Transform your enterprise branch with secure sd-wan

Timo Lohenoja, Systems engineer Finland and the Baltics, Fortinet, https://dssitsec.eu

1. 2018 Fortinet Security Fabric A Security Architecture that provides: BROAD Visibility & Protection of the Digital Attack Surface INTEGRATED Detection of Advanced Threats AUTOMATED Response & Continuous Trust Assessment Delivered as: Appliance Virtual Machine Hosted Cloud Software

2. Transform your enterprise branch with Secure SD-WAN Timo Lohenoja, CISSP Systems Engineer [email protected]

3. Enterprise Branch Going Through Evolution 70% Of customers mentioned existing WAN is brittle, slow, expensive and not effective for cloud adoption 2 due to back-haul 62 Average number of cloud applications shows rapid growth of SaaS and IaaS 3 DX Transformation SaaS Inefficient Traditional WAN Security is “MUST” 90% Of SD-WAN vendors do no provide security. With direct internet access, security becomes critical at every branch Today’s Enterprise Branch WAN traffic is back-hauled to data-center which degrades SaaS Applications Performance

4. DataCenter MPLS Challenges with Today’s WAN SaaS Applications Branch Branch No App Visibility MPLS Internet No NGFW Security Expensive and Slow Poor Application SLA

5. DataCenter Secure SD-WAN Enables Digital Transformation SaaS Applications Branch Branch Hybrid WAN Support MPLS Internet Internet Application Visibility Opex Savings Rapid Provisioning High Application Performance Advance Security

6. Gartner : Four architectures to secure SD-WAN 90% of the SD-WAN vendors only offer stateful firewalls… Gartner, October 2017 Multiple products: Agility impact? Simplification impact? Management impact? One product: Integrated NGFW & SD-WAN Zero touch provisioning One management Multiple products: Agility impact? Simplification impact? Traffic impact? Management impact?

7. Evolution of Fortinet Secure SD-WAN 5.4 5.6 6.0! Application steering Link load Balancing Traffic Shaping Identification of cloud applications Dynamic WAN Path Controller Zero Touch Provisioning Pure Play SD-WAN vendors FortiGate SD-WAN Security 6.0 New Features Visibility into 3000+ applications Multiple SLA Strategies Enhanced Application monitoring FortiOS

8. FortiGate – Integrated NGFW with SD-WAN Application Aware Multi-Path Intelligence Multi Broadband Supported Simplified Provisioning Integrated SD-WAN with NGFW Security Anti-botnet Intrusion Prevention Antivirus IP Reputation SSL Inspection IPsec VPN Inspection Application Control Next Generation Security Networking & URL Filtering

9. Fortinet SD-WAN Gives Performance of a Lifetime – Recommended by NSS Labs Highest QoE for VoIP Best Total Cost of Ownership Only Security Vendor to be Recommended 4.38 out of 4.41 $5@749 Mbps Blocked 100% Evasions

10. FortiGate Secure SD-WAN Solution

11. Fortinet secure SD-WAN solution at a glance Ethernet Broadband 3G/4G failover VPNs Transport Independent App aware path controller Traffic engineering QoS and edge routing NGFW security FortiOS Integrated Secure SD-WAN Application SLA Unified centralized policy Zero touch deployment Single pane & end to end Management & Analytics

12. FOS 6.0 - Enable Best of Breed SD-WAN Visibility into 3000+ applications Application-level transaction for better SLA Dynamic WAN link selection using SLA strategies Automated fail-over capabilities High-level monitoring of SD-WAN devices on a map Detailed application monitoring Application Aware Multi-Path Intelligence Simplified Monitoring Certified Security Multi Broadband Supported Transport independent with support for Ethernet, 3G/4G Aggregate multiple interfaces into single SD-WAN interface Most Certified Security such as NSS Labs High Performance powered by Security Processor technology 6.0

13. SD-WAN Application Awareness – Broad and Deep BROAD DEEP Posts Games Videos Chat Granular Application Visibility 3000+ Applications Supported 6.0

14. Application Aware SD-WAN – FOS 6.0 Example SD-WAN Rules Granular application awareness with 3000+ known applications Internet Service Database Dynamically updated database of known service IPs and protocols Layer 4 Application Control Dynamically updated database of applications Deep inspection 6.0

15. Dynamic WAN path controller and measurement Application Steering WAN Path Measurements Dynamic Application Fail-over

16. Control Application Performance using Strategized SLA TOP CRITICAL HIGH MEDIUM LOW Best Quality Minimum Quality 6.0 6.0

17. Performance SLA (For high priority applications) Application-Level Transaction Latency < 200ms Latency < 100ms AND Packet Loss < 1% AND Jitter < 30ms Multiple Measurement Techniques Ping HTTP TCP Echo UDP Echo TWAMP Failover Parameters Check Interval Success before restore 6.0 6.0 Failure before inactive

18. SLA Strategy using Best Quality 6.0 No compromise on SLA High performance of business-critical applications Always use the link with the best SLA requirements regardless of link cost 6.0

19. SLA Strategy using Minimum Quality 6.0 Maintain SLA While Saving on Opex Consider both SLA and Link Cost

20. FortiManager - Single Pane of Glass Management VPN Visibility and Management on FMG NOC Dashboard and simple central monitoring Zero-Touch deployment with FortiDeploy

21. Centralized Applications SLA – FortiManager 6.0

22. Case Studies

23. Large SuperMarket in Northern Europe 30% Market Share in Netherlands 13 Independent Retail Organizations 1500 branches, 10 datacenters Unique set of security and networking requirements for each retail member Proliferation of IoT devices, demanding more bandwidth and security CHALLENGES Unified “best of breed” approach, competing against powerful national supermarket chains Undergoing digital transformation to simplify management and increase productivity GOALS EMEA SOLUTION Consolidation of Branch Services Fortinet’s patented VDOM functionality allowed customer to deploy multiple retail formulas from a single location Extended Fortinet’s SD-WAN solution to include switches, access points and extenders from Fortinet

24. 2018 Fortinet Solutions Network Security Multi-Cloud Security Endpoint Security Email Security Web Application Security Secure Unified Access Advanced Threat Protection Management - Analytics FortiGate Enterprise Firewall FortiGate Cloud Firewall Network Security FortiClient EPP FortiWeb Web Application Firewall FortiMail Secure Email Gateway FortiSandbox Advanced Threat Protection FortiAnalyzer Central Logging /Reporting FortiManager Central Security Management FortiSIEM Security Information & Event Management FortiGate Virtual Firewall Network Security FortiAP Wireless Infrastructure FortiSwitch Switching Infrastructure SWG SD-WAN IPS

25. Evaluate FortiGate SD-WAN! Native SD-WAN Proven NGFW FortiGate provides PROVEN best of breed SD-WAN features in base platform Make your branch application aware with our WAN Path Controller Consistent application performance with automated fail-over 90% of SD-WAN vendors do not offer NGFW security Fortinet is the industry leader in Security Effectiveness and Performance Simple to manage integrated NGFW And SD-WAN in single offering SD WAN NGFW