FortiGate FortiOS 6.0 SD-WAN Demo
Learn more on how the FortiOS 6.0 can provide SD-WAN capabilities on a FortiGate for greater application visibility and application steering to prioritize business application performance.
立即觀看
FortiGate 安全 SD-WAN 軟體定義廣域網路 解決方案
分散式企業分支機構型轉變成數位商業模式對 WAN 網路產生重大影響。雲端服務的使用和越來越多的行動工作者正加速 WAN 技術的進步。許多企業使用直接網際網路存取，部署新一代安全策略以及啟用多路徑 WAN 網路來提高應用程式效能變得格外重要。
Fortinet 是業界唯一一個提供原生 SD-WAN 解決方案以及整合式先進威脅防護的新一代防火牆 (NGFW) 服務供應商。 FortiGate 安全 SD-WAN 解決方案具備應用程式感知能力、提供自動 WAN 路徑控管，並支援多寬頻連線。它取代傳統的分散 WAN 路由器、 WAN 優化和安全裝置，並且具備業界最佳的 VPN 效能，可將安全性擴展到多個分支機構。
FortiGate 安全 SD-WAN 解決方案產品介紹：
FortiGate SD-WAN 在分支機構進行轉型時，在安全無虞的情況下，提高生產力和應用程式效能。 在應用程式轉向功能的幫助下，確保關鍵業務應用程式得到優先處理。透過收集 WAN 修補資訊， FortiGate SD-WAN 將自動進行故障轉移到最佳可用的 WAN 連結。集中式控管的單一虛擬平台簡化了管理和監控功能，使企業分支機構快速佈局、輕鬆擴展。 FortiGate SD-WAN 已被全球金融、零售、製造和客服等行業所採用。
特色
能夠識別與支援多達 3,000 種以上的應用程式，並為子應用程式提供精密的可視性。
具備路徑感知智能以監控應用層級的交易，並自動將故障轉移到最佳可用的路徑。
單一虛擬平台管理簡化了 SD-WAN 解決方案的部署、管理和監控功能。
優勢
單一平台上的最佳組合 SD-WAN 解決方案和新一代防火牆 (NGFW) 功能，降低部署的複雜性和總擁有成本。
優先處理關鍵業務應用程式，讓分支機構直接存取網際網路，進而改善雲端應用程式效能。
透過轉移多協議標籤交換 (MPLS) 技術，並利用多連線寬頻服務如乙太網路 (Ethernet)、數位用戶迴路 (DSL) 和長程演進計畫 (LTE) 技術來降低營運成本。
Fortinet SD-WAN Solutions
- World's only ASIC Accelerated SD-WAN
- 5,000+ application identification with SSL Inspection
- Self-Healing capabilities for better user experience
- Cloud-On-Ramp for efficient SaaS adoption
- Simplified Operations with SD-WAN Orchestrator
Next-Generation Firewall (NGFW) Security
The FortiGate NGFW delivers integrated SD-WAN networking and security capabilities in a single device.
Enhance Multi-Cloud Application Performance
Application identification, multi-path control, and application steering ensure that organizations can access all critical applications in the cloud.
Orchestration and Analytics
Low TCO
FortiGate Secure SD-WAN is less expensive and delivers both networking and security in the same solution for as much as 50% better TCO versus architectures with separate security and networking devices.
|
Introducing the FortiGate 40F | Next-Generation Firewall
The FortiGate/FortiWiFi 40F series provides a fast and secure SD-WAN solution in a compact fanless desktop form factor for enterprise branch offices and mid-sized businesses. Protects against cyber threats with system-on-a-chip acceleration and industry-leading secure SD-WAN in a simple, affordable, and easy to deploy solution.
學到更多
Gartner 2020 Magic Quadrant for WAN Edge Infrastructure
Fortinet named a Leader in the 2020 Gartner Magic Quadrant for WAN Edge Infrastructure with highest in ability to execute and completeness of vision. See the full report to learn more about how other vendors compare to Fortinet.
FortiGate Secure SD-WAN Models and Specifications
FortiGate SD-WAN is available in diverse form factors with many different models to choose from to meet your needs ranging from hardware, VM appliances to six different cloud marketplaces for WAN Edge transformation. FortiManager, that can be used to monitor and manage the FortiGate appliances is also available in different form factors including hardware, virtual and SaaS.
▼
Hardware appliances
NGFW Throughput |
200 Mbps |
Threat Protection Throughput |
150 Mbps |
VPN Throughput |
35 Mbps |
Max G/W to G/W IPSEC |
200 |
港口 |
5x GE RJ45 |
NGFW Throughput |
800 Mbps |
Threat Protection Throughput |
600 Mbps |
VPN Throughput |
4.4 Gbps |
Max G/W to G/W IPSEC |
200 |
港口 |
5x GE RJ45 |
NGFW Throughput |
220 Mbps |
Threat Protection Throughput |
160 Mbps |
VPN Throughput |
100 Mbps |
Max G/W to G/W IPSEC |
200 |
港口 |
7x GE RJ45 |
NGFW Throughput |
1 Gbps |
Threat Protection Throughput |
700 Mbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC |
200 |
港口 |
8x GE RJ45 |
NGFW Throughput |
6 Gbps |
Threat Protection |
500 Mbps |
VPN Throughput |
3.5 Gbps |
Max G/W to G/W IPSEC |
200 |
港口 |
3 x GE RJ45, 2x shared media ports |
NGFW Throughput |
250 Mbps |
Threat Protection Throughput |
200 Mbps |
VPN Throughput |
2 Gbps |
Max G/W to G/W IPSEC Tunnels |
200 |
港口 |
10x GE RJ45 |
NGFW Throughput |
1 Gbps |
Threat Protection Throughput |
900 Mbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC |
200 |
港口 |
8x GE RJ45, 2x shared SFP | ByPass interface Variants |
NGFW Throughput |
360 Mbps |
Threat Protection Throughput |
250 Mbps |
VPN Throughput |
2.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
200 |
港口 |
14x GE RJ45, 2x Shared Port Pairs |
NGFW Throughput |
1.6 Gbps |
Threat Protection Throughput |
1 Gbps |
VPN Throughput |
11.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
2500 |
港口 |
26 1GE, 4 1GE Shared Media, 2 10GE |
NGFW Throughput |
3.5 Gbps |
Threat Protection Throughput |
3 Gbps |
VPN Throughput |
13 Gbps |
Max G/W to G/W IPSEC |
2500 |
港口 |
18x GE RJ45, 4x GE SFP, 4x 10GE SFP |
NGFW Throughput |
6Gbps |
Threat Protection Throughput |
5 Gbps |
VPN Throughput |
20Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
港口 |
16x GE RJ45, 16x GE SFP |
NGFW Throughput |
9.5 Gbps |
Threat Protection Throughput |
7 Gbps |
VPN Throughput |
20 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
港口 |
2x 10 GE SFP+, 10x GE RJ45, 8x GE SFP |
NGFW Throughput |
9.8 Gbps |
Threat Protection Throughput |
7.1 Gbps |
VPN Throughput |
48 Gbps |
Max G/W to G/W IPSEC tunnels |
20,000 |
Ports |
2x40GE QSFP+, 4x25GE SFP28, 4x10GE SFP+/SFP, 8x1GE SFP, 16xGE RJ45 |
NGFW Throughput |
11 Gbps |
Threat Protection Throughput |
9.1 Gbps |
VPN Throughput |
55 Gbps |
Max G/W to G/W IPSEC tunnels |
20,000 |
Ports |
4x 40 GE QSFP+, 12x 25 GE SFP28/10GE SFP+, 2x10 GE SFP+, 8x GE SFP, 18x GE RJ45 |
NGFW Throughput |
13.5 Gbps |
Threat Protection Throughput |
11 Gbps |
VPN Throughput |
98 Gbps |
Max G/W to G/W IPSEC tunnels |
20,000 |
Ports |
4x 40GE QSFP+, 20x 10GE/25GE SFP+/SFP28, 12x GE RJ45 |
NGFW Throughput |
21 Gbps |
Threat Protection Throughput |
20 Gbps |
VPN Throughput |
55 Gbps |
Max G/W to G/W IPSEC tunnels |
2,000 |
Ports |
4x 100GE QSFP28 slots , 16x 25GE SFP28 / 10GE SFP+ slots, 16x 10GE RJ45 ports, 2x 10GE SFP+ HA slots |
Virtual machines
NGFW Throughput |
850 Mbps |
Threat Protection Throughput |
700 Mbps |
VPN Throughput |
1 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
Ports |
Up to 10 |
NGFW Throughput |
1.5 Gbps |
Threat Protection Throughput |
1.2 Gbps |
VPN Throughput |
1.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
港口 |
Up to 10 |
NGFW Throughput |
2.5 Gbps |
Threat Protection Throughput |
2 Gbps |
VPN Throughput |
3 Gbps |
Max G/W to G/W IPSEC Tunnels |
2000 |
港口 |
Up to 10 |
NGFW Throughput |
4.5 Gbps |
Threat Protection Throughput |
3.5 Gbps |
VPN Throughput |
5.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
40,000 |
港口 |
Up to 10 |
NGFW Throughput |
9 Gbps |
Threat Protection Throughput |
7 Gbps |
VPN Throughput |
6.5 Gbps |
Max G/W to G/W IPSEC Tunnels |
40,000 |
港口 |
Up to 10 |
Public Cloud
Amazon Web Services (AWS) and Microsoft Azure supported for both BYOL (bring your own license) and On-demand (pay-as-you go). Please see the AWS and Azure Marketplace listings for more information:
- FortiGate on AWS
- FortiGate on AWS (BYOL)
- FortiGate on Azure
- FortiGate on Google
- FortiGate on Google (BYOL)
- FortiGate on Alibaba
- FortiGate on Alibaba (BYOL)
- FortiGate on Oracle (BYOL)
Hardware appliances
Devices/VDOMs (maximum) |
1,200 |
GB/Day of Logs |
2 |
Storage Capacity |
36 TB |
Devices/VDOMs (maximum) |
8,000 |
GB/Day of Logs |
10 |
Storage Capacity |
48 TB |
Devices/VDOMs (maximum) |
100,000 |
GB/Day of Logs |
10 |
Storage Capacity |
240 TB |
Virtual machines
Devices/VDOMs (Maximum) |
+1,000 |
GB/Day of Logs |
10 |
Devices/VDOMs (Maximum) |
+5,000 |
GB/Day of Logs |
25 |
Devices/VDOMs (Maximum) |
+10,000 |
GB/Day of Logs |
50 |
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adapters), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 Kbytes HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.
Public Cloud
Amazon Web Services (AWS) and Microsoft Azure supported for both BYOL (bring your own license) and On-demand (pay-as-you go). Please see the AWS and Azure Marketplace listings for more information:
Features
SD-WAN ASIC delivers fastest application identification and steering from a broad range of 5,000+ applications to enable digital transformation at the WAN Edge
Path awareness intelligence and link remediation delivers best application performance by automated fail-over and fail-back mechanism
Single pane of glass management with zero-touch deployment for the entire WAN edge simplifies deployment of SD-WAN and security
Benefits
Reduced complexity and high total cost of ownership by using best of breed SD-WAN and NGFW functionality on a single appliance
Improve cloud application performance by prioritizing business critical applications and enabling branches to directly communicate to the internet
Reduce operating expenses by migrating from MPLS and utilizing multi-broadband such as Ethernet, DSL, and LTE
Secure SD-WAN 投資報酬率 (ROI) 計算機
Fortinet安全SD-WAN能够提供更好的使用體驗，不只簡化廣域網路連結操作，更能將線路資源池化，使昂貴的MPLS不再是唯一選擇，大幅降低企業成本，並且整合下一代防火牆功能，使線路同時受到安全防護！
歡迎利用下面的小工具輸入數據，了解使用Fortinet安全SD-WAN可以為您節省多少！
安排專屬 Demo
FortiGuard Services for FortiGate SD-WAN
FortiGate SD-WAN employs multiple FortiGuard services. Application control provides visibility into thousands of applications, as well as granular sub-applications. Other security services such as web filtering, sandboxing, antivirus and intrusion prevention protect the branches from the latest advanced threats.
View FortiGuard Labs Services and Bundles.
應用程式控制
可對您的客戶正在執行的應用程式獲得無可比擬的即時可視性，並輕鬆實施您可接受的使用原則，進而提高安全性並滿足合規要求。透過 FortiGuard 應用程式控制，您可以快速建立原則來允許、拒絕或限制對應用程式或整個類別的應用程式的存取。
FortiSandbox 雲端
FortiSandbox 雲端服務是一個進階威脅偵測解決方案，可執行動態分析以識別先前未知的惡意軟體。FortiSandbox 雲端產生的可執行情報會反饋到網路中的預防控制機制，進而消除威脅。
Virus Outbreak Protection Service
FortiGuard Virus Outbreak Protection Service (VOS) closes the gap between antivirus updates with FortiCloud Sandbox analysis to detect and stop malware threats discovered between signature updates before they can spread throughout an organization. OS initiates a real-time look-up to our Global Threat Intelligence database.
FortiGuard Services Bundles
FortiGate Enterprise Bundle
Our Enterprise (ENT) bundle now includes:
- CASB - providing visibility, compliance, data security and threat protection for your cloud-based services.
- Industrial Security Service protection – SCADA (supervisory control and data acquisition) and ICS (industrial control systems). These signatures address attacks against critical infrastructure and manufacturing industries, where we are seeing frequent and sophisticated cyberattacks.
- Security Rating Service - this service performs checks against your fabric-enabled network and provides scoring and recommendations to your operation teams. The subsequent scorecard can be used to gauge adherence to various internal and external organizational polices, standards, and regulations requirements, including providing a ranking of your firm against industry peers.
The FortiGuard Enterprise (ENT) Protection bundle is designed to address today’s advanced threat landscape. The Enterprise Bundle consolidates the comprehensive protection needed to protect and defend against all cyberattack channels from the endpoint to the cloud. Including the technologies needed to address today’s challenging OT, compliance, and management concerns. The Enterprise Bundle offers the most comprehensive protection overall. The Enterprise Bundle includes:
- NGFW Application Control
- IPS
- Antivirus
- Botnet
- IP/Domain Reputation
- Mobile Security
- Web Filtering
- Antispam
- FortiSandbox Cloud
- Virus Outbreak Protection
- Content Disarm & Reconstruction
- CASB
- Security Rating
- Industrial Security Service
- FortiCare
FortiGate UTM Bundle
The FortiGuard Unified Protection Bundle (UTM) is our traditional Unified Threat Management security bundle. The Unified Protection Bundle extends threat protection across the entire digital attack surface, providing industry-leading defense against sophisticated attacks. The UTM bundle has you covered for web and email-based attacks. The UTM bundle delivers the best package available for a unified threat protection offering. The UTM Bundle includes:
- NGFW Application Control
- IPS
- Antivirus
- Botnet
- IP/Domain Reputation
- Mobile Security
- Web Filtering
- Antispam
- FortiSandbox Cloud
- Virus Outbreak Protection
- Content Disarm & Reconstruction
- FortiCare
The FortiGuard Advantage:
- FortiGuard processes over 69 million websites every hour, providing up-to-the-minute reputation and categorization.
- Prevent malicious downloads and browser hijacking attacks with top-rated web filtering (VBWeb Verified)
- Improved email productivity through superior spam prevention validated with 3rd party independent testing (VBSpam + Verified)
FortiGate Advanced Threat Protection Bundle
The FortiGuard Advanced Threat Protection (ATP) bundle provides the foundational security needed to protect and defend against known and unknown cyber threats. The Advanced Threat Protection bundle includes:
- NGFW Application Control
- IPS
- Antivirus
- Botnet
- IP/Domain Reputation
- Mobile Security
- FortiSandbox Cloud
- Virus Outbreak Protection
- Content Disarm & Reconstruction
- FortiCare 24*7
Services Table
| Service | Advanced Threat Protection (ATP) |
Unified Protection (UTM) |
Enterprise Protection (ENT) |
A La Carte Protection |
| Threat Intelligence Service |
✔ |
|||
| Industrial Security Service |
✔ |
✔ |
||
| Security Rating |
✔ |
✔ |
||
| CASB |
✔ |
✔ |
||
| Web Filtering |
✔ | ✔ |
✔ |
|
| Antivirus + Sandboxing |
✔ |
✔ |
✔ |
✔ |
| IPS |
✔ |
✔ |
✔ |
✔ |
| Antispam |
✔ |
✔ |
||
| Internet DB |
✔ |
✔ |
✔ |
|
| IP Reputation |
✔ |
✔ |
✔ | |
| Application Control |
✔ |
✔ |
✔ |
▼
Case Studies
Webinars and Videos
White Papers
Solution Guides
Data Sheets
認證
Fortinet 安全 SD-WAN 解決方案在最具挑戰性的企業 SD-WAN 部署測試中表現優異，在 NSS 實驗室的 SD-WAN 組別測試報告中，連續獲得第二次「推薦」評級。同時，每Mbps 的總擁有成本 (TCO) 也是其他八家供應商中最低的。
核心亮點 ：
- 最低的總擁有成本 (TCO) ： Fortinet 安全SD-WAN 解決方案以每 Mbps (VPN 流通量) 3.5 美元 / 845 Mbps 最低的總擁有成本，為用戶節省可觀的營運成本。六分鐘內即可完成新分支機構的零接觸部署。
- 最佳使用者體驗和最高可用性：在 WAN 連線故障這種極端情況下，Fortinet 安全 SD-WAN 解決方案在最佳使用者體驗的語音和影片應用分別獲得了 4.41 分和 4.53 分的高分。
- 內建業界驗證度最高的新一代防火牆 (NGFW) ： Fortinet 安全 SD-WAN 解決方案內建的 NGFW 已連獲五次 NSS 實驗室的 NGFW 「推薦」評級。在最新的 NSS 實驗室 NGFW 組別測試中， FortiGate 的整體安全有效性獲得 99.3% 評分，並更實現 100% 的逃逸阻斷。
Fortinet FortiGate 61E 測試報告
查看 Fortinet 如何在 NSS 實驗室 SD-WAN 組別測試中再度得到優異成績。 Fortinet 展示了許多優勢，包括最低總擁有成本、原生的 NGFW 安全性和統一的傳播體驗品質。
NSS 實驗室 SD-WAN 價值映射圖和報告
效能表現比較報告
NSS 實驗室的 SD-WAN 效能比較報告提供了所有 9 家參與供應商的詳細體驗和性能比較結果。 Fortinet 為關鍵業務應用程式提供卓越的體驗品質，如高品質的 VoIP 體驗以及出色的 VPN 性能。
下載報告
最低總擁有成本比較報告
NSS 實驗室的 SD-WAN 最低總擁有成本比較報告提供了所有 9 家參與供應商的詳細體驗和性能比較結果。 FortiGate 安全 SD-WAN 解決方案在所有 10 家供應商中均獲得了最佳性價比 (TCO 為 5 美元) 。
價值矩陣比較報告
經測試， Fortinet 解決方案始終呈現卓越的效能和最低的總擁有成本。最近抓客力顯示，世界各地越來越多企業選擇FortiGate 安全 SD-WAN 解決方案來升級其 WAN 基礎架構。2018 年 NSS 實驗室的 SD-WAN 測試結果進一步證明， Fortinet 高質量的 VoIP 體驗，最低的 TCO 和正確的安全性，使得 FortiGate 安全 SD-WAN 解決方案在品質、安全性和價值之間取得平衡。查看價值矩陣比較報告，了解 Fortinet 如何成為安全 SD-WAN 解決方案的首選。