SD-WAN Explained
Improve user experience and simplify operations at the WAN Edge with an integrated NGFW and SD-WAN in single offering
Watch the video
What is SD-WAN? Definition & Solutions
Software-defined wide-area network (SD-WAN) solutions transform an organization’s capabilities by leveraging the corporate wide-area network (WAN) as well as multi-cloud connectivity to deliver high-speed application performance at the WAN edge of branch sites. One of the chief benefits of SD-WAN is that it provides a dynamic path selection among connectivity options—MPLS, 4G/5G, or broadband—ensuring organizations can quickly and easily access business-critical cloud applications.
SD-WAN solutions have become increasingly popular as organizations request fast, scalable, and flexible connectivity among different network environments, and seek to lower overall total cost of ownership (TCO) while preserving user experience. But the wrong SD-WAN solution can significantly inhibit an organization’s ability to quickly adapt to changing business demands, not least because it creates new security headaches.
|
Learn more about Fortinet Secure SD-WAN
How SD-WAN Works
An SD-WAN solution connects users to any application wherever it resides from the data center to the cloud. SD-WAN intelligently determines which path best meets the ideal performance needs for a specific application. It then routes the traffic through to the ideal WAN path, whereas traditional WAN architectures only have the ability to route all applications through MPLS. Below are a few characteristics that define how an SD-WAN solution works and has evolved from a WAN infrastructure:
Application Awareness
With traditional WAN solutions, organizations suffer a less than ideal quality of experience and have a hard time delivering high-performance bandwidth for critical applications. Since legacy WAN architectures rely on packet routing, they lack in-depth application visibility. SD-WAN solutions, however, intelligently identify applications on the very first packet of data traffic. Network teams gain the visibility they need about which applications are used most widely across the organization, which helps them make smarter, more well-informed decisions and policies.
Dynamic Path Selection
SD-WAN solutions enable dynamic path selection for traffic to flow through: an MPLS connection, a broadband connection, and LTE. The SD-WAN solution can intelligently identify applications and determine the best path it should take to maximize functionality. Moreover, self-healing capabilities automatically route traffic to the next best available link in the event of an outage of the primary link. Not only does this automated capability reduce complexity within the network, but it also delivers an improved user experience and improves the performance of applications.
Zero-Touch Deployment
SD-WAN, which is based on the same methodology as software-defined networking (SDN) provides control and data plane separation to ensure centralized management and orchestration. SD-WAN enables faster deployments with zero-touch provisioning capabilities while doing it at scale. In addition, a unified management console for both network and security operations helps to simplify operations at the WAN edge.
Centralized Orchestration
Fortinet Secure SD-WAN Orchestrator allows organizations to simplify centralized deployment and establish automation to save time and respond more quickly to business demands. A centralized orchestrator can provide an intuitive workflow for business policies to strategize distribution of applications, and other traffic across and between branch offices. With Automated VPN overlay bring-up, meshed connectivity across regional hubs and branch offices especially in larger SD-WAN deployments is easily managed with minimal overhead. Enhanced analytics for WAN link availability, performance SLAs and application traffic in runtime, and historical stats allow the infrastructure team to troubleshoot and quickly resolve network issues.
Request a Product Demo for SD-WAN.
View a complete listing of SD-WAN Providers.
History and Evolution of SD-WAN
Modern SD-WAN technology evolved from earlier networking solutions like point-to-point (PPP) leased lines, frame relay, and MPLS. PPP was the original mode for connecting multiple local area networks (LANs) before frame relay removed the need to buy and manage individual connecting links between various corporate locations. MPLS made more improvements by bringing previously separate functions such as voice, video, and data networking onto the same network using Internet Protocol (IP)-based technology.
Fast-forward to the 2000s, and multiprotocol label switching (MPLS) came to popularity. MPLS soon overtook frame relay in popularity because of how it leverages Internet Protocol (IP)-based technology to bring previously separate functions such as voice, video, and data networking onto the same network. MPLS today is the most common technology in use for enterprise WANs, and is still held up for the reduced latency and quality of service (QoS) benefits it provides.
In the 2010s, specifically 2013, SD-WAN was born, and as more technologists examined SD-WAN for its benefits, they came to realize many of the same advantages SD-WAN has over MPLS, similar to how MPLS brought more advantages than frame relay. As a simple explanation, SD-WAN delivers MPLS-level QoS while being significantly less expensive and significantly easier to scale.
SD-WAN can handle a variety of connections and dynamically move traffic over the best transport available, and can provide both redundancy and much more capacity using lower-cost links. SD-WAN solutions are significantly cheaper than MPLS overall when time-to-installation and time-to-delivery are also considered. The best SD-WAN solutions offer zero-touch provisioning, allowing sites to be brought on quickly and not requiring networking or security experts to be on-site for installation.
SD-WAN vs. MPLS: Which Is Better?
There are a handful of factors to consider before shifting an organization to a SD-WAN solution from a traditional MPLS environment. Check out the table below to compare each option:
| SD-WAN | MPLS | |
|---|---|---|
| Complexity | If security is not automatically built-in, teams need add-on options |
Internet traffic backhauled to the data center |
| Visibility | Broad application visibility |
Packet routing limits visibility |
| Cost | Consolidated services greatly reduce TCO | Expensive to build and maintain |
| Performance & Availability | Enables MPLS, broadband, LTE for high-speed |
MPLS offers limited bandwidth and single point of failure |
| Scalability | Expand to add secure connectivity with full mesh | Lengthy process that often takes months |
SD-WAN vs. Public Internet
Publicly available broadband internet, referring to high-speed internet services that are faster than traditional dial-up-speed internet, is ubiquitous and inexpensive. Broadband internet, however, can hamper business performance because it essentially asks customers to put faith in the busy and congested public internet as consistently reliable connectivity. Broadband internet is typically unsecure, as well, and data can be compromised if users—especially remote users—access networks using an unsecure connection. SD-WAN makes the overall experience smoother, more agile, and more secure (if security is properly integrated).
Why SD-WAN? Benefits and Advantages
According to researcher IDC, the SD-WAN market will continue growing at a more than 30% rate over the next few years, approaching $5.3 billion in 2023. Many organizations are embracing SD-WAN solutions for a number of key benefits, including the following.
Improved User Experience: The underlying technology in SD-WAN allows remote sites to connect more easily to networks, with lower latency, better performance, and more reliable connectivity. In the era when users demand a lot more of their applications and infrastructure at unprecedented speed and scale, an appealing user experience can be a make-or-break.
Lower TCO: MPLS and other connectivity technologies aren’t just outdated, they’re also more expensive when the total cost of ownership (TCO) is considered. SD-WAN significantly reduces bandwidth costs, and when it can offer benefits such as zero-touch provisioning, better automates certain processes and cuts down on the amont of hardware and manual management required for success.
Simplicity: As network infrastructures have evolved, the sprawl of point products used for networking and security can make things pretty complicated. SD-WAN uses automation and other benefits to make connectivity a simpler process across mixed environments, including on-premises, hybrid, and cloud.
Multi-cloud Readiness: With more than 90% of enterprises today investing in a multi-cloud strategy, the right SD-WAN solution makes that environment easier to manage. Multi-cloud is not the same as hybrid cloud, in which public and private clouds are integrated to optimize performance, security and flexibility. Multi-cloud simply means that organizations have the flexibility to select the best cloud provider for each of their various infrastructure and application needs. Because of its automation capabilities and also where it resides strategically in the network, SD-WAN has become the solution of choice for rapidly evolving cloud network innovations (including multi-cloud).
Better Security Overall: An SD-WAN solution needs to have integrated security; otherwise, it’s just another connectivity option that unfortunately becomes an attack vector. When properly implemented, secure SD-WAN improves the security of the business overall.
Learn more about SD-WAN benefits such as advanced SD-WAN bandwidth capabilities.
Learn more about Managed SD-WAN for Service Providers.
Make SD-WAN Security a Priority
Most SD-WAN solutions aren’t without security challenges, and one of the critical requirements for SD-WAN success is fully integrated security. Without fully integrated security, SD-WAN becomes just another conduit for malware and cyber criminals to attack the network.
A secure SD-WAN solution is explicitly designed to interoperate as a single offering, ideally with each element running on the same operating system and managed using a single-pane-of-glass interface. This ensures that transactions are all seen and inspected, and any threats or anomalous behaviors are shared between every solution for maximum protection. As part of such an integrated system, the networking and connectivity functionalities of an SD-WAN aren’t just more closely associated with the security solutions installed on the platform. They’re the same thing.
Delivering security piecemeal is also unwise. Because of the dynamic nature and high scalability of SD-WAN, overlay security is not only very expensive to deploy and maintain, but often ends up with delays when reacting to connectivity changes, leaving critical connections and data vulnerable. An integrated system ensures that SD-WAN connectivity, traffic management functions, and advanced security function as a single, holistic solution.
A next-generation firewall (NGFW), whose key components include intrusion prevention (IPS), web filtering, secure sockets layer (SSL) inspection, and anti-malware, is an example of an integrated solution. Solutions that combine SD-WAN and NGFW capabilities into single offerings satisfy the key requirements for secure SD-WAN—and ensure the safety and reliability of connections and for the organization overall.
Learn more about integrating security with your SD-WAN to avoid common WAN security issues.
Secure SD-WAN News
-
Dec 2, 2020Fortinet Announces Industry’s First Secure SD-WAN Appliances for Operational Technology EnvironmentsFortiGate Rugged 60F Next-generation Firewalls Bring Easy-to-Deploy SD-WAN and Integrated Advanced Security to OT Networks
-
Nov 13, 2020Fortinet Again Named as a Leader in 2020 Gartner Magic Quadrant for Network FirewallsEleventh Consecutive Year Fortinet Recognized in Gartner Magic Quadrant for Network Firewalls
-
Sep 29, 2020Fortinet Named a Leader in the 2020 Gartner Magic Quadrant for WAN Edge InfrastructurePlaced Higher in Ability to Execute and Further in Completeness of Vision Than its Position the Previous Year
Fortinet SD-WAN Solutions
- World's only ASIC Accelerated SD-WAN
- 5,000+ application identification with SSL Inspection
- Self-Healing capabilities for better user experience
- Cloud-On-Ramp for efficient SaaS adoption
- Simplified Operations with SD-WAN Orchestrator
Next-Generation Firewall (NGFW) Security
The FortiGate NGFW delivers integrated SD-WAN networking and security capabilities in a single device.
Enhance Multi-Cloud Application Performance
Application identification, multi-path control, and application steering ensure that organizations can access all critical applications in the cloud.
Orchestration and Analytics
Low TCO
FortiGate Secure SD-WAN is less expensive and delivers both networking and security in the same solution for as much as 50% better TCO versus architectures with separate security and networking devices.
|
Introducing the FortiGate 40F | Next-Generation Firewall
The FortiGate/FortiWiFi 40F series provides a fast and secure SD-WAN solution in a compact fanless desktop form factor for enterprise branch offices and mid-sized businesses. Protects against cyber threats with system-on-a-chip acceleration and industry-leading secure SD-WAN in a simple, affordable, and easy to deploy solution.
Learn More
Gartner 2020 Magic Quadrant for WAN Edge Infrastructure
Fortinet named a Leader in the 2020 Gartner Magic Quadrant for WAN Edge Infrastructure with highest in ability to execute and completeness of vision. See the full report to learn more about how other vendors compare to Fortinet.
FortiGate Secure SD-WAN Models and Specifications
FortiGate SD-WAN is available in diverse form factors with many different models to choose from to meet your needs ranging from hardware, VM appliances to six different cloud marketplaces for WAN Edge transformation. FortiManager, that can be used to monitor and manage the FortiGate appliances is also available in different form factors including hardware, virtual and SaaS.
▼
Hardware appliances
NGFW Throughput |
200 Mbps |
Threat Protection Throughput |
150 Mbps |
VPN Throughput |
35 Mbps |
Max G/W to G/W IPSEC |
200 |
Ports |
5x GE RJ45 |
NGFW Throughput |
800 Mbps |
Threat Protection Throughput |
600 Mbps |
VPN Throughput |
4.4 Gbps |
Max G/W to G/W IPSEC |
200 |
Ports |
5x GE RJ45 |
NGFW Throughput |
220 Mbps |
Threat Protection Throughput |
160 Mbps |
VPN Throughput |
100 Mbps |
Max G/W to G/W IPSEC |
200 |
Ports |
7x GE RJ45 |
NGFW Throughput |
1 Gbps |
Threat Protection Throughput |
700 Mbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC |
200 |
Ports |
8x GE RJ45 |
NGFW Throughput |
6 Gbps |
Threat Protection |
500 Mbps |
VPN Throughput |
3.5 Gbps |
Max G/W to G/W IPSEC |
200 |
Ports |
3 x GE RJ45, 2x shared media ports |
NGFW Throughput |
250 Mbps |
Threat Protection Throughput |
200 Mbps |
VPN Throughput |
2 Gbps |
Max G/W to G/W IPSEC Tunnels |
200 |
Ports |
10x GE RJ45 |
NGFW Throughput |
1 Gbps |
Threat Protection Throughput |
900 Mbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC |
200 |
Ports |
8x GE RJ45, 2x shared SFP | ByPass interface Variants |
NGFW Throughput |
360 Mbps |
Threat Protection Throughput |
250 Mbps |
VPN Throughput |
2.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
200 |
Ports |
14x GE RJ45, 2x Shared Port Pairs |
NGFW Throughput |
1.6 Gbps |
Threat Protection Throughput |
1 Gbps |
VPN Throughput |
11.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
2500 |
Ports |
26 1GE, 4 1GE Shared Media, 2 10GE |
NGFW Throughput |
3.5 Gbps |
Threat Protection Throughput |
3 Gbps |
VPN Throughput |
13 Gbps |
Max G/W to G/W IPSEC |
2500 |
Ports |
18x GE RJ45, 4x GE SFP, 4x 10GE SFP |
NGFW Throughput |
6Gbps |
Threat Protection Throughput |
5 Gbps |
VPN Throughput |
20Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
16x GE RJ45, 16x GE SFP |
NGFW Throughput |
9.5 Gbps |
Threat Protection Throughput |
7 Gbps |
VPN Throughput |
20 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
2x 10 GE SFP+, 10x GE RJ45, 8x GE SFP |
NGFW Throughput |
9.8 Gbps |
Threat Protection Throughput |
7.1 Gbps |
VPN Throughput |
48 Gbps |
Max G/W to G/W IPSEC tunnels |
20,000 |
Ports |
2x40GE QSFP+, 4x25GE SFP28, 4x10GE SFP+/SFP, 8x1GE SFP, 16xGE RJ45 |
NGFW Throughput |
11 Gbps |
Threat Protection Throughput |
9.1 Gbps |
VPN Throughput |
55 Gbps |
Max G/W to G/W IPSEC tunnels |
20,000 |
Ports |
4x 40 GE QSFP+, 12x 25 GE SFP28/10GE SFP+, 2x10 GE SFP+, 8x GE SFP, 18x GE RJ45 |
NGFW Throughput |
13.5 Gbps |
Threat Protection Throughput |
11 Gbps |
VPN Throughput |
98 Gbps |
Max G/W to G/W IPSEC tunnels |
20,000 |
Ports |
4x 40GE QSFP+, 20x 10GE/25GE SFP+/SFP28, 12x GE RJ45 |
NGFW Throughput |
21 Gbps |
Threat Protection Throughput |
20 Gbps |
VPN Throughput |
55 Gbps |
Max G/W to G/W IPSEC tunnels |
2,000 |
Ports |
4x 100GE QSFP28 slots , 16x 25GE SFP28 / 10GE SFP+ slots, 16x 10GE RJ45 ports, 2x 10GE SFP+ HA slots |
Virtual machines
NGFW Throughput |
850 Mbps |
Threat Protection Throughput |
700 Mbps |
VPN Throughput |
1 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
1.5 Gbps |
Threat Protection Throughput |
1.2 Gbps |
VPN Throughput |
1.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
2.5 Gbps |
Threat Protection Throughput |
2 Gbps |
VPN Throughput |
3 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
4.5 Gbps |
Threat Protection Throughput |
3.5 Gbps |
VPN Throughput |
5.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
40,000 |
Ports |
Up to 10 |
NGFW Throughput |
9 Gbps |
Threat Protection Throughput |
7 Gbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
40,000 |
Ports |
Up to 10 |
Public Cloud
Amazon Web Services (AWS) and Microsoft Azure supported for both BYOL (bring your own license) and On-demand (pay-as-you go). Please see the AWS and Azure Marketplace listings for more information:
- FortiGate on AWS
- FortiGate on AWS (BYOL)
- FortiGate on Azure
- FortiGate on Google
- FortiGate on Google (BYOL)
- FortiGate on Alibaba
- FortiGate on Alibaba (BYOL)
- FortiGate on Oracle (BYOL)
Hardware appliances
Devices/VDOMs (maximum) |
1,200 |
GB/Day of Logs |
2 |
Storage Capacity |
36 TB |
Devices/VDOMs (maximum) |
8,000 |
GB/Day of Logs |
10 |
Storage Capacity |
48 TB |
Devices/VDOMs (maximum) |
100,000 |
GB/Day of Logs |
10 |
Storage Capacity |
240 TB |
Virtual machines
Devices/VDOMs (Maximum) |
+1,000 |
GB/Day of Logs |
10 |
Devices/VDOMs (Maximum) |
+5,000 |
GB/Day of Logs |
25 |
Devices/VDOMs (Maximum) |
+10,000 |
GB/Day of Logs |
50 |
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adapters), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 Kbytes HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.
Public Cloud
Amazon Web Services (AWS) and Microsoft Azure supported for both BYOL (bring your own license) and On-demand (pay-as-you go). Please see the AWS and Azure Marketplace listings for more information:
Features
SD-WAN ASIC delivers fastest application identification and steering from a broad range of 5,000+ applications to enable digital transformation at the WAN Edge
Path awareness intelligence and link remediation delivers best application performance by automated fail-over and fail-back mechanism
Single pane of glass management with zero-touch deployment for the entire WAN edge simplifies deployment of SD-WAN and security
Benefits
Reduced complexity and high total cost of ownership by using best of breed SD-WAN and NGFW functionality on a single appliance
Improve cloud application performance by prioritizing business critical applications and enabling branches to directly communicate to the internet
Reduce operating expenses by migrating from MPLS and utilizing multi-broadband such as Ethernet, DSL, and LTE
Secure SD-WAN ROI Calculator
Fortinet Secure SD-WAN enables better application experience, simplifies WAN operations and reduces costs by migrating from expensive MPLS to broadband connectivity, while also integrating advanced security features.
Enter your data in the calculator below to learn how much you could save with Fortinet Secure SD-WAN.
Schedule your Demo
▼
Learn more about a Fortune 500 customer that achieved a 65% cost reduction with Fortinet Secure SD-WAN
Working hard to catch up with day-to-day network challenges and don’t know which solution will work for you? In this webinar, learn the impact Waste Management’s legacy WAN was having on its network performance. Hear how they transformed their network to reduce cost and improve the application experience with Fortinet Secure SD-WAN.
Our Customer Testimonials led to Fortinet being Named a 2020 Gartner Peer Insights Customers’ Choice for WAN Edge Infrastructure
Most SD-WAN solutions emphasize on best application performance with network reliability and efficiency, built-in critical security capabilities to protect from advanced cyberattacks remains a priority to ensure direct internet and cloud access are secure. Our customer testimonials from business verticals including financial services, retail, healthcare and regulated industries show why Fortinet scored high for all use cases in Gartner critical capability for WAN edge infrastructure report.
★★★★★
“A Leading Solution In SD-WAN Technology”
“We have been using FortiGate's SD-WAN solution for about 6 months. At the center we use Forti Manager and Forti 100F, a physical device connected to it. In our branches, we use the Forti 60E (DSL supported) model. Thanks to SD-WAN solution, we started to use all our lines efficiently. Fortinin this solution satisfied us with its easy implementation and high performance.”
– System Specialist, Services Industry
★★★★★
“Easy Going To Deployment & Configure, Directly Insight In The Connectivity”
“Easy to configure • Easy to deployment • Easy to centralized manage • Single appliance for: SD-WAN + advance routing + NGFW functions helped us consolidate other point products.”
– Security Officer, Manufacturing
★★★★★
“Simple Implementation, Robust Management, And Feature Rich Configuration Options”
“We have been very pleased with the Fortinet NGFW and SD-WAN solutions. The ease of configuration, robust CLI, and new features being added regularly, has made us very pleased with the solution. Fortinet may not focus as much on SD-WAN as other vendors do, but they have a broad portfolio and the integration of NGFW security and SD-WAN into a single platform has made policy, image, troubleshooting, and configuration management much easier. Even though Fortinet's bread and butter is security, they are quickly moving their SD-WAN technology and features to be on par with other specialized SD-WAN vendors. Fortinet's NGFW solution is extremely robust, high performing, and very feature rich. There is a feature for just about any custom NGFW setting you can think of. This is far better than our previous solution which is very well known.”
– Senior Network Engineer, Healthcare
★★★★★
“Network Access With High Security”
“Fortigate Secure SD-WAN is software based wide area secure network architecture, Also Fortigate Secure SD-WAN allows to improve the application performance, Fortigate Secure SD-WAN has great features such as Great load balancing, high level performance, Easy Integration and secure. After evaluating couple of local vendors we purchased Fortigate Secure SD-WAN. which is integratable with other solutions. Also Fortigate is next generation firewall. Implementation is easy. our experience with Fortigate Secure SD-WAN is really great. Implementation and maintenance is really easy.”
– Network Administrator, Services Industry
★★★★★
“Best Quality And Service Deleverables”
“Service support and product quality and end successful result , SD wan is better then cisco or any other product available in market.”
– VP Head IT, Finance
★★★★★
“Cutting Edge Technology That Delivered”
“Went through exhaustive POC and the products did what we needed. Their entire team was with us for this journey - helping along the way.”
– CIO, Finance
★★★★★
“Our Perfect Way To SD-WAN”
“Interesting product since Fortinet Version 6, very good sales performance, good consulting and planning. I really enjoyed every meeting. Since our project started, supported through NTT Security everything worked perfectly.”
– Head of IT Infrastructure, Manufacturing
★★★★★
“Works Like A Charm”
“Building up SDWAN with Fortigate was quite easy. With a little help from Fortinet TAC we were able to setup base connectivity in less then 1 day. We had some issues with the sdwan wizzard and we needed to create the connections manually. The bug was quickly fixed within the next firmware upgrade.”
– IT Manager, Service Industry
★★★★★
“Designing And Implementing The SD-WAN Architecture Has Been Easy”
“We’re happy with the vendor's technology. A very skillful partner (who was introduced by them) is helping us a lot with the implementation and migration process and has solved every problem we have found. Fortinet also has provided us with a lot of information and documentation. They even gave us some free official 7-days training for all our technicians. Designing and implementing the SD-WAN architecture has been easy because their pre-sales team has been working closely with our teams (security, networking, architecture). After some months of deployment, some of the requirements that weren’t available on their firmware have been implemented or have been added to the roadmap. Time seems to confirm our decision was right.”
– Communication Manager, Retail Industry
★★★★★
“Use Your Lines Efficiently With Fortigate SD-WAN”
“In our old WAN architecture, we could not use 3 spare lines effectively. When SD-WAN technology was introduced, we made POC with several companies and decided to buy Forti's SD-WAN solution. We have decided on 3 criteria: price, performance and ease of use. Forti was the best among the 3 companies. We used one 100F on center and 60E-DSL model in the branches. We use Forti-Manager to control the devices in the branches from the center. So far we are very satisfied with the performance of the product and the interest of the vendor.”
– Network and Security Engineer, Services Industry
The GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE badge is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved. Gartner Peer Insights Customers’ Choice constitute the subjective opinions of individual end-user reviews, ratings, and data applied against a documented methodology; they neither represent the views of, nor constitute an endorsement by, Gartner or its affiliates.
FortiGuard Services for FortiGate Secure SD-WAN
The growth of technologies such as public and private clouds, software-defined wide-area networks (SD-WAN), and DevOps has resulted in increasingly complex IT networks at almost every organization. At the same time, cybersecurity threats have become more sophisticated and fast-moving. Fortinet offers a full range of services and subscriptions to help you simplify and make the most of your SD-WAN deployment with the lowest TCO possible.
Choose the 360 Protection Bundle for your SD-WAN solution. The 360 Protection bundle was designed to simplify SD-WAN operations on top of providing our customers with comprehensive security and operational services to deliver the best protection available while lowering TCO. In addition to the full suite of FortiGuard and FortiOps subscriptions and services you see here, you also get 24x7 FortiCare with Advanced Support built-in!
Read on to find out how Fortinet subscriptions and services can help you get the most out of your SD-WAN solution :
We can help our customers lower their total cost of ownership (TCO) and simplify day-to-day security operations through our FortiOps services, which provide cloud-based management, visibility, and automation across your Fortinet Security Fabric and help you realized the operational benefits of a Fortinet-enabled Secure SD-WAN.
FortiOps
Cloud-based Management, Visibility, and Operations
FortiGuard
World-class Global Support and Professional Services
Effective best-in-class security requires timely, global intelligence combined with fast decision-making and response across all critical vectors. Fortinet offers proven and one of the most certified artificial intelligence-driven protection available in the market today powered by FortiGuard Labs.
For customers implementing FortiGates as NGFWs, here’s how FortiGuard subscriptions can help:
- Application Control: Fortinet boasts one of the largest applications database to safeguard your organization from risky application and allows you visibility and control of applications running in your network
- Intrusion Prevention: Stop unwanted attempts to access your network that target vulnerabilities and configuration gaps. We block over 10 million intrusion attempts per minute.
- Advanced Threats: Stop malicious files and payloads moving into your network with FortiGuard’s leading advanced malware, antivirus, and sandboxing capabilities. We stop over 35,000 malicious files per minute.
Mission critical security-driven networks deserve the best support available. FortiCare provides 24x7 support options to help keep your FortiGates up and running. We also have services to help you recover in the rare moments when bigger bumps seem to come out of nowhere such as our Premium RMA options with 4-hour replacements.
Want faster resolution? Choose our Advanced Support option.
Need help to get going with new deployments and integrations? FortiCare can do it, too, with Professional Services and Resident Engineers! Contact Sales to find out how.
FortiCare
World-class Global Support and Professional Services
Pro-Tips
- Request a free threat assessment today to find out how we can help secure your network!
- Don't forget to add Premium RMA for the fastest way to recover from unexpected bumps. We have global depots to get your parts fast!
Resources
▼
Solution Guides
Analyst Reports
White Papers
Reference Architecture
Data Sheets
Webinars and Videos
Fuse Community
Podcasts
Blogs
Certifications
Fortinet Secure SD-WAN excels in most challenging enterprise SD-WAN deployment tests receiving a second consecutive "Recommended" rating in NSS Labs for SD-WAN Group Test report; while delivering Lowest Total Cost of Ownership (TCO) per Mbps Among All Eight Vendors.
Key Highlights:
- Lowest Total cost of Ownership (TCO): FortiGate Secure SD-WAN showcased significant operational savings with the lowest TCO per Mbps (VPN Throughput) at $3.5@845Mbps and zero touch provisioning of new branches under six minutes.
- Best User Experience with High Availability: In the extreme conditions such as WAN Link failures, FortiGate SD-WAN delivered the full score of 4.41 and 4.53 for voice and video for best application user experience.
- Industry’s Most Validated NGFW Security Built-In: FortiGate SD-WAN comes with built-in NGFW which has received five consecutive NSS Labs NGFW “Recommendation” ratings. In the latest NSS Labs NGFW group test, FortiGate delivered 99.3% security effectiveness and 100% evasions blocking.
SD-WAN Value Map
In a crowded SD-WAN market, enterprises are finding it increasingly difficult to identify the right solution for them. NSS Labs provides a comprehensive and impartial test, in real-world situations, that identifies the key requirements for SD-WAN and the effectiveness of each solution. The SD-WAN capabilities that were assessed by NSS Labs include Zero-Touch provisioning, WAN Performance, Application-Aware Traffic Steering, Dynamic Path Selection with SLA Measurements and High Availability with WAN Impairments. Fortinet delivered best user experience with High Availability in extreme WAN impairment conditions.
Fortinet FortiGate 61E Test Report
Take a closer look at how Fortinet excelled again NSS Labs SD-WAN Group Test. Fortinet showcased a number of advantages including lowest TCO, native NGFW security and quality of experience for unified communications.
Download the ReportNSS Labs SD-WAN 2018 Value Map and Report
Comparative Report - Performance
NSS Labs SD-WAN Performance Comparative report provides a detailed comparison of all 9 participating vendors for quality of experience and performance. Fortinet showcased the highest quality of experience for business-critical applications such as VoIP and excellent VPN performance.
Download the Report
Comparative Report - TCO
NSS Labs SD-WAN TCO Comparative report provides a detailed comparison of all 9 participating vendors for quality of experience and performance. FortiGate SD-WAN has achieved the best price/performance among all 10 vendors with TCO of $5.
Download the Report
Comparative Report - Value Matrix
Fortinet solutions have consistently demonstrated superior performance and feature quality TCO when put to the test. Recent customer traction shows that organizations around the world are increasingly choosing FortiGate SD-WAN to upgrade their WAN infrastructure. The 2018 NSS Labs SD-WAN test results further prove that Fortinet delivers the highest quality of experience for VoIP, the best TCO and the right security to go with it, solidifying FortiGate SD-WAN as a compelling balance of quality, security and value. Take a look at the comparative value matrix report and understand how Fortinet emerged as a top choice for Secure SD-WAN.
Download the Report