Overview
FortiGate Cloud-Native Firewall (CNF) is a highly available SaaS service that simplifies network security while seamlessly scaling and integrating with AWS services such as AWS Gateway Load Balancer and AWS Firewall Manager. FortiGate CNF reduces the network security operations workload by eliminating the need to configure, provision, and maintain any firewall software infrastructure while allowing security teams to focus on security policy management. FortiGate CNF can be billed based on consumption or purchased through annual contracts.
Capabilities:
- Industry-leading NGFW: FortiGate CNF provides next-generation firewall security capabilities such as intrusion prevention, application control, content filtering, and more. These capabilities are powered by FortiGuard Labs AI.
- Simplified Management: The FortiGate CNF console provides users with a comprehensive toolset to manage network security in their cloud infrastructure. Associating AWS accounts, creating CNF instances, defining protected objects, and management of policies are all possible from the FortiGate CNF console. The console offers users less familiar with cloud security management purpose-built wizards to guide them through the process.
- Scalability: FortiGate CNF scales to meet customer needs and each instance can protect up to 1000 subnets from multiple subnets, VPCs, and availability zones across multiple AWS accounts in a given AWS region.
- Security Management Integrations: AWS Customers can utilize AWS Firewall Manager to provision FortiGate CNF instances and push security policies. Fortinet customers can use FortiManager to define and push security policies for FortiGate CNF in their AWS environments.
- Flexible Consumption: FortiGate CNF offers the flexibility to consume the way that best fits your business. On-demand consumption for transient and unpredictable workloads, and annual contracts for cost control when workloads are more predictable.
This product entitles you to 1,000,000 credits. The credits are subtracted based on the actual usage (deployed CNF instances and traffic flowing through them) of different features as follows:
- 1 CNF Hour including support = 96 credits
- 1 Cost Optimized CNF Hour including support = 32 credits
- 1 GB of Traffic processing = 1 credit
- 1 GB of Advanced Security processing = 1 credit
After the 1,000,000 credits are consumed, you will be charged on-demand based on the PAYG listing price for FortiGate CNF. Alternatively, you can purchase additional credits.
Visit the FortiGate CNF Community Resource Hub to find onboarding, deployment, and technical information and join in discussions: https://community.fortinet.com/t5/FortiGate-CNF-All-Marketplaces/gh-p/fortigate-cnf-on-aws
Highlights
- Advanced Network Protection: FortiGate CNF blocks traffic to and from known bad IPs, provides intrusion prevention and content filtering capabilities and supports GEO IP policies. FortiGate CNF supports the complete set of mature FortiOS NGFW capabilities.
- Streamlined Security Management: By aggregating security from all networks in an AWS region into a single FortiGate CNF instance customers can simplify security and manage fewer security policies. Customers are not required to build and maintain separate cloud firewalls for each cloud network or availability zone.
- Lower costs: With no security software infrastructure to build, deploy and operate, operations are simplified and in turn costs are reduced. Furthermore, with FortiGate CNF customers only pay for security processing functionality the use
Details
Pricing
Dimension | Description | Cost/12 months |
---|---|---|
FortiGate CNF Credits | FortiGate-CNF Usage of the different capabilities at a variable rate | $30,000.00 |
The following dimensions are not included in the contract terms, which will be charged based on your usage.
Dimension | Cost/unit |
---|---|
Hours of deployed FortiGate-CNF Instances without credits (Incl. Support) | $3.00 |
GB of Traffic processing without credits | $0.031 |
Advanced security processing units without credits (see documentation) | $0.031 |
Hours for deployed Cost Optimized FortiGate-CNF Instances including support | $1.50 |
Vendor refund policy
No refunds
Custom pricing options
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Fortinet FortiCare support offerings provide global support and deliver best-in-class support services. With FortiCare support, customers can be assured that their Fortinet security products are performing optimally and protecting their corporate assets.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.