FortiGate®-VM on AliCloud

Overview

FortiGate®-VM on AliCloud provides next-generation firewall capabilities, suitable for organizations of all sizes. It can be flexibly deployed as a next-generation firewall, internal segmentation firewall, and/or VPN gateway. It defends against network threats with high performance, security, and deep visibility.

Security Capabilities

• Leverage FortiGuard threat research and response lab for dynamic defense against known and unknown vulnerabilities and exploits.
• Identify over 5,000 applications, including cloud applications, for deep inspection of network traffic.
• Proactively defend against unknown attacks through dynamic analysis and automated processes to block attacks.

Third-Party Certifications & Recognition

• Fortinet solutions' security effectiveness and performance are validated by authoritative third-party testing and certification.
• Certified by organizations such as NSS Labs, ICSA, Virus Bulletin, and AV Comparatives.

Network Functions

• Provides comprehensive routing, switching, and VPN capabilities.

Management Features

• Virtual and physical devices can be managed through a unified management interface.
• Comprehensive license selection available to meet any infrastructure requirement.
• Supports multi-tenant VDOM mode (BYOL licenses only).

Security Fabric Synergy

Fortinet Security Fabric enables synergy and collaboration across multiple products and open technology partners, extending security capabilities across the entire attack surface. It integrates AI-driven breach detection and prevention capabilities, enabling automated operations, policy orchestration, and threat response. Security performance can dynamically scale and adapt to increasing workloads and data. It ensures seamless tracking and protection across the entire network, including IoT, devices, and cloud environments, covering data, users, and applications. All these leading security features are tightly integrated into a single management console, significantly reducing system complexity.

FortiGate NGFW serves as the foundation of the Security Fabric, enabling close integration and collaboration with other Fortinet security products and Fabric-ready technology partners. This establishes network visibility and control, further enhancing security.

Integrated Fortinet Products:

• FortiManager
• FortiAnalyzer
• FortiSandbox
• FortiAuthenticator
• FortiSIEM
• FortiWeb
• FortiMail

Deployment Options

Next-Generation Firewall (NGFW)

• Integrates and applies comprehensive threat defense capabilities to FortiGate instances within AliCloud.
• Offers enterprise-grade topology building capabilities, providing granular visibility into devices, users, and threat information, significantly reducing deployment complexity.
• Features an award-winning Intrusion Prevention System (IPS) for deep inspection of network traffic application-layer content, identifying and blocking threats and intrusions.
• Extends security defense posture through Security Fabric synergy and collaboration.

Internal Segmentation Firewall (ISFW)

• A segmentation solution that provides end-to-end threat defense while meeting compliance requirements.

VPN Gateway

• Secures connections using SSL and IPsec VPN.

Deployment Diagram Description

The deployment diagram illustrates FortiGate-VM on AliCloud functioning as an NGFW, ISFW, and VPN Gateway. It depicts an "On-premises Data Center" with "Servers" connecting via a "VPN Gateway" to "AliCloud". Within AliCloud, an "NGFW" and an "ISFW" are shown, which then connect to "Web Servers" and "App Servers". A "User" is also shown connecting to the "On-premises Data Center".

FortiOS Operating System

FortiOS is the operating system for FortiGate NGFW, utilized across all FortiGate series devices, including virtual platforms. This OS delivers all of FortiGate's network and security functions and services, along with exceptional visibility, thereby reducing complexity, lowering operational costs, saving time, and improving security deployment efficiency.

Key FortiOS Features:

• A highly integrated platform managing all security and network services across all FortiGate platforms via a single OS and unified console.
• Industry-leading protection: Security effectiveness and performance are validated by NSS Labs, VB100, AV Comparatives, and ICSA. It also supports the latest security technologies, such as deception-based security.
• Full TLS 1.3 support, with real-time URL ratings and thousands of application controls, blocking the latest exploit attempts and filtering network traffic.
• AI-driven threat prevention and advanced threat protection capable of automatically preventing, detecting, and mitigating advanced attacks within minutes.
• Extended SD-WAN capabilities and intent-based network micro-segmentation for detection, containment, and isolation of threats, enhancing user experience.

Services

FortiGuard™ Security Services

FortiGuard Labs provides real-time, actionable threat intelligence, delivering comprehensive security updates across the entire Fortinet solution portfolio. Their team of over 200 threat researchers, security engineers, and forensic experts collaborates with leading threat organizations and other cybersecurity vendors to share threat intelligence.

FortiCare™ Support Services

The FortiCare customer support team provides global technical support for all Fortinet products. FortiCare TAC support staff are located across the Americas, Europe, the Middle East, and Asia, catering to the service needs of businesses of all sizes.

For more information, visit: fortinet.com/fortiguard and fortinet.com/forticare.

Licensing

FortiGate-VM is suitable for various cloud deployment scenarios, including private and public clouds. For AliCloud, FortiGate-VM supports both Pay-As-You-Go (PAYG) and Bring-Your-Own-License (BYOL) licensing models.

PAYG is a flexible option for initial deployments and subsequent expansion needs, with Fortinet offering various instance types to suit different scenarios.

BYOL is ideal for migrating existing private cloud deployments to public cloud environments. When using existing licenses, only the AliCloud instance cost is an additional charge.

Specifications (BYOL License System Requirements)

FortiGate-VM on AliCloud supports FortiOS 5.6.3 and later versions.

Note: VDOMs are not supported by default for FG-VMxxV and FG-VMxxS series. See ORDER INFORMATION for VDOM addition SKUs if multiple VDOMs are required on your FortiGate-VM.

For sizing guidance, please refer to the relevant sizing documentation on www.fortinet.com.

Order Information (BYOL License SKUs)

The following are order SKUs for the BYOL license model. For PAYG/on-demand payment, different instance/VM types are available on the Marketplace. BYOL represents a perpetual license (corresponding to PAYG/on-demand payment), which is priced hourly for products listed on the Marketplace.

Optional Add-ons

Note: FortiGate-VM S series supports FortiOS 6.2.3 and later versions, with no RAM limitations across all vCPU levels. CPU count and support package types can be upgraded during the contract term; downgrades are not supported. Contact a Fortinet sales representative for more information.

Order Information (Annual Subscription License SKUs)

The following SKUs use an annual subscription licensing model:

Support Packages:

¹ 24x7 service and advanced ticket handling.

² Cloud services.

Note: FortiGate-VM S series supports FortiOS 6.2.3 and later versions, with no RAM limitations. CPU count and support package types can be upgraded. Contact a Fortinet sales representative for more details.