Skip to content Skip to navigation Skip to footer

What is Fortinet Secure SD-WAN?

FortiGate delivers fast, scalable, and flexible Secure SD-WAN on-premises and in the cloud. Fortinet Secure SD-WAN supports cloud-first, security-sensitive, and global enterprises, as well as the hybrid workforce. Our Secure Networking approach uses one operating system and consolidates SD-WAN, next-generation firewall (NGFW), advanced routing, and ZTNA application gateway functions.

Simplify Your Network and Security with Fortinet Secure SD-WAN

Fortinet Secure SD-WAN is foundational for a seamless transition to SASE and SD-Branch. It enables organizations to protect their investment and simplify operations along their journey to a Zero Trust Architecture.

Watch Now
FortiGate UIThis diagram describes what are the components and use cases of FortiSASE to secure remote users. FortiSASE includes Firewall-as-a-Service (FWaaS) and Secure Web Gateway (SWG) that both enable the Secure Internet Access use case. It includes Zero-Trust Network Access (ZTNA) and integration with Secure SD-WAN to enable Secure Private Access to corporate applications. And finally, it includes Cloud Access Security Broker (CASB) for Secure SaaS Access for full control and visibility over SaaS application access and content.

Fortinet Secure SD-WAN Is Foundational for a Seamless Transition to SASE

FortiSASE helps extend secure access and high-performance connectivity to users regardless of their geographic locations. FortiSASE delivers a full set of networking and security capabilities including secure web gateway (SWG), universal zero-trust network access (ZTNA), next-generation dual-mode cloud access security broker (CASB)Firewall-as-a-Service (FWaaS), and secure SD-WAN integration. With a unified solution, you can:

  • Overcome security gaps
  • Simplify operations and enhance security and networking analytics
  • Shift to an OPEX business model with simple user-based tiered licensing
Fortinet SD-WAN UI

Get End-to-End Visibility, Analytics, and Reporting to Accelerate Zero-Trust Initiatives

Organizations are embarking on zero-trust initiatives to deliver enhanced security postures across highly distributed environments. Fortinet Secure SD-WAN, along with FortiManager and FortiAnalyzer, provide granular visibility into network traffic, analyze traffic data, and automate response based on the results. This requisite functionality enables the acceleration of zero-trust initiatives.

Download Report

SD-WAN Networking Services

Fortinet SD-WAN Overlay as a service UI

SD-WAN Overlay-as-a-Service

SD-WAN Overlay-as-a-Service is a turnkey service that provides simplified and rapid provisioning of interconnected locations securely.

  • Turnkey service: The SaaS, cloud hosted model reduces hosting costs and management needs, plus lowers deployment time and overall cost.
  • Continuous operations: Fortinet managed and hosted, geo-redundant HUBs are included with the service.
  • Simple: The point-and-click interface means minimal technical expertise is required.
Watch the Demo

Download the Solution Brief
Fortinet SD-WAN Underlay Bandwidth and Quality Monitoring Service monitor

FortiGuard SD-WAN Underlay Bandwidth and Quality Monitoring Service

The FortiGuard SD-WAN Underlay Bandwidth and Quality Monitoring Service offers comprehensive monitoring of the ISP link, path, and application performance. It is enabled by FortiManager and FortiGuard Labs’ database of hundreds of popular SaaS and cloud designations. This empowers IT teams to swiftly prioritize network traffic, efficiently address operational issues, and enhance user experience.

Download Solution Brief

SD-WAN Features and Benefits

APPLICATION RESILIENCE

Ensures the highest level of application availability and performance over any WAN transport

INTEGRATED ADVANCED SECURITY

Converges the most advanced NGFW and routing to deliver consistent security on- and off-network

SCALABLE, HIGH PERFORMANCE

Transforms and secures SD-WAN at scale with no performance impact thanks to our WAN ASIC

MULTI-CLOUD ON-RAMP

Enables secure, fast connectivity and high performance to, in, and between cloud applications

ZERO-TOUCH PROVISIONING

Enables large scale, faster deployment of Fortinet Secure SD-WAN

CENTRALIZED ORCHESTRATION

Centrally manages deployments, configurations, and operations with visibility, analytics, & reporting

50%

Increase in IT-team productivity

300%

ROI over three years

SP5

SD-WAN Use Cases

Transform WAN and Security
TRANSFORM WAN AND SECURITY
Use one management console for SD-WAN, advanced routing, and NGFW controls to protect the entire digital attack surface.
Secure SD-Branch
SIMPLIFY SECURE SD-BRANCH
Simplify branch architecture with centrally managed, scalable secure SD-WAN and integrated NAC, WLAN, LAN, and LTE/4G/5G.
Hybrid Workforce
OPTIMIZE THE HYBRID WORKFORCE
Enhance work-from-anywhere with a comprehensive SASE solution by integrating cloud-delivered SD-WAN with Security Service Edge (SSE).
Multi-Cloud
ENHANCE HYBRID, MULTI-CLOUD
Enable secure, seamless, faster connectivity to the cloud, in the cloud, and between clouds.
App Performance
PREDICT APP PERFORMANCE
Enable reliable user experience on any transport with rich routing and advanced WAN remediation for self-healing networks.
Operational Efficiencies
ACHIEVE OPERATIONAL EFFICIENCIES
Automate design, deployment, and operation with a single pane of glass for network-wide visibility, analytics, reporting, and orchestration.

   

Analyst Recognition

2023 Gartner® Magic Quadrant™ for SD-WAN
2024 Gartner® Magic Quadrant™ for Single-Vendor SASE
Forrester Total Economic Impact™ (TEI) of Fortinet Secure SD-WAN
2023 Gartner® Magic Quadrant™ for SD-WAN Figure 1. The figure ranks companies on their ability to execute and completeness of vision as of September 2023 on a scatter plot. Fortinet is in the upper right quadrant of Leaders.
Fortinet is a Leader and placed highest in Ability to Execute. AGAIN.

We’ve done it again! Fortinet is the only vendor to place highest in Ability to Execute 3 years in a row. And, we’ve been named a Leader for the 4th year in a row. We believe this is because our innovative secure SD-WAN solution lets you uniquely:

  • Simplify architecture with accelerated security and networking convergence
  • Achieve operational efficiencies across all WAN and cloud edges
  • Deliver superior quality of experience to users
Download Report »
diagram analyst report gartner mq sase
Fortinet Named a Challenger in the 2024 Gartner® Magic Quadrant™ for Single-Vendor SASE
Fortinet delivers unified management using a single console while delivering seamless integration of SD-WAN and cloud-delivered AI-powered security to secure the hybrid workforce.
Download Report »
The Total Economic Impact™ of Fortinet Secure SD-WAN: Cost Savings and Business Benefits Enabled by Fortinet Secure SD-WAN. Published in December 2022. A Forrester Total Economic Impact™ study commissioned by Fortinet.
Forrester Total Economic Impact™ (TEI) Study Shows 300% ROI for Fortinet Secure SD-WAN Enterprise Deployments
Fortinet commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study to analyze the value that enterprises are able to achieve by deploying Fortinet Secure SD-WAN. The TEI study examines both the network and security impact on businesses.
Download Study »

FortiGuard AI-Powered Security Services

Fortinet Secure SD-WAN supports the seamless convergence of SD-WAN and AI-powered security using a single, consistent operating system, FortiOS. Fortinet uniquely delivers a unified security and management framework for users and networks based on ASIC-accelerated SD-WAN, Zero Trust Network Access (ZTNA), and SASE to support high-performance prevention. SD-WAN network transformation initiatives require an evaluation of all internet-facing security as well as local segmentation. Fortinet's powerful combination of deep SSL packet inspection and DNS/URL/Video filtering, AV, inline sandbox, IPS, and IoT/OT security services offers the best protection. Learn more about FortiGuard AI-powered Security Bundles for FortiGate.

Show All Services
FortiGuard Antivirus Service
FortiGuard Antivirus Service

Protects against the latest polymorphic attacks, viruses, malware (including ransomware), and other threats.

FortiGuard Data Loss Prevention Service
FortiGuard Data Loss Prevention Service

Enterprise DLP services protect against data breaches, insider threats, and data exfiltration. Explore FortiGuard DLP Service to safeguard sensitive information and ensure compliance with over 500 data patterns.

FortiGuard AntiSpam Service
FortiGuard AntiSpam Service

Dramatically reduces spam at the perimeter through a multi-layered approach to filtering unwanted and malicious email.

FortiGuard Application Control Service
FortiGuard Application Control Service

Allows the creation of policies to allow, deny, or restrict access to applications and keep malicious, risky, and unwanted applications out of the network.

FortiGuard Attack Surface Security Service
FortiGuard Attack Surface Security Service

Assesses and rates your Security Fabric infrastructure and controls against best practices and major security and compliance frameworks. Includes coverage for connected IoT devices.

FortiGuard DNS Security Service
FortiGuard DNS Security Service

Provides full visibility into DNS traffic while blocking high-risk domains including malicious newly registered domains (NRDs) and parked domains.

FortiGuard IPS Service
FortiGuard IPS Service

Utilizes the latest threat intelligence to perform deep packet inspection/SSL inspection of network traffic to detect and block malicious traffic and activities.

FortiGuard OT Security Service
FortiGuard OT Security Service

Extends IPS protections to identify and police most of the common ICS/OT/SCADA protocols to detect and block exploits targeting OT vulnerabilities.

FortiGuard AI-based Inline Malware Prevention Service
FortiGuard AI-based Inline Malware Prevention Service

Performs AI-powered real-time inspection of files for protection against unknown threats, zero-days, and sophisticated file-based attacks.

FortiGuard URL Filtering Service
FortiGuard URL Filtering Service

Uses AI-powered behavior analysis and correlation to block unknown malicious URLs almost immediately, with near-zero false negatives.

FortiGuard Anti-botnet and C2 Service
FortiGuard Anti-botnet and C2 Service

Blocks unauthorized attempts to communicate with compromised remote servers for both receiving malicious commands and extracting information.

Case Studies

Radisson Hotel Group
Radisson Hotel Group
Radisson Puts Fortinet at the Heart of Ensuring a Seamless Guest Experience at 2,000+ Hotels
Defensoria Pública da União
Defensoria Pública da União
Brazilian Government Institution Mitigates Cyberthreat Attempts with Fortinet Solutions
Cirion Technologies
Cirion Technologies
Digital Technology and Infrastructure Provider Optimizes Its Security Service in Latin America with Fortinet’s Advanced Support
KAN Group
KAN Group
Polish Manufacturer Enhances Quality of Service for Customers and Staff with Increased Network Performance, Reliability, and Security

Models and Specifications

Available in all form factors including physical and virtual appliances. Flexible capacity enables the highest application experience. FortiManager can be used to monitor and manage FortiGate appliances and is also available in different form factors including hardware, virtual, and SaaS. Learn more about FortiGuard AI-powered Security Bundles for FortiGate.

View by:

Devices/VDOMs (Maximum)
30
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
100
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1000
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1200
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
4000
Sustained Log Rates
150
GB/Day
10
Zero Touch Provisioning
Yes
Third Party Automation
Yes
FMG-BASE to FMG-VM-UL-UG
Devices/VDOMs (Maximum)
10 to Unlimited
Sustained Log Rates
Hardware dependent
GB/Day
1-50
Zero Touch Provisioning
Yes
Third Party Automation
Yes
NGFW Throughput
850 Mbps
Threat Protection Throughput
700 Mbps
VPN Throughput
1 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
1.5 Gbps
Threat Protection Throughput
1.2 Gbps
VPN Throughput
1.5 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
2.5 Gbps
Threat Protection Throughput
2 Gbps
VPN Throughput
3 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
4.5 Gbps
Threat Protection Throughput
3.5 Gbps
VPN Throughput
5.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
NGFW Throughput
9 Gbps
Threat Protection Throughput
7 Gbps
VPN Throughput
6.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adapters), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 Mbyte HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 Kbytes HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.

Amazon Web Services (AWS), Microsoft Azure, Google, and Oracle support both bring-your-own-license (BYOL) and on-demand (pay-as-you-go). Please see the Marketplace listings for more information:

SD-WAN ROI Calculator

Fortinet Secure SD-WAN enables better application experience, simplifies WAN operations and reduces costs by migrating from expensive MPLS to broadband connectivity, while also integrating advanced security features.

Enter your data in the calculator below to learn how much you could save with Fortinet Secure SD-WAN.


Number of Sites
Enter Number of Office Locations.
Number of Hubs
Enter number of data centers.
Monthly MPLS Cost Per Site
Enter average monthly cost for each branch office's MPLS WAN link.
MPLS Bandwidth Requirement Per Site
Enter average bandwidth capacity in Mbps for each branch office's MPLS WAN link.
Percentile of MPLS Reduction
Enter the percentage of MPLS links that will be replaced by internet connections.
Monthly Internet Cost Per Site
Enter average monthly cost of internet for every branch and hub.
Internet Bandwidth Available Per Site
Enter the average bandwidth capacity that internet provides for branches and hubs.
Number of Years
Enter the number of years to calculate ROI for.
Secure SD-WAN
Select if NGFW security is a requirement.
Total Savings of over Years
Reduce Cost
Existing WAN MPLS Cost
Reduce Cost
SD-WAN Cost (CAPEX + OPEX)
Productivity Gain
Increase WAN Bandwidth Per Site
Analytics
Enable Better Security Posture
99.3 %
This calculation is for estimation purposes only and doesn't account for legacy router maintenance cost.

FortiCare Support & Professional Services for SD-WAN Users

Fortinet is dedicated to helping our customers succeed, and every year FortiCare services help thousands of organizations get the most from their investments in Fortinet's products and services. To achieve this, FortiCare follows the life-cycle approach and provides unique services to help our customers in their success journeys.

Technical Support Services

Technical Support Services

Various per-device options are available for efficient operations. FortiCare Elite option provides a 15-minute response time for critical products.

Advanced Support

Advanced Support

Various per-account white glove services are available to reduce disruption and increase productivity with operational reviews by designated experts.

Professional Services

Professional Services

Our multi-vendor experts can design and deploy a complete best practice-based solution to help you meet your network or security objectives and adopt new capabilities.

RMA

RMA

Priority RMA options are available across the product family for expedited replacement of defective hardware to meet your availability objectives.

SD-WAN Resources

eBooks
Analyst Reports
Blogs
Checklists
Data Sheets
Industry Insights
Infographic
Solution Briefs
Podcasts
Videos
Webinars
White Papers
Accurate Analysis Matters: Fortinet Secure SD-WAN Cyber Threat Assessment Can Help
Accurate Analysis Matters: Fortinet Secure SD-WAN Cyber Threat Assessment Can Help »

Customers continue to shift to SD-WAN architectures so they can realize all the benefits that a WAN Edge solution can bring to their networks.

Build a Multi-Cloud Freeway With SD-WAN
Build a Multi-Cloud Freeway With SD-WAN »

Cloud connectivity is a chore. The big 3 public clouds in North America– AWS, Azure, and Google Cloud–each have their own networking constructs, quirks, and management interfaces.

Automotive Company Selects Fortinet to Provide Robust Security and Connectivity
Automotive Company Selects Fortinet to Provide Robust Security and Connectivity »

Distributed enterprises are increasingly shifting data, applications, and workflows to the cloud to meet evolving business requirements and achieve digital innovation goals. However, this can become problematic for branch locations that still rely on traditional MPLS connections to backhaul traffic through the corporate network.

Secure SD-WAN Addresses Manufacturing and Services Organization's Security Challenges
Secure SD-WAN Addresses Manufacturing and Services Organization's Security Challenges »

Organizational growth often leads to the rapid expansion of the workforce and the addition of branch offices. This, combined with the transition to a teleworker environment, can place significant demands on existing infrastructure in terms of bandwidth requirements, access control, and secure workflows and transactions that are not only multiplying but now originating from outside the traditional network.

Considerations for Managed Service Providers as SD-WAN Adoption Grows
Considerations for Managed Service Providers as SD-WAN Adoption Grows »

Over the past two years, SD-WAN has experienced one of the highest rates of adoption of any digital transformation technology as more organizations move their business-critical applications to the cloud.

Ecosystem

For a complete list of all the Alliance partners, go to www.fortinet.com/fabricready. Below is a list of current Fortinet Secure SD-WAN Alliance Partners:

Training & Certifications

Fortinet Certified Solution Specialist - Network Security
Learn about common SD-WAN deployment scenarios using Fortinet Secure SD-WAN solutions. You will explore different situations, from a single enterprise site, to multiple data center environments, that will help you to enhance and troubleshoot SD-WAN deployments.

Fortinet Secure SD-WAN Demo

Find out how to easily deploy and manage secure SD-WAN with a self-guided demo.

What to Expect:

  • Learn about all the Fortinet Secure SD-WAN capabilities
  • Explore how to easily deploy SD-WAN overlays
  • See how visibility, analytics, and reporting accelerate troubleshooting

Fortinet News

Gartner, Magic Quadrant for SD-WAN, Jonathan Forest, Naresh Singh, Andrew Lerner, Karen Brown, 27 September 2023.
Gartner, Magic Quadrant for Single-Vendor SASE, Andrew Lerner, Jonathan Forest, Neil MacDonald, Charlie Winckless, 3 July 2024.

GARTNER is a registered trademark and service mark of Gartner and Magic Quadrant is a registered trademark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.​

Gartner does not endorse any vendor, product or service depicted in our research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

THE GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE BADGE IS A TRADEMARK AND SERVICE MARK OF GARTNER, INC. AND/OR ITS AFFILIATES AND IS USED HEREIN WITH PERMISSION. ALL RIGHTS RESERVED. GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE CONSTITUTE THE SUBJECTIVE OPINIONS OF INDIVIDUAL END-USER REVIEWS, RATINGS, AND DATA APPLIED AGAINST A DOCUMENTED METHODOLOGY; THEY NEITHER REPRESENT THE VIEWS OF, NOR CONSTITUTE AN ENDORSEMENT BY, GARTNER OR ITS AFFILIATES.