Back to overviewFortinet Firewall Solutions

Network perimeter & FortiGate engineering

Fortinet firewall design that protects every network edge.

Clear policy, inspected traffic, and one standard across every site.

How traffic is inspected

Six decisions between the internet and your network

  1. Untrusted traffic

    Internet, partner links, and remote users

  2. Policy check

    Identity, application, and zone rules

  3. SSL inspection

    Encrypted sessions decrypted where policy allows

  4. Threat prevention

    Intrusion prevention and antivirus

  5. Web & app control

    Category and application filtering

  6. Protected segments

    LAN, servers, DMZ, and cloud

Benefits and capabilities

One security fabric from branch to cloud

  • Next-generation firewalling

    Application-aware policy and intrusion prevention on FortiGate.

  • Secure SD-WAN

    Fast, protected branch connectivity on one platform.

  • Remote access

    VPN or zero trust access tied to your identity provider.

  • High availability

    Clustered firewalls with tested failover.

  • Central management

    Consistent policy with FortiManager and FortiAnalyzer.

Technical features

Specification

Platform
FortiGate appliances and FortiGate-VM on FortiOS
Security services
Application control, IPS, web filtering, SSL inspection
Connectivity
Secure SD-WAN, IPsec, and SSL VPN
Resilience
Active-passive and active-active HA clusters
Visibility
FortiAnalyzer logging and reporting
Hybrid cloud
FortiGate-VM and VPN integration with Microsoft Azure

Implementation approach

Four steps to a clean cutover

  1. 1

    Review

    Audit the rule base and topology.

  2. 2

    Design

    Define zones, HA, and logging.

  3. 3

    Cut over

    Migrate in phases, with a rollback path.

  4. 4

    Maintain

    Manage firmware and review policy.

Business use cases

When teams call us

Move rules across with clean-up rather than copying years of unused exceptions onto new hardware.

Give each site consistent security and resilient connectivity, managed from one place.

Extend network policy into the cloud with a protected path between on-premises sites and Azure.

Separate users, servers, and sensitive systems so one compromise cannot reach everything.

Firewall review

Find out what your firewall is really allowing

Get a clear view of rule base risks, gaps, and upgrade options.