Sold by: Fortinet Inc.
Deployed on AWS
FortiGate Enterprise Cloud Native Next Generation Firewall as a Service
4.6
Overview
FortiGate Cloud-Native Firewall (CNF) is a highly available SaaS service that simplifies network security while seamlessly scaling and integrating with AWS services such as AWS Gateway Load Balancer and AWS Firewall Manager. FortiGate CNF reduces the network security operations workload by eliminating the need to configure, provision, and maintain any firewall software infrastructure while allowing security teams to focus on security policy management. FortiGate CNF can be billed based on consumption or purchased through annual contracts.
Capabilities:
- Industry-leading NGFW: FortiGate CNF provides next-generation firewall security capabilities such as intrusion prevention, application control, content filtering, and more. These capabilities are powered by FortiGuard Labs AI.
- Simplified Management: The FortiGate CNF console provides users with a comprehensive toolset to manage network security in their cloud infrastructure. Associating AWS accounts, creating CNF instances, defining protected objects, and management of policies are all possible from the FortiGate CNF console. The console offers users less familiar with cloud security management purpose-built wizards to guide them through the process.
- Scalability: FortiGate CNF scales to meet customer needs and each instance can protect up to 1000 subnets from multiple subnets, VPCs, and availability zones across multiple AWS accounts in a given AWS region.
- Security Management Integrations: AWS Customers can utilize AWS Firewall Manager to provision FortiGate CNF instances and push security policies. Fortinet customers can use FortiManager to define and push security policies for FortiGate CNF in their AWS environments.
- Flexible Consumption: FortiGate CNF offers the flexibility to consume the way that best fits your business. On-demand consumption for transient and unpredictable workloads, and annual contracts for cost control when workloads are more predictable.
This product entitles you to 1,000,000 credits. The credits are subtracted based on the actual usage (deployed CNF instances and traffic flowing through them) of different features as follows:
- 1 CNF Hour including support = 96 credits
- 1 Cost Optimized CNF Hour including support = 32 credits
- 1 GB of Traffic processing = 1 credit
- 1 GB of Advanced Security processing = 1 credit
After the 1,000,000 credits are consumed, you will be charged on-demand based on the PAYG listing price for FortiGate CNF. Alternatively, you can purchase additional credits.
Visit the FortiGate CNF Community Resource Hub to find onboarding, deployment, and technical information and join in discussions: https://community.fortinet.com/t5/FortiGate-CNF-All-Marketplaces/gh-p/fortigate-cnf-on-aws
Highlights
- Advanced Network Protection: FortiGate CNF blocks traffic to and from known bad IPs, provides intrusion prevention and content filtering capabilities and supports GEO IP policies. FortiGate CNF supports the complete set of mature FortiOS NGFW capabilities.
- Streamlined Security Management: By aggregating security from all networks in an AWS region into a single FortiGate CNF instance customers can simplify security and manage fewer security policies. Customers are not required to build and maintain separate cloud firewalls for each cloud network or availability zone.
- Lower costs: With no security software infrastructure to build, deploy and operate, operations are simplified and in turn costs are reduced. Furthermore, with FortiGate CNF customers only pay for security processing functionality the use
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
FortiGate CNF Credits | FortiGate-CNF Usage of the different capabilities at a variable rate | $20,000.00 |
Dimension | Cost/unit |
|---|---|
Hours of deployed FortiGate-CNF Instances without credits (Incl. Support) | $2.00 |
GB of Traffic processing without credits | $0.02 |
Advanced security processing units without credits (see documentation) | $0.02 |
Hours for deployed Cost Optimized FortiGate-CNF Instances including support | $1.00 |
Vendor refund policy
No refunds
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Fortinet FortiCare support offerings provide global support and deliver best-in-class support services. With FortiCare support, customers can be assured that their Fortinet security products are performing optimally and protecting their corporate assets.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Check Point Software Technologies
By Palo Alto Networks
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Next-Generation Firewall Capabilities
Intrusion prevention, application control, content filtering, and GEO IP policies powered by FortiGuard Labs AI
Scalability and Multi-Account Support
Each instance protects up to 1000 subnets across multiple subnets, VPCs, availability zones, and AWS accounts within a single AWS region
Cloud Security Management Integration
Integration with AWS Firewall Manager for instance provisioning and policy deployment, and FortiManager for security policy management in AWS environments
Centralized Policy Management
Single console for managing network security across all networks in an AWS region, eliminating need for separate firewalls per cloud network or availability zone
AWS Native Integration
Seamless integration with AWS Gateway Load Balancer and AWS Firewall Manager for cloud-native deployment
Advanced Threat Prevention Capabilities
Firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, and anti-bot protection against known and unknown threats.
Network Traffic Inspection and Control
Inspects and secures encrypted data flows between on-premises networks and AWS VPCs, including North-South traffic entering and exiting private subnets and East-West traffic between VPCs.
Unified Security Management
Centralized management via Check Point CloudGuard Security Management Server enabling consistent policy, log, and report management across AWS, hybrid, and on-premises environments.
Infrastructure-as-Code Integration
Integrates with Terraform and Ansible for policy automation and cloud-native scaling with dynamic adaptation of security policies based on real-time cloud metadata.
AWS Service Integration
Supports Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie with deployment options including auto-scaling groups and multi-AZ redundancy.
Traffic Identification and Classification
Powerful traffic identification technology for complete visibility and control over network traffic
Malware Prevention
Malware prevention capabilities to protect applications and data from known and unknown attacks
Dynamic Policy Management
Dynamically updated whitelisting and segmentation policies based on AWS tags for reduced attack surface
High-Performance Processing
DPDK support on C5, C5n, M5, and M5n instances running on AWS Nitro System for efficient traffic processing
Cloud-Native Integration
AWS Auto Scaling, ELB integration, Transit VPC with AWS Transit Gateway, and Gateway Load Balancer support for large-scale deployments
Standard contract
No
No
No
Customer reviews
A K.
FortiGate Cloud Review
Reviewed on Dec 21, 2023
Review provided by G2
What do you like best about the product?
FortiGate cloud is mostly used by my organization and it provides complete security to our network and insfrstructure. We are glad to have fortigate cloud and firewall solutions in my infrastructure.
What do you dislike about the product?
Personally I do not feel anything to dislike about this product. Pricing is somthing can be considered and reduced.
What problems is the product solving and how is that benefiting you?
Best network and infrastructure management and security features and solutions of forigate firewall. I have been using it since 6 years and it works very well for my network.
Amar Y.
Excellent Security Solution- FortiGate Cloud
Reviewed on Dec 17, 2023
Review provided by G2
What do you like best about the product?
FortiGate Cloud provide complete firewall security management solutions over cloud. I have deploye FortiGate Firewall FG-100F along with FortiGate Cloud. They provide completely easy to manage and dashboard is pretty easy, simple and user friendly.
What do you dislike about the product?
from my personal point of view I never felt anything to dislike about FortiGate Cloud, they are improving their services on daily basis. There is nothing to dislike.
What problems is the product solving and how is that benefiting you?
Being an IT manager & IT Administrator we always look for easy to manage business security and policies as well as security network and infrastructure and FortiGate cloud provides complete solutions for these requirements. Provides complete bundle of services such as logs records, reporting and fortigate analytics.
Sneha P.
Review for Fortigate Cloud
Reviewed on Dec 14, 2023
Review provided by G2
What do you like best about the product?
The application Fortinet Fortigate Cloud is easy to use and has security features to secure the network of the Infra along with various integrated tools which enhances the scability of the application.
What do you dislike about the product?
The application is good but sometimes during applying or enforcing the policies in configuration needs little of excel and during IOS upgradation there will be some challenges while importing the firmware as the application won't allow the pro-active upgrades unless there is some bug or vulnerability found.
What problems is the product solving and how is that benefiting you?
The FortiGate Cloud has benefited in securing the network by providing the reports on Daily basis specailly of the VPN tunnels merged with Firewall. Also, the application is ease of GUI which is Web based firewall which gives more visibility with DDOS attack protection and allows to integrate the Wireless AP's. Also, we get good response from the support team during any issues.
Entertainment
Fortigate Cloud is a blessing for medium enterprises
Reviewed on Dec 14, 2023
Review provided by G2
What do you like best about the product?
The UI and analytics feature is extremely helpful. Alongside, it aids into security monitoring which is essential.
What do you dislike about the product?
The analytics feature can add a few more dashboards and also some real time systems.
What problems is the product solving and how is that benefiting you?
In managing my cloud property and gaining visibility.
Information Technology and Services
FortiGate Cloud is a good and simple cloud management and analytics solution.
Reviewed on Sep 08, 2023
Review provided by G2
What do you like best about the product?
FortiGate Cloud offers a range of benefits, including centralized management, real-time monitoring, advanced analytics, and scalability. It simplifies security management, enhances network visibility, and helps organizations stay ahead of evolving cyber threats.
What do you dislike about the product?
Cloud-based solutions rely on internet connectivity. If your internet connection experiences issues or goes down, you may have limited or no access to the FortiGate Cloud platform, potentially impacting your ability to manage and monitor your FortiGate devices.
What problems is the product solving and how is that benefiting you?
The user-friendly interface of FortiGate Cloud makes it easy for IT administrators to configure policies, monitor network traffic, and generate reports without the need for extensive technical expertise. This can lead to improved operational efficiency.