Skip to content Skip to navigation Skip to footer

Secure SD-WAN

Forrester Total Economic Impact™ (TEI) Study Shows 300% ROI for Fortinet Secure SD-WAN Enterprise Deployments

Download Study
Secure SD-WAN 

banner background banner dots

Overview

FortiGate delivers fast, scalable, and flexible Secure SD-WAN on-premises and in the cloud. Fortinet Secure SD-WAN supports cloud-first, security-sensitive, and global enterprises, as well as the hybrid workforce. Our Secure Networking approach uses one operating system and consolidates SD-WAN, next-generation firewall (NGFW), advanced routing, and ZTNA application gateway functions to:

  • Build a foundational platform for a seamless transition to SASE and SD-branch architecture
  • Deliver superior quality of experience at any scale
  • Accelerate network and security convergence for all users, and simplify WAN architecture
  • Orchestrate consistent network and security policies no matter where users are
  • Achieve operational efficiencies through automation, deep analytics, and self-healing

Simplify Your Network and Security with Fortinet Secure SD-WAN

Fortinet Secure SD-WAN is foundational for a seamless transition to SASE and SD-Branch. It enables organizations to protect their investment and simplify operations along their journey to a Zero Trust Architecture.

Watch Now

Fortinet Secure SD-WAN Is Foundational for a Seamless Transition to SASE

FortiSASE helps extend secure access and high-performance connectivity to users regardless of their geographic locations. FortiSASE delivers a full set of networking and security capabilities including secure web gateway (SWG), universal zero-trust network access (ZTNA), next-generation dual-mode cloud access security broker (CASB)Firewall-as-a-Service (FWaaS), and secure SD-WAN integration. With a unified solution, you can:

  • Overcome security gaps
  • Simplify operations and enhance security and networking analytics
  • Shift to an OPEX business model with simple user-based tiered licensing

End-to-End Visibility, Analytics, and Reporting to Accelerate Zero-Trust Initiatives

Organizations are embarking on zero-trust initiatives to deliver enhanced security postures across highly distributed environments. Fortinet Secure SD-WAN, along with FortiManager and FortiAnalyzer, provide granular visibility into network traffic, analyze traffic data, and automate response based on the results. This requisite functionality enables the acceleration of zero-trust initiatives.


 

Fortinet Named a Leader in the 2022 Gartner® Magic Quadrant™ for SD-WAN

Fortinet was named a Leader three years in a row and placed highest in Ability to Execute two years in a row and Recognized for completeness of vision and ability to execute.

Fortinet Secure SD-WAN is designed to address modern complexity and threat exposure to support customers critical business needs. It is designed to evolve to future-proof and protect investments as customers embrace a digital-first journey and support work-from-anywhere.

Download Report

Features and Benefits

Application Resilience
Ensures highest level of application availability and performance over any WAN transport

Integrated Advanced Security
Converges the most advanced NGFW and routing to deliver consistent security on- and off-network

Scalable, High Performance
Transforms and secures SD-WAN at large scale with no performance impact thanks to the industry's only SD-WAN ASIC

Multi-Cloud On-Ramp
Enables secure, fast connectivity and high performance to, in, and between cloud applications  

Zero-Touch Provisioning
Enables large scale, faster deployment of Secure SD-WAN

Centralized Orchestration
Centrally manages deployments, configurations, and on-going operations with complete visibility, analytics and reporting

FortiGate Secure SD-WAN Use Cases

As network edges explode, you need consistent security and connectivity. With Secure SD-WAN, you can:

Available in all form factors including physical and virtual appliances. Flexible capacity enables the highest application experience. FortiManager can be used to monitor and manage FortiGate appliances and is also available in different form factors including hardware, virtual, and SaaS.

View by:

Hardware appliances

Devices/VDOMs (Maximum)
30
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
100
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1000
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1200
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
4000
Sustained Log Rates
150
GB/Day
10
Zero Touch Provisioning
Yes
Third Party Automation
Yes
FMG-BASE to FMG-VM-UL-UG
Devices/VDOMs (Maximum)
10 to Unlimited
Sustained Log Rates
Hardware dependent
GB/Day
1-50
Zero Touch Provisioning
Yes
Third Party Automation
Yes
NGFW Throughput
850 Mbps
Threat Protection Throughput
700 Mbps
VPN Throughput
1 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
1.5 Gbps
Threat Protection Throughput
1.2 Gbps
VPN Throughput
1.5 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
2.5 Gbps
Threat Protection Throughput
2 Gbps
VPN Throughput
3 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
4.5 Gbps
Threat Protection Throughput
3.5 Gbps
VPN Throughput
5.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
NGFW Throughput
9 Gbps
Threat Protection Throughput
7 Gbps
VPN Throughput
6.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adapters), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 Kbytes HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.

Amazon Web Services (AWS), Microsoft Azure, Google, and Oracle support both bring-your-own-license (BYOL) and on-demand (pay-as-you-go). Please see the Marketplace listings for more information:

Available Security Services for Fortinet Secure SD-WAN

Fortinet Secure SD-WAN supports the seamless convergence of SD-WAN and AI-powered security using a single, consistent operating system – FortiOS. Fortinet uniquely delivers a unified security and management framework for users and networks based on ASIC accelerated SD-WAN, Zero Trust Network Access (ZTNA), and SASE to support high-performance automated prevention. SD-WAN network transformation initiatives require an evaluation of all internet-facing security as well as local segmentation and are best secured with Fortinet's powerful combination of deep SSL packet inspection and DNS/URL/Video filtering, AV, in-line sandbox, IPS, and IoT/OT security services.

Minimal Security for SD-WAN
Security for Direct Internet Access

NGFW
Decryption
IPS
Web Security
(SWG/ DNS/ URL Filtering/ C2 )
CASB
Content Security
(AV/ Sandbox)
Device Security
(IoT/ OT)

 

      Included
      Optional
Recommended Security for SD-WAN
Security for Direct Internet Access + Segmentation
NGFW
Decryption
IPS
Web Security
(SWG/ DNS/ URL Filtering/ C2 )
CASB
Content Security
(AV/ Sandbox)
Device Security
(IoT/ OT))
Complete Security for SD-WAN
Security for Direct Internet Access + Segmentation + IoT/OT Protection
NGFW
Decryption
IPS
Web Security
(SWG/ DNS/ URL Filtering/ C2 )
CASB
Content Security
(AV/ Sandbox)
Device Security
(IoT/ OT)

FortiGuard Labs and FortiGuard AI-powered Security Services

FortiGuard Labs

FortiGuard Labs threat intelligence and FortiGuard AI-powered Security Services enable Fortinet Secure SD-WAN solutions.

FortiGuard Labs is Fortinet’s elite cybersecurity threat intelligence and research organization comprised of very experienced threat hunters, researchers, analysts, engineers, and data scientists. FortiGuard Labs develops and utilizes leading-edge machine learning and AI technologies to provide customers with timely and consistently top-rated protection and actionable threat intelligence, allowing our customers to take proactive measures to better secure their organizations.

FortiGuard Security Services

FortiGuard Security Services is a suite of AI-powered security capabilities providing application, content, web, device, and advanced SOC security.

With native integration into the Fortinet Security Fabric, FortiGuard services  enable fast detection and enforcement across the entire attack surface. Risk is continually assessed and the Security Fabric automatically adjusts to counter the latest known and unknown threats in real time.

Fortinet SD-WAN solutions take advantage of advanced capabilities across Device, Content and Web security areas.

Learn more about FortiGuard AI-powered Security Services.

 


Specific FortiGuard AI-powered Security Services available with Fortinet SD-WAN solutions:


Intrusion Prevention

Inline CASB

DNS Filtering

URL Filtering

SOC as a Service

Anti-Botnet & C2

Antivirus

Inline Sandbox

Internet of Things

OT

Fortinet is dedicated to helping our customers succeed, and every year FortiCare Services help thousands of organizations get the most from their investments in Fortinet's products and services. To achieve this, FortiCare follows the life-cycle approach and provides four unique services to help our customers in their success journeys.

Technical Support Services

FortiCare Support Services is a per-device support service, and it provides customers access to over 1,400 experts to ensure efficient and effective operations and maintenance of their Fortinet capabilities. Ask about our Elite offer that provides 15 mins response time for critical products.

Advanced Support

Advanced Support is an account-based service that increases your team's productivity and avoids incidents with operational reviews by designated resources. In addition, account planning and upgrade assistance help you add new capabilities with confidence. Ask about our "Pro" offer.

Professional Services

Professional Services will fast-track your return on investment with streamlined deployment from our experts. Our consultants have multi-vendor experience and can help you design a complete solution, quickly migrate from legacy technologies, and adopt new capabilities. Ask about our "QuickStart" Service.

Premium RMA Services

Premium RMA options are available across the product family for expedited replacement of defective hardware the next day or in 4 hours. We also offer 4-hour hardware and engineer service. Premium RMA options cover weekends and holidays. Ask about our Premium RMA Service.


Learn more about FortiCare Services

View by:

Third year in a row Fortinet has been recognized with Gartner Peer Insights Customers Choice for WAN Edge Infrastructure with highest number of customer reviews

This high recognition from our customers affirms that our security driven networking approach enables their organization’s WAN transformation at scale without compromising security to achieve best user experience for all their applications and realize best ROI at reduced cost and complexity. 2020 - a year of crisis has transformed organizations way of conducting business amid uncertainty. We believe our commitment to customers during these challenging times has led to being the only SD-WAN vendor named in 2021 Gartner MQ Leadership, ranked #1 in three out of five use cases for remote worker, security-sensitive WAN, and small branch WAN in 2021 Gartner Critical capabilities and now awarded Gartner Peer Insights with highest number of reviews in the WAN Edge segment.

 

★★★★★
"Lots Of Searching, Moved To Fortigate Secure SD-WAN With Confidence"

"We looked around for nearly 6 months in the SD-WAN world, carefully searching for the right vendor, product, and support. After we spent many, many days of review, we decided to use FortiGate as our solution. This works especially nice when you are already in the FortiGate land, as we were. We primarily chose FortiGate as this would integrate with a lot of our existing infrastructure, especially security. IT also included the more advanced features we wanted like FEC (forward error correction)."

– IT Manager, Large Financial industry

★★★★★
"Best Value SD-WAN Solution Combined With Performance And Support That It Top Notch"

"We have been extremely impressed with the ease of use/setup along with the amazing support that we have come to love with Fortinet. Super cost effective. Also, they have improved over the years how easily can it be managed without having to learn complex commands."

– Network Manager, Large Transportation Enterprise

★★★★★
"FortiGate SD-WAN, Problem Solver And Cost Saver!"

"Near seamless deployment execution and ability to replace many different suppliers/partners devices with a single solution. Near all-in-one capability. Almost couldn't ask for more."

– IT Manager, Large Manufacturing Company

★★★★★
"Extremely Pleased With Fortinet"

"Fortinet has been extremely easy to work with and our account rep has been exceptional. They have bent over backwards to help us get what we needed to redo our entire network within our budget."

– Director of Infrastructure, Healthcare

★★★★★
"A High Achieving Product"

“Fortinets SD-WAN feature set is readily available and easy to integrate with via API. Mass Automation has been relative easy to achieve with great results for our customer and in-house projects. Our experience with Fortinet SD-WAN has shown them to be a very robust and high performing solution which also has the added functionality of Fortinets strength in Security. Fortinet SD-WAN's performance, security and low TCO has made it a popular choice by our customers

– Security Infrastructure Manager, Services

★★★★★
"SDWan Come To Stay And If Is Good Nowadays Imagine In Next Years"

"SD Wan came to simplify infrastructure analyst life. When you think that before we have to balance links manually and choose which one would be responsible for some application. Another benefit is not depend anymore only from dedicated internet links which cost high and without SD Wan we can't perform best with them. When we talk about application, SD wan can give us the best performance with the rule that you think is the bet one for your application (Latency, jitter). The best one is QOS rules witch real works and bring the best performance when we talk about application that are high priority for example Conference rooms used only by executives (CEO, CIO, CFO)."

– Infrastructure Analyst, Large Education/Government

★★★★★
"They Have Very Good And Innovative Products, Reasonable Prices"

“The human team is excellent, they have experience and a good predisposition to problem solving. We started with a solution in company with a supplier, and little by little we got to know the brand and the solutions they gave us. Definitely, we have found robust solutions, in aspects such as communications resilience, management services and security automation. We hope in the following years to be able to continue evaluating the solutions that are most convenient for our company.”

– IT Manager, Large Finacial Industry

★★★★★
"Review For Fortigate Secure SD-WAN"

"We tried to implement sdwan features to speed up new branches release and try to cut link costs. After a scouting between vendors we found very close differences between products. At the end we decided Fortinet because of the have fortigate already installed in branches, sdwan is well integrated in the appliance at no additional cost. We found a good support from the vendor and the best ratio for price, performance, scalability and features."

– Network Engineer Large Financial Industry

★★★★★
"Quickwins Starting SD-WAN"

"It's possible to start using fortigate products really simple, we had quick-wins deploying SD-WAN. We created WAN uplinks with 3 VLAN's where our providers are connected, created a simple rule and we have been able to use the created SD-WAN interface. Policies etc. could be added simple, to manage priority, bandwidth by rules."

– Systems Engineering, Manufacturing

★★★★★
"Fortigate Secure SD-WAN The Way To Go!!"

"Overall the SDWAN implementation how worked well keeping our sites up, the one thing I have had an issue with is when a circuit fails over the VIPs we have setup stop working. That could be a lack of knowledge thing on my end."

– Network Engineer, Energy and Utilities

 
The GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE badge is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved. Gartner Peer Insights Customers’ Choice constitute the subjective opinions of individual end-user reviews, ratings, and data applied against a documented methodology; they neither represent the views of, nor constitute an endorsement by, Gartner or its affiliates.
 



Seamless Transition to SASE Solution

Fortinet Secure SD-WAN is foundational to seamlessly transition to SASE. By integrating advanced SD-WAN capabilities in the cloud along with cloud-delivered security or Security Services Edge (SSE), organizations who invested in Fortinet Secure SD-WAN are able to extend the convergence of networking and security from the edge to remote users. This provides remote users with Secure Private Access (SPA) to applications hosted privately in data centers and delivers consistent user experience and security posture.

Download the solution brief


 

View by:

Fuse Community


Fortinet Secure SD-WAN enables better application experience, simplifies WAN operations and reduces costs by migrating from expensive MPLS to broadband connectivity, while also integrating advanced security features.

Enter your data in the calculator below to learn how much you could save with Fortinet Secure SD-WAN.


Number of Sites
Enter Number of Office Locations.
Number of Hubs
Enter number of data centers.
Monthly MPLS Cost Per Site
Enter average monthly cost for each branch office's MPLS WAN link.
MPLS Bandwidth Requirement Per Site
Enter average bandwidth capacity in Mbps for each branch office's MPLS WAN link.
Percentile of MPLS Reduction
Enter the percentage of MPLS links that will be replaced by internet connections.
Monthly Internet Cost Per Site
Enter average monthly cost of internet for every branch and hub.
Internet Bandwidth Available Per Site
Enter the average bandwidth capacity that internet provides for branches and hubs.
Number of Years
Enter the number of years to calculate ROI for.
Secure SD-WAN
Select if NGFW security is a requirement.
Total Savings of over Years
Existing WAN MPLS Cost
SD-WAN Cost (CAPEX + OPEX)
Increase WAN Bandwidth Per Site
Enable Better Security Posture
This calculation is for estimation purposes only and doesn't account for legacy router maintenance cost.

Welcome to the Fortinet Secure SD-WAN demo. This demo shows the dynamic WAN path controller, application SLA enforcement, intelligent application steering and traffic shaping capabilities of Fortinet Secure SD-WAN, plus SD-WAN management and orchestration capabilities of FortiManager and how it can help your organization achieve digital transformation, cloud adoption while lowering TCO.

   

    

Fortinet Secure SD-WAN 7.2 Demo

Watch this demo to see how #FortiManager enables centralized management with automation-driven network configuration, visibility, and security policy management of #FortiGate Secure #SDWAN devices.

Watch Now

 

 

FortiGate FortiOS SD-WAN Failover Demo

This video demonstrates how SD-WAN on FortiOS can help greatly improve the quality of experience of four popular applications – Dropbox, VoIP, Office 365, and video. Fortinet Secure SD-WAN features a dynamic WAN path controller with a proprietary library of over 5000 applications to help organizations with their digital transformation, WAN OpEx reduction, and branch consolidation efforts.

Watch Now
Fortinet Security Fabric: Secure Networking

Secure Networking

Traditional security strategies can’t keep up with the challenges of your expanding attack surface – from remote work, to mobility, to multi-cloud networks. Fortinet Secure Networking addresses these challenges by tightly integrating network infrastructure with security architecture, meaning your network will remain secure as it scales and changes.

Fortinet News

Gartner, Magic Quadrant for SD-WAN, Jonathan Forest, Naresh Singh, Andrew Lerner, Karen Brown, 15 September 2022.
Gartner, Critical Capabilities for SD-WAN, Jonathan Forest, Andrew Lerner, Naresh Singh, Evan Zeng, 19, September 2022.

Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Gartner and Magic Quadrant are registered trademarks of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.

This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Fortinet.