Labs蒲公英sdwan官网

TheNetworkLeader'sGuidetoSecureSD-WANSecurity-drivenNetworkingDeliversComprehensiveWANEdgeExecutiveOverview3Introduction4WhichWaytoSD-WAN6FortinetDeliversBest-of-BreedSD-WAN7Security-drivenNetworking15InaVolatileSD-WANMarket,FortinetIstheSafeBet16TableofContentsExecutiveOverviewDigitalinnovation,suchascloudon-rampingofSoftware-as-a-Service(SaaS)applicationsandInfrastructure-as-a-Service(IaaS),ishelpingtopropelrevenuesandefficienciesfordistributedbusinesses.
However,theincreasedtrafficdemandsofthesetechnologiesgreatlyincreasethecostandperformancebottlenecksofmultiprotocollabelswitching(MPLS)connectivityovertraditionalwideareanetwork(WAN)infrastructures.
Mostnetworkengineeringandoperationsleaders,asaresult,arenowlookingtoreplacetheiroutdatedWANinfrastructureswithsomeformofsoftware-definedwideareanetworking(SD-WAN).
TensofthousandsofcustomersarechoosingFortinetSecureSD-WAN,whichdeliversbothnetworkingandsecuritycapabilitiesinaunifiedsolution.
Itsupportsapplicationperformance,consolidatedmanagement,andadvancedprotectionagainstthreats.
3IntroductionWithDigitalInnovationsplacingincreaseddemandsonbandwidthrequirementtodeliverbestuserexperience,SD-WANrequirementsarematuringbutmanysolutionsareincomplete.
Issueslikelimitedscalability,thelackofautomationtosimplifyoperations,andlacklustercloudon-rampandcloudandSaaSintegrationscanresultinapooruserexperiencethatcanunderminethevalueofanSD-WANdeployment.
Instead,SD-WANsolutionsneedtoprovidearobustsetofnetworkingandconnectivitytoolsthatcanmeetandadapttothedynamicnatureofdigitalinnovation,especiallyasorganizationsmovemoreaggressivelytothecloud,transitionfromregionaltoglobaldeployments,orexpandthenumberoftheirregionaloffices.
4FortinetdeliversSecureSD-WAN,poweredbytheindustry'sfirstSD-WANASICtoenablebetterapplicationexperience,higherperformance,andbettercostefficiency.
5WhichWaytoSD-WANSD-WANofferstheabilitytouseavailableWANservicesmoreeffectivelyandeconomically—givingusersacrossdistributedorganizationsthefreedomtobetterengagecustomers,optimizebusinessprocesses,andinnovate.
WANinnovationwithadditionalcarrierlinkscanbeleveragedtoprovideredundancy,load-balancingandoptimizationofapplciationtraffic.
ItalsomakesWANmanagementmorecost-effective,whichiswhySD-WANsolutionswillcontinuetobearobustgrowthmarketfortheforeseeablefuture.
Toanswerthisdemand,therehavebeenmanySD-WANsolutionsintroducedinthelastfewyears.
Butnotallofthemarecreatedequal.
SD-WANexpertsandindustryanalystssaythattheoptimalSD-WANforanenterprisedependsontheorganization'sapplicationperformancerequirements,fastercloud-on-ramptomulti-cloudaccessandsimplifiedoperationswithcentralizedmanagementtoreducecomplexity.
ItisalsowidelyrecommendedthatcompaniesuseanNGFWsolutionincombinationwithSD-WANtoaddresssecurityissues,asbranchesaredirectlyexposedtotheinternetviabroadbandconnectionswithSD-WAN.
Toaddressthesebusinessrequirements,organizationsneedacomprehensiveSD-WANoffering—FortinetSecureSD-WAN,theonlyonewithbuilt-insecurityandtheperformancecapabilitiesflexibletodeployatscaleacrossanysizeenterprise.
6FortinetDeliversBest-of-BreedSD-WANApplicationAwarenessforImprovedServiceLevelsFortinetSecureSD-WANispoweredbythenewSOC4application-specificintegratedcircuit(ASIC),whichprovidesfasterapplicationsteeringandunrivaledapplicationidentificationperformance).
Thisincludesdeepsecuresocketslayer(SSL)/transportlayersecurity(TLS)inspectionwiththelowestpossibleperformancedegradation.
EncryptioninspectioncapabilitiesalsoincludetheabilitytoinspectthepacketinorderfortheSD-WANsolutiontocorrectlyroutethetraffic.
Technically,SD-WANworksbyroutingapplicationsoverthemostefficientWANconnectionatanypointintime.
Toensureoptimalapplicationperformance,SD-WANsolutionsmustbeabletoidentifyabroadrangeofapplicationsandapplyroutingpoliciesataverygranularlevel.
Withoutthesecapabilities,SaaSapplications,video,andvoicecanslowandimpedeend-userproductivity.
Toaddresstheseissues,FortinetSecureSD-WANusesanapplicationcontroldatabasewiththesignaturesofmorethan5,000applications(plusregularupdatesfromFortiGuardLabsthreatintelligenceservices).
FortinetSecureSD-WANidentifiesandclassifiesapplications—evenencryptedcloudapplicationtraffic—fromtheveryfirstpacket.
FortinetSecureSD-WANreplacesseparateWANrouters,WANoptimization,andsecuritydevicessuchasfirewallsandsecurewebgateways(SWGs)withasingleFortinetNGFW.
Thisprovidesindustry-bestperformancewithcapabilitiesthatincludeapplicationawareness,automatedpathintelligence,andWANoverlaysupportforVPN.
FortinetSecureSD-WANdeliverssecurity-drivennetworkingforbranchnetworkswithoutstandingperformanceenabledbyfastapplicationidentificationandautomatedpathintelligence.
FortinetSecureSD-WANDelivers:§Optimalapplicationexperiencewithaccuratedetection§Effectivebusinesspoliciesbasedonapplicationsignature§ConstantApplicationdatabaseupdatesfromFortiGuardLabsresearch7FortinetSecureSD-WANaccuratelyrecognizesandoptimallyroutesover5,000applications.
8FortinetNGFWscanbesettorecognizeapplicationsbybusinesscriticality.
Business-criticalapplications(e.
g.
,Office365,Salesforce,SAP),generalproductivityapplications(e.
g.
,Dropbox),andsocialmedia(e.
g.
,Twitter,Instagram)canbegivendifferentroutingpriorities.
Uniquepoliciescanbeappliedatadeeperlevelforsub-applications(e.
g.
,WordorOneNotewithinOffice365).
Thisdeepandbroadapplication-levelvisibilityintotrafficpatternsandutilizationoffersabetterpositiontoallocateWANresourcesaccordingtobusinessneeds.
EffortlessWANEfficiencyFortinetSecureSD-WANgreatlysimplifiestheprocessoftransforminglegacyWANedgeinfrastructurestoprovideenhancedapplicationperformance,abetteruserexperience,andimprovedsecurity.
OnceWANpoliciesaresetbasedonapplicationcriticality,performancerequirements,securitypolicies,andotherconsiderations,theFortinetSecureSD-WANsolutiontakesoverfromthere.
FortinetNGFWsfeaturingtheSOC4ASICdeliver10timesfastersecurityperformancethanthecompetition.
1WhenitcomestoWANefficiencies,keycapabilitiesinFortinetSecureSD-WANinclude:Automatedpathintelligence.
Applicationawarenessenablesprioritizedapplicationroutingacrossnetworkbandwidthbasedonthespecificapplicationanduser.
ThenewSOC4ASICgivesFortinetSecureSD-WANthefastestapplicationsteeringintheindustry.
SD-WANservice-levelagreements(SLAs)areeasilydefinedbydynamicallyselectingthebestWANconnectionforthespecificbusinesscircumstances.
Forlow-tomedium-priorityapplications,organizationscanspecifythequalitycriteria,andtheFortiGatewillselectthecorrespondinglink.
Forhigh-priorityandbusiness-criticalapplications,organizationscandefinestrictSLAsbasedonacombinationofjitter,packetloss,andlatencymetrics.
Automaticfailover.
Multi-pathtechnologycanautomaticallyfailovertothebestavailablelinkwhentheprimaryWANpathdegrades.
ThisautomationisbuiltintotheFortinetNGFW,whichreducescomplexityforend-userswhileimprovingtheirexperienceandproductivity.
9WANpathremediation.
WANpathremediationutilizesforwarderrorcorrection(FEC)toovercomeadverseWANconditionssuchaspoorornoisylinks.
Thisenhancesdatareliabilityanddeliversabetteruserexperienceforapplicationslikevoiceandvideoservices.
FECaddserrorcorrectiondatatotheoutboundtraffic,allowingthereceivingendtorecoverfrompacketlossandothererrorsthatoccurduringtransmission.
Thisimprovesthequalityofreal-timeapplications.
Prioritizeapplications.
WithFortinetSecureSD-WAN'sabilitytodefineapplication-specificbusinesspolicies,thebestpossibleutilizationofbandwidthcanbeensuredbyaddingpreciseQoSprioritizationforcriticalapplications,whilerate-limitingnon-criticalapplicationsthatcanimpactperformanceandenduserexperience.
Tunnelbandwidthaggregation.
Forapplicationsthatrequiregreaterbandwidth,FortinetSecureSD-WANenablesper-packetloadbalancinganddeliverybycombiningtwooverlaytunnelstomaximizenetworkcapacity.
SimplifiedManagementandIndustry-BestTCONetworkengineeringandoperationsleadersareofteninaquandarywhenitcomestodeployingSD-WANedgedevicestotheirnumerousremotesitesandbranchoffices.
Truckrollsareexpensive,andtechnicalstaffisoftenlimited.
Ontheotherhand,shippingfullyconfigureddevicesisnotsecure.
Also,onceedgedevicesaredeployed,staffmustmanageboththeWANoptimizationfunctionsandsecurityfunctions,oftenfromtwodifferentinterfaces.
FortinetSecureSD-WANsolvesbothdeploymentandthemanagementproblemstoreducetotalcostofownership(TCO).
10FabricManagementCenterallowsforeffectivenetworkoperationsandagilenetworkmanagementforcustomersacrossSD-WANandsecurityprojects.
211Zero-touchdeployment.
FortinetSecureSD-WAN'ssimplifieddeploymentcapabilitiesallowenterprisestoshipunconfiguredFortinetNGFWappliancestoeachremotesite.
Whenpluggedin,theFortiGateautomaticallyconnectstotheFortiDeployserviceinFortiCloud.
Withinseconds,FortiDeployauthenticatestheremotedeviceandconnectsittoacentralFortiManagersystem.
Single-pane-of-glassmanagement.
FortinetFabricManagementCenterenablescentralizedvisibilityofalldeployedSecureSD-WAN-enabledFortinetNGFWsacrossthedistributedorganization.
FortinetsecureSD-WANorchestratorofferssimplifiedworkflowtodeployandupdatepolicieswithfeweasyclicks/steps.
SD-WANorchestratorautomaticallybuildsandmanagesfullmeshoverlaylinksforsecureconnectivitybetweensites.
Withguidedworkflows,automatedoverlaybringupandsimplifiedbusinesspoliciesSD-WANorchestratorreducestheITstaffhoursspentoninfrastructuredeploymentandchangesfrommonthstominutes.
FabricManagementCenteroffersadvancedtelemetryforapplicationvisibilityandnetworkperformancetoachievefasterresolutionandreducethenumberofITsupporttickets.
On-demandSD-WANreportsprovidesfurtherinsightintothreatlandscape,trustlevelandassetaccesswhicharemandatedforcompliancepurposes.
SD-WANreportingandanalytics.
EnhancedanalyticsforWANlinkavailability,performanceSLAandapplicationtrafficinruntime,andhistoricalstatsallowtheinfrastructureteamtotroubleshootandquicklyresolvenetworkissues.
FabricManagementCenteroffersadvancedtelemetryforapplicationvisibilityandnetworkperformancetoachievefasterresolutionandreduce12LowLatencyaccesstodistributedcloud.
ProvideLowLatencyCloudAccessforEasyCollaborationFortinetSecureSD-WANnotonlyprovidesinstantmulti-cloudaccessfortherapidadoptionofsharedapplicationssuchasOffice365.
Itsbuilt-insecurityaddsanotherlayerofsecureaccesstotheseapplications,whileprovidingalowlatencyconnectionthroughpublicinternetlinkssotheycanbecomepartofthetrustedandreliableWANinfrastructure.
Thisisespeciallycriticalasremoteworkersandtheirfamiliesuseadvanced,feature-richcloud-hostedapplicationsforvoiceandvideoconferencing.
Whiletheseapplicationsprovideenhancedvoiceandvideocapabilities,theyalsodemandmorebandwidthavailability.
Andinmostcases,thattrafficcanalsobeencrypted,whichputsevenmorepressureonthingsliketrafficinspection.
Withtheintelligencetodetectsub-applicationsandprovideencryptedapplicationswithSSLinspectioncapabilityatlinerates,FortinetSecureSD-WANensurestheseapplicationsaresteeredtothebestperformingWANlinktoprovideoptimalperformance.
thenumberofITsupporttickets.
On-demandSD-WANreportsprovidefurtherinsightintothethreatlandscape,trustlevel,andassetaccess,whicharemandatedforcompliancepurposes.
ThesefeaturesincludeSD-WANbandwidthmonitoringreportsanddatasets;service-levelagreement(SLA)loggingandhistorymonitoringviadatasets,charts,andreportspluscustomizableSLAalerting;andapplicationusagereportsanddashboards.
ItalsoprovidesadaptiveresponsehandlersforSD-WANeventsaswellaseventloggingandarchivingaroundSLAsacrossapplicationsandinterfaces.
13Foruserswhoneedsecurecommunicationsoverthepublicinternetlinks,VPNscanbesetupwithjustoneclick.
AllthissavestimeandsimplifiesSD-WANadministration(on-premisesorviathecloud),alleviatingpressureonleannetworkteams.
FortinetoffersoneoftheonlysolutionsthatcanmanageSD-WANnetworking,security,andaccesslayercontrolsfromthesamemanagementconsole.
TCO.
FortinetSecureSD-WANdeliversindustry-leadingTCOperMbps—alongwithzero-touchprovisioningofnewbranchesundersixminutes.
3ThemovetopublicbroadbandmeansthatexpensiveMPLSconnectionscanbereplacedwithmorecost-effectiveoptions.
WiththeFortinettransport-agnosticsolution,enterprisescanutilizetheentireavailablebandwidthbyusingtheconnectionsinactive-activemode.
14FortinetleadsthemarketwithSecureSD-WANinnovation,abletoscalefromhomeofficetobranchtodistributedcloud.
415Security-drivenNetworkingFortinetenablesbest-of-breed,certifiedSD-WANthatisbothhigh-performanceandprotected.
FortinetNGFWsfeaturingtheSOC4ASICdeliverthefastestSD-WANsecurityperformanceintheindustry.
InNSSLabs'2019"Software-DefinedWideAreaNetworkingTestReport,"Fortinetreceivedasecondstraight"Recommended"rating.
5Specifically,FortinetSecureSD-WANhasrobustSD-WANthreatprotection,includingLayer3throughLayer7securitycontrolsnotcommonlyfoundinotherSD-WAN-plus-firewallsolutions:§Completethreatprotection,includingfirewall,antivirus,intrusionpreventionsystem(IPS),andapplicationcontrol§High-throughputsecuresocketslayer(SSL)/transportlayersecurity(TLS)deep-packetencryptioninspectionwithminimalperformancedegradation,ensuringthatorganizationsdonotsacrificethroughputforcompletethreatprotection§Webfilteringtoenforceinternetsecuritywithoutrequiringaseparatesecurewebgateway(SWG)device§HighWANperformanceforcloudapplications,featuringexceptionalVPNoverlayperformanceforsuperioruserexperienceandlowlatency6SecureSD-WAN-enabledFortinetNGFWsalsomonitorfirewallrulesandpoliciesandhighlightbestpracticestoimprovetheorganization'soverallsecurityposture.
Thishelpstosimplifycompliancewithsecuritystandardsaswellasprivacylawsandindustryregulations.
Automatedauditingandreportingworkflowssavestaffhourswhilereducingtheriskofomissionsanderrors.
EnablingtheSD-BranchManyenterprisebranchesaredecidingtosimultaneouslyreplaceboththeirWANandLANdevicesinfavorofasolutionwithdeeperintegrationandsimplifiedbranchoperationsmanagement.
UsingseparateWANandLANinfrastructuresincreasesbranchcomplexity;therearemoredevicestodeployandupdatewithmultiplemanagementconsoles.
Italsoreducesvisibilityandcontrolofoperationswhileincreasingtheopportunitiesforsecuritygapsthathackerscanexploit.
Tosolvethesechallenges,FortinetSecureSD-WANincludesanacceleratedsecurityextensiontotheaccesslayerthatenablesSD-Branchtransformation.
16InaVolatileSD-WANMarket,FortinetIstheSafeBetAscloud-basedapplicationsandtoolslikevoiceandvideobecomeincreasinglycriticaltodistributedbusinesses,FortinetSecureSD-WANcanhelporganizationsembracethebenefitsofdigitalinnovationwithoutbottleneckingapplicationperformance,impactingend-userproductivity,orputtingdataatrisk.
FortinetSecureSD-WANisscalable,helpingorganizationsconfidentlysupportmoreremotesites,morebandwidth-sensitive,business-criticalapplications,morecloudservices,andwhateverelsethebranchnetworkrequires.
FortinetSecureSD-WANhasbeenadoptedworldwideinwide-rangingindustries—fromfinance,toretail,tomanufacturing,tocustomerservice.
Whethertheyneedtosupportafewhundredmobileendpointsortensofthousandsofbranchoffices,FortinetSecureSD-WANcustomersareeachachievingtheirownoptimalmixofbest-of-breedsecurityandSD-WANfunctionality.
171"FortinetReceivesSecondConsecutiveNSSLabsRecommendedRatinginSD-WANGroupTestReport,"Fortinet,June19,2019.
2"FortinetLeadstheMarketwithSecureSD-WANInnovation.
"Fortinet,May2020.
3"SD-WANInfrastructureMarketPosiedtoReach$5.
25Billionin2023",July2019.
4"LearnmoreaboutaFortune500customerthatachieveda65%costreduction,"Fortinet,April24,2020.
5Ibid.
18May15,202012:19PMCopyright2019Fortinet,Inc.
Allrightsreserved.
Fortinet,FortiGate,FortiCareandFortiGuard,andcertainothermarksareregisteredtrademarksofFortinet,Inc.
,andotherFortinetnameshereinmayalsoberegisteredand/orcommonlawtrademarksofFortinet.
Allotherproductorcompanynamesmaybetrademarksoftheirrespectiveowners.
Performanceandothermetricscontainedhereinwereattainedininternallabtestsunderidealconditions,andactualperformanceandotherresultsmayvary.
Networkvariables,differentnetworkenvironmentsandotherconditionsmayaffectperformanceresults.
NothinghereinrepresentsanybindingcommitmentbyFortinet,andFortinetdisclaimsallwarranties,whetherexpressorimplied,excepttotheextentFortinetentersabindingwrittencontract,signedbyFortinet'sGeneralCounsel,withapurchaserthatexpresslywarrantsthattheidentifiedproductwillperformaccordingtocertainexpressly-identifiedperformancemetricsand,insuchevent,onlythespecificperformancemetricsexpresslyidentifiedinsuchbindingwrittencontractshallbebindingonFortinet.
Forabsoluteclarity,anysuchwarrantywillbelimitedtoperformanceinthesameidealconditionsasinFortinet'sinternallabtests.
Fortinetdisclaimsinfullanycovenants,representations,andguaranteespursuanthereto,whetherexpressorimplied.
Fortinetreservestherighttochange,modify,transfer,orotherwiserevisethispublicationwithoutnotice,andthemostcurrentversionofthepublicationshallbeapplicable.
Fortinetdisclaimsinfullanycovenants,representations,andguaranteespursuanthereto,whetherexpressorimplied.
Fortinetreservestherighttochange,modify,transfer,orotherwiserevisethispublicationwithoutnotice,andthemostcurrentversionofthepublicationshallbeapplicable.
eb-network-leaders-guide-to-secure-sd-wan_051520_1145372656-0-0-ENwww.
fortinet.
com