Fortinet Security Fabric

Tomislav Tucibat, Major Accounts Manager Adriatic

26th April, 2017

© Copyright Fortinet Inc. All rights reserved.

Fortinet Strategy – Security for a New World

COMPLEX BORDERLESS SLOW

SECURITY WITHOUT COMPROMISE

SEAMLESS INTELLIGENT POWERFUL

2
But The Evolution of Change Never Stops

Green SaaS IoT

Google’s 13 data
centers use 0.01%
of global power
On average, companies
have 10+ applications
running via the Cloud
35B devices, mostly
headless attaching
to the network
5G
Wireless

SDN/NFV IaaS Analytics

Software-defined Security still the Big Data
everything. SD WAN No.1 inhibitor

FUTURE

Social Internet 2
Bandwidth ever
increasing
100G 100 Gbps and

UHDTV
Virtualization Mobile Bandwidth
80% of data center No control of Wi-Fi speeds rival LANs.
apps are virtualized endpoints (BYOD) 100G networks here

3
Trend #1 - Cloud Adoption Accelerating

 $318B Public Cloud Services

market by 2019 *

 Cloud Security Barrier to Cloud

Adoption

* Gartner

4
Trend #2 - 6.4 Billion Connected “Things” Predicted for 2016

 Will reach 20 Billion by 2020*

 Majority will be “Connected”

Wirelessly

 Most will be Headless and have NO

Security

* Gartner

5
Trend #3 – CyberSecurity Skills Shortage

 Enterprises struggling to cope

 ESG – Cybersecurity specialist

hardest IT position to fill
» Global MSS Market to reach
$29.9B*

* AMR

6
Bridging the Gap between Strategy and Reality
Joining A Strategy to Real Life Solutions

Business
Strategy Security For A New World

FORTINET SECURITY FABRIC

7
Bridging the Gap between Strategy and Reality
Joining A Strategy to Real Life Solutions

Business
Strategy Security For A New World

Enterprise Cloud
Realization ATP SAA DC Security
Firewall Security

8
Bridging the Gap between Strategy and Reality
Joining A Strategy to Real Life Solutions

Business
Strategy Security For A New World

Technology
Vision FORTINET SECURITY FABRIC

Enterprise Cloud
Realization ATP SAA DC Security
Firewall Security

9
 Advanced
Threat NOC/SOC
Intelligence

BROAD
POWERFUL
AUTOMATED Client
Cloud

Network

Access Application

Partner API

10
 Key Fabric Attributes
Access to Data Center, IoT to Cloud

Scalability
Scalable Aware Secure Actionable Open

11
Scalable from Access to Data Center, IoT to Cloud

Single Pane of Glass Global & Local Single Network

(Management) Security Updates Operating System

Device Access Network Cloud

WLAN / LAN Distributed Edge Segmentation Carrier SDN

Endpoint Data Center Private Cloud IaaS/SaaS
Rugged Enterprise Branch Class Provisioned

Distributed
NSF
Chassis
>Terabit
Appliance
Appliance >300G
Appliance >30G Virtual Machine Virtual Machine
Device
>5G SDN/NFV On Demand
>1G

12
Key Fabric Attributes
Access to Data Center, IoT to Cloud

Scalable Aware Secure Actionable Open

13
A Learning Mode
Combating Complexity

User Device Physical Network &

Identification Identification Topology Application Topology
Who is connected? What devices do we have? How are they connected? What Policies do we need?

MONITOR AND LEARN

14
Key Fabric Attributes
Access to Data Center, IoT to Cloud

Scalable Aware Secure Actionable Open

15
 Maintaining Security for the Network
Comprehensive Security with Full Performance

CPU Only Parallel Path Processing (PPP)

More Performance

Packet Policy Content Optimised

Processing Management Inspection
Less Latency
Policy Management
CPU SoC
Packet Processing

Deep Inspection

Less Space

Less Power

16
Security for the Cloud
Securing Throughout the Cloud Journey
Public Cloud
On-Demand
Virtualization Private Cloud
Hypervisor Port SDN - Orchestration Integration

East-West North-South IaaS Cloud

Hypervisor

NGFW WAF Management Reporting APT

Connector API Flow

SaaS Cloud

Proxy Broker
CASI API

17
Security for Access – Unified Secure Access
1 2 3
Infrastructure Integrated Cloud
On Premise Management On Premise Management Cloud Management

WLAN

FortiGate

LAN FortiSwitch

18
 Security Across all of the Network - Global and Local
Threat Intelligence for Security Efficacy

Vulnerability Web Cloud

Threat Intelligence Threat App Control Antivirus Anti-spam Management Filtering Sandbox
Exchange Researchers

Deep Mobile
IPS Web App Database Botnet
App Control Security

FortiSandbox

FortiClient FortiGate FortiMail FortiWeb Partner

Advanced Threat Protection

19
Key Fabric Attributes
Access to Data Center, IoT to Cloud

Scalable Aware Secure Actionable Open

20
Actionable Across the Whole Network

Support Services Single Pane of Glass Migration to Cloud Based Systems

FortiCare FortiManager FortiCloud FortiGuard+ Cloud FortiSanbox

IoT Mobile

Access WAN Data Center

PoS Windows

21
Key Fabric Attributes
Access to Data Center, IoT to Cloud

Scalable Aware Secure Actionable Open

22
Multiple Levels of Fabric API’s for Partner Integration
Eco System Alliance Partners

SIEM Management

Endpoint Fortinet Security Fabric SDN

Virtual Cloud

23
Intelligent security is OPEN
OPEN

The Fortinet Security Fabric allows integration of other security technologies

VIRTUALIZATION & SDN/NFV CLOUD ENDPOINT & IoT

MANAGEMENT SIEM SYSTEMS INTEGRATOR

24
..and we mean open ☺
 Cyber Threat Alliance:
» Fortinet + Palo Alto Networks founded CTA – may 2014
» Defined as Cyber Defense Consortium; goal is to have Automated Threat Intelligence
Sharing Platform
» Now it extended to
 Intel Security Group, Intel Corporation;
 Check Point;
 Cisco Security;
 Symantec;
 McAfee
 Telefonica
 Zscaler
 Barracuda

25
 New Fortinet Fabric Ready Partners

https://blog.fortinet.com/2017/03/14/fortinet-welcomes-new-industry-
leading-technology-partners-to-their-security-fabric-ecosystem

26
Fortinet Security Fabric – What Does it Do?

 Provides a framework for meeting today’s and tomorrow’s

security challenges

 Brings the power of threat intelligence to all four corners of a

network

 Enables collaboration and an ever growing ecosystem

27
The FortiGate – center of the fabric
Security Fabric: Easy integration

29
30