dots

The strongest, smartest native firewall for AWS.

Go beyond basic: FortiGate Cloud-Native Firewall (CNF) delivers enterprise-grade security with the agility of a true cloud-native service on AWS, from the leader in firewalls.

WATCH THE OVERVIEW

Advanced security, zero complexity.

FortiGate CNF is a fully managed Firewall-as-a-Service (FWaaS) that delivers advanced threat protection, deep network visibility, and seamless AWS integration—without the complexities of infrastructure management. Powered by Fortinet’s industry-leading security and AI-driven threat intelligence, FortiGate CNF provides scalable, automated, and cost-effective security to keep your cloud workloads safe from evolving cyber threats.

Beyond basic firewalls.

Our own telemetry has shown that nearly half of organizations have detected exploits from vulnerabilities under a month old.* Threats are moving faster than ever—which is why you need a cloud native firewall that can keep up. 

FortiGate CNF bolsters your AWS security, stopping the latest and most sophisticated threats in their tracks:

Attacks started on average

0 Days

after new exploits were publicly disclosed1 Can your firewall keep up?

malware

Malware

From URL filtering to sandboxing, ensure malicious actors are blocked from accessing your data. 

ibm cev

Data
Exfiltration

Inspect outbound traffic and detect unusual patterns to prevent the theft of sensitive information. 

compliance

Compliance
Violations

Enforce strict access controls to ensure only authorized users can access sensitive systems or data. 

Cryptomining

Cryptomining

Detect unusual spikes in resource usage to prevent connections that exploit cloud resources for cryptomining. 

Botnets

Botnets

Identify and block communications between bots and C2 servers, and contain the spread with segmentation.

Protect everything. Manage nothing.

FortiGate CNF doesn’t add anything new to your security operations overhead. Delivered as a SaaS-based solution, Fortinet handles all of the underlying infrastructure management, updates, patching, and more—allowing you to experience the simplicity of a cloud-native firewall service.  

And unlike other third-party solutions, just one CNF instance is all that you need to secure an entire AWS region, including multiple accounts, sub-nets, VPCs, and availability zones. 

All of this means that FortiGate CNF is ready to protect for any critical use case:

outbound

Outbound Traffic
Inspection

Delivers content inspection of outgoing traffic from AWS workloads to the internet.

outbound

Inbound Traffic
Protection

Gain deep visibility into incoming traffic and advanced security measures to protect AWS workloads.

switching

East-West Traffic
Filtering

Inspect and control traffic between AWS VPCs and prevent the lateral spread of threats.

Network Protection for AWS VPCs

Cloud-Only or Hybrid-Cloud Management

Deep Integrations with AWS Services

Picking up where basic firewalls fall short.

Cloud service providers are built to deliver infrastructure at scale, not to specialize in cybersecurity. Built-in firewalls offer basic filtering, but lack the advanced threat protection, deep visibility, and AI-driven security needed to stop today’s evolving attacks. Fortinet has been a global leader in firewall security for over 20 years, delivering when it comes time for real-world threat defense.

Key
Capabilities

Deployment

Threat Protection

Web Filtering

IPv6 Support

Application Awareness

Sandboxing

Multi-Cloud Support

Bot Protection

Data Leak Prevention

Zero Trust Enforcement

FortiGate
CNF

Key Capabilities

Deployment

Cloud-Native

Threat Protection

100%

Web Filtering

checkmark

IPv6 Support

checkmark

Application Awareness

checkmark

Sandboxing

checkmark

Multi-Cloud Support

checkmark

Bot Protection

checkmark

Data Leak Prevention

checkmark

Zero Trust Enforcement

checkmark

Cloud Service Firewall Providers

Key Capabilities

Deployment

Cloud-Native

Threat Protection

Less than 60%2

Web Filtering

checkmark

IPv6 Support

checkmark

Application Awareness

Sandboxing

Multi-Cloud Support

Bot Protection

Data Leak Prevention

Zero Trust Enforcement

With all those unchecked boxes, ensure you’re not just checking the box for your firewall solution.

GET YOUR FREE TRIAL SCHEDULE OVERVIEW
gradient
dots

Comprehensive doesn’t mean complex.

Not only did we eliminate new security operations overhead, we’ve minimized the time from setup to security at every step. With a rapid deployment from AWS Marketplace, a built-in deployment wizard, and prebuilt security policies, you’ll be better-protected within minutes. 

Not to mention, if you’ve ever deployed FortiGate hardware appliances or virtual machines, you’ll feel right at home in this familiar interface. As part of the Fortinet Security Fabric, all your policies and rule sets can be brought to FortiGate CNF and managed via FortiManager. You can even send your logs to FortiAnalyzer, enabling complete and cohesive network security operations regardless of form factor.

Everything else you need to know.

Solution Brief

Secure Your Migration to AWS with a Cloud-Native Firewall Service

Read Solution Brief
Solution Brief

Learn About Features and Capabilities

Read Datasheet
Solution Brief

Enterprise Strategy Group Evaluates FortiGate CNF

Read Technical Validation

Comprehensive security for AWS in 3 easy steps.

Get a full-scale evaluation of all FortiGate CNF for AWS security capabilities and see for yourself how easy it is to deploy enterprise-grade security.

1

Subscribe

2

Log in

3

Protect

GET YOUR FREE TRIAL