Fortinet Secure SD-WAN
Simplified Operations
Fortinet’s Secure SD-WAN provides an optimal application user experience and delivers the lowest TCO of any SD-WAN solution.
Many multi-location businesses find that their traditional wide area networks (WANs) are unable to scale to meet the bandwidth requirements of digital innovations (DI) such as cloud on-ramping, Unified Communications (UC), and video conferencing and collaboration tools.
These must-have technologies greatly increase traffic demands on the average enterprise’s IT architecture, causing performance bottlenecks as well as increased operating expenses (OpEx) since many organizations rely on multiprotocol label switching (MPLS) connectivity.
Once the secure cutting edge-connectivity option of choice, we find MPLS cannot scale as quickly and affordably as SD-WAN. As a replacement for the traditional WAN, network engineering and operations teams are moving to software-defined wide-area networks (SD-WAN).
As an Expert-level partner, the highest-level partner in the Fortinet Engage Partner Program, AireSpring is recognized as a top-tier Managed Security Services Provider (MSSP) with a broad range of cybersecurity expertise and the ability to best meet customer needs with Fortinet’s industry-leading solutions.
But many SD-WAN solutions lack robust security, which leads to greater risk exposure and a higher total cost of ownership (TCO). Fortinet’s Secure SD-WAN consolidates robust networking, routing, and security capabilities into a single SD-WAN appliance.
Fortinet Secure SD-WAN enables organizations to solve the secure communications problem for distributed locations quickly and easily. It is easy to manage, agile, reliable, flexible, and ultimately secure.
Fortinet offers a custom-designed ASIC chip to provide the fastest application identification and steering in the industry, while providing connectivity and advanced security capabilities 10 times faster than other firewall providers. Fortinet is the market-share leader in providing security solutions to multi-location enterprises.
Simplifies Complex Operations in the Enterprise
Fortinet Secure SD-WAN simplifies operations by consolidating various point products in a single solution for zero-touch installation with automated provisioning. This reduces risk, improves operations, and tightens security. Fortinet SD-Branch also decreases total cost of ownership (TCO) with one console instead of many, eliminating silos, and simplifying management for wired LAN/WLAN, SD-WAN, and security via a single pane of glass.
Fortinet Provides Fully Integrated Security.
Fortinet Secure SD-WAN helps Enterprise IT meet the challenges of higher complexity, rising costs and increasing cybersecurity risks. The solution delivers a consistent and agile network and security infrastructure that keeps up with today’s dynamic cloud environment across all the diverse clouds commonly used by enterprises today. With application-aware traffic steering and high-speed encryption, the solution leverages high bandwidth internet links to optimize spending on expensive direct connections.
Enterprises can get robust security enforcement, ensure compliance, and operate a seamless network with uniform policies while providing end-users a reliable and superior application experience.
KEY FEATURES & FUNCTIONALITies
Benefits
AireSpring White Glove SD-WAN Professional Services
- Includes implementation design and engineering
- We will design (pre-sales), deploy (provisioning), and support (customer service/NOC) your SD-WAN solution at no additional cost. Plus, we provide branch deployment support via pre-configuration of SD-WAN edge
boxes.
Free Network Monitoring 24/7/365.
- 24/7/365 real-time monitoring by the AireSpring Network Operations Center (NOC), using AireNMS.
- Proactive ticket initiation, management, and resolution by AireSpring NOC in the event of a network alert.
Free Third Party Circuit Support
- AireSpring will proactively open repair tickets on behalf of customers for their non-AireSpring, internet-only circuits. Not offered by many vendors. Only available at a premium cost by the few that do.
Free access to FortiPortal
- Provides customers with deep insight into their network environment as well as configuration capabilities.
WAN Failover
- Every appliance supports multiple WAN uplinks with automatic failover for protection against connection outages.
- Optional WAN warm spare failover ensures the integrity of service at the appliance level. In the event an appliance goes offline, a secondary device will automatically take over.
3G/4G Failover
-
Traffic is automatically redirected to a 3G/4G interface in the event of a connectivity failure. Requires existing or new 3G/4G plan (sold separately).
Advanced Firewall and Unified Threat Management (UTM) (Optional)
- Next-Generation Managed Firewall with UTM features such as Intrusion Prevention System (IPS), web filtering, anti-virus, anti-spam, application control.
- Advanced Malware Protection (AMP) – provides malware detection for latest emerging threats, eliminates threats by stripping active content from files in real time, protects against latest botnets, and protects against the latest threats targeting mobile platforms.
- SSL deep inspection unlocks encrypted sessions, sees into encrypted packets, finds threats, and blocks them
- Control outbound and inter-network traffic using firewall rules.
Maximum WAN Links
- The maximum number of WAN uplinks supported. (4+ depending on model).
IPsec Virtual Private Networking (VPN) (Optional)
- Provides the ability to quickly interconnect locations via an encrypted connection over public networks.
Traffic Shaping
- Provides the ability to prioritize network traffic so that heavy-use applications or those requiring a significant amount of bandwidth to operate do not impact other users on the network.
Per Flow Load Balancing
- Rule-based per flow load balancing. Packets of the same flow go over the same link.
Priority Routing
- Routes calls and other priority real-time application traffic over cleanest WAN connection to eliminate dropped calls, choppy sound quality, and echoes.
Border Gateway Protocol (BGP) and Routing Support
- Full routing support: BGP, Open Shortest Path First (OSPF), and multicast.
Secure and Private Direct Connection to Most Major Cloud Providers (Optional)
- Connect privately and securely with full QoS to dozens of cloud providers, hundreds of datacenter providers, and thousands of SaaS providers.
DDoS Mitigation
- Free DDoS Mitigation included with 3-year SD-WAN contract and AireSpring Gateway Access. DDoS Mitigation only provided on in-tunnel internet traffic traversing AireSpring Gateway Access.
Access to AireSpring Gateway
- Able to connect to an AireSpring Gateway.
Secure Communications for Multi-Location Businesses