Welcome!

This NSE Level 2 training lesson covers Fortinet�s enterprise firewall

solution. At any time, you can click on the Tools icon in the lower-right corner to
open up the slide notes that are available for this lesson.

By the end of this lesson, you will be able to: Identify the business drivers along
with the security challenges customers currently face. Describe the customer value
of the enterprise firewall solution. Identify the Fortinet products and deployment
methods included in our enterprise firewall solution. Explain the vertical
strategies and competitive advantages of this solution.

First let�s take a look at the business drivers for the enterprise firewall
solution.

Fortinet�s enterprise firewall solution is best suited for enterprise customers

that maintain and own a variety of IT infrastructures. Although Fortinet�s
FortiGate firewall offerings do span multiple market and customer segments, the
enterprise firewall solution �story� is specifically targeted at the enterprise
market. Based on Fortinet�s sales history and general market trends, the top three
verticals for this solution are: financial services, healthcare, and commercial.

As the sophistication of cyber attacks continues to evolve, the base capabilities

of firewall technology can no longer remain limited to applications and network
traffic; firewall capabilities need to evolve to address the entire threat surface.
The potential market size for network security is clearly compelling. Forrester
reports that 43 percent of organizations are planning to upgrade their existing
firewalls. Both IDC and Gartner predict that enterprises will potentially spend
around 11 billion US dollars in the network security product space. The network
security market is growing by 9% year over year, with some sub-markets exploding
into the double digits.

Expanding on the Forrester survey findings, enterprises are looking for a solution
that can provide improved security effectiveness while reducing security management
complexity. IT departments of enterprises are also looking for greater
compatibility across form factors, consolidation of security areas, a high level of
reliable network performance, a decreased complexity of security management, all
along with a single pane of glass across their extended enterprise.

The enterprise firewall solution delivers industry-leading network security

effectiveness on a singe operating system. It also provides the fastest-performing,
cooperative security fabric to address the most advanced threats for today�s
borderless environments. Let�s look at this a bit closer.

Here are the some of the key high-level functions that constitute the Fortinet
enterprise firewall solution. It has: Multiple form factors to address the multi-
faceted needs of today�s extended enterprise infrastructures. Industry-leading
security effectiveness. A firewall�s effectiveness is measured by how good it is at
detecting the threats seen today. A consolidated network operating system that
incorporates all system and network function capabilities in a single OS. Single
pane of glass management. It can be used to maintain, configure, and control
various security policies, and it includes logging and reporting. A cooperative
security fabric. Cooperation and sharing threat intelligence between firewalls and
adjacent security technologies helps in the quick detection and remediation of new
threats. It also enables IP and management connectivity points to various
networking technologies. High-speed security processing. It is fast enough to be
placed in all ingress and egress points within the intranet and extranet of the
enterprise�s infrastructure.

In this table we show how each of the six key firewall solution functions that we
previously described are addressed with Fortinet products and technologies. The
multiple form factors function can be addressed with the rich variety of FortiGate
models and offerings. (We will review the FortiGate models in more detail later in
this lesson. )FortiGuard�s threat intelligence technology enables a high degree of
security effectiveness. The consolidation of network operating systems across the
Enterprise requires a level of unification in system and network functionality that
is provided by the FortiOS. FortiManager allows the centralized command and control
of all FortiGate systems. It provides the single pane of glass management approach
that enterprises are seeking. A cooperative security fabric is highly dependent on
intercommunications between disparate security technologies. An API is crucial in
making this happen; this is something both our FortiManager and FortiOS offer
today. Finally, all of these functions and interactions must occur quickly, with
little to no performance degradation. The FortiASIC processors that power our
FortiGate products can meet this challenge head on.

For a more technical examination we can group each of the key features and
functionalities into three major domains. The Management domain, as its name
implies, pertains to all things related to the management, provisioning, and
controlling of the firewall system. The Security domain is where you apply
deployment and security functions. For example, this is where a datacenter
deployment or a internal segmentation deployment would occur. The Fabric domain is
where firewall interfaces and network functions exist within a cooperative fabric.
It is also where you determine what information is shared across the enterprise.
This information could include things like threat intelligence updates to a policy
being created in one section of the fabric, then being contextually applied across
the entire enterprise. (For example, propagating information about malware detected
in one area of the enterprise across the rest of the infrastructure. ) These
functions reduce the need for multiple touch points and policies across the entire
infrastructure.

The main customer benefits of the Fortinet enterprise firewall solution can also be
grouped and examined in the same three areas: Management, Security, and Fabric. In
the Management area, Customer benefits include consolidated management overlays to
reduce complexity, and a single pane of glass management solution that provides a
�true north� reference point for security-based logging, configuration, and
reporting. In the Security area, Customer benefits include increased security
effectiveness to reduce and prevent security incidents. Also, you can maintain
performance expectations while applying deeper levels of inspection where it was
previously not possible. In the Fabric area, Customer benefits include automated
threat remediation and minimized breach intervals. The less time a breach is open,
the less data is exposed and financial harm can be done. With the Fortinet
enterprise firewall solution, information and threat data is shared across the
enterprise to speed up incident response times, giving security managers the
ability to unify security policy configurations across their infrastructure.