Безопасность частного облака

Защита внешнего трафика на уровне L7

В целях адаптации к быстрому росту количества служб центров обработки данных организации расширяют сети. В ходе этого процесса они могут столкнуться с такими проблемами, как повышение нагрузки на архитектуру безопасности и появление новых векторов атак. Развертывание виртуального межсетевого экрана следующего поколения с FortiGate-VM в виртуализированном центре обработки данных или частном облаке обеспечивает возможность отслеживания и администрирования всех областей инфраструктуры. FortiGate-VM автоматически выделяет ресурсы и масштабирует компоненты безопасности. Это решение поддерживает все ведущие гипервизоры, программно-конфигурируемые сети (SDN) и облачные платформы. Решение обеспечивает защиту внешнего трафика виртуализированных центров обработки данных на уровне 7.  

Intent-Based Segmentation: East-West Advanced L7 Security Protection

Microsegmentation is a method of creating secure zones in data centers and cloud deployments that allows companies to isolate workloads from one another and secure them individually. Virtualization and SDN increase east-west traffic in software-defined data centers (SDDC), and poor visibility into traffic between VMs increases risk from security breaches. FortiGate-VM provides microsegmentation and control of east-west traffic in the SDDC, for workload isolation and application-aware security policy. It allows granular policy segmentation and isolation across clustered resources to provide visibility across the entire SDDC infrastructure.  

Form Factor Consolidation

Enterprises can scale out or scale up with Fortinet FortiGate-VM virtual appliance offerings-virtualized versions of physical network security elements that deliver the same capabilities as a physical appliance in a virtual form factor. FortiGate virtual firewalls deliver advanced security capabilities in a virtual form factor and are ideally suited to secure virtualized resources in the data center or private cloud. Fortinet Security Fabric elements are all available packages as virtual appliances on a broad range of hypervisors.

The FortiGate-VMs run the same FortiOS operating system and FortiGuard threat intelligence as hardware models. Multiple VM sizes are available for maximizing throughput and performance.

Security Virtual Network Function (VNF)

Service providers need to deliver security services as virtual network functions both on-premises and in cloud. VNF handles specific network functions that run on one or more VMs on top of the hardware-networking infrastructure. Individual VNFs can be connected or combined together as building blocks to offer a full-scale networking communication service. Fortinet’s security VNF is deployed as an uCPE on-premises edge, or vCPE hosted in data center/cloud. FortiGate-VM is a small footprint security VNF with consolidated networking and security. It provides full application layer security with next-generation firewall, Intrusion prevention, AV, web filtering, and embedded Secure SD-WAN. VNF orchestration and service chaining is done via partner orchestrators such as Amdocs, Nuage, OpenStack, and others. 

Security for the Mobile Core/Telco Cloud

Mobile carriers need to deliver security services as virtual network functions for LTE and 5G mobile infrastructures. Fortinet VNFs provide a rich set of security functions for the virtual mobile infrastructure, particularly: 4G to 5G, edge cloud, cloud RAN, and telecommunications cloud. FortiOS helps secure critical control plane traffic throughout the telecommunications core. Fortinet VNFs for MEC include edge security and control, user-plane inspection, service chaining, and secure gateways.   VNFs support all modern acceleration technologies such as DPDK, SR-IOV, and AES-NI.  

Compliance and Regulatory Requirements

Achieving regulatory compliance with regulation mandates such as PCI DSS, HIPPA, SOX, and GDPR can be a complex and time-consuming burden. Security or governance issues force organizations into using a private cloud. Certain countries require that application data pertaining to people in a particular locale remain within the country. For a broader view of compliance across cloud platforms, FortiSIEM can create compliance reports at the push of a button. FortiAnalyzer provides a closed-loop compliance-gap mitigation and collects fabric logs, while FortiManager enables customers to audit, review, approve, and implement changes from a central place. The benefits are automated compliance auditing and reporting on-premises, in the data center, and in the cloud.