Fortinet Named a 2018 Gartner Peer Insights Customers' Choice for Enterprise Network Firewall

Fortinet is proud to announce that we have been named a 2018 Gartner Peer Insights Customers’ Choice for Enterprise Network Firewall. The Gartner Peer Insights Customers’ Choice is based on the ranking of vendors by verified end-user professionals, taking into account both the number of end-user reviews and the vendor’s overall user ratings.

We take special pride in this distinction as it is based entirely on feedback from customers. 707* Fortinet customers of all sizes  submitted reviews from across the spectrum of industries, including healthcare, education, government, and financial services. We believe that this recognition reflects our ongoing commitment to providing the highest quality security solutions and services possible.

While the Gartner Peer Insights Customers’ Choice distinction is based solely on end user reviews, Gartner analysts have also recognized Fortinet in six Gartner Magic Quadrants since June 2017, including, Magic Quadrant for Enterprise Network Firewalls, Magic Quadrant for Endpoint Protection Platforms, Magic Quadrant for Security Information and Event Management, Magic Quadrant for Unified Threat Management (SMB Multifunction Firewalls), Magic Quadrant for Web Application Firewalls, and Magic Quadrant for Wired & Wireless LAN Access Infrastructure**.

Here is a small sample of the comments and feedback posted by Fortinet customers on the Gartner Peer Insights website:

Financial Services

"Fortinet Provided An End-To-End Security Solution For Our Global Financial Business," CISO, $3-10B company

“Fortinet has been a partner in building out our security strategy. They have become part of the team and are viewed as a resource rather than a vendor. The technology is innovative, efficient, and provides an end-to-end solution that has advanced our security program tremendously in a very short time.”

"Our Implementation Went Flawlessly And Fortinet's Sales Team Was Available The Whole Time," Infrastructure and Operations Professional, $3-10B company

“Sales reps were responsive and knowledgeable. Sales engineers took a personal interest in making sure our onboarding went smoothly. We have open communication and solid relationships with our sales rep and the sales engineer. Our sales rep always intercedes on our behalf when we have any issues.”

"Great Product, Great Price!!!," CTO, 10-30B USD company

“Fortinet has been a great partner to work with. Wish I had known about them before.”

Government

"The Implementation Was Successful And Smooth," Technology Infrastructure Engineer

“The administration interface is very intuitive, easy to manage, it is possible to configure in a very easy way each functionality incorporated by the equipment, [including] effective control of IPS functionalities, antivirus, web filtering and application control.”

Fortinet Significantly Improves Security And Manageability At A Lower Cost," Information Security Senior Analyst

“Our experience with Fortinet has always been very positive. In recent years, they have stepped up their game with the market offerings in terms of product functionality and offerings. Sales and pre-sales support have been great. Our most recent purchases and upgrades were part of a major focus on Information Security and the FortiGate UTM features were a huge bonus. An all in one solution with the FortiGate allowed us to remove legacy products that were being maintained for the sake of "not changing." The cost savings were tremendous for our client.”

Healthcare

"Product Had Key Features Needed To Support Our AWS Virtual Private Cloud Design," Enterprise Architecture and Technology Innovation Professional

“The FortiGate firewall has specific features which were needed to support our [AWS] cloud design. We were already a Fortinet customer prior to developing our virtual private cloud architecture, so it made sense to evaluate the FortiGate firewall for its compatibility with our proposed network design. Within the last year, we have been assigned a new Fortinet account team, who been very responsive to our questions and concerns regarding new deployments and upgrades for both on premise and AWS cloud deployments, so we're happy about that.”

“Excellent, Easy To Manage Firewalls," Director IT

“Fortigate Firewalls have been reliable and are constantly being improved via software updates. I would have implemented more of the offered features. For example, use the Fortigate end-point software rather than using a separate vendor.”

Education

"Excellent Product With Innovative Features," CTO

“The implementation was on time, with the complete accomplishment of our objectives and in the costs. The product is excellent, high performance, and completely transparent for the users and applications.”

"Fortinet products ease the burden of complicated routing configuration and changes," Vice President, IT

“Fortinet support is knowledgeable, reliable, and an extension of our team. Our Fortinet Account Manager is constantly in touch with us about roadmaps and any other changes. The Fortinet Engineer assigned to our account is always available to our in-house system engineers for a quick conversation or a site visit if necessary.”

We’re proud to have been able to play such a valued role in helping protect the valuable assets of these and so many other organizations, and are honored to be recognized as a 2018 Gartner Peer Insights Customers’ Choice for Enterprise Network Firewall. We strongly encourage IT professionals in any industry to consult Gartner Peer Insights before making a decision on a solution to help take the guesswork out of the selection and procurement process.

Learn more about Fortinet solutions. 

*Reviews as of Feb 7, 2018.

** Magic Quadrant for Enterprise Network Firewalls, July 10, 2017

Magic Quadrant for Endpoint Protection Platforms, January 24, 2018

Magic Quadrant for the Wired and Wireless LAN Access Infrastructure, October 17, 2017

Magic Quadrant for Unified Threat Management (SMB Multifunction Firewalls), June 20, 2017

Magic Quadrant for Web Application Firewalls, August 7, 2017

Magic Quadrant for Security Information and Event Management, December 4, 2017

 

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Gartner Peer Insights reviews constitute the subjective opinions of individual end-users based on their own experiences, and do not represent the views of Gartner or its affiliates.

The Gartner Peer Insights Customers’ Choice Logo is a trademark and service mark of Gartner, Inc., and/or its affiliates, and is used herein with permission. All rights reserved. Gartner Peer Insights Customers’ Choice distinctions are determined by the subjective opinions of individual end-user customers based on their own experiences, the number of published reviews on Gartner Peer Insights and overall ratings for a given vendor in the market, as further described here and are not intended in any way to represent the views of Gartner or its affiliates.

by  Trish Borrmann  |  Feb 12, 2018  |  Filed in: Business and Technology, Industry Trends

資料來源:
https://blog.fortinet.com/2018/02/12/fortinet-named-a-2018-gartner-peer-insights-customers-choice-for-enterprise-network-firewall

Innovation Insights: The Industry’s Fastest 100 Gbps+ Next-Generation Firewall Appliance

The impact of digital transformation on the NGFW

Digital transformation is changing the way enterprises access, process, and share information. The convergence of IoT, mobility, and cloud – combined with a growing reliance on SaaS applications – are driving new digital business models. This has resulted in massively increased volumes of information and transactions extending out to the cloud that have also been encrypted to ensure privacy.   

This combination of increasing volume, performance, and processing requirements places new stringent demands on the next generation firewalls deployed at the enterprise edge. Threat protection, SSL inspection, and capacity are now table stakes for any high end NGFW looking to protect the enterprise. 

The question that IT teams are wrestling with is, what constitutes adequate security performance levels so that we can be confident that we can conduct business at the speed and volume the market requires, without compromising the security that user and regulatory bodies demand?   

The requirement is straightforward: all traffic (clear and encrypted) traversing the network needs to be inspected, and security controls need to be applied, without degrading network performance. However, most NGFW solutions on the market today simply aren’t up to the task.

Providing full threat protection (TP) without slowing down the network can only be accomplished if that protection is applied at rates that match or exceed network speed. With many WAN speeds approaching or even exceeding 40G to 100G, NGFWs deployed at the edge must be able to deliver threat protection at near wire rates. And unlike the solutions being provided by many vendors, organizations can’t afford to disable essential TP functions or SSL decryption in order to meet performance requirements. Threat Protection throughput must be measured with firewall, application control, intrusion prevention (IPS), and antimalware/antivirus functions enabled using an enterprise traffic mix. And SSL inspection functions must be fully enabled to secure a real world mix of enterprise traffic.  

It’s about a lot more than just speed

Capacity is another critical requirement. Most NGFW appliances today top out session capacity at a few million sessions.  With the increasing volume of traffic and devices connecting to the network, maintaining high session capacity to accommodate peak connectivity is important. 

With nearly 80% all web traffic now encrypted, SSL inspection is one of the most important capabilities for a NGFW. It’s really the only way to reduce the risk of a data breach resulting from advanced threats hiding in SSL traffic. To do this, NGFWs must perform deep packet inspection of SSL traffic and apply security controls without compromising network performance. The challenge, however, is that SSL inspection introduces significant overhead and latency that can seriously impact network performance.

For this reason, many NGFW vendors do not even publish their SSL inspection numbers. Claiming high levels of threat protection throughput that drops to its knees when SSL inspection is turned on is not acceptable, especially when the majority of the traffic is encrypted. For example, a claim of 30G of Threat Protection with an SSL inspection throughput of 6.5 Gbps really means you are only getting 6.5 Gbps of security performance for the majority of your network traffic, which is woefully inadequate.

Introducing the world’s first NGFW appliance built to meet the true demands of today’s digital enterprises

Given the new realities of today’s networks (extension to the cloud, more traffic volume, and growing numbers of connected users, devices, and IoT), NGFWs placed at the enterprise edge are under pressure to perform at capacity, resiliency, and connectivity levels that have only ever been seen before in data center firewalls. But because IT expertise has been spread so thin, edge solutions also require ease of deployment, use, and management. Which means that a traditional chassis is not an optimal choice here.

What’s needed is the performance, scale, and capacity of a high-performance chassis in a small, efficient, and highly scalable appliance footprint. Which is why Fortinet has just announced a new class of ultra-high performance security appliances – the 6000F-series NGFWs that have been engineered to meet the real demands of digital business by completely resetting the bar for threat protection (TP) throughput, SSL inspection, connectivity, and capacity.

The 6500F, for example, ensures that customers can confidently inspect and secure all their traffic without the network slowing down by delivering:

• 170 million concurrent sessions
• 130 Gbps of SSL inspection
• 100 Gbps of threat protection performance
• A streamlined 3U form factor
• All at a price point that no one in the industry can match

A look inside the Fortinet 6000F-series hardware architecture

With an industry first for a security appliance, Fortinet’s NGFW hardware architecture leverages a new, compact internal processing card technology that dramatically scales performance while reducing size, allowing them to fit within an appliance form factor. These new processing cards are miniaturized versions of the blades typically used in cutting-edge modular security chassis.

This new design provides dedicated processing power in order to accelerate each step in the inspection and protection process. To accomplish this, each processing card combines multiple 12-core CPUs with Fortinet’s proprietary Security Processing Units (SPUs), Content Processors (CP9), and Network Processors (NP6) into a single, discrete unit. And the FortiGate 6000F series devices are able to support up to ten of these discrete processing cards in a single 3RU-sized appliance.

To accelerate the power and performance of these appliances even further, these processing cards are managed using custom load balancing Distribution Processors (DP3) that intelligently assign and coordinate tasks between the different processing cards. This innovative design enables high resilience, session scale, and advanced security capabilities – benefits traditionally only available in a chassis-based configuration – at breakthrough speeds never before seen in a compact appliance form-factor.

Advanced security capabilities and performance: The 6000F series are the industry’s fastest NGFW appliances, delivering advanced threat protection and SSL inspection performance to handle the massive volumes of traffic at the network edge.

Comparison of the FortiGate 6300F with the PAN 5260 appliance

High Speed and Flexible Interfaces: High density SFP28 and QSFP28 interfaces support 10G, 40G, and 100G data rates, as well the new 25G data rate standard, to provide high speed connectivity and increased flexibility as enterprises migrate to higher density designs.

With this latest NGFW innovation in place, Fortinet has once again widened the performance and security gap between our closest competitors and us. And our ongoing commitment to an engineering-driven architectural approach to security ensures that this gap will only continue to widen, ensuring that customers always have access to the cutting edge security tools they need to enable their continued success in the new digital economy.

FortiGate’s 6000F series Next-Generation Firewalls will be available on March 30th, 2018.

Additional Resources

Read the FortiGate 6000F news release or visit the FortiGate 6000F series web page to learn more about the FortiGate 6500F and 6300F Next-Generation Firewalls.

For more information, download our paper and learn about the top threats that enterprise security leaders are being forced to address and the security approaches to evalutate to protect against them.

by John Maddison  |  Feb 05, 2018  |  Filed in: Business and Technology

資料來源:
https://blog.fortinet.com/2018/02/05/innovation-insights-fortinet-fortigate-6000f
 

New FortiGate 300E and 500E, the Next Era of NGFW Has Arrived

The sheer amount of data being communicated and processed around the world continues to grow at a staggering rate. The Internet stands as the primary driver of the global data explosion. But newer technologies that ride on the Internet, such as cloud computing, X-as-a-Service offerings, and Internet of Things (IoT), means that more sensitive and business critical information than ever is in motion within and beyond the traditional boundaries of individual enterprise IT infrastructures.

Security Challenges of SSL Encryption

As a result of this dynamic expansion and reach of information, encrypted Secure Sockets Layer (SSL) communications has become the most-used way for enterprises to protect their data from unauthorized exposure. In fact, at this writing, SSL encrypted communications accounts for 60% of data flowing in and among enterprise IT infrastructures. Unfortunately, as the percentage of businesses and government agencies adopting SSL encryption grows, the more adversaries also use it for infiltration and exfiltration—sneaking in malware, and tunneling stolen and confidential data out—of enterprise infrastructures and networks.

The standard remedy to prevent the adversarial abuse of SSL communications is to inspect SSL encrypted packets for exploits, malware, and purloined data. Currently, up 10% of mid- and large-scale enterprises practice some degree of encrypted data packet inspection as a security measure, with this number expected to rise to at least 50% by the early 2020s. While packet inspection has become a mainstream security technology, Next Generation Firewalls and other devices performing this function can a) be overwhelmed by the amount of traffic they need to handle, b) become bottlenecks due to the resource-intensive process of inspecting encrypted traffic that degrades overall infrastructure performance, and c) add yet more complexity and expense to the IT mission.

End-to-End Infrastructure Visibility Beyond Applications

The ever-expanding attack surface also makes it increasingly difficult for organizations to maintain transparent visibility and control across all of their assets. The Internet of Things (IoT), which is difficult to defend and protect, complicates an already difficult undertaking internally—particularly considering the exponential growth rates that are projected for them. At the same time, cloud adoption, coupled with the fact that multi-cloud services are quickly becoming commonplace, further extends the potential attack surface outside of the traditional network perimeter.

As organizations move to address these new security challenges, end-to-end, transparent visibility and control emerges as both a real necessity and a real problem. They must be able to monitor security across all of their assets—both those internal and those external—in real time, while also managing security policies and controls from a single pane of glass. Silo-based security infrastructures that leverage isolated point products or platforms lack the capabilities an integrated, automated security fabric offers.

New FortiGate 300E and 500E – Redefines Next Generation Firewalls

Organizations require a robust and extensible Next Generation Firewall (NGFW) solution designed to address this new security landscape. Fortinet is tackling these challenges head on with the release of the FortiGate 300E and 500E NGFW appliances.

Some of the specific security requirements met by the FortiGate 300E and 500E appliances include:

Fast and Agile

The FortiGate 300E and 500E firewalls are incredibly fast. The secret is Fortinet’s purpose-built CP9 content processor and parallel path processing that significantly outmatch competing products that are based on off-the-shelf components, to deliver best-in-class threat protection and SSL inspection performance. It also includes innovative collaborative learning capabilities, giving it the ability to share information and workloads with other security devices and systems in the same network, while also remaining visible and manageable through a single pane-of-glass for communications and control. This enables organizations to detect and block malevolent content before it can attach itself to vulnerable assets.

Security Efficacy

Advanced threat protection is critical in stopping zero-day exploits. FortiGuard Labs has repeatedly demonstrated its thought leadership in this critical area, and continues to excel in third-party tests (see below). In addition, with Cloud FortiSandbox seamlessly integrated into the FortiGate 300E and 500 firewalls, organizations have the ability to activate sandboxing to quickly and easily detect unknown threats.

SD-WAN Ready

The FortiGate 300E and 500E appliances deliver capabilities that meet new requirements driven by the transformation of branch network traffic and Software-as-a-Service (SaaS) application utilization. Specifically, they include key networking features such as an efficient wide area network (WAN) Path Controller and a dynamic SaaS-based database that enables secure SD-WAN.

Price-Performance Advantages

Price-performance is an important requirement for nearly every organization today. This means that a solution must deliver maximum threat protection performance, reliability, and manageability at the lowest possible total cost of ownership (TCO). To this end, the FortiGate 500E delivers 10GbE connectivity with 4.7 Gbps threat protection and 6.8 Gbps SSL inspection throughput. Pound for pound, this is the best price-performance capability on the market today.

FortiGate 300E and FortiGate 500E, Part of the Fortinet Security Fabric

Like all of Fortinet’s solutions, the FortiGate 300E and 500E seamlessly integrate into the Fortinet Security Fabric, making it extremely easy for organizations to integrate them into their larger security framework environments. They also share data and balance workloads to maximize seamlessness and timeliness when defending infrastructures from attack. Importantly, this means that user of Fortinet solutions can extend comprehensive, uniform controls across any environment.

Don’t Take Our Word for It

Gartner placed Fortinet in the “Leaders” Quadrant in its 2017 Enterprise Firewall Magic Quadrant report. Read FortiGate Enterprise Network Firewall customer reviews. And Fortinet’s FortiGate is one of the only vendors to receive “Recommended” ratings from NSS Labs NGFW group test for four consecutive years.

What makes the FortiGate 300E and FortiGate 500E firewalls winners? The real measure of their success is in the eyes – and experience – of their customers and end users. To that end, in a future post I will report more from the front lines of customer experience with the FortiGate 500E and FortiGate 300E products. In the meantime, I recommend a visit to the Fortinet NGFW product pages for a full overview of these and other members of the FortiGate product family. You can also download the FortiGate 300E and FortiGate 500E data sheets from these embedded links.

 

by Nirav Shah  |  Nov 13, 2017  |  Filed in: Business and Technology

資料來源:
https://blog.fortinet.com/2017/11/13/new-fortigate-300e-and-500e-the-next-era-of-ngfw-has-arrived

Fortinet’s New FortiGate 6040E Enterprise Firewall Delivers Unparalleled Next Generation Firewall Performance to Large Enterprises

SUNNYVALE, Calif., April 25, 2016 –
Michael Xie, founder, president and chief technology officer of Fortinet
“Enterprises are being disproportionally impacted as the adoption of cloud services and growth in remote access to corporate networks have eroded the network perimeter and steadily increased the demands on enterprise infrastructures. Facing the limitations of traditional security solutions, only the performance advantages of Fortinet’s next-generation processors powering our new FortiGate 6000 series enterprise firewalls will give large enterprises the freedom to deploy the advanced security solutions necessary to protect their organizations today and into the future.”
News Summary: 
Fortinet® (NASDAQ: FTNT), the global leader in high-performance cybersecurity solutions, today announced the expansion of its Security Fabric with introduction of the FortiGate 6040E enterprise firewall. First in Fortinet’s new 6000 series of ultra-high throughput enterprise firewalls, the FortiGate 6040E delivers the unprecedented next-generation firewall performance, effortless scale, and superior security so large enterprises don’t have to compromise between security features or network speed disruption.

• Fortinet’s new FortiGate 6040E enterprise next-generation firewall is designed to secure the vast amounts of mobile and cloud traffic for the largest of enterprises.
• Fortinet bolsters its Security Fabric with its new FortiASIC CP9 next-generation Content Processors. CP9 accelerates the inspection of computationally intensive intrusion prevention
• New FortiGate 2000E and 2500E enterprise firewalls deliver CP9 ASIC advantages to enterprise edge and internal segments.

Security Solutions Have Become the Gateway to the Cloud
Adoption of cloud services and the ease of remote access to network assets have created a perfect storm for large enterprises, drastically increasing external demands on IT networks and exponentially expanding the attack surface. As a result, the enterprise next-generation firewall has become the de facto gateway to the cloud.
Compounding on these challenges, security leaders must overcome the limitations of the technologies used in most next-generation firewall solutions available today – forcing them to choose between enabling security features or preserving the performance of their networks.
FortiASIC Hardware Acceleration Eliminates Security Compromise 
Overcoming the limitations of traditional next-generation firewall solutions, the FortiGate 6040E is built on an innovative new processing architecture, utilizing FortiASIC content and network processors to offload and accelerate the security performance of its dual CPUs. Integrating advanced security processing, intelligent controls, and high speed networking enable the FortiGate 6040E to deliver unprecedented security and network performance in a deceptively compact form-factor.
FortiGate 6040E Technical Highlights:

• 320Gbps enterprise firewall throughput.
• 80Gbps throughput with all next-generation firewall features enabled.
• FortiASIC CP9 brings enhanced SSL decryption performance to close gaps in the attack surface.
• Intelligent networking, security, processing, and management capabilities are all efficiently integrated within a small form-factor chassis.
• Six different interface configuration options tailored to match individual customer needs:

 

FortiGate-6040E	FW / NGFW Throughput	10GbE Interface	40GbE Interface	100GbE Interface
Option 1	320 Gbps / 80 Gbps	64 x 10GbE	-	-
Option 2	320 Gbps / 80 Gbps	-	16 x 40GbE	-
Option 3	320 Gbps / 80 Gbps	-	-	8 x 100GbE
Option 4	320 Gbps / 80 Gbps	32 x 10GbE	8 x 40GbE	-
Option 5	320 Gbps / 80 Gbps	32 x 10GbE	-	4 x 100GbE
Option 6	320 Gbps / 80 Gbps	-	8 x 40GbE	4 x 100GbE

Fortinet’s new FortiASIC CP9 content processor delivers the performance needed to secure the massive traffic demands of the largest enterprises and enables support for various firewall deployment modes including next-generation and advanced internal segmentation. This frees businesses to deploy security wherever it is needed without impacting network functionality. This enables the superior defenses of Fortinet’s innovative Security Fabric.
Fortinet also announced the launch of two new FortiGate 2000E series enterprise firewalls, bringing the enhanced capabilities of FortiASIC CP9 to enterprises requiring higher next-generation firewalling and increased SSL inspection capabilities. The new FortiGate 2000E and 2500E also leverage CP9 deliver increased VPN capabilities, deep content inspection and advanced application controls.
Supporting Quotes
Mobility, the cloud and IoT has raised the complexity of security to new heights. The number of advanced and targeted threats has rendered traditional approaches to security ineffective as most point products can no longer keep up. The 2015 ZK Research Security Survey revealed that 43% of respondents admit to turning features off in security appliances to improve performance. A unified security fabric that can provide the necessary layers of security without additional complexity or slowing down the network has become vital. It's critical that security professionals look at how security appliances are being built. A study by ZK Research conducted earlier this year found that ASIC based products consistently have an 18 to 24 month lead on price/performance over ones built on off the shelf silicon.
- Zeus Kerravala, principle analyst, ZK Research
Availability
The FortiGate 6040E, 2000E, and 2500E will all be available in Q2 2016. Please contact your authorized Fortinet channel partner for pricing and details.
Additional Information
Website: FortiGate Enterprise Firewalls, FortiASIC Processors
Blogs:Securing the New Enterprise Edge, Introducing the Fortinet Security Fabric, Securing the Cloud

 

About Fortinet

Fortinet (NASDAQ: FTNT) protects the most valuable assets of some of the largest enterprise, service provider and government organizations across the globe. The company's fast, secure and global cyber security solutions provide broad, high-performance protection against dynamic security threats while simplifying the IT infrastructure. They are strengthened by the industry's highest level of threat research, intelligence and analytics. Unlike pure-play network security providers, Fortinet can solve organizations' most important security challenges, whether in networked, application or mobile environments - be it virtualized/cloud or physical. More than 210,000 customers worldwide, including some of the largest and most complex organizations, trust Fortinet to protect their brands. Learn more at http://www.fortinet.com, theFortinet Blog or FortiGuard Labs.

資料來源: Fortinet Website