Skip to content Skip to navigation Skip to footer

Overview

FortiGate delivers fast, scalable, and flexible Secure SD-WAN on-premises and in the cloud. Fortinet Secure SD-WAN supports cloud-first, security-sensitive, and global enterprises, as well as the hybrid workforce. Our Secure Networking approach uses one operating system and consolidates SD-WAN, next-generation firewall (NGFW), advanced routing, and ZTNA application gateway functions.

Simplify Your Network and Security with Fortinet Secure SD-WAN

Fortinet Secure SD-WAN is foundational for a seamless transition to SASE and SD-Branch. It enables organizations to protect their investment and simplify operations along their journey to a Zero Trust Architecture.

Watch Now
FortiGate UIThis diagram describes what are the components and use cases of FortiSASE to secure remote users. FortiSASE includes Firewall-as-a-Service (FWaaS) and Secure Web Gateway (SWG) that both enable the Secure Internet Access use case. It includes Zero-Trust Network Access (ZTNA) and integration with Secure SD-WAN to enable Secure Private Access to corporate applications. And finally, it includes Cloud Access Security Broker (CASB) for Secure SaaS Access for full control and visibility over SaaS application access and content.

Fortinet Secure SD-WAN Is Foundational for a Seamless Transition to SASE

FortiSASE helps extend secure access and high-performance connectivity to users regardless of their geographic locations. FortiSASE delivers a full set of networking and security capabilities including secure web gateway (SWG), universal zero-trust network access (ZTNA), next-generation dual-mode cloud access security broker (CASB)Firewall-as-a-Service (FWaaS), and secure SD-WAN integration. With a unified solution, you can:

  • Overcome security gaps
  • Simplify operations and enhance security and networking analytics
  • Shift to an OPEX business model with simple user-based tiered licensing
Fortinet SD-WAN UI

Get End-to-End Visibility, Analytics, and Reporting to Accelerate Zero-Trust Initiatives

Organizations are embarking on zero-trust initiatives to deliver enhanced security postures across highly distributed environments. Fortinet Secure SD-WAN, along with FortiManager and FortiAnalyzer, provide granular visibility into network traffic, analyze traffic data, and automate response based on the results. This requisite functionality enables the acceleration of zero-trust initiatives.

Download Report

Features and Benefits

APPLICATION RESILIENCE

Ensures the highest level of application availability and performance over any WAN transport

INTEGRATED ADVANCED SECURITY

Converges the most advanced NGFW and routing to deliver consistent security on- and off-network

SCALABLE, HIGH PERFORMANCE

Transforms and secures SD-WAN at scale with no performance impact thanks to our WAN ASIC

MULTI-CLOUD ON-RAMP

Enables secure, fast connectivity and high performance to, in, and between cloud applications

ZERO-TOUCH PROVISIONING

Enables large scale, faster deployment of Fortinet Secure SD-WAN

CENTRALIZED ORCHESTRATION

Centrally manages deployments, configurations, and operations with visibility, analytics, & reporting

42k+

Customers

300%

ROI over three years

SP5

Secure SD-WAN Use Cases

Transform WAN and Security
TRANSFORM WAN AND SECURITY
Use one management console for SD-WAN, advanced routing, and NGFW controls to protect the entire digital attack surface.
Secure SD-Branch
SIMPLIFY SECURE SD-BRANCH
Simplify branch architecture with centrally managed, scalable secure SD-WAN and integrated NAC, WLAN, LAN, and LTE/4G/5G.
Hybrid Workforce
OPTIMIZE THE HYBRID WORKFORCE
Enhance work-from-anywhere with a comprehensive SASE solution by integrating cloud-delivered SD-WAN with Security Service Edge (SSE).
Multi-Cloud
ENHANCE HYBRID, MULTI-CLOUD
Enable secure, seamless, faster connectivity to the cloud, in the cloud, and between clouds.
App Performance
PREDICT APP PERFORMANCE
Enable reliable user experience on any transport with rich routing and advanced WAN remediation for self-healing networks.
Operational Efficiencies
ACHIEVE OPERATIONAL EFFICIENCIES
Automate design, deployment, and operation with a single pane of glass for network-wide visibility, analytics, reporting, and orchestration.

   

Enterprise Analyst Validation

2022 Gartner® Magic Quadrant™ and Critical Capabilities for SD-WAN
Forrester Total Economic Impact™ (TEI) of Fortinet Secure SD-WAN
2021 IDC MarketScape: Worldwide SD-WAN Infrastructure 2021 Vendor Assessment
diagram analyst report sdwan mq
Fortinet named a Leader in the 2022 Gartner® Magic Quadrant™ for SD-WAN, again and received highest scores in 3 out of 5 use cases in the companion Critical Capabilities report

Download both reports and get details on:

  • Fortinet’s position in the Magic Quadrant™
  • Fortinet’s #1 rankings in the Remote Worker, Security-Sensitive WAN, and WAN for Small Branches use cases in the Critical Capabilities report
  • How other vendors compare
Download Reports »
diagram tei study secure sdwan
Forrester Total Economic Impact™ (TEI) Study Shows 300% ROI for Fortinet Secure SD-WAN Enterprise Deployments
Fortinet commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study to analyze the value that enterprises are able to achieve by deploying Fortinet Secure SD-WAN. The TEI study examines both the network and security impact on businesses.
Download Study »
diagram idc 2021 marketscape sdwan vendors
Fortinet Named a Leader in the 2021 IDC MarketScape: Worldwide SD-WAN Infrastructure 2021 Vendor Assessment
Fortinet Secure SD-WAN is designed to address modern complexity and threat exposure to support customers critical business needs. It is designed to evolve to future-proof and protect investments as customers embrace a digital-first journey and support work-from-anywhere.
Download Report »

FortiGuard AI-Powered Security Services

Fortinet Secure SD-WAN supports the seamless convergence of SD-WAN and AI-powered security using a single, consistent operating system, FortiOS. Fortinet uniquely delivers a unified security and management framework for users and networks based on ASIC-accelerated SD-WAN, Zero Trust Network Access (ZTNA), and SASE to support high-performance prevention. SD-WAN network transformation initiatives require an evaluation of all internet-facing security as well as local segmentation. Fortinet's powerful combination of deep SSL packet inspection and DNS/URL/Video filtering, AV, inline sandbox, IPS, and IoT/OT security services offers the best protection.

Show All Services
Antispam
Antispam

Dramatically reduces spam at the perimeter through a multi-layered approach to filtering email.

Antivirus Service
Antivirus Service

Protects against the latest polymorphic attacks, viruses, malware (including ransomware), and other threats.

FortiGuard DNS Security
FortiGuard DNS Security

Provides full visibility into DNS traffic while blocking high-risk domains including malicious newly registered domains (NRDs) and parked domains.

FortiGuard Industrial Security Service | Fortinet
FortiGuard Industrial Security Service

Identifies and polices most of the common ICS/OT/SCADA protocols for granular visibility and control with continuously updated signatures.

FortiGuard IoT Detection Service
FortiGuard IoT Detection Service

Automatically discovers and segments IoT devices based on FortiGuard threat intelligence, and enforces appropriate policies.

FortiGuard Intrusion Prevention Service | Fortinet
FortiGuard IPS Service

Provides the most up-to-date defenses against both known and previously unknown threats and vulnerabilities.

FortiGuard Mobile Security Service | Fortinet
FortiGuard Mobile Security Service

Stops the latest malware variants with proactive technologies able to block previously unknown threat variants.

Inline Sandbox Service
Inline Sandbox Service

Protects against sophisticated malware and zero-day threats using advanced file analysis in a protected environment.

Security Rating Service
Security Rating Service

Guides users to design, implement, and continually maintain the target Security Fabric security posture best suited for their organization.

Protect Against Web-borne Threats with FortiGuard URL Filtering Service.
FortiGuard URL Filtering Service

Provides comprehensive threat protection to address threats including ransomware, credential-theft, phishing, and other web-borne attacks.

IP Reputation & Anti-botnet Security
IP Reputation & Anti-botnet Security

Aggregates malicious source IP data from the Fortinet distributed network of threat sensors, CERTs, MITRE, and other sources that collaborate to provide up-to-date threat intelligence.

Case Studies

Bakers Delight Holdings
Bakers Delight Holdings
For Multinational Bakery Chain, Tight Security Is Baked into the Infrastructure
Manetoni
Manetoni
Brazilian Steel Distributor Achieves High Security and Availability with the Fortinet Security Fabric Platform
Fliway
Fliway
Major New Zealand Logistics Provider Boosts Branch Communications with Fortinet SD-WAN
Wellington Catholic District School Board
Wellington Catholic District School Board
Canadian School District Enhances Remote User Security and Drives Operational Efficiencies with FortiSASE

Models and Specifications

Available in all form factors including physical and virtual appliances. Flexible capacity enables the highest application experience. FortiManager can be used to monitor and manage FortiGate appliances and is also available in different form factors including hardware, virtual, and SaaS.

View by:

Devices/VDOMs (Maximum)
30
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
100
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1000
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1200
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
4000
Sustained Log Rates
150
GB/Day
10
Zero Touch Provisioning
Yes
Third Party Automation
Yes
FMG-BASE to FMG-VM-UL-UG
Devices/VDOMs (Maximum)
10 to Unlimited
Sustained Log Rates
Hardware dependent
GB/Day
1-50
Zero Touch Provisioning
Yes
Third Party Automation
Yes
NGFW Throughput
850 Mbps
Threat Protection Throughput
700 Mbps
VPN Throughput
1 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
1.5 Gbps
Threat Protection Throughput
1.2 Gbps
VPN Throughput
1.5 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
2.5 Gbps
Threat Protection Throughput
2 Gbps
VPN Throughput
3 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
4.5 Gbps
Threat Protection Throughput
3.5 Gbps
VPN Throughput
5.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
NGFW Throughput
9 Gbps
Threat Protection Throughput
7 Gbps
VPN Throughput
6.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adapters), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 Kbytes HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.

Amazon Web Services (AWS), Microsoft Azure, Google, and Oracle support both bring-your-own-license (BYOL) and on-demand (pay-as-you-go). Please see the Marketplace listings for more information:

ROI Calculator

Fortinet Secure SD-WAN enables better application experience, simplifies WAN operations and reduces costs by migrating from expensive MPLS to broadband connectivity, while also integrating advanced security features.

Enter your data in the calculator below to learn how much you could save with Fortinet Secure SD-WAN.


Number of Sites
Enter Number of Office Locations.
Number of Hubs
Enter number of data centers.
Monthly MPLS Cost Per Site
Enter average monthly cost for each branch office's MPLS WAN link.
MPLS Bandwidth Requirement Per Site
Enter average bandwidth capacity in Mbps for each branch office's MPLS WAN link.
Percentile of MPLS Reduction
Enter the percentage of MPLS links that will be replaced by internet connections.
Monthly Internet Cost Per Site
Enter average monthly cost of internet for every branch and hub.
Internet Bandwidth Available Per Site
Enter the average bandwidth capacity that internet provides for branches and hubs.
Number of Years
Enter the number of years to calculate ROI for.
Secure SD-WAN
Select if NGFW security is a requirement.
Total Savings of over Years
Reduce Cost
Existing WAN MPLS Cost
Reduce Cost
SD-WAN Cost (CAPEX + OPEX)
Productivity Gain
Increase WAN Bandwidth Per Site
Analytics
Enable Better Security Posture
This calculation is for estimation purposes only and doesn't account for legacy router maintenance cost.

FortiCare Support & Professional Services

Fortinet is dedicated to helping our customers succeed, and every year FortiCare services help thousands of organizations get the most from their investments in Fortinet's products and services. To achieve this, FortiCare follows the life-cycle approach and provides unique services to help our customers in their success journeys.

Technical Support Services

Technical Support Services

Various per-device options are available for efficient operations. FortiCare Elite option provides a 15-minute response time for critical products.

Advanced Support

Advanced Support

Various per-account white glove services are available to reduce disruption and increase productivity with operational reviews by designated experts.

Professional Services

Professional Services

Our multi-vendor experts can design and deploy a complete best practice-based solution to help you meet your network or security objectives and adopt new capabilities.

RMA

RMA

Premium RMA options are available across the product family for expedited replacement of defective hardware to meet your availability objectives.

Resources

eBooks
Analyst Reports
Blogs
Checklists
Data Sheets
Infographic
Solution Briefs
Podcasts
Videos
Webinars
White Papers
Required Capabilities for Effective and Secure SD-WAN: The Network Leader's Guide
Required Capabilities for Effective and Secure SD-WAN: The Network Leader's Guide »

When considering SD-WAN solutions, there are three key requirements to look for to address these trends. An effective solution will offer integrated capabilities needed to enable efficient management and operations, excellent quality of experience (QoE) for both end-users and IT staff, and comprehensive security.

Why Advanced Security Is an Essential Element of an Effective SD-WAN Solution
Why Advanced Security Is an Essential Element of an Effective SD-WAN Solution »

A unified platform for SD-WAN can ensure consistent protection and simplify network infrastructure.

 What to Look for in a Secure  Solution for Multi-Cloud Environments
What to Look for in a Secure Solution for Multi-Cloud Environments »

Cloud adoption is becoming an increasingly large part of CIO budgets, to the point where some enterprise organizations are using many different cloud environments to build their IT infrastructure. A multi-cloud model involves the custom selection of multiple cloud services to serve specific functions.

Traditional Segmentation Fails in the Face of Today's Expanding Attack Surface
Traditional Segmentation Fails in the Face of Today's Expanding Attack Surface »

Understand why an expanding and fragmented attack surface is undermining the ability to maintain network performance, security, reliability, and availability.

How Service Providers Can Optimize Managed SD-WAN and SD-Branch Delivery and Management
How Service Providers Can Optimize Managed SD-WAN and SD-Branch Delivery and Management »

As distributed enterprises and small and midsize businesses (SMBs) embrace digital innovation (DI), legacy networking and security infrastructures often fail to deliver sufficient performance and protection. Software-defined wide-area networking (SD-WAN) and SD-Branch solutions can help organizations consolidate traditional infrastructure and facilitate adoption of the latest business-enabling technologies.

Accurate Analysis Matters: Fortinet Secure SD-WAN Cyber Threat Assessment Can Help
Accurate Analysis Matters: Fortinet Secure SD-WAN Cyber Threat Assessment Can Help »

Customers continue to shift to SD-WAN architectures so they can realize all the benefits that a WAN Edge solution can bring to their networks.

Build a Multi-Cloud Freeway With SD-WAN
Build a Multi-Cloud Freeway With SD-WAN »

Cloud connectivity is a chore. The big 3 public clouds in North America– AWS, Azure, and Google Cloud–each have their own networking constructs, quirks, and management interfaces.

Automotive Company Selects Fortinet to Provide Robust Security and Connectivity
Automotive Company Selects Fortinet to Provide Robust Security and Connectivity »

Distributed enterprises are increasingly shifting data, applications, and workflows to the cloud to meet evolving business requirements and achieve digital innovation goals. However, this can become problematic for branch locations that still rely on traditional MPLS connections to backhaul traffic through the corporate network.

Secure SD-WAN Addresses Manufacturing and Services Organization's Security Challenges
Secure SD-WAN Addresses Manufacturing and Services Organization's Security Challenges »

Organizational growth often leads to the rapid expansion of the workforce and the addition of branch offices. This, combined with the transition to a teleworker environment, can place significant demands on existing infrastructure in terms of bandwidth requirements, access control, and secure workflows and transactions that are not only multiplying but now originating from outside the traditional network.

Considerations for Managed Service Providers as SD-WAN Adoption Grows
Considerations for Managed Service Providers as SD-WAN Adoption Grows »

Over the past two years, SD-WAN has experienced one of the highest rates of adoption of any digital transformation technology as more organizations move their business-critical applications to the cloud.

Ecosystem

For a complete list of all the Alliance partners, go to www.fortinet.com/fabricready. Below is a list of current Fortinet Secure SD-WAN Alliance Partners:

Training & Certifications

NSE 7
Learn about common SD-WAN deployment scenarios using Fortinet Secure SD-WAN solutions. You will explore different situations, from a single enterprise site, to multiple data center environments, that will help you to enhance and troubleshoot SD-WAN deployments.

Free Product Demo

Welcome to the Fortinet Secure SD-WAN demo. This demo shows the dynamic WAN path controller, application SLA enforcement, intelligent application steering and traffic shaping capabilities of Fortinet Secure SD-WAN, plus SD-WAN management and orchestration capabilities of FortiManager and how it can help your organization achieve digital transformation, cloud adoption while lowering TCO.

Fortinet News

Gartner, Magic Quadrant for SD-WAN, Jonathan Forest, Naresh Singh, Andrew Lerner, Karen Brown, 15 September 2022.
Gartner, Critical Capabilities for SD-WAN, Jonathan Forest, Andrew Lerner, Naresh Singh, Evan Zeng, 19, September 2022.

GARTNER is a registered trademarks and service mark, and MAGIC QUADRANT is a registered trademark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.

This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Fortinet.

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

THE GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE BADGE IS A TRADEMARK AND SERVICE MARK OF GARTNER, INC. AND/OR ITS AFFILIATES AND IS USED HEREIN WITH PERMISSION. ALL RIGHTS RESERVED. GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE CONSTITUTE THE SUBJECTIVE OPINIONS OF INDIVIDUAL END-USER REVIEWS, RATINGS, AND DATA APPLIED AGAINST A DOCUMENTED METHODOLOGY; THEY NEITHER REPRESENT THE VIEWS OF, NOR CONSTITUTE AN ENDORSEMENT BY, GARTNER OR ITS AFFILIATES.