SD-WAN Explained
Improve user experience and simplify operations at the WAN edge with an integrated next-generation firewall (NGFW) and SD-WAN in single offering.
Watch the videoSecure SD-WAN
One WAN Edge Powered by One OS Transforming and Securing Your WAN
Gartner 2020 Magic Quadrant
Traditional WAN architecture increases latency and slows down network performance to cloud services. This has driven Software-defined WAN (SD-WAN) solutions to become increasingly popular as organizations request fast, scalable, and flexible connectivity among different network environments. They also seek to lower the overall total cost of ownership (TCO) while delivering an enhanced application experience. But a subpar SD-WAN solution can significantly inhibit an organization’s ability to quickly adapt to changing business demands, especially if it does not offer integrated security.
What is SD-WAN? Definition & Solutions
SD-WAN solutions enable digital transformation for organizations by leveraging corporate WAN to a deliver better application experience, reduce costs, and simplify operations at the WAN edge. SD-WAN enables deep application identification, including encrypted traffic and dynamic multi-path steering across hybrid connectivity options—MPLS, LTE 4G/5G, or broadband—ensuring organizations can quickly and easily access business-critical applications.
|
Learn more about Fortinet Secure SD-WAN
Why SD-WAN? Business Outcomes
According to IDC, the SD-WAN market will continue to grow more than 30% over the next few years, reaching $5.25 billion in 2023. Organizations in both publich and private sectors are embracing SD-WAN solutions for a number of key benefits, including the following.
Better Application Experience
SD-WAN allows remote sites to connect more easily to networks and/or multiple-clouds with lower latency, better performance, and more reliable connectivity. When users demand more of their applications and infrastructure at unprecedented speed and scale, an appealing user experience can be make-or-break.
Instant ROI Benefits
MPLS and other connectivity technologies aren’t just outdated; they’re also more expensive when the total cost of ownership (TCO) is considered. SD-WAN not only significantly reduces bandwidth costs but can also help reduce capital costs by allowing consolidation of different point networking and security products at the edge while delivering better control and performance.
Efficient Operations
As network infrastructures have evolved, the sprawl of point products used for networking and security increases complexity. SD-WAN uses automation to make connectivity a simpler process across mixed environments, including on-premises, hybrid, and cloud. SD-WAN enables centralized orchestration, zero-touch provisioning, and analytics along with deep integrations of cloud on-ramps to accelerate cloud connectivity.
Enhanced Security Posture
An SD-WAN solution needs to have integrated security. Otherwise, it’s just another connectivity option that unfortunately becomes an attack vector. When properly implemented, secure SD-WAN enables secure direct internet access. It’s critical that an SD-WAN solution can ensure consistent security at all edges, from flexible WAN edges to the cloud edge.
How SD-WAN Works
An SD-WAN solution connects users to any application wherever it resides, whether on-premises or in the cloud. SD-WAN leverages deep application recognition, including in encrypted traffic, and applies dynamic multi-path steering to intelligently determine the best path for ideal performance at a specific application level. It then applies advanced WAN remediation capabilities to overcome blackout and brownout conditions by steering traffic through to the ideal WAN path. Traditional WAN architectures are hub-n-spoke, router-centric where all traffic is routed through MPLS to on-premises data center.
Below are a few characteristics that define how an SD-WAN solution works and has evolved from a WAN infrastructure:
Application Resiliency
With traditional WAN solutions, organizations suffer a less than ideal quality of experience and have a hard time delivering high-performance bandwidth for critical applications. Since legacy WAN architectures are IP-based, they lack in-depth application visibility. SD-WAN solutions, however, can enable deep application visibility. This visibility can also be extended into encrypted traffic, which is critical, as more than 80% of the traffic runs on SSL/TLS. With advanced WAN remediation capabilities, enterprises can achieve application resiliency for business-critical applications, improve employee user experience, and boost productivity with SD-wide area networking.
SD-WAN can intelligently identify applications and determine the best path they should take to maximize functionality. Moreover, self-healing capabilities automatically route traffic, in real-time, to the next-best available link in the event of an outage of the primary link. Not only does this automated capability reduce complexity, but it also delivers the improved application performance and user experience. Network teams gain the visibility they need about application use across the organization, the overall health of the network, and specific application-level insights. This enables better decisions to meet business outcomes.
Zero-Touch Deployment
SD-WAN, which is based on the same methodology as software-defined networking (SDN), enables faster deployment with zero-touch provisioning capabilities that scale. In addition, a unified management console for both network and security operations simplifies operations at the WAN edge and extends zero-touch provisioning to LAN edge services, as well as wireless and switching.
Centralized Orchestration
SD-WAN Orchestrator allows organizations to simplify centralized deployment and establish automation to save time and respond more quickly to business demands. A centralized orchestrator can provide an intuitive workflow for business policies to strategize distribution of applications, and other traffic, across and between office locations. With automated VPN overlay bring-up, meshed connectivity across regional hubs and branch offices, especially in larger SD-WAN deployments, is easily managed with minimal overhead. Enhanced analytics for WAN link availability, performance SLAs, application traffic in runtime, and historical stats allow the infrastructure team to troubleshoot and quickly resolve network issues.
Multi-Cloud On-Ramp
Enabling efficient connectivity to the cloud is a core capability of SD-WAN. SD-WAN solutions can be used in public clouds to enable high-performance connectivity between public cloud workloads running on multiple clouds without increasing cost and complexity. Cloud on-ramp is a key SD-WAN capability to enable faster branch–to-cloud connectivity and orchestration. This simplifies deployment and improves agility.
Request a Product Demo for SD-WAN.
View a complete listing of SD-WAN Providers.
History and Evolution of SD-WAN
Modern SD-WAN technology evolved from earlier networking solutions like point-to-point (PPP) leased lines, frame relay, and MPLS. PPP was the original mode for connecting multiple local area networks (LANs) before frame relay removed the need to buy and manage individual connecting links between various corporate locations. MPLS made more improvements by bringing previously separate functions such as voice, video, and data networking onto the same network using Internet Protocol (IP)-based technology.
Fast-forward to the 2000s, and multiprotocol label switching (MPLS) came to popularity. MPLS soon overtook frame relay in popularity because of how it leverages Internet Protocol (IP)-based technology to bring previously separate functions such as voice, video, and data networking onto the same network. MPLS today is the most common technology in use for enterprise WANs, and is still held up for the reduced latency and quality of service (QoS) benefits it provides.
In the 2010s, specifically 2013, SD-WAN was born, and as more technologists examined SD-WAN for its benefits, they came to realize many of the same advantages SD-WAN has over MPLS, similar to how MPLS brought more advantages than frame relay. As a simple explanation, SD-WAN delivers MPLS-level QoS while being significantly less expensive and significantly easier to scale.
SD-WAN can handle a variety of connections and dynamically move traffic over the best transport available, and can provide both redundancy and much more capacity using lower-cost links. SD-WAN solutions are significantly cheaper than MPLS overall when time-to-installation and time-to-delivery are also considered. The best SD-WAN solutions offer zero-touch provisioning, allowing sites to be brought on quickly and not requiring networking or security experts to be on-site for installation.
SD-WAN vs. MPLS: Which Is Better?
There are a handful of factors to consider before shifting an organization to an SD-WAN solution from a traditional MPLS environment. Check out the table below to compare each option:
| SD-WAN | MPLS | |
|---|---|---|
| Complexity | If security is not automatically built-in, teams need add-on options |
Internet traffic backhauled to the data center |
| Visibility | Broad application visibility |
Packet routing limits visibility |
| Cost | Consolidated services greatly reduce TCO | Expensive to build and maintain |
| Performance & Availability | Enables MPLS, broadband, LTE for high-speed |
MPLS offers limited bandwidth and single point of failure |
| Scalability | Expand to add secure connectivity with full mesh | Lengthy process that often takes months |
Why Is Integrated SD-WAN Security Critical?
One of the critical requirements for SD-WAN success is fully integrated security. Without it, SD-WAN becomes just another attack vector.
A secure SD-WAN solution is explicitly designed to interoperate as a single offering, ideally with each element running on the same operating system and managed using a single-pane-of-glass interface. This ensures that transactions are all seen and inspected, and any threats or anomalous behaviors are shared between every solution for maximum protection. As part of such an integrated system, the networking and connectivity functionalities of an SD-WAN aren’t just more closely associated with the security solutions installed on the platform. They’re the same thing.
Delivering security piecemeal is also unwise. Because of the dynamic nature and high scalability of SD-WAN, overlay security is not only very expensive to deploy and maintain, but often ends up with delays when reacting to connectivity changes, leaving critical connections and data vulnerable. An integrated system ensures that SD-WAN connectivity, traffic management functions, and advanced security function as a single, holistic solution.
An NGFW, whose key components include intrusion prevention (IPS), web filtering, secure sockets layer (SSL) inspection, and anti-malware, is an example of an integrated solution. Solutions that combine SD-WAN and NGFW capabilities into single offerings satisfy the key requirements for secure SD-WAN—and ensure the safety and reliability of connections and for the organization overall.
As organizations adopt remote workforce policies, networks grow more distributed. A new networking and security strategy is required that combines network and security functions with WAN capabilities to support the dynamic, secure internet access for a “work from anywhere” global workforce. SD-WAN plays a critical role in the adoption of emerging solutions like Secure Access Service Edge (SASE) and enables flexible and consistent security across all edges.
Learn more about integrating security with SD-WAN to avoid common WAN security issues.
View FortiGate SD-WAN Models & Specs.
Learn more about SD-WAN Pricing
Fortinet SD-WAN Solutions
- World's only ASIC Accelerated SD-WAN
- 5,000+ application identification with SSL Inspection
- Self-Healing capabilities for better user experience
- Cloud-On-Ramp for efficient SaaS adoption
- Simplified Operations with SD-WAN Orchestrator
Next-Generation Firewall (NGFW) Security
The FortiGate NGFW delivers integrated SD-WAN networking and security capabilities in a single device.
Enhance Multi-Cloud Application Performance
Application identification, multi-path control, and application steering ensure that organizations can access all critical applications in the cloud.
Orchestration and Analytics
Low TCO
FortiGate Secure SD-WAN is less expensive and delivers both networking and security in the same solution for as much as 50% better TCO versus architectures with separate security and networking devices.
|
Introducing the FortiGate 80F Product Series With Secure SD-WAN and Integrated WiFi6 | NGFW
The FortiGate 80F series provides an application-centric, scalable, and secure SD-WAN solution in a compact, fanless, desktop form factor for enterprise branch offices.
Learn More
|
Introducing the FortiGate 40F | Next-Generation Firewall
The FortiGate/FortiWiFi 40F series provides a fast and secure SD-WAN solution in a compact fanless desktop form factor for enterprise branch offices and mid-sized businesses. Protects against cyber threats with system-on-a-chip acceleration and industry-leading secure SD-WAN in a simple, affordable, and easy to deploy solution.
Learn More
Gartner 2020 Magic Quadrant for WAN Edge Infrastructure
Fortinet named a Leader in the 2020 Gartner Magic Quadrant for WAN Edge Infrastructure with highest in ability to execute and completeness of vision. See the full report to learn more about how other vendors compare to Fortinet.
FortiGate Secure SD-WAN Models and Specifications
FortiGate SD-WAN is available in diverse form factors with many different models to choose from to meet your needs ranging from hardware, VM appliances to six different cloud marketplaces for WAN Edge transformation. FortiManager, that can be used to monitor and manage the FortiGate appliances is also available in different form factors including hardware, virtual and SaaS.
▼
Hardware appliances
NGFW Throughput |
200 Mbps |
Threat Protection Throughput |
150 Mbps |
VPN Throughput |
35 Mbps |
Max G/W to G/W IPSEC |
200 |
Ports |
5x GE RJ45 |
NGFW Throughput |
800 Mbps |
Threat Protection Throughput |
600 Mbps |
VPN Throughput |
4.4 Gbps |
Max G/W to G/W IPSEC |
200 |
Ports |
5x GE RJ45 |
NGFW Throughput |
220 Mbps |
Threat Protection Throughput |
160 Mbps |
VPN Throughput |
100 Mbps |
Max G/W to G/W IPSEC |
200 |
Ports |
7x GE RJ45 |
NGFW Throughput |
1 Gbps |
Threat Protection Throughput |
700 Mbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC |
200 |
Ports |
8x GE RJ45 |
NGFW Throughput |
6 Gbps |
Threat Protection |
500 Mbps |
VPN Throughput |
3.5 Gbps |
Max G/W to G/W IPSEC |
200 |
Ports |
3 x GE RJ45, 2x shared media ports |
NGFW Throughput |
250 Mbps |
Threat Protection Throughput |
200 Mbps |
VPN Throughput |
2 Gbps |
Max G/W to G/W IPSEC Tunnels |
200 |
Ports |
10x GE RJ45 |
NGFW Throughput |
1 Gbps |
Threat Protection Throughput |
900 Mbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC |
200 |
Ports |
8x GE RJ45, 2x shared SFP | ByPass interface Variants |
NGFW Throughput |
360 Mbps |
Threat Protection Throughput |
250 Mbps |
VPN Throughput |
2.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
200 |
Ports |
14x GE RJ45, 2x Shared Port Pairs |
NGFW Throughput |
1.6 Gbps |
Threat Protection Throughput |
1 Gbps |
VPN Throughput |
11.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
2500 |
Ports |
26 1GE, 4 1GE Shared Media, 2 10GE |
NGFW Throughput |
3.5 Gbps |
Threat Protection Throughput |
3 Gbps |
VPN Throughput |
13 Gbps |
Max G/W to G/W IPSEC |
2500 |
Ports |
18x GE RJ45, 4x GE SFP, 4x 10GE SFP |
NGFW Throughput |
6Gbps |
Threat Protection Throughput |
5 Gbps |
VPN Throughput |
20Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
16x GE RJ45, 16x GE SFP |
NGFW Throughput |
9.5 Gbps |
Threat Protection Throughput |
7 Gbps |
VPN Throughput |
20 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
2x 10 GE SFP+, 10x GE RJ45, 8x GE SFP |
NGFW Throughput |
9.8 Gbps |
Threat Protection Throughput |
7.1 Gbps |
VPN Throughput |
48 Gbps |
Max G/W to G/W IPSEC tunnels |
20,000 |
Ports |
2x40GE QSFP+, 4x25GE SFP28, 4x10GE SFP+/SFP, 8x1GE SFP, 16xGE RJ45 |
NGFW Throughput |
11 Gbps |
Threat Protection Throughput |
9.1 Gbps |
VPN Throughput |
55 Gbps |
Max G/W to G/W IPSEC tunnels |
20,000 |
Ports |
4x 40 GE QSFP+, 12x 25 GE SFP28/10GE SFP+, 2x10 GE SFP+, 8x GE SFP, 18x GE RJ45 |
NGFW Throughput |
13.5 Gbps |
Threat Protection Throughput |
11 Gbps |
VPN Throughput |
98 Gbps |
Max G/W to G/W IPSEC tunnels |
20,000 |
Ports |
4x 40GE QSFP+, 20x 10GE/25GE SFP+/SFP28, 12x GE RJ45 |
NGFW Throughput |
21 Gbps |
Threat Protection Throughput |
20 Gbps |
VPN Throughput |
55 Gbps |
Max G/W to G/W IPSEC tunnels |
2,000 |
Ports |
4x 100GE QSFP28 slots , 16x 25GE SFP28 / 10GE SFP+ slots, 16x 10GE RJ45 ports, 2x 10GE SFP+ HA slots |
Virtual machines
NGFW Throughput |
850 Mbps |
Threat Protection Throughput |
700 Mbps |
VPN Throughput |
1 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
1.5 Gbps |
Threat Protection Throughput |
1.2 Gbps |
VPN Throughput |
1.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
2.5 Gbps |
Threat Protection Throughput |
2 Gbps |
VPN Throughput |
3 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
4.5 Gbps |
Threat Protection Throughput |
3.5 Gbps |
VPN Throughput |
5.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
40,000 |
Ports |
Up to 10 |
NGFW Throughput |
9 Gbps |
Threat Protection Throughput |
7 Gbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
40,000 |
Ports |
Up to 10 |
Public Cloud
Amazon Web Services (AWS) and Microsoft Azure supported for both BYOL (bring your own license) and On-demand (pay-as-you go). Please see the AWS and Azure Marketplace listings for more information:
- FortiGate on AWS
- FortiGate on AWS (BYOL)
- FortiGate on Azure
- FortiGate on Google
- FortiGate on Google (BYOL)
- FortiGate on Alibaba
- FortiGate on Alibaba (BYOL)
- FortiGate on Oracle (BYOL)
Hardware appliances
Devices/VDOMs (maximum) |
1,200 |
GB/Day of Logs |
2 |
Storage Capacity |
36 TB |
Devices/VDOMs (maximum) |
8,000 |
GB/Day of Logs |
10 |
Storage Capacity |
48 TB |
Devices/VDOMs (maximum) |
100,000 |
GB/Day of Logs |
10 |
Storage Capacity |
240 TB |
Virtual machines
Devices/VDOMs (Maximum) |
+1,000 |
GB/Day of Logs |
10 |
Devices/VDOMs (Maximum) |
+5,000 |
GB/Day of Logs |
25 |
Devices/VDOMs (Maximum) |
+10,000 |
GB/Day of Logs |
50 |
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adapters), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 Kbytes HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.
Public Cloud
Amazon Web Services (AWS) and Microsoft Azure supported for both BYOL (bring your own license) and On-demand (pay-as-you go). Please see the AWS and Azure Marketplace listings for more information:
Features
SD-WAN ASIC delivers fastest application identification and steering from a broad range of 5,000+ applications to enable digital transformation at the WAN Edge
Path awareness intelligence and link remediation delivers best application performance by automated fail-over and fail-back mechanism
Single pane of glass management with zero-touch deployment for the entire WAN edge simplifies deployment of SD-WAN and security
Benefits
Reduced complexity and high total cost of ownership by using best of breed SD-WAN and NGFW functionality on a single appliance
Improve cloud application performance by prioritizing business critical applications and enabling branches to directly communicate to the internet
Reduce operating expenses by migrating from MPLS and utilizing multi-broadband such as Ethernet, DSL, and LTE
Secure SD-WAN ROI Calculator
Fortinet Secure SD-WAN enables better application experience, simplifies WAN operations and reduces costs by migrating from expensive MPLS to broadband connectivity, while also integrating advanced security features.
Enter your data in the calculator below to learn how much you could save with Fortinet Secure SD-WAN.
Schedule your Demo
▼
Learn more about a Fortune 500 customer that achieved a 65% cost reduction with Fortinet Secure SD-WAN
Working hard to catch up with day-to-day network challenges and don’t know which solution will work for you? In this webinar, learn the impact Waste Management’s legacy WAN was having on its network performance. Hear how they transformed their network to reduce cost and improve the application experience with Fortinet Secure SD-WAN.
Customer Case Studies
Second year in a row Fortinet has been recognized with Gartner Peer Insights Customers Choice for WAN Edge Infrastructure with highest number of customer reviews
This high recognition from our customers affirms that our security driven networking approach enables their organization’s WAN transformation at scale without compromising security to achieve best user experience for all their applications and realize best ROI at reduced cost and complexity. 2020 - a year of crisis has transformed organizations way of conducting business amid uncertainty. We believe our commitment to customers during these challenging times has led to being the only SD-WAN vendor named in Gartner MQ Leadership, ranked highest for security-sensitive and small footprint retail use case in Gartner Critical capability and now awarded Gartner Peer Insights with highest number (332) of reviews in the WAN Edge segment.
★★★★★
"Lots Of Searching, Moved To Fortigate Secure SD-WAN With Confidence"
"We looked around for nearly 6 months in the SD-WAN world, carefully searching for the right vendor, product, and support. After we spent many, many days of review, we decided to use FortiGate as our solution. This works especially nice when you are already in the FortiGate land, as we were. We primarily chose FortiGate as this would integrate with a lot of our existing infrastructure, especially security. IT also included the more advanced features we wanted like FEC (forward error correction)."
– IT Manager, Large Financial industry
★★★★★
"Best Value SD-WAN Solution Combined With Performance And Support That It Top Notch"
"We have been extremely impressed with the ease of use/setup along with the amazing support that we have come to love with Fortinet. Super cost effective. Also, they have improved over the years how easily can it be managed without having to learn complex commands."
– Network Manager, Large Transportation Enterprise
★★★★★
"FortiGate SD-WAN, Problem Solver And Cost Saver!"
"Near seamless deployment execution and ability to replace many different suppliers/partners devices with a single solution. Near all-in-one capability. Almost couldn't ask for more."
– IT Manager, Large Manufacturing Company
★★★★★
"Extremely Pleased With Fortinet"
"Fortinet has been extremely easy to work with and our account rep has been exceptional. They have bent over backwards to help us get what we needed to redo our entire network within our budget."
– Director of Infrastructure, Healthcare
★★★★★
"A High Achieving Product"
“Fortinets SD-WAN feature set is readily available and easy to integrate with via API. Mass Automation has been relative easy to achieve with great results for our customer and in-house projects. Our experience with Fortinet SD-WAN has shown them to be a very robust and high performing solution which also has the added functionality of Fortinets strength in Security. Fortinet SD-WAN's performance, security and low TCO has made it a popular choice by our customers”
– Security Infrastructure Manager, Services
★★★★★
"SDWan Come To Stay And If Is Good Nowadays Imagine In Next Years"
"SD Wan came to simplify infrastructure analyst life. When you think that before we have to balance links manually and choose which one would be responsible for some application. Another benefit is not depend anymore only from dedicated internet links which cost high and without SD Wan we can't perform best with them. When we talk about application, SD wan can give us the best performance with the rule that you think is the bet one for your application(Latency, jitter). The best one is QOS rules witch real works and bring the best performance when we talk about application that are high priority for example Conference rooms used only by executives(CEO, CIO, CFO)."
– Infrastructure Analyst, Large Education/Government
★★★★★
"They Have Very Good And Innovative Products, Reasonable Prices"
“The human team is excellent, they have experience and a good predisposition to problem solving. We started with a solution in company with a supplier, and little by little we got to know the brand and the solutions they gave us. Definitely, we have found robust solutions, in aspects such as communications resilience, management services and security automation. We hope in the following years to be able to continue evaluating the solutions that are most convenient for our company.”
– IT Manager, Large Finacial Industry
★★★★★
"Review For Fortigate Secure SD-WAN"
"We tried to implement sdwan features to speed up new branches release and try to cut link costs. After a scouting between vendors we found very close differences between products. At the end we decided Fortinet because of the have fortigate already installed in branches, sdwan is well integrated in the appliance at no additional cost. We found a good support from the vendor and the best ratio for price, performace, scalability and features."
– Network Engineer Large Financial Industry
★★★★★
"Quickwins Starting SD-WAN"
"It's possible to start using fortigate products really simple, we had quick-wins deploying SD-WAN. We created WAN uplinks with 3 VLAN's where our providers are connected, created a simple rule and we have been able to use the created SD-WAN interface. Policies etc. could be added simple, to manage priority, bandwith by rules."
– Systems Engineering, Manufacturing
★★★★★
"Fortigate Secure SD-WAN The Way To Go!!"
"Overall the SDWAN implementation how worked well keeping our sites up, the one thing I have had an issue with is when a circuit fails over the VIPs we have setup stop working. That could be a lack of knowledge thing on my end."
– Network Engineer, Energy and Utilities
The GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE badge is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved. Gartner Peer Insights Customers’ Choice constitute the subjective opinions of individual end-user reviews, ratings, and data applied against a documented methodology; they neither represent the views of, nor constitute an endorsement by, Gartner or its affiliates.
FortiGuard Services for FortiGate Secure SD-WAN
The growth of technologies such as public and private clouds, software-defined wide-area networks (SD-WAN), and DevOps has resulted in increasingly complex IT networks at almost every organization. At the same time, cybersecurity threats have become more sophisticated and fast-moving. Fortinet offers a full range of services and subscriptions to help you simplify and make the most of your SD-WAN deployment with the lowest TCO possible.
Choose the 360 Protection Bundle for your SD-WAN solution. The 360 Protection bundle was designed to simplify SD-WAN operations on top of providing our customers with comprehensive security and operational services to deliver the best protection available while lowering TCO. In addition to the full suite of FortiGuard and FortiOps subscriptions and services you see here, you also get 24x7 FortiCare with Advanced Support built-in!
Read on to find out how Fortinet subscriptions and services can help you get the most out of your SD-WAN solution :
We can help our customers lower their total cost of ownership (TCO) and simplify day-to-day security operations through our FortiOps services, which provide cloud-based management, visibility, and automation across your Fortinet Security Fabric and help you realized the operational benefits of a Fortinet-enabled Secure SD-WAN.
FortiOps
Cloud-based Management, Visibility, and Operations
FortiGuard
World-class Global Support and Professional Services
Effective best-in-class security requires timely, global intelligence combined with fast decision-making and response across all critical vectors. Fortinet offers proven and one of the most certified artificial intelligence-driven protection available in the market today powered by FortiGuard Labs.
For customers implementing FortiGates as NGFWs, here’s how FortiGuard subscriptions can help:
- Application Control: Fortinet boasts one of the largest applications database to safeguard your organization from risky application and allows you visibility and control of applications running in your network
- Intrusion Prevention: Stop unwanted attempts to access your network that target vulnerabilities and configuration gaps. We block over 10 million intrusion attempts per minute.
- Advanced Threats: Stop malicious files and payloads moving into your network with FortiGuard’s leading advanced malware, antivirus, and sandboxing capabilities. We stop over 35,000 malicious files per minute.
Mission critical security-driven networks deserve the best support available. FortiCare provides 24x7 support options to help keep your FortiGates up and running. We also have services to help you recover in the rare moments when bigger bumps seem to come out of nowhere such as our Premium RMA options with 4-hour replacements.
Want faster resolution? Choose our Advanced Support option.
Need help to get going with new deployments and integrations? FortiCare can do it, too, with Professional Services and Resident Engineers! Contact Sales to find out how.
FortiCare
World-class Global Support and Professional Services
Pro-Tips
- Request a free threat assessment today to find out how we can help secure your network!
- Don't forget to add Premium RMA for the fastest way to recover from unexpected bumps. We have global depots to get your parts fast!
Resources
▼
Solution Guides
Case Studies
Analyst Reports
White Papers
Reference Architecture
Data Sheets
Webinars and Videos
Fuse Community
Podcasts
Blogs
Certifications
Fortinet Secure SD-WAN excels in most challenging enterprise SD-WAN deployment tests receiving a second consecutive "Recommended" rating in NSS Labs for SD-WAN Group Test report; while delivering Lowest Total Cost of Ownership (TCO) per Mbps Among All Eight Vendors.
Key Highlights:
- Lowest Total cost of Ownership (TCO): FortiGate Secure SD-WAN showcased significant operational savings with the lowest TCO per Mbps (VPN Throughput) at $3.5@845Mbps and zero touch provisioning of new branches under six minutes.
- Best User Experience with High Availability: In the extreme conditions such as WAN Link failures, FortiGate SD-WAN delivered the full score of 4.41 and 4.53 for voice and video for best application user experience.
- Industry’s Most Validated NGFW Security Built-In: FortiGate SD-WAN comes with built-in NGFW which has received five consecutive NSS Labs NGFW “Recommendation” ratings. In the latest NSS Labs NGFW group test, FortiGate delivered 99.3% security effectiveness and 100% evasions blocking.
SD-WAN Value Map
In a crowded SD-WAN market, enterprises are finding it increasingly difficult to identify the right solution for them. NSS Labs provides a comprehensive and impartial test, in real-world situations, that identifies the key requirements for SD-WAN and the effectiveness of each solution. The SD-WAN capabilities that were assessed by NSS Labs include Zero-Touch provisioning, WAN Performance, Application-Aware Traffic Steering, Dynamic Path Selection with SLA Measurements and High Availability with WAN Impairments. Fortinet delivered best user experience with High Availability in extreme WAN impairment conditions.
Fortinet FortiGate 61E Test Report
Take a closer look at how Fortinet excelled again NSS Labs SD-WAN Group Test. Fortinet showcased a number of advantages including lowest TCO, native NGFW security and quality of experience for unified communications.
Download the ReportNSS Labs SD-WAN 2018 Value Map and Report
Comparative Report - Performance
NSS Labs SD-WAN Performance Comparative report provides a detailed comparison of all 9 participating vendors for quality of experience and performance. Fortinet showcased the highest quality of experience for business-critical applications such as VoIP and excellent VPN performance.
Download the Report
Comparative Report - TCO
NSS Labs SD-WAN TCO Comparative report provides a detailed comparison of all 9 participating vendors for quality of experience and performance. FortiGate SD-WAN has achieved the best price/performance among all 10 vendors with TCO of $5.
Download the Report
Comparative Report - Value Matrix
Fortinet solutions have consistently demonstrated superior performance and feature quality TCO when put to the test. Recent customer traction shows that organizations around the world are increasingly choosing FortiGate SD-WAN to upgrade their WAN infrastructure. The 2018 NSS Labs SD-WAN test results further prove that Fortinet delivers the highest quality of experience for VoIP, the best TCO and the right security to go with it, solidifying FortiGate SD-WAN as a compelling balance of quality, security and value. Take a look at the comparative value matrix report and understand how Fortinet emerged as a top choice for Secure SD-WAN.
Download the Report