforms and Secures WAN
Overview
Fortinet FortiGate delivers fast, scalable, and flexible Secure SD-WAN for cloud-first, security-sensitive, and global enterprises. Our Security-Driven Networking approach consolidates SD-WAN, next-generation firewall (NGFW), and advanced routing to:
- Deliver superior quality of experience at any scale
- Accelerate network and security convergence, and simplify WAN architecture
- Orchestrate consistent network and security policies
- Achieve operational efficiencies through automation, deep analytics, and self-healing
|
Available in all form factors including physical and virtual appliances. Flexible capacity enables the highest application experience.
FortiManager can be used to monitor and manage FortiGate appliances and is also available in different form factors including hardware, virtual, and SaaS.
View by:
Hardware appliances
IPSEC VPN Throughput |
4.4 Gbps |
Max IPSEC Tunnels |
200 |
Threat Protection |
600 Mbps |
Application Control Throughput |
990 Mbps |
SSL Inspection Throughput |
310 Mbps |
WAN Bandwidth |
Unrestricted |
IPSEC VPN Throughput |
6.5 Gbps |
Max IPSEC Tunnels |
200 |
Threat Protection |
700 Mbps |
Application Control Throughput |
1.8 Gbps |
SSL Inspection Throughput |
630 Mbps |
WAN Bandwidth |
Unrestricted |
IPSEC VPN Throughput |
7.5 Gbps |
Max IPSEC Tunnels |
200 |
Threat Protection |
900 Mbps |
Application Control Throughput |
1.8 Gbps |
SSL Inspection Throughput |
715 Mbps |
WAN Bandwidth |
Unrestricted |
IPSEC VPN Throughput |
11.5 Gbps |
Max IPSEC Tunnels |
2500 |
Threat Protection |
1 Gbps |
Application Control Throughput |
2.2 Gbps |
SSL Inspection Throughput |
1 Gbps |
WAN Bandwidth |
Unrestricted |
IPSEC VPN Throughput |
13 Gbps |
Max IPSEC Tunnels |
2500 |
Threat Protection |
3 Gbps |
Application Control Throughput |
13 Gbps |
SSL Inspection Throughput |
4 Gbps |
WAN Bandwidth |
Unrestricted |
|
FortiGate 40F
The FortiGate/FortiWiFi 40F series provides a fast and secure SD-WAN solution in a compact fanless desktop form factor for enterprise branch offices and mid-sized businesses and protects against cyberthreats with system-on-a-chip acceleration and industry-leading secure SD-WAN in a simple, affordable, and easy to deploy solution.
Learn More
|
FortiGate 80F
The FortiGate 80F series provides an application-centric, scalable, and secure SD-WAN solution in a compact, fanless, desktop form factor for enterprise branch offices. It protects against cyber threats with system-on-a-chip acceleration and industry-leading Secure SD-WAN in a simple, affordable, and easy to deploy solution. FortiGate 80F series also comes with integrated bypass interface for better availability and in-built WiFi6 and PoE to enable SD-Branch deployment.
Learn MoreHardware appliances
IPSEC VPN Throughput |
20 Gbps |
Max IPSEC Tunnels |
50,000 |
Threat Protection |
5 Gbps |
SSL Inspection Throughput |
4.8 Gbps |
IPSEC VPN Throughput |
20 Gbps |
Max IPSEC Tunnels |
50,000 |
Threat Protection |
7 Gbps |
SSL Inspection Throughput |
8 Gbps |
IPSEC VPN Throughput |
48 Gbps |
Max IPSEC Tunnels |
100,000 |
Threat Protection |
7.1 Gbps |
SSL Inspection Throughput |
10 Gbps |
IPSEC VPN Throughput |
55 Gbps |
Max IPSEC Tunnels |
100,000 |
Threat Protection |
9.1 Gbps |
SSL Inspection Throughput |
17 Gbps |
IPSEC VPN Throughput |
55 Gbps |
Max IPSEC Tunnels |
100,000 |
Threat Protection |
17 Gbps |
SSL Inspection Throughput |
20 Gbps |
IPSEC VPN Throughput |
140 Gbps |
Max IPSEC Tunnels |
200,000 |
Threat Protection |
25 Gbps |
SSL Inspection Throughput |
30 Gbps |
IPSEC VPN Throughput |
140 Gbps |
Max IPSEC Throughput |
200,000 |
Threat Protection |
30 Gbps |
SSL Inspection Throughput |
34 Gbps |
IPSEC VPN Throughput |
210 Gbps |
Max IPSEC Tunnels |
200,000 |
Threat Protection |
45 Gbps |
SSL Inspection Throughput |
50 Gbps |
IPSEC VPN Throughput |
310 Gbps |
Max IPSEC Tunnels |
200,000 |
Threat Protection |
75 Gbps |
SSL Inspection Throughput |
86 Gbps |
Devices/VDOMs (Maximum) |
30 |
Sustained Log Rates |
50 |
GB/Day |
2 |
Zero Touch Provisioning |
Yes |
Third Party Automation |
Yes |
Devices/VDOMs (Maximum) |
100 |
Sustained Log Rates |
50 |
GB/Day |
2 |
Zero Touch Provisioning |
Yes |
Third Party Automation |
Yes |
Devices/VDOMs (Maximum) |
1000 |
Sustained Log Rates |
50 |
GB/Day |
2 |
Zero Touch Provisioning |
Yes |
Third Party Automation |
Yes |
Devices/VDOMs (Maximum) |
1200 |
Sustained Log Rates |
50 |
GB/Day |
2 |
Zero Touch Provisioning |
Yes |
Third Party Automation |
Yes |
Devices/VDOMs (Maximum) |
4000 |
Sustained Log Rates |
150 |
GB/Day |
10 |
Zero Touch Provisioning |
Yes |
Third Party Automation |
Yes |
FMG-BASE to FMG-VM-UL-UG
Devices/VDOMs (Maximum) |
10 to Unlimited |
Sustained Log Rates |
Hardware dependent |
GB/Day |
1-50 |
Zero Touch Provisioning |
Yes |
Third Party Automation |
Yes |
NGFW Throughput |
850 Mbps |
Threat Protection Throughput |
700 Mbps |
VPN Throughput |
1 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
1.5 Gbps |
Threat Protection Throughput |
1.2 Gbps |
VPN Throughput |
1.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
2.5 Gbps |
Threat Protection Throughput |
2 Gbps |
VPN Throughput |
3 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
4.5 Gbps |
Threat Protection Throughput |
3.5 Gbps |
VPN Throughput |
5.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
40,000 |
Ports |
Up to 10 |
NGFW Throughput |
9 Gbps |
Threat Protection Throughput |
7 Gbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
40,000 |
Ports |
Up to 10 |
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adapters), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 Kbytes HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.
Amazon Web Services (AWS), Microsoft Azure, Google, and Oracle support both bring-your-own-license (BYOL) and on-demand (pay-as-you-go). Please see the Marketplace listings for more information:
View by:
British Telecom (BT)
BT Combines Global Connectivity and Cyber Expertise with Fortinet Secure SD-WAN
The Paper Store
Keeps cash registers running across the expanding store footprint with Secure SD-WAN
Second year in a row Fortinet has been recognized with Gartner Peer Insights Customers Choice for WAN Edge Infrastructure with highest number of customer reviews
This high recognition from our customers affirms that our security driven networking approach enables their organization’s WAN transformation at scale without compromising security to achieve best user experience for all their applications and realize best ROI at reduced cost and complexity. 2020 - a year of crisis has transformed organizations way of conducting business amid uncertainty. We believe our commitment to customers during these challenging times has led to being the only SD-WAN vendor named in Gartner MQ Leadership, ranked highest for security-sensitive and small footprint retail use case in Gartner Critical capability and now awarded Gartner Peer Insights with highest number (332) of reviews in the WAN Edge segment.
★★★★★
"Lots Of Searching, Moved To Fortigate Secure SD-WAN With Confidence"
"We looked around for nearly 6 months in the SD-WAN world, carefully searching for the right vendor, product, and support. After we spent many, many days of review, we decided to use FortiGate as our solution. This works especially nice when you are already in the FortiGate land, as we were. We primarily chose FortiGate as this would integrate with a lot of our existing infrastructure, especially security. IT also included the more advanced features we wanted like FEC (forward error correction)."
– IT Manager, Large Financial industry
★★★★★
"Best Value SD-WAN Solution Combined With Performance And Support That It Top Notch"
"We have been extremely impressed with the ease of use/setup along with the amazing support that we have come to love with Fortinet. Super cost effective. Also, they have improved over the years how easily can it be managed without having to learn complex commands."
– Network Manager, Large Transportation Enterprise
★★★★★
"FortiGate SD-WAN, Problem Solver And Cost Saver!"
"Near seamless deployment execution and ability to replace many different suppliers/partners devices with a single solution. Near all-in-one capability. Almost couldn't ask for more."
– IT Manager, Large Manufacturing Company
★★★★★
"Extremely Pleased With Fortinet"
"Fortinet has been extremely easy to work with and our account rep has been exceptional. They have bent over backwards to help us get what we needed to redo our entire network within our budget."
– Director of Infrastructure, Healthcare
★★★★★
"A High Achieving Product"
“Fortinets SD-WAN feature set is readily available and easy to integrate with via API. Mass Automation has been relative easy to achieve with great results for our customer and in-house projects. Our experience with Fortinet SD-WAN has shown them to be a very robust and high performing solution which also has the added functionality of Fortinets strength in Security. Fortinet SD-WAN's performance, security and low TCO has made it a popular choice by our customers”
– Security Infrastructure Manager, Services
★★★★★
"SDWan Come To Stay And If Is Good Nowadays Imagine In Next Years"
"SD Wan came to simplify infrastructure analyst life. When you think that before we have to balance links manually and choose which one would be responsible for some application. Another benefit is not depend anymore only from dedicated internet links which cost high and without SD Wan we can't perform best with them. When we talk about application, SD wan can give us the best performance with the rule that you think is the bet one for your application (Latency, jitter). The best one is QOS rules witch real works and bring the best performance when we talk about application that are high priority for example Conference rooms used only by executives (CEO, CIO, CFO)."
– Infrastructure Analyst, Large Education/Government
★★★★★
"They Have Very Good And Innovative Products, Reasonable Prices"
“The human team is excellent, they have experience and a good predisposition to problem solving. We started with a solution in company with a supplier, and little by little we got to know the brand and the solutions they gave us. Definitely, we have found robust solutions, in aspects such as communications resilience, management services and security automation. We hope in the following years to be able to continue evaluating the solutions that are most convenient for our company.”
– IT Manager, Large Finacial Industry
★★★★★
"Review For Fortigate Secure SD-WAN"
"We tried to implement sdwan features to speed up new branches release and try to cut link costs. After a scouting between vendors we found very close differences between products. At the end we decided Fortinet because of the have fortigate already installed in branches, sdwan is well integrated in the appliance at no additional cost. We found a good support from the vendor and the best ratio for price, performance, scalability and features."
– Network Engineer Large Financial Industry
★★★★★
"Quickwins Starting SD-WAN"
"It's possible to start using fortigate products really simple, we had quick-wins deploying SD-WAN. We created WAN uplinks with 3 VLAN's where our providers are connected, created a simple rule and we have been able to use the created SD-WAN interface. Policies etc. could be added simple, to manage priority, bandwidth by rules."
– Systems Engineering, Manufacturing
★★★★★
"Fortigate Secure SD-WAN The Way To Go!!"
"Overall the SDWAN implementation how worked well keeping our sites up, the one thing I have had an issue with is when a circuit fails over the VIPs we have setup stop working. That could be a lack of knowledge thing on my end."
– Network Engineer, Energy and Utilities
The GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE badge is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved. Gartner Peer Insights Customers’ Choice constitute the subjective opinions of individual end-user reviews, ratings, and data applied against a documented methodology; they neither represent the views of, nor constitute an endorsement by, Gartner or its affiliates.
FortiGuard Services for FortiGate Secure SD-WAN
The growth of technologies such as public and private clouds, software-defined wide-area networks (SD-WAN), and DevOps has resulted in increasingly complex IT networks at almost every organization. At the same time, cybersecurity threats have become more sophisticated and fast-moving. Fortinet offers a full range of services and subscriptions to help you simplify and make the most of your SD-WAN deployment with the lowest TCO possible.
Choose the 360 Protection Bundle for your SD-WAN solution. The 360 Protection bundle was designed to simplify SD-WAN operations on top of providing our customers with comprehensive security and operational services to deliver the best protection available while lowering TCO. In addition to the full suite of FortiGuard services and Professional Services subscriptions you see here, you also get 24x7 FortiCare with Advanced Support built-in!
Read on to find out how Fortinet subscriptions and services can help you get the most out of your SD-WAN solution :
We can help our customers lower their total cost of ownership (TCO) and simplify day-to-day security operations through our FortiOps services, which provide cloud-based management, visibility, and automation across your Fortinet Security Fabric and help you realized the operational benefits of a Fortinet-enabled Secure SD-WAN.
Operational Services
Cloud-based Management, Visibility, and Operations
FortiGuard
Fortinet Threat Intelligence and Research Organization
Effective best-in-class security requires timely, global intelligence combined with fast decision-making and response across all critical vectors. Fortinet offers proven and one of the most certified artificial intelligence-driven protection available in the market today powered by FortiGuard Labs.
For customers implementing FortiGates as NGFWs, here’s how FortiGuard subscriptions can help:
- Application Control: Fortinet boasts one of the largest applications database to safeguard your organization from risky application and allows you visibility and control of applications running in your network
- Intrusion Prevention: Stop unwanted attempts to access your network that target vulnerabilities and configuration gaps. We block over 10 million intrusion attempts per minute.
- Advanced Threats: Stop malicious files and payloads moving into your network with FortiGuard’s leading advanced malware, antivirus, and sandboxing capabilities. We stop over 35,000 malicious files per minute.
Mission critical security-driven networks deserve the best support available. FortiCare provides 24x7 support options to help keep your FortiGates up and running. We also have services to help you recover in the rare moments when bigger bumps seem to come out of nowhere such as our Premium RMA options with 4-hour replacements.
Want faster resolution? Choose our Advanced Support option.
Need help to get going with new deployments and integrations? FortiCare can do it, too, with Professional Services and Resident Engineers! Contact Sales to find out how.
FortiCare
World-class Global Support and Professional Services
Pro-Tips
- Request a free threat assessment today to find out how we can help secure your network!
- Don't forget to add Premium RMA for the fastest way to recover from unexpected bumps. We have global depots to get your parts fast!
View by:
Data Sheets
Analyst Reports
White Papers
Reference Architecture
Solution Guides
Webinars
Podcasts
Videos
Blogs
Fuse Community
Product Demo
Welcome to the Fortinet Secure SD-WAN Teleworker demo site. This demo shows the dynamic WAN path controller, application SLA enforcement, intelligent application steering and traffic shaping capabilities of Fortinet SD-WAN and how it can help teleworkers in your organization achieve more efficient use of WAN resources, increased connection reliability, and lower TCO.
|
FortiGate FortiOS 6.2 SD-WAN Failover Demo
This video demonstrates how SD-WAN on FortiOS 6.2 can help greatly improve the quality of experience of four popular applications – Dropbox, VoIP, Office 365, and video. Fortinet Secure SD-WAN features a dynamic WAN path controller with a proprietary library of over 5000 applications to help organizations with their digital transformation, WAN OpEx reduction, and branch consolidation efforts.
Watch Now
FortiGate Secure SD-WAN Use Cases
As network edges explode, you need consistent security and connectivity. With Secure SD-WAN, you can:
Transform WAN and Security
Transform WAN and security with one WAN edge powered by one operating system. One management console covers SD-WAN, advanced routing, and NGFW controls to protect the entire digital attack surface.
Simplify Secure SD-Branch
Simplify branch architecture with Secure SD-WAN and integrated NAC, WLAN, LAN, and LTE/4G/5G. All are centrally managed and scalable to 1,000s of sites.
Optimize Hybrid Workforce
Enhance work-from-anywhere over any transport with thin edge SD-WAN, ZTNA, cloud-security, and consistent management to enable a SASE framework.
Enhance Hybrid, Multi-cloud
Enable secure, seamless, faster connectivity to the cloud, in the cloud, and between clouds. Cloud on-ramp orchestration reduces the footprint and simplifies management.
Predict App Performance
Enable reliable user experience on any transport with rich routing and advanced WAN remediation for self-healing networks.
Achieve Operational Efficiencies
Automate the design, deployment, and operation of large-scale environments. A single pane of glass provides network-wide visibility, analytics, reporting, and orchestration.
Features and Benefits
Application Resilience
Ensures highest level of application availability and performance over any WAN transport
Integrated Advanced Security
Converges the most advanced NGFW and routing to deliver consistent security on- and off-network
Scalable, High Performance
Transforms and secures SD-WAN at large scale with no performance impact thanks to the industry's only SD-WAN ASIC
Multi-Cloud On-Ramp
Enables secure, fast connectivity and high performance to, in, and between cloud applications
Zero-Touch Provisioning
Enables large scale, faster deployment of Secure SD-WAN
Centralized Orchestration
Centrally manages deployments, configurations, and on-going operations with complete visibility, analytics and reporting
Security-Driven Networking
Traditional security strategies can’t keep up with the challenges of your expanding attack surface – from remote work, to mobility, to multi-cloud networks. Fortinet Security-Driven Networking addresses these challenges by tightly integrating network infrastructure with security architecture, meaning your network will remain secure as it scales and changes.
Secure SD-WAN
- DataSheets
- Fortinet Secure SD-WAN
- Solution Guides
- Upgrade Branch Infrastructures with Fortinet Secure SD-WAN
- Infographic
- A Step-by-Step Guide To Securing SD-WAN
Find solution guides, eBooks, data sheets, analyst reports, and more. Go to Resource Center >
Learn more about Fortinet Secure SD-WAN Contact Us >
