Cloud computing is becoming popular among enterprises looking to take advantage of the quick deployment, scalability, and cost savings. Both public cloud adoption and private cloud infrastructure, are rapidly transforming data centers worldwide. Evolving your infrastructure means your security must evolve as well. If your security can’t keep up with the agile public, private, and hybrid cloud environments of today, gaps in protection will occur. There are a number of deployment methods being used today that require scalable security capable of keeping up with elastic workloads. Fortinet™ provides comprehensive security for private, public, and hybrid deployments before, during, and after migration—with one solution. OpenStack™ is the only solution that allows for mixed Hypervisor IT environments. It offers the technical capabilities of proprietary alternatives at a fraction of the cost. Many public clouds are delivered today using OpenStack™ projects. Networks are transitioning to new models more suited to the cloud with SDN, NFV, and Virtual Network Infrastructure, and their relationships between networking, security orchestration, and policy enforcement.

The platforms are massively scalable and cost—efficient, designed to instantly meet the demands of large—scale, performance—intensive workloads. Fortinet™ supports OpenStack™ hypervisor compute drivers including Citrix Xen™, KVM™, VMware ESXi™, and Microsoft Hyper—V™ to provide performance, reliability, and security in OpenStack™ public cloud services. Virtualization and SDN are rapidly transforming data centers into agile, innovative, and cost—effective private clouds. If your security can’t keep up with these fast, flexible environments, there can be protection gaps or manual security processes that negate the advantages of network virtualization and SDN. The Fortinet™ SDN security framework delivers security built for these networks. It defines security evolution across the network architecture. It evolves network security in each conceptual layer of network architecture: the data plane, control plane, and management plane. Fortinet™ is the only company with security solutions for network, endpoint, application, data center, cloud, and access designed to work together as an integrated security fabric to provide true protection. Your cloud security must keep up with your cloud instances when they scale.

Integration With VMware NSX And Cisco ACI Orchestration

As an innovator and leader in ASI—based data center security appliances, Fortinet™ also offers the largest range of virtual appliances that provide better visibility and control of virtual network traffic. Virtual appliances also facilitate scale—out elasticity, automation, and orchestration due to the containerization within a VM form factor. Fortinet™ also provides out—of—the—box integration with leading orchestration platforms such as VMware NSX™ and Cisco ACI™, as well as rich API extensibility, so that security policy can be seamlessly applied in logical and dynamic environments. Fortinet™’s SDN security solution is certified by leading SDN, Network Virtualization, and Network Function Virtualization (NFV) platforms and can be applied to any data center cloud environment. For organizations implementing Cisco Application Centric Infrastructure™ fabric architecture, the updated Cisco ASA 5585—X™ and Cisco Adaptive Security Virtual Appliance™ (ASAv) solutions can be fully integrated into the Cisco Application Centric Infrastructure™ fabric. This approach removes the limitations of traditional network—oriented security solutions in complex, dynamic data center environments.

Fortinet Cloud Security For AWS And Microsoft Azure

Fortinet™ secures the Amazon Virtual Private Cloud™ in multiple AWS Availability Zones™ (AZ) on—demand, to provide highly available advanced network firewall functions, segmentation, and encryption across on—premises and cloud environments. This solution securely extends cloudbursting—private—to—public cloud migration—with IPS, URL filtering, antivirus, and application/data threat prevention. Fortinet™ provides cloud security while offering economies of scale with flexible licensing, metering and billing options. Fortinet™ embeds the latest AWS Auto Scaling™ functionality and FortiGate CloudFormation™ template configuration into Fortinet™ cloud security fabric, providing automation based on resource demand from cloud workloads. Fortinet™ delivers optimized security for applications and data in Microsoft Azure™ and avoids unnecessary security expenditures during cloud migration. FortiGate™ next generation firewall creates a purpose—built Microsoft Azure Resource Manager™ (ARM) template to deploy and provision all of the resources for your Fortinet FortiGate™ in a single, coordinated operation to give you the most complete NGFW security functions.

Fortinet Public–Private And Hybrid Cloud Security

Cloud computing provides elastic and scalable infrastructure for applications, storage, and data that changes the way the world does business. In public clouds, infrastructure is offloaded to cloud providers such as AWS™ and Microsoft Azure™, while security becomes a shared responsibility between the cloud service provider and the enterprise tenant. Fortinet™ enables secure workloads in public clouds to ensure privacy and confidentiality while leveraging the cloud benefits of scalability and metering. Most organizations are in the process of moving from an on—premises data center to a public cloud service and planning to maintain a combination of both conventional IT and public cloud deployments. Building a dynamic hybrid cloud requires open and secure migration of large volumes of data and applications, reliable site—to—site connectivity, and stretching of network topologies across the WAN. Support for leading network virtualization and SDN platforms including VMware NSX™, Cisco ACI™, and OpenStack™. Multi—tenant support and virtual domain support for network segmentation and security service function deployment. API’s for cloud automation and orchestration.

Features And benefits

Security for Cisco ACI™—Cisco Application Centric Infrastructure™ (ACI) takes in FortiGate™ appliances (physical and virtual) as L4—L7 security firewall services. All policy orchestration, provisioning, and scaling are automatic and centrally—profiled based on application heuristics and workloads. Cisco ACI’s™ unique approach uses a common policy—based operating model across a network that overcomes IT silos and drastically reduces costs and complexity. Security for VMware NSX™—Fortinet’s FortiGate VMX™ solution with VMware NSX™ protects east—west traffic, which now accounts for up to 80 percent of network traffic. The Fortinet™ solution with VMware™ eliminates the previous hair—pinning process and enables policy—based firewall controls on each VMware vNIC™ across the data center for east—west traffic inspection. To close security gaps, the solution automatically scales the advanced security features available on each hypervisor joined to the security cluster, where consistent policies and firewall rules are applied. Security for OpenStack™ based SDN—OpenStack™—based clouds provide the environment needed for elastic, on—demand multitenant applications.