FortiGate is a next-generation firewall product that combines a next-generation firewall, a high-performance SSL/IPsec VPN gateway, and SD-WAN CPE. A dual leader in Gartner enterprise firewalls and UTM Magic Quadrant, the third-party evaluation laboratory NSS Labs received “recommendation level” six times in a row by the Next Generation Firewall Panel. It has the characteristics of high performance, good safety effects, and rich functions. It is an essential weapon for users to perform secure networking, secure isolation, traffic inspection, and behavior monitoring locally and on the cloud. Additionally, SSL/IPsec VPNs on FortiGate are offered free of charge and are not charged per tunnel/user. Similarly, the integrated SD-WAN functionality on Fortigate is also available free of charge at no additional charge.
Fortigate is integrated with the Amazon Web Services platform at the API level, which can support master-hand/dual-master high-availability deployment models with and across AZ, as well as API-driven autoscaling elastic scaling to ensure stability and performance to the greatest extent possible. It also supports Transit Gateway, which can be used to help users build cloud security service centers to achieve centralized security control. Additionally, FortiGate supports direct single I/O virtualization (SR-IOV) and C5n models for higher and more consistent performance. In terms of security, FortiGate can collect many Amazon Web Services raw data, such as instance IDs, instance types, subnets, security groups, AZs, tags, etc. Use the built-in lightweight orchestration engine to customize the trigger conditions (the instance connects to a malicious IP) and execute the action (call a Lambda script to isolate the instance).