Fortinet bolsters SD-WAN services, security with new software, next-generation firewalls

Fortinet has added new features to its SD-WAN software and a next-generation firewall series that promise to help customers better monitor and protect distributed enterprise resources.

On the SD-WAN front, Fortinet is introducing two services – a network underlay and overlay option to let customers better manage WAN traffic to remote sites. 

The Underlay Performance Monitoring Service for SD-WAN utilizes the vendor’s core central management system FortiManager and FortiGuard’s database of hundreds of popular SaaS and cloud implementations, to offer visibility into the performance of the underlay network.  The underlay network is typically made up if the physical network infrastructure supporting traffic between distributed cloud or remote office resources.

The service includes a setup wizard to help users bring up SD-WAN locations easier. It also adds a monitor customers can use to see network and application performance from a single location. 

The service also includes support for the FortiGuard Performance SLA Database that includes preconfigured SaaS and cloud application workloads so customers can easily create service level agreements (SLAs) for ISP link performance, according to Fortinet.  The idea is to reduce set up time, eliminate configuration errors, and ensure application performance.  In addition, Application Performance Scoring uses analytics to measure app performance and let customers pinpoint network and shrink remediation times.

The vendor also added an Overlay-as-a-Service offering that it says is aimed at helping organizations with limited technical expertise and constrained budgets manage the SD-WAN network overlay. The overlay works with the network underlay but provides the logical, virtual support for things like addressing and routing provisions.

The service lets companies quickly set up and manage SD-WAN services via the vendor’s Fort iCloud service. The idea is to reduce deployment time and associated costs while also alleviating the burden of hosting and management expenses, according to Fortinet.

Both services will be available in Q3 2023.

In addition to the software, Fortinet rolled out its FortiGate 90G series of NGFWs which are based on the vendor’s SP5 ASIC which promises a number of performance improvements for the FortiGate system including 17x faster firewall performance and 32x faster encryption processes while using 88% less power compared to standard CPUs, the company says.

The new firewalls feature support for the vendor’s SD-WAN, Secure Access Service Edge (SASE) and Secure Service Edge networking and security features as well as its AI-Powered Security Services which blend AI and ML technologies offer advanced intrusion prevention for deep packet inspection of SSL/TLS traffic, web security services, such as DNS and URL filtering for blocking of access to malicious domains and URLs, and content security, such as inline sandboxing to stop zero-day and other file-based threats.

The support also helps make customers aware of cyber threats and act on protecting resources much quicker.  The service utilizes real-time security data from Fortinet’s threat researchers at FortiGuard Lab to monitor for new dangers.

Like other Fortinet firewalls, the 90G series also let customers build hybrid mesh firewall architectures – a developing technology that unlike traditional single point of control firewalls, lets IT teams to define and enforce policy controls across workloads, users, and locations, the vendor stated.

Mesh firewalls help secure hybrid environments and extend modern network firewall controls to multiple enforcement points, according to a exact Gartner report, which also stated that by 2026, more than 60% of organizations will have more than one type of firewall deployment, which will prompt adoption of hybrid mesh firewalls.

The FortiGate 90G series is available.

Copyright © 2023 IDG Communications, Inc.

Fortinet unveils data centre firewalls with AI support

Fortinet has released two new high-speed, next generation firewalls designed to protect data centre assets.

The 387Gbps 3200F series and 164Gbps 900G series feature support for the vendor’s AI-Powered Security Services, which blend AI and machine-learning technologies to make customers aware of cyber threats and act on protecting resources much more quickly, according to Nirav Shah, vice president of products and solutions at Fortinet.

FortiGuard AI-Powered Security Services use real-time data from Fortinet’s threat researchers at FortiGuard Lab to monitor for new dangers.

“We look at terabytes of data every day, and that's where they run their AI and machine learning to see different things – whether they need to enable AI-powered services with IPS, or utilise sandbox technologies to mitigate them,” Shah said.

“If you look at the cybersecurity industry, and the amount of data that they see, and the patterns and other things that they need to recognise to find the threats – [it] is extremely tough if you do it manually.”

The new firewalls also go a long way toward helping customers build hybrid mesh firewall architectures – a developing technology that, unlike traditional single-point-of-control firewalls, enables IT teams to define and enforce policy controls across workloads, users, and locations, Shah said.

Mesh firewalls help secure hybrid environments and extend modern network firewall controls to multiple enforcement points, according to a exact Gartner report. The research firm says that by 2026, more than 60% of organisations will have more than one type of firewall deployment, which will prompt adoption of hybrid mesh firewalls.

The new FortiGate firewalls run the latest FortiOS software. FortiOS is the operating system for the FortiGate family of hardware and virtual components. It implements Fortinet Security Fabric and includes firewalling, access control, zero trust, and authentication capabilities in addition to managing SD-WAN, switching, and wireless services. 

The 3200F is Fortinet’s new top-of-the-line system, displacing the vendor’s current 3000 series. It is aimed at very large enterprise or hyperscale deployments where there is a need to support a very high volume of data, Shah said. The 3200 offers a 1.5x performance improvement over the 3000 and features four 400GE interfaces. 

“The 3200F delivers 4x the industry average firewall throughput, 4.7x the industry average SSL Inspection throughput, and 3.5x the industry average IPSec VPN throughput,” Shah said.

The 900 series is aimed at mid-sized enterprise data centres and features a range of 25Gb and 10Gb Ethernet interfaces.

Both new firewalls are built on the vendor’s latest FortiSP5 chip technology, which features multiple processing units that handle networking, such as VXLAN or SD-WAN processing, and security functions, such as SSL or IPSec VPN processing.

The FortiSP5 chip technology offloads these tasks from the core CPU, allowing for greater overall performance, Fortinet says. The idea is that customers can easily blend network and security functions in one device and not have to buy separate products to handle those operations, Shah said.

The new firewalls are available now.

Error: Please check your email address.

Tags Fortinet

Fortinet unveils data centre firewalls with AI support

Fortinet has released two new high-speed, next generation firewalls designed to protect data centre assets.

The 387Gbps 3200F series and 164Gbps 900G series feature support for the vendor’s AI-Powered Security Services, which blend AI and machine-learning technologies to make customers aware of cyber threats and act on protecting resources much more quickly, according to Nirav Shah, vice president of products and solutions at Fortinet.

FortiGuard AI-Powered Security Services use real-time data from Fortinet’s threat researchers at FortiGuard Lab to monitor for new dangers.

“We look at terabytes of data every day, and that's where they run their AI and machine learning to see different things – whether they need to enable AI-powered services with IPS, or utilise sandbox technologies to mitigate them,” Shah said.

“If you look at the cybersecurity industry, and the amount of data that they see, and the patterns and other things that they need to recognise to find the threats – [it] is extremely tough if you do it manually.”

The new firewalls also go a long way toward helping customers build hybrid mesh firewall architectures – a developing technology that, unlike traditional single-point-of-control firewalls, enables IT teams to define and enforce policy controls across workloads, users, and locations, Shah said.

Mesh firewalls help secure hybrid environments and extend modern network firewall controls to multiple enforcement points, according to a exact Gartner report. The research firm says that by 2026, more than 60% of organisations will have more than one type of firewall deployment, which will prompt adoption of hybrid mesh firewalls.

The new FortiGate firewalls run the latest FortiOS software. FortiOS is the operating system for the FortiGate family of hardware and virtual components. It implements Fortinet Security Fabric and includes firewalling, access control, zero trust, and authentication capabilities in addition to managing SD-WAN, switching, and wireless services. 

The 3200F is Fortinet’s new top-of-the-line system, displacing the vendor’s current 3000 series. It is aimed at very large enterprise or hyperscale deployments where there is a need to support a very high volume of data, Shah said. The 3200 offers a 1.5x performance improvement over the 3000 and features four 400GE interfaces. 

“The 3200F delivers 4x the industry average firewall throughput, 4.7x the industry average SSL Inspection throughput, and 3.5x the industry average IPSec VPN throughput,” Shah said.

The 900 series is aimed at mid-sized enterprise data centres and features a range of 25Gb and 10Gb Ethernet interfaces.

Both new firewalls are built on the vendor’s latest FortiSP5 chip technology, which features multiple processing units that handle networking, such as VXLAN or SD-WAN processing, and security functions, such as SSL or IPSec VPN processing.

The FortiSP5 chip technology offloads these tasks from the core CPU, allowing for greater overall performance, Fortinet says. The idea is that customers can easily blend network and security functions in one device and not have to buy separate products to handle those operations, Shah said.

The new firewalls are available now.

Error: Please check your email address.

Tags Fortinet