Capabilities Industry leading NGFW - CNF provides next generation firewall security capabilities such as intrusion prevention, application control, content filtering and more. these capabilities are powered by Security Labs artificial intelligence (AI). Simplified management - CNF Console provides users a comprehensive toolset to manage network security in their cloud infrastructure. Associating AWS accounts, creating CNF instances, defining protected objects, and management of policies are all possible from the CNF Console. The console offers users less familiar with cloud security management purpose build wizards to guide through the process. Scalability - CNF scales to meet customer needs and each instance can protect up-to 1000 subnets from multiple subnets, VPCs, and availability zones across multiple AWS accounts in a given AWS region. Security Management integrations - AWS Customers can utilize AWS Firewall Manager to provision FortiGate CNF instances and push security policies, and Customers can use Manager Console to define and push security policies for CNF in their AWS environments. Flexible Consumption -CNF offers the flexibility to consume the way that best fits your business. On demand consumption for transient and unpredictable workloads, and annual contracts for expenditure management when workloads are more predictable.

CNF pricing has two types of dimensions CNF instance and support hours - the number of hours (or part of) that a single CNF instance is running also entitles support for that particular CNF instance. Security Processing - Since all traffic passing through the CNF instance is inspected by the FotiGate CNF Firewall engine, all traffic is charged for Firewall processing. in addition, traffic that will be processed by the IPS, URL/DNS Filtering or SandBox engines will be charged accordingly on a pre GB basis. Customers will only be charged by the volume of traffic that was actually processed by each security function.