A
d
v
a
n
c
e
d

s
e
c
u
r
i
t
y
,

z
e
r
o

c
o
m
p
l
e
x
i
t
y
.

FortiGate CNF is a fully managed Firewall-as-a-Service (FWaaS) that delivers advanced threat protection, deep network visibility, and seamless AWS integration—without the complexities of infrastructure management. Powered by Fortinet’s industry-leading security and AI-driven threat intelligence, FortiGate CNF provides scalable, automated, and cost-effective security to keep your cloud workloads safe from evolving cyber threats.

B
e
y
o
n
d

b
a
s
i
c

f
i
r
e
w
a
l
l
s
.

Our own telemetry has shown that nearly half of organizations have detected exploits from vulnerabilities under a month old.* Threats are moving faster than ever—which is why you need a cloud native firewall that can keep up.

FortiGate CNF bolsters your AWS security, stopping the latest and most sophisticated threats in their tracks:

Attacks started on average

2.64 Days

after new exploits were publicly disclosed¹ Can your firewall keep up?

Malware

From URL filtering to sandboxing, ensure malicious actors are blocked from accessing your data.

Data
Exfiltration

Inspect outbound traffic and detect unusual patterns to prevent the theft of sensitive information.

Compliance
Violations

Enforce strict access controls to ensure only authorized users can access sensitive systems or data.

Cryptomining

Detect unusual spikes in resource usage to prevent connections that exploit cloud resources for cryptomining.

Botnets

Identify and block communications between bots and C2 servers, and contain the spread with segmentation.

P
r
o
t
e
c
t

e
v
e
r
y
t
h
i
n
g
.

M
a
n
a
g
e

n
o
t
h
i
n
g
.

FortiGate CNF doesn’t add anything new to your security operations overhead. Delivered as a SaaS-based solution, Fortinet handles all of the underlying infrastructure management, updates, patching, and more—allowing you to experience the simplicity of a cloud-native firewall service.

And unlike other third-party solutions, just one CNF instance is all that you need to secure an entire AWS region, including multiple accounts, sub-nets, VPCs, and availability zones.

All of this means that FortiGate CNF is ready to protect for any critical use case:

Outbound Traffic
Inspection

Delivers content inspection of outgoing traffic from AWS workloads to the internet.

Inbound Traffic
Protection

Gain deep visibility into incoming traffic and advanced security measures to protect AWS workloads.

East-West Traffic
Filtering

Inspect and control traffic between AWS VPCs and prevent the lateral spread of threats.

Network Protection for AWS VPCs

Cloud-Only or Hybrid-Cloud Management

Deep Integrations with AWS Services

Picking up where basic firewalls fall short.

Cloud service providers are built to deliver infrastructure at scale, not to specialize in cybersecurity. Built-in firewalls offer basic filtering, but lack the advanced threat protection, deep visibility, and AI-driven security needed to stop today’s evolving attacks. Fortinet has been a global leader in firewall security for over 20 years, delivering when it comes time for real-world threat defense.

Key
Capabilities

Deployment

Threat Protection

Web Filtering

IPv6 Support

Application Awareness

Sandboxing

Multi-Cloud Support

Bot Protection

Data Leak Prevention

Zero Trust Enforcement

FortiGate
CNF

Key Capabilities

Deployment

Cloud-Native

Threat Protection

100%

Web Filtering

IPv6 Support

Application Awareness

Sandboxing

Multi-Cloud Support

Bot Protection

Data Leak Prevention

Zero Trust Enforcement

Cloud Service Firewall Providers

Key Capabilities

Deployment

Cloud-Native

Threat Protection

Less than 60%²

Web Filtering

IPv6 Support

Application Awareness

Sandboxing

Multi-Cloud Support

Bot Protection

Data Leak Prevention

Zero Trust Enforcement

With all those unchecked boxes, ensure you’re not just checking the box for your firewall solution.

GET YOUR FREE TRIAL SCHEDULE OVERVIEW

Comprehensive doesn’t mean complex.

Not only did we eliminate new security operations overhead, we’ve minimized the time from setup to security at every step. With a rapid deployment from AWS Marketplace, a built-in deployment wizard, and prebuilt security policies, you’ll be better-protected within minutes.

Not to mention, if you’ve ever deployed FortiGate hardware appliances or virtual machines, you’ll feel right at home in this familiar interface. As part of the Fortinet Security Fabric, all your policies and rule sets can be brought to FortiGate CNF and managed via FortiManager. You can even send your logs to FortiAnalyzer, enabling complete and cohesive network security operations regardless of form factor.

E
v
e
r
y
t
h
i
n
g

e
l
s
e

y
o
u

n
e
e
d

t
o

k
n
o
w
.

Secure Your Migration to AWS with a Cloud-Native Firewall Service

Read Solution Brief

Learn About Features and Capabilities

Read Datasheet

Enterprise Strategy Group Evaluates FortiGate CNF

Read Technical Validation

C
o
m
p
r
e
h
e
n
s
i
v
e

s
e
c
u
r
i
t
y

f
o
r

A
W
S

i
n

3

e
a
s
y

s
t
e
p
s
.

Get a full-scale evaluation of all FortiGate CNF for AWS security capabilities and see for yourself how easy it is to deploy enterprise-grade security.

1

2

Log in

3

Protect

1) 2024, Fortinet, Fortinet Threat Research Finds Cybercriminals Are Exploiting New Industry Vulnerabilities 43% Faster than 1H 2023

2) 2024, CyberRatings.org Announces Test Results for Cloud Service Provider Native Firewalls

The strongest, smartest native firewall for AWS.

A
d
v
a
n
c
e
d

s
e
c
u
r
i
t
y
,

z
e
r
o

c
o
m
p
l
e
x
i
t
y
.

B
e
y
o
n
d

b
a
s
i
c

f
i
r
e
w
a
l
l
s
.

2.64 Days

Malware

Data
Exfiltration

Compliance
Violations

Cryptomining

Botnets