Fortinet FortiGate Next-Generation Firewall
Home — PartnersFortinet — Fortinet FortiGate Next-Generation Firewall

Fortinet’s award—winning network security appliances provide one platform for end to end security across your entire network. The Fortinet FortiGate Next-Generation Firewall (NGFW) is optimized for internal segmentation, perimeter, cloud, data center, distributed, and small business deployments. Simplify your security posture with one security solution across your physical, virtual, and cloud deployments. Fortinet FortiGate Next-Generation Firewall is top rated security — NSS Labs recommended. To be effective against today’s evolving threat landscape, your security solution needs to reliably control network traffic through awareness of applications, users, and content. To be efficient, it needs to consolidate wired and wireless management and visibility. With built-in controllers, single pane of glass management, and total scalability, Fortinet FortiGate provide comprehensive security and networking while saving IT resources. Comprehensive security in one, simplified solution.

To be effective against today’s evolving threat landscape, your security solution needs to reliably control network traffic through awareness of applications, users, and content. To be efficient, it needs to be consolidated, simple to manage, and easily scalable. Increase security coverage while simplifying management across your physical, virtual, and cloud deployments. FortiOS2 gives you one click visibility into network traffic and one click controls to take immediate action. To provide consistently top rated security, greater visibility, and unmatched performance, we give you the unique combination of the most advanced threat intelligence from FortiGuard Labs with the intuitive FortiOS operating system, and purpose-built FortiASIC processors. The FortiGate 1000 series delivers high throughput up to 80 Gbps and ultra low latency. It has high—speed interfaces up to 10 GE with high port density, providing maximum flexibility and scalability.

Better Protection, Deeper Visibility, And Superior Performance

To provide consistently top rated security, greater visibility, and unmatched performance, we give you the unique combination of the most advanced threat intelligence from FortiGuard Labs with Fortinet’s intuitive FortiOS operating system and purpose-built FortiASIC processors. FortiOS provides consolidated, Intuitive Control with FortiOS, accelerated Performance with FortiASIC, and industry leading Security with FortiGuard. FortiGate enterprise firewalls include end to end security across the full attack cycle, top rated security validated by third parties, internal segmentation firewall deployment for additional protection, centralized management across physical, virtual, and cloud deployments. FortiGuard Security Subscription Services enable visibility and control for next-generation protection against advanced threats, including zero day attacks. Additional critical defense subscriptions can be easily added.

Fortinet FortiGate Next-Generation Firewall

The Fortinet FortiGate NGFW 7000 high-end series delivers high performance network security designed for the most demanding networks. The FortiGate Next-Generation Firewall 900-100 mid range series delivers superior performance, high gigabit port density, and consolidated network security features for mid-sized businesses and enterprise branch locations. The Fortinet FortiGate Next-Generation Firewall 90-30 series appliances deliver up to 4 Gbps of firewall throughput and include multiple, integrated 1 GE ports. This combination of performance, port density, and consolidated network security features offers an ideal platform for small to mid—sized businesses and enterprise branch locations. Fortinet FortiGate Next-Generation Firewall Virtual Appliances offer the same level of protection as FortiGate hardware appliances, with support for all of the security and networking services offered by the FortiOS operating system.

Scalable, High-Performance Network Security

To be effective against today’s evolving threat landscape, your security solution needs to reliably control high volumes of network and cloud traffic through awareness of applications, users, and content. To be efficient in large enterprise and service provider dynamic environments, it needs to be consolidated, simple to manage, easily scalable, and future-proof. FortiGate chassis-based next-generation firewalls deliver scalable threat protection and high reliability for the most demanding networks. Extensive network interfaces, consolidated security services and simplified management deliver uncompromising protection from cyber threats and malware, at the edge, in the data center and core network. FortiGate chassis-based next-generation firewalls are the core of Fortinet Security Fabric, using continuous threat intelligence to provide end to end security across the entire attack surface.
Fortinet FortiGate Next-Generation Firewall

Application Security

Web applications and email systems have long been favorite targets of hackers because they have access to valuable information and they are relatively easy to exploit. A successful attack can result in a variety of devastating consequences including financial loss, damage to brand reputation, and loss of customer trust. Most organizations do not recover from a major security breach, making it absolutely critical to protect your users and customers from threats that target applications and email systems.

Fortinet Data Center Application Security solution consists of a robust and integrated set of products to protect against these attacks. We are the only company that delivers a complete single-vendor solution with the proven performance and security effectiveness to meet the increasing demands of today’s data centers. In addition, our application security solutions can be integrated with Fortinet FortiGate next-generation firewalls and Fortinet FortiSandbox sandbox for extra defenses against Advanced Persistent Threats (APTs).


The enterprise data center is evolving rapidly with technologies such as virtualization, software-defined networking, and public cloud computing. Trying to apply traditional security to new technologies generally will not be effective. Enterprises need to evaluate their data center initiatives and how they will impact network security to ensure all areas of the data center remain protected. Today’s data centers are dynamic and complex. Security solutions need to be flexible, effective, and easy to manage so they bring order to the chaos instead of adding to it. Fortinet can protect your physical, virtual, and cloud servers with one solution — whether data center, private cloud, or public cloud deployments.

Under constant attack, organizations cannot afford to choose between security and maintaining a high-performance business infrastructure. Your extended enterprise needs proven security that won't compromise performance: from deep within internal segments, to physical and virtual data centers, to dynamic cloud environments. Deploying network security solutions from multiple vendors causes unnecessary complexity and introduces security gaps. The Fortinet Enterprise Firewall Solution delivers industry-leading security effectiveness with unmatched performance capabilities — through one operating system managed within a single pane of glass.

Cloud Security

Cloud computing is becoming increasingly popular among enterprises looking to take advantage of the quick deployment, unprecedented scalability, and cost savings. Private cloud infrastructure, including virtualization and software-defined networking (SDN), are rapidly transforming data centers worldwide. At the same time, organizations are rapidly embracing public clouds, both migrating workloads to Infrastructure-as-a-Service (IaaS) clouds like AWS and Azure, and adopting Software-as-a-Service (SaaS) applications. This results in a hybrid cloud and increasingly multi-cloud environment that is truly borderless for your enterprise users, data, and applications.

Evolving your infrastructure means your security must evolve as well, to protect your enterprise regardless of where your infrastructure and applications are running. If your security can’t keep up with the agile public, private, and hybrid cloud environments of today, gaps in protection will occur. There are a number of deployment methods being used today that require scalable security capable of keeping up with elastic workloads. Fortinet provides comprehensive security for private, public, and hybrid deployments before, during, and after migration — with one solution.


At the heart of Fortinet data center security are the FortiGate data center firewalls which are purpose-built FortiASIC processors that enable this extremely high level of performance. These custom content and network processors provide near-wire speed switching, routing, and stateful firewalling. The network processors eliminate the need for legacy Layer-2 switches and routers within the data center. Instead, FortiGate takes over and performs network segmentation, switching, routing, and network security, all while reducing network complexity.

Furthermore, our integrated architecture provides extremely high throughput and exceptionally low latency, minimizing packet processing while accurately scanning the data for threats. Custom FortiASIC processors deliver content inspection at multi-gigabit speeds. The only way for a network security platform to scale is via purpose-built ASICs to accelerate specific parts of the packet processing and content scanning function. FortiGate technology utilizes Optimum Path Processing (OPP) to optimize the different resources available in packet flow. The FortiASIC can scale to 500 Gbps of firewall throughput independent of packet size while maintaining a high number of sessions and extremely low latency.

Fortinet FortiWeb

FortiWeb provides integration with leading third-party vulnerability scanners including Acunetix, HP WebInspect, IBM AppScan, Qualys and WhiteHat to provide dynamic virtual patches to security issues in application environments. Vulnerabilities found by the scanner are quickly and automatically turned into security rules by FortiWeb to protect the application until developers can address them in the application code. Quarantined IPs HTTP Traffic service protects you from known attack sources like botnets, spammers, anonymous proxies, and sources known to be infected with malicious software.

FortiWeb Security Service is designed just for FortiWeb including items such as application layer signatures, malicious robots, suspicious URL patterns and web vulnerability scanner updates. Finally, FortiWeb offers FortiGuard’s top-rated antivirus engine that scans all file uploads for threats that can infect your servers or other network elements. FortiWeb provides maximum flexibility in supporting your virtual and hybrid environments. The virtual versions of FortiWeb support all the same features as Fortinet hardware-based devices and work with all the top hypervisors.