Skip to content Skip to navigation Skip to footer

Secure SD-WAN

One WAN Edge Powered by One OS Transforming and Securing Your WAN

Gartner 2020 Magic Quadrant
web product icon sd wan

Traditional WAN architecture increases latency and slows down network performance to cloud services. This has driven Software-defined WAN (SD-WAN) solutions to become increasingly popular as organizations request fast, scalable, and flexible connectivity among different network environments. They also seek to lower the overall total cost of ownership (TCO) while delivering an enhanced application experience. But a subpar SD-WAN solution can significantly inhibit an organization’s ability to quickly adapt to changing business demands, especially if it does not offer integrated security.

 

What is SD-WAN? Definition & Solutions

SD-WAN solutions enable digital transformation for organizations by leveraging corporate WAN to a deliver better application experience, reduce costs, and simplify operations at the WAN edge. SD-WAN enables deep application identification, including encrypted traffic and dynamic multi-path steering across hybrid connectivity options—MPLS, LTE 4G/5G, or broadband—ensuring organizations can quickly and easily access business-critical applications.

 

Get exclusive on-demand access for a thorough Q&A with a Gartner analyst. Topics include Secure SD-WAN, SASE, SD-Branch, AIOps and more.

Watch Now

SD-WAN Explained

Improve user experience and simplify operations at the WAN edge with an integrated next-generation firewall (NGFW) and SD-WAN in single offering.

Watch the video

Learn more about Fortinet Secure SD-WAN

Why SD-WAN? Business Outcomes

According to IDC, the SD-WAN market will continue to grow more than 30% over the next few years, reaching $5.25 billion in 2023. Organizations in both publich and private sectors are embracing SD-WAN solutions for a number of key benefits, including the following.

Application Experience

Better Application Experience

SD-WAN allows remote sites to connect more easily to networks and/or multiple-clouds with lower latency, better performance, and more reliable connectivity. When users demand more of their applications and infrastructure at unprecedented speed and scale, an appealing user experience can be make-or-break.

Instant ROI Benefits

Instant ROI Benefits

MPLS and other connectivity technologies aren’t just outdated; they’re also more expensive when the total cost of ownership (TCO) is considered. SD-WAN not only significantly reduces bandwidth costs but can also help reduce capital costs by allowing consolidation of different point networking and security products at the edge while delivering better control and performance.

Efficient Operations

Efficient Operations

As network infrastructures have evolved, the sprawl of point products used for networking and security increases complexity. SD-WAN uses automation to make connectivity a simpler process across mixed environments, including on-premises, hybrid, and cloud. SD-WAN enables centralized orchestration, zero-touch provisioning, and analytics along with deep integrations of cloud on-ramps to accelerate cloud connectivity.

Secure SD-WAN

Enhanced Security Posture

An SD-WAN solution needs to have integrated security. Otherwise, it’s just another connectivity option that unfortunately becomes an attack vector. When properly implemented, secure SD-WAN enables secure direct internet access. It’s critical that an SD-WAN solution can ensure consistent security at all edges, from flexible WAN edges to the cloud edge.

How SD-WAN Works

An SD-WAN solution connects users to any application wherever it resides, whether on-premises or in the cloud. SD-WAN leverages deep application recognition, including in encrypted traffic, and applies dynamic multi-path steering to intelligently determine the best path for ideal performance at a specific application level. It then applies advanced WAN remediation capabilities to overcome blackout and brownout conditions by steering traffic through to the ideal WAN path. Traditional WAN architectures are hub-n-spoke, router-centric where all traffic is routed through MPLS to on-premises data center.

Below are a few characteristics that define how an SD-WAN solution works and has evolved from a WAN infrastructure:

Application Awareness

Application Resiliency

With traditional WAN solutions, organizations suffer a less than ideal quality of experience and have a hard time delivering high-performance bandwidth for critical applications. Since legacy WAN architectures are IP-based, they lack in-depth application visibility. SD-WAN solutions, however, can enable deep application visibility. This visibility can also be extended into encrypted traffic, which is critical, as more than 80% of the traffic runs on SSL/TLS. With advanced WAN remediation capabilities, enterprises can achieve application resiliency for business-critical applications, improve employee user experience, and boost productivity with SD-wide area networking. 
SD-WAN can intelligently identify applications and determine the best path they should take to maximize functionality. Moreover, self-healing capabilities automatically route traffic, in real-time, to the next-best available link in the event of an outage of the primary link. Not only does this automated capability reduce complexity, but it also delivers the improved application performance and user experience. Network teams gain the visibility they need about application use across the organization, the overall health of the network, and specific application-level insights. This enables better decisions to meet business outcomes.

Dynamic Application Steering

Zero-Touch Deployment

SD-WAN, which is based on the same methodology as software-defined networking (SDN), enables faster deployment with zero-touch provisioning capabilities that scale. In addition, a unified management console for both network and security operations simplifies operations at the WAN edge and extends zero-touch provisioning to LAN edge services, as well as wireless and switching.

Centralized Orchestration

Centralized Orchestration

SD-WAN Orchestrator allows organizations to simplify centralized deployment and establish automation to save time and respond more quickly to business demands. A centralized orchestrator can provide an intuitive workflow for business policies to strategize distribution of applications, and other traffic, across and between office locations. With automated VPN overlay bring-up, meshed connectivity across regional hubs and branch offices, especially in larger SD-WAN deployments, is easily managed with minimal overhead. Enhanced analytics for WAN link availability, performance SLAs, application traffic in runtime, and historical stats allow the infrastructure team to troubleshoot and quickly resolve network issues.

Multi-Cloud On-Ramp

Multi-Cloud On-Ramp

Enabling efficient connectivity to the cloud is a core capability of SD-WAN. SD-WAN solutions can be used in public clouds to enable high-performance connectivity between public cloud workloads running on multiple clouds without increasing cost and complexity. Cloud on-ramp is a key SD-WAN capability to enable faster branch–to-cloud connectivity and orchestration. This simplifies deployment and improves agility.

Request a Product Demo for SD-WAN. 
View a complete listing of SD-WAN Providers.

History and Evolution of SD-WAN

Modern SD-WAN technology evolved from earlier networking solutions like point-to-point (PPP) leased lines, frame relay, and MPLS. PPP was the original mode for connecting multiple local area networks (LANs) before frame relay removed the need to buy and manage individual connecting links between various corporate locations. MPLS made more improvements by bringing previously separate functions such as voice, video, and data networking onto the same network using Internet Protocol (IP)-based technology.

Fast-forward to the 2000s, and multiprotocol label switching (MPLS) came to popularity. MPLS soon overtook frame relay in popularity because of how it leverages Internet Protocol (IP)-based technology to bring previously separate functions such as voice, video, and data networking onto the same network. MPLS today is the most common technology in use for enterprise WANs, and is still held up for the reduced latency and quality of service (QoS) benefits it provides.

In the 2010s, specifically 2013, SD-WAN was born, and as more technologists examined SD-WAN for its benefits, they came to realize many of the same advantages SD-WAN has over MPLS, similar to how MPLS brought more advantages than frame relay. As a simple explanation, SD-WAN delivers MPLS-level QoS while being significantly less expensive and significantly easier to scale.

SD-WAN can handle a variety of connections and dynamically move traffic over the best transport available, and can provide both redundancy and much more capacity using lower-cost links. SD-WAN solutions are significantly cheaper than MPLS overall when time-to-installation and time-to-delivery are also considered. The best SD-WAN solutions offer zero-touch provisioning, allowing sites to be brought on quickly and not requiring networking or security experts to be on-site for installation.

SD-WAN vs. MPLS: Which Is Better?

There are a handful of factors to consider before shifting an organization to an SD-WAN solution from a traditional MPLS environment. Check out the table below to compare each option:

  SD-WAN MPLS
Complexity

If security is not automatically built-in, teams need add-on options

Internet traffic backhauled to the data center
Visibility

Broad application visibility

Packet routing limits visibility

Cost Consolidated services greatly reduce TCO

Expensive to build and maintain

Performance & Availability

Enables MPLS, broadband, LTE for high-speed

MPLS offers limited bandwidth and single point of failure
Scalability Expand to add secure connectivity with full mesh 

Lengthy process that often takes months

Why Is Integrated SD-WAN Security Critical?

One of the critical requirements for SD-WAN success is fully integrated security. Without it, SD-WAN becomes just another attack vector.

A secure SD-WAN solution is explicitly designed to interoperate as a single offering, ideally with each element running on the same operating system and managed using a single-pane-of-glass interface. This ensures that transactions are all seen and inspected, and any threats or anomalous behaviors are shared between every solution for maximum protection. As part of such an integrated system, the networking and connectivity functionalities of an SD-WAN aren’t just more closely associated with the security solutions installed on the platform. They’re the same thing.

Delivering security piecemeal is also unwise. Because of the dynamic nature and high scalability of SD-WAN, overlay security is not only very expensive to deploy and maintain, but often ends up with delays when reacting to connectivity changes, leaving critical connections and data vulnerable. An integrated system ensures that SD-WAN connectivity, traffic management functions, and advanced security function as a single, holistic solution.

An NGFW, whose key components include intrusion prevention (IPS), web filtering, secure sockets layer (SSL) inspection, and anti-malware, is an example of an integrated solution. Solutions that combine SD-WAN and NGFW capabilities into single offerings satisfy the key requirements for secure SD-WAN—and ensure the safety and reliability of connections and for the organization overall.

As organizations adopt remote workforce policies, networks grow more distributed. A new networking and security strategy is required that combines network and security functions with WAN capabilities to support the dynamic, secure internet access for a “work from anywhere” global workforce. SD-WAN plays a critical role in the adoption of emerging solutions like Secure Access Service Edge (SASE) and enables flexible and consistent security across all edges.


Learn more about integrating security with SD-WAN to avoid common WAN security issues.
View FortiGate SD-WAN Models & Specs.
Learn more about SD-WAN Pricing

Fortinet SD-WAN Solutions

  • World's only ASIC Accelerated SD-WAN
  • 5,000+ application identification with SSL Inspection
  • Self-Healing capabilities for better user experience
  • Cloud-On-Ramp for efficient SaaS adoption
  • Simplified Operations with SD-WAN Orchestrator
  • One WAN edge powered by one OS that transforms and secures WAN

Next-Generation Firewall (NGFW) Security

The FortiGate NGFW delivers integrated SD-WAN networking and security capabilities in a single device.

Enhance Multi-Cloud Application Performance

Application identification, multi-path control, and application steering ensure that organizations can access all critical applications in the cloud.

Orchestration and Analytics

Fortinet’s SD-WAN Orchestrator simplifies WAN operations with zero touch provisioning, intuitive work-flow and granular application analytics across the network.

Low TCO

FortiGate Secure SD-WAN is less expensive and delivers both networking and security in the same solution for as much as 50% better TCO versus architectures with separate security and networking devices.

Introducing the FortiGate 80F Product Series With Secure SD-WAN and Integrated WiFi6 | NGFW

The FortiGate 80F series provides an application-centric, scalable, and secure SD-WAN solution in a compact, fanless, desktop form factor for enterprise branch offices.

Learn More

Introducing the FortiGate 40F | Next-Generation Firewall

The FortiGate/FortiWiFi 40F series provides a fast and secure SD-WAN solution in a compact fanless desktop form factor for enterprise branch offices and mid-sized businesses. Protects against cyber threats with system-on-a-chip acceleration and industry-leading secure SD-WAN in a simple, affordable, and easy to deploy solution.

Learn More

 

Gartner 2020 Magic Quadrant for WAN Edge Infrastructure

Fortinet named a Leader in the 2020 Gartner Magic Quadrant for WAN Edge Infrastructure with highest in ability to execute and completeness of vision. See the full report to learn more about how other vendors compare to Fortinet.

Read the report


FortiGate Secure SD-WAN Models and Specifications

FortiGate SD-WAN is available in diverse form factors with many different models to choose from to meet your needs ranging from hardware, VM appliances to six different cloud marketplaces for WAN Edge transformation. FortiManager, that can be used to monitor and manage the FortiGate appliances is also available in different form factors including hardware, virtual and SaaS.

Compare Products

Hardware appliances

WAN Bandwidth License
Unrestricted
Threat Protection Throughput
600 Mbps
Application Control Throughput
990 Mbps
WAN VPN Throughput
4.4 Gbps
Ports
5x GE RJ45
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
700 Mbps
Application Control Throughput
1.8 Gbps
WAN VPN Throughput
6.5 Gbps
Ports
8x GE RJ45
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
500 Mbps
Application Control Throughput
1.3 Gbps
WAN VPN Throughput
3.5 Gbps
Ports
3 x GE RJ45, 2x shared media ports
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
900 Mbps
Application Control Throughput
1.8 Gbps
WAN VPN Throughput
7.5 Gbps
Ports
8x GE RJ45, 2x shared SFP | ByPass interface Variants
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
1 Gbps
Application Control Throughput
2.2 Gbps
WAN VPN Throughput
11.5 Gbps
Ports
26 1GE, 4 1GE Shared Media, 2 10GE
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
3 Gbps
Application Control Throughput
13 Gbps
WAN VPN Throughput
13 Gbps
Ports
18x GE RJ45, 4x GE SFP, 4x 10GE SFP

Virtual machines

NGFW Throughput
850 Mbps
Threat Protection Throughput
700 Mbps
VPN Throughput
1 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
1.5 Gbps
Threat Protection Throughput
1.2 Gbps
VPN Throughput
1.5 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
2.5 Gbps
Threat Protection Throughput
2 Gbps
VPN Throughput
3 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
4.5 Gbps
Threat Protection Throughput
3.5 Gbps
VPN Throughput
5.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
NGFW Throughput
9 Gbps
Threat Protection Throughput
7 Gbps
VPN Throughput
6.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10

Public Cloud

Amazon Web Services (AWS) and Microsoft Azure supported for both BYOL (bring your own license) and On-demand (pay-as-you go). Please see the AWS and Azure Marketplace listings for more information:

 

Hardware appliances

WAN Bandwidth License
Unrestricted
Threat Protection Throughput
7 Gbps
SSL Inspection Throughput
8 Gbps
IPsec VPN Throughput
20 Gbps
Ports
2x 10 GE SFP+, 10x GE RJ45, 8x GE SFP
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
7.1 Gbps
SSL Inspection Throughput
10 Gbps
IPsec VPN Throughput
48 Gbps
Ports
2x40GE QSFP+, 4x25GE SFP28, 4x10GE SFP+/SFP, 8x1GE SFP, 16xGE RJ45
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
9.1 Gbps
SSL Inspection Throughput
17 Gbps
IPsec VPN Throughput
55 Gbps
Ports
4x 40 GE QSFP+, 12x 25 GE SFP28/10GE SFP+, 2x10 GE SFP+, 8x GE SFP, 18x GE RJ45
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
17 Gbps
SSL Inspection Throughput
20 Gbps
IPsec VPN Throughput
55 Gbps
Ports
4x 100GE QSFP28 slots , 16x 25GE SFP28 / 10GE SFP+ slots, 16x 10GE RJ45 ports, 2x 10GE SFP+ HA slots
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
25 Gbps
SSL Inspection Throughput
30 Gbps
IPsec VPN Throughput
140 Gbps
Ports
2x 25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots 22x 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots 4x 100 GE QSFP28 / 40 GE QSFP+ Slots
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
30 Gbps
SSL Inspection Throughput
34 Gbps
IPsec VPN Throughput
140 Gbps
Ports
2x 25 GE SFP28 / 10 GE SFP+ / GE SFP HA Slots 30x 25 GE SFP28 / 10 GE SFP+ / GE SFP Slots 6x 100 GE QSFP28 / 40 GE QSFP+ Slots
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
45 Gbps
SSL Inspection Throughput
50 Gbps
IPsec VPN Throughput
210 Gbps
Ports
2x 25GE SFP28/ 10GE SFP+/ GE SFP HA Slots
2x 25GE SFP28/ 10GE SFP+/ GE SFP Slots
16x 25GE SFP28/ 10 GE SFP+/ GE SFP Slots
8x 100GE QSFP28/ 40GE QSFP+ Slots
WAN Bandwidth License
Unrestricted
Threat Protection Throughput
75 Gbps
SSL Inspection Throughput
86 Gbps
IPsec VPN Throughput
310 Gbps
Ports
2x 25GE SFP28/10GE SFP+/GE SFP HA Slots
2x 25GE SFP28/10GE SFP+/GE SFP AUX Slots
16x 25GE SFP28/10GE SFP+/GE SFP Slots
12x 100GE QSFP28 / 40 GE QSFP+ Slots
Devices/VDOMs (maximum)
1,200
GB/Day of Logs
2
Storage Capacity
36 TB
Devices/VDOMs (maximum)
8,000
GB/Day of Logs
10
Storage Capacity
48 TB
Devices/VDOMs (maximum)
100,000
GB/Day of Logs
10
Storage Capacity
240 TB

Virtual machines

Devices/VDOMs (Maximum)
+1,000
GB/Day of Logs
10
Devices/VDOMs (Maximum)
+5,000
GB/Day of Logs
25
Devices/VDOMs (Maximum)
+10,000
GB/Day of Logs
50
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adapters), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 Kbytes HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.

 

Public Cloud

Amazon Web Services (AWS) and Microsoft Azure supported for both BYOL (bring your own license) and On-demand (pay-as-you go). Please see the AWS and Azure Marketplace listings for more information:

Features

intelligent icon

SD-WAN ASIC delivers fastest application identification and steering from a broad range of 5,000+ applications to enable digital transformation at the WAN Edge 

monitoring icon

Path awareness intelligence and link remediation delivers best application performance by automated fail-over and fail-back mechanism 

platform support icon

Single pane of glass management with zero-touch deployment for the entire WAN edge simplifies deployment of SD-WAN and security

Benefits

icon benefits tools
Reduced complexity and high total cost of ownership by using best of breed SD-WAN and NGFW functionality on a single appliance
high performance icon
Improve cloud application performance by prioritizing business critical applications and enabling branches to directly communicate to the internet
reduce cash icon
Reduce operating expenses by migrating from MPLS and utilizing multi-broadband such as Ethernet, DSL, and LTE

Secure SD-WAN ROI Calculator

Fortinet Secure SD-WAN enables better application experience, simplifies WAN operations and reduces costs by migrating from expensive MPLS to broadband connectivity, while also integrating advanced security features.

Enter your data in the calculator below to learn how much you could save with Fortinet Secure SD-WAN.


Number of Sites
Enter Number of Office Locations.
Number of Hubs
Enter number of data centers.
Monthly MPLS Cost Per Site
Enter average monthly cost for each branch office's MPLS WAN link.
MPLS Bandwidth Requirement Per Site
Enter average bandwidth capacity in Mbps for each branch office's MPLS WAN link.
Percentile of MPLS Reduction
Enter the percentage of MPLS links that will be replaced by internet connections.
Monthly Internet Cost Per Site
Enter average monthly cost of internet for every branch and hub.
Internet Bandwidth Available Per Site
Enter the average bandwidth capacity that internet provides for branches and hubs.
Number of Years
Enter the number of years to calculate ROI for.
Secure SD-WAN
Select if NGFW security is a requirement.
Total Savings of over Years
Existing WAN MPLS Cost
SD-WAN Cost (CAPEX + OPEX)
Increase WAN Bandwidth Per Site
Enable Better Security Posture
This calculation is for estimation purposes only and doesn't account for legacy router maintenance cost.

Schedule your Demo

Learn more about a Fortune 500 customer that achieved a 65% cost reduction with Fortinet Secure SD-WAN

Working hard to catch up with day-to-day network challenges and don’t know which solution will work for you? In this webinar, learn the impact Waste Management’s legacy WAN was having on its network performance. Hear how they transformed their network to reduce cost and improve the application experience with Fortinet Secure SD-WAN.

Second year in a row Fortinet has been recognized with Gartner Peer Insights Customers Choice for WAN Edge Infrastructure with highest number of customer reviews

This high recognition from our customers affirms that our security driven networking approach enables their organization’s WAN transformation at scale without compromising security to achieve best user experience for all their applications and realize best ROI at reduced cost and complexity. 2020 - a year of crisis has transformed organizations way of conducting business amid uncertainty.  We believe our commitment to customers during these challenging times has led to being the only SD-WAN vendor named in Gartner MQ Leadership, ranked highest for security-sensitive and small footprint retail use case in Gartner Critical capability and now awarded Gartner Peer Insights with highest number (332) of reviews in the WAN Edge segment.

★★★★★
"Lots Of Searching, Moved To Fortigate Secure SD-WAN With Confidence"

"We looked around for nearly 6 months in the SD-WAN world, carefully searching for the right vendor, product, and support. After we spent many, many days of review, we decided to use FortiGate as our solution. This works especially nice when you are already in the FortiGate land, as we were. We primarily chose FortiGate as this would integrate with a lot of our existing infrastructure, especially security. IT also included the more advanced features we wanted like FEC (forward error correction)."

– IT Manager, Large Financial industry

★★★★★
"Best Value SD-WAN Solution Combined With Performance And Support That It Top Notch"

"We have been extremely impressed with the ease of use/setup along with the amazing support that we have come to love with Fortinet. Super cost effective. Also, they have improved over the years how easily can it be managed without having to learn complex commands."

– Network Manager, Large Transportation Enterprise

★★★★★
"FortiGate SD-WAN, Problem Solver And Cost Saver!"

"Near seamless deployment execution and ability to replace many different suppliers/partners devices with a single solution. Near all-in-one capability. Almost couldn't ask for more."

– IT Manager, Large Manufacturing Company

★★★★★
"Extremely Pleased With Fortinet"

"Fortinet has been extremely easy to work with and our account rep has been exceptional. They have bent over backwards to help us get what we needed to redo our entire network within our budget."

– Director of Infrastructure, Healthcare

★★★★★
"A High Achieving Product"

“Fortinets SD-WAN feature set is readily available and easy to integrate with via API. Mass Automation has been relative easy to achieve with great results for our customer and in-house projects. Our experience with Fortinet SD-WAN has shown them to be a very robust and high performing solution which also has the added functionality of Fortinets strength in Security. Fortinet SD-WAN's performance, security and low TCO has made it a popular choice by our customers

– Security Infrastructure Manager, Services

★★★★★
"SDWan Come To Stay And If Is Good Nowadays Imagine In Next Years"

"SD Wan came to simplify infrastructure analyst life. When you think that before we have to balance links manually and choose which one would be responsible for some application. Another benefit is not depend anymore only from dedicated internet links which cost high and without SD Wan we can't perform best with them. When we talk about application, SD wan can give us the best performance with the rule that you think is the bet one for your application(Latency, jitter). The best one is QOS rules witch real works and bring the best performance when we talk about application that are high priority for example Conference rooms used only by executives(CEO, CIO, CFO)."

– Infrastructure Analyst, Large Education/Government

★★★★★
"They Have Very Good And Innovative Products, Reasonable Prices"

“The human team is excellent, they have experience and a good predisposition to problem solving. We started with a solution in company with a supplier, and little by little we got to know the brand and the solutions they gave us. Definitely, we have found robust solutions, in aspects such as communications resilience, management services and security automation. We hope in the following years to be able to continue evaluating the solutions that are most convenient for our company.”

– IT Manager, Large Finacial Industry

★★★★★
"Review For Fortigate Secure SD-WAN"

"We tried to implement sdwan features to speed up new branches release and try to cut link costs. After a scouting between vendors we found very close differences between products. At the end we decided Fortinet because of the have fortigate already installed in branches, sdwan is well integrated in the appliance at no additional cost. We found a good support from the vendor and the best ratio for price, performace, scalability and features."

– Network Engineer Large Financial Industry

★★★★★
"Quickwins Starting SD-WAN"

"It's possible to start using fortigate products really simple, we had quick-wins deploying SD-WAN. We created WAN uplinks with 3 VLAN's where our providers are connected, created a simple rule and we have been able to use the created SD-WAN interface. Policies etc. could be added simple, to manage priority, bandwith by rules."

– Systems Engineering, Manufacturing

★★★★★
"Fortigate Secure SD-WAN The Way To Go!!"

"Overall the SDWAN implementation how worked well keeping our sites up, the one thing I have had an issue with is when a circuit fails over the VIPs we have setup stop working. That could be a lack of knowledge thing on my end."

– Network Engineer, Energy and Utilities

 
The GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE badge is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved. Gartner Peer Insights Customers’ Choice constitute the subjective opinions of individual end-user reviews, ratings, and data applied against a documented methodology; they neither represent the views of, nor constitute an endorsement by, Gartner or its affiliates.
 

The Future of SD-WAN and Flexible Network Edges with Gartner

Get exclusive on-demand access for a thorough Q&A with a Gartner analyst. Topics include Secure SD-WAN, SASE, SD-Branch, AIOps and more.

Watch Now

FortiGuard Services for FortiGate Secure SD-WAN

The growth of technologies such as public and private clouds, software-defined wide-area networks (SD-WAN), and DevOps has resulted in increasingly complex IT networks at almost every organization. At the same time, cybersecurity threats have become more sophisticated and fast-moving. Fortinet offers a full range of services and subscriptions to help you simplify and make the most of your SD-WAN deployment with the lowest TCO possible.

Choose the 360 Protection Bundle for your SD-WAN solution. The 360 Protection bundle was designed to simplify SD-WAN operations on top of providing our customers with comprehensive security and operational services to deliver the best protection available while lowering TCO. In addition to the full suite of FortiGuard and FortiOps subscriptions and services you see here, you also get 24x7 FortiCare with Advanced Support built-in!

Read on to find out how Fortinet subscriptions and services can help you get the most out of your SD-WAN solution : 

We can help our customers lower their total cost of ownership (TCO) and simplify day-to-day  security operations  through our FortiOps services, which provide cloud-based management, visibility, and automation  across your Fortinet Security Fabric and help you realized the operational benefits of a Fortinet-enabled Secure SD-WAN.  

FortiOps

Cloud-based Management, Visibility, and Operations

FortiGuard

World-class Global Support and Professional Services

Effective best-in-class security requires timely, global intelligence combined with fast decision-making and response across all critical vectors. Fortinet offers proven and one of the most certified artificial intelligence-driven protection available in the market today powered by FortiGuard Labs.

For customers implementing FortiGates as NGFWs, here’s how FortiGuard subscriptions can help:

  • Application Control: Fortinet boasts one of the largest applications database to safeguard your organization from risky application and allows you visibility and control of applications running in your network
  • Intrusion Prevention: Stop unwanted attempts to access your network that target vulnerabilities and configuration gaps. We block over 10 million intrusion attempts per minute.
  • Advanced Threats: Stop malicious files and payloads moving into your network with FortiGuard’s leading advanced malware, antivirus, and sandboxing capabilities. We stop over 35,000 malicious files per minute.

Mission critical security-driven networks deserve the best support available.  FortiCare provides 24x7 support options to help keep your FortiGates up and running.  We also have services to help you recover in the rare moments when bigger bumps seem to come out of nowhere such as our Premium RMA options with 4-hour replacements. 

Want faster resolution?  Choose our Advanced Support option.

Need help to get going with new deployments and integrations?  FortiCare can do it, too, with Professional Services and Resident Engineers!  Contact Sales to find out how.

FortiCare

World-class Global Support and Professional Services

Pro-Tips

  • Request a free threat assessment today to find out how we can help secure your network!
  • Don't forget to add Premium RMA for the fastest way to recover from unexpected bumps. We have global depots to get your parts fast!

Resources

Fuse Community


Certifications

Fortinet Secure SD-WAN excels in most challenging enterprise SD-WAN deployment tests receiving a second consecutive "Recommended" rating in NSS Labs for SD-WAN Group Test report; while delivering Lowest Total Cost of Ownership (TCO) per Mbps Among All Eight Vendors.

Key Highlights:

  1. Lowest Total cost of Ownership (TCO):  FortiGate Secure SD-WAN showcased significant operational savings with the lowest TCO per Mbps (VPN Throughput) at $4@893Mbps and zero touch provisioning of new branches under six minutes. 
  2. Best User Experience with High Availability: In the extreme conditions such as WAN Link failures, FortiGate SD-WAN delivered the full score of 4.41 and 4.53 for voice and video for best application user experience.  
  3. Industry’s Most Validated NGFW Security Built-In: FortiGate SD-WAN comes with built-in NGFW which has received five consecutive NSS Labs NGFW “Recommendation” ratings. In the latest NSS Labs NGFW group test, FortiGate delivered 99.3% security effectiveness and 100% evasions blocking.

 

SD-WAN Value Map

In a crowded SD-WAN market, enterprises are finding it increasingly difficult to identify the right solution for them. NSS Labs provides a comprehensive and impartial test, in real-world situations, that identifies the key requirements for SD-WAN and the effectiveness of each solution. The SD-WAN capabilities that were assessed by NSS Labs include Zero-Touch provisioning, WAN Performance, Application-Aware Traffic Steering, Dynamic Path Selection with SLA Measurements and High Availability with WAN Impairments. Fortinet delivered best user experience with High Availability in extreme WAN impairment conditions.

Download Now

sd-wan nss lab fortigate 61e

Fortinet FortiGate 61E Test Report

Take a closer look at how Fortinet excelled again NSS Labs SD-WAN Group Test.  Fortinet showcased a number of advantages including lowest TCO, native NGFW security and quality of experience for unified communications. 

Download the Report

NSS Labs SD-WAN 2018 Value Map and Report

diagram sd wan certification 4

Comparative Report - Performance

NSS Labs SD-WAN Performance Comparative report provides a detailed comparison of all 9 participating vendors for quality of experience and performance. Fortinet showcased the highest quality of experience for business-critical applications such as VoIP and excellent VPN performance.      

Download the Report
diagram sd wan certification 5

Comparative Report - TCO

NSS Labs SD-WAN TCO Comparative report provides a detailed comparison of all 9 participating vendors for quality of experience and performance. FortiGate SD-WAN has achieved the best price/performance among all 10 vendors with TCO of $5.

Download the Report
diagram sd wan certification 1

Comparative Report - Value Matrix

Fortinet solutions have consistently demonstrated superior performance and feature quality TCO when put to the test. Recent customer traction shows that organizations around the world are increasingly choosing FortiGate SD-WAN to upgrade their WAN infrastructure.  The 2018 NSS Labs SD-WAN test results further prove that Fortinet delivers the highest quality of experience for VoIP,  the best TCO and the right security to go with it, solidifying FortiGate SD-WAN as a compelling balance of quality, security and value. Take a look at the comparative value matrix report and understand how Fortinet emerged as a top choice for Secure SD-WAN. 

Download the Report