Stay Ahead of Critical Threats

Combine the best of both worlds: deep security expertise and easy to use on-demand cloud technology. FortiGate CNF automatically scales protection to meet the dynamic demands of your cloud environments, preventing threats in critical use cases, including:

Malware

Prevent unintentional downloads from intentional traffic.

Data Exfiltration

Inspect outbound traffic to prevent theft of sensitive information.

Compliance Violations

Stop unauthorized communications with restricted entities and regions.

Botnets

Block communications to botnet command and control servers.

Cryptomining
Prevent connections that exploit cloud resources for cryptomining.

Watch FortiGATE CNF TECHNICAL DEMO

Threat Mitigation for Cloud Environments

As more companies move to the cloud, they’ll face new obstacles. Fortinet and AWS bring together the best of both worlds—deep security expertise and leading-edge cloud technology—in a simple-to-manage and easy-to-consume service. Learn about the capabilities and technical features.

Watch the Technical Demo

Safeguard Your AWS Environment With Robust, Scalable Cloud Security

Outbound Traffic
Inspection

Content inspection of outgoing traffic from AWS workloads to the internet.

Inbound Traffic
Protection

Deep visibility into incoming traffic and advanced security measures to protect AWS workloads.

East-West Traffic
Filtering

Inspection and control of traffic between AWS VPCs and preventing the lateral spread of threats.

Network Protection for AWS VPCs

Cloud-Only or Hybrid-Cloud Management

Deep Integration With AWS Services

Evaluate FortiGate CNF Capabilities

Throughput

Up to 100 Gbps per endpoint.

Deploy additional endpoints into the VPC for added throughput. Each FortiGate CNF instance endpoint deployed into a VPC has a maximum throughput of 100 Gbps. FortiGate CNF is practically only limited by the capacity of AWS Gateway Load Balancer and its endpoints.

Scalability

Scale and Resiliency, Designed for High Availability, Scalability Across Multiple AWS Regions

Fortinet's solution ensures scalability through high availability and seamless autoscaling, accommodating your dynamic cloud environments without the need for network redesign. This approach aligns costs with your protected traffic volume, ensuring efficiency.

Rule Management

Consistent Hybrid-Cloud Firewall Policy Management, Centralized Hybrid Cloud Policy Management

The product provides a seamless rule management experience, leveraging consistent hybrid-cloud firewall policy management across your cloud accounts, networks, and workloads, thereby eliminating traditional infrastructure management challenges.

Integration With Cloud Services

Cloud Native Console, AWS GWLB Support, Integration With AWS Firewall Manager

This solution is designed for deep integration with cloud services, featuring a cloud-native console and support for AWS Gateway Load Balancer. It simplifies security across your cloud infrastructure for unmatched efficiencies.

Logging and Monitoring

Deep Visibility and Control, S3 Logging, Integration With AWS Firewall Manager

Fortinet delivers market-leading NGFW solutions that offer depth in visibility and control, including S3 logging and integration with AWS Firewall Manager, ensuring comprehensive monitoring and logging capabilities.

Threat Intelligence Feeds

Geo IP, IP Reputation, DNS Filtering, FortiGuard Labs-Powered IP Reputation Intelligence

Advanced threat intelligence by FortiGuard enhances your security posture by blocking connections to malicious IPs, preventing malware, data breaches, and botnets, and ensuring your network's integrity against evolving threats.

Intrusion Detection and Prevention System

AV, App Control, IPS, URL Filtering*, FortiGuard Labs Multiple Security Signatures

The solution includes a robust intrusion prevention system with advanced capabilities such as AV, application control, IPS, and URL filtering, all powered by FortiGuard's leading threat intelligence to secure your network against sophisticated attacks.

High Availability and Redundancy

Scale and Resiliency, Designed for High Availability, Scalability Across Multiple AWS Regions

Fortinet's SaaS firewall ensures high availability and redundancy, auto-scaling to meet the demands of your network's growth while ensuring consistent security across all cloud workloads without the need for manual IP updates.

Ease of Deployment

Quick AWS Marketplace Set Up, No Infrastructure Management, Simplified Consumption

The intuitive dashboard and predefined policies streamline security deployment, making it efficient and easy to deploy. Fortinet's solution allows specifying policies and networks, with CNF managing the rest for a simplified consumption model.

Automation and Orchestration

Dynamic Workload Security Policies, Dynamic Objects for Policy Sets

Dynamic security policies and objects ensure automation and orchestration align with cloud workloads, enabling consistent security across your evolving cloud environment without the need for static IP updates.

Administration

Consistent Hybrid-Cloud Firewall Policy Management, Centralized Hybrid Cloud Policy Management

Administration is simplified through consistent policy management across regions and accounts, supported by FortiManager for both on-prem and cloud, enhancing the manageability of your security posture.

User Authentication

Active and Passive Authentication, LDAP, RADIUS, SAML, SSL Client Certificate Support

The product supports comprehensive user authentication mechanisms, including LDAP, RADIUS, SAML, and SSL client certificate support, ensuring secure access control across your network infrastructure.

Cost

Better TCO, Lower Hourly Cost, Optimized Traffic Volume Cost

Fortinet offers a pay-for-use security model that aligns cost with protected traffic volume, ensuring a better total cost of ownership (TCO) by optimizing both hourly costs and traffic volume costs.

License Type

Simplified Consumption, PAYG Pricing Models for FGVM and CNF

The flexible licensing model, including pay-as-you-go options, ensures simplified consumption, allowing for a scalable and cost-effective approach to cloud network security.

Start With a 30-Day Free Trial

Comprehensive Security for AWS in 3 Easy Steps

Get a full-scale evaluation of all FortiGate CNF for AWS security capabilities with a test drive. See for yourself how easy it is to deploy enterprise-grade security, simplicity, and flexibility with a cloud-delivered firewall service.

1

2

Deploy FortiGate CNF

3

Configure the Firewall Policies

Evaluate CNF Protection With Free Test Drive

Still Not Convinced?
Go From Zero to
Secure in 7 Minutes.

Watch Deployment Video Read Technical Validation

URL copied to clipboard

Ready YourAWS Defenses

Mitigate Risk.Maximize Security.

Stay Ahead of Critical Threats

Malware

Data Exfiltration

Compliance Violations

Botnets

CryptominingPrevent connections that exploit cloud resources for cryptomining.

Threat Mitigation for Cloud Environments

Safeguard Your AWS Environment With Robust, Scalable Cloud Security

Safeguard Your AWS Environment With Robust, Scalable Cloud Security

Outbound TrafficInspection

Inbound TrafficProtection

East-West TrafficFiltering

Evaluate FortiGate CNF Capabilities

Throughput

Scalability

Rule Management

Integration With Cloud Services

Logging and Monitoring

Threat Intelligence Feeds

Intrusion Detection and Prevention System

High Availability and Redundancy

Ease of Deployment

Automation and Orchestration

Administration

User Authentication

Cost

License Type

See How Easily You Can Protect AWS Workloads

Threat Mitigation for Cloud Environments

Additional Resources

Secure Your Migration to AWS with a Cloud-Native Firewall Service

Learn About Features and Capabilities

Enterprise Strategy Group Evaluates FortiGate CNF

Simple to Manage, Easy to Consume.

Comprehensive Security for AWS in 3 Easy Steps

1

2

3

Still Not Convinced?Go From Zero toSecure in 7 Minutes.

Guided Demo

Ready Your
AWS Defenses

Mitigate Risk.
Maximize Security.

Cryptomining
Prevent connections that exploit cloud resources for cryptomining.

Outbound Traffic
Inspection

Inbound Traffic
Protection

East-West Traffic
Filtering

Still Not Convinced?
Go From Zero to
Secure in 7 Minutes.