FortiGate is a next-generation firewall product that combines a next-generation firewall, a high-performance SSL/IPsec VPN gateway, and SD-WAN CPE. A double leader in the Gartner Enterprise Firewall and UTM Magic Quadrant, NSS Labs, a third-party evaluation laboratory, received the “Recommended Level” for six consecutive Next Generation Firewall Panels. It has the characteristics of high performance, good safety effect, rich functions, etc. It is an essential weapon for users to conduct secure networking, security isolation, traffic checks, and behavior monitoring locally and in the cloud. Additionally, SSL/IPSec VPNs on FortiGate are provided free of charge and are not charged per tunnel/user. Similarly, the SD-WAN functionality integrated into FortiGate is also offered at no additional cost.
FortiGate is integrated with the Amazon Web Services platform at the API level. It can support the same AZ and cross-AZ master/dual master high availability deployment models, as well as API-driven autoscaling elastic scaling to ensure stability and performance to the greatest extent possible. It also supports Transit Gateway, which can be used to help users build cloud security service centers to achieve centralized security management and control. Additionally, FortiGate supports Direct Single Root I/O Virtualization (SR-IOV) and C5n models for higher and more consistent performance. In terms of security, FortiGate can collect many Amazon Web Services raw data, such as instance ID, instance type, subnet, security group, AZ, tags, etc. Through the built-in lightweight orchestration engine, customize trigger conditions (the instance connects to a malicious IP) and execute actions (call a Lambda script to isolate the instance).