FortiGate Cloud-Native Firewall (CNF) is a highly available SaaS service that simplifies network security while seamlessly scaling and integrating with AWS services such as AWS Gateway Load Balancer and AWS Firewall Manager. FortiGate CNF reduces the network security operations workload by eliminating the need to configure, provision, and maintain any firewall software infrastructure while allowing security teams to focus on security policy management. FortiGate CNF can be billed based on consumption or purchased through annual contracts.

Capabilities:

Industry-leading NGFW: FortiGate CNF provides next-generation firewall security capabilities such as intrusion prevention, application control, content filtering, and more. These capabilities are powered by FortiGuard Labs AI.

Simplified Management: The FortiGate CNF console provides users with a comprehensive toolset to manage network security in their cloud infrastructure. Associating AWS accounts, creating CNF instances, defining protected objects, and management of policies are all possible from the FortiGate CNF console. The console offers users less familiar with cloud security management purpose-built wizards to guide them through the process.

Scalability: FortiGate CNF scales to meet customer needs and each instance can protect up to 1000 subnets from multiple subnets, VPCs, and availability zones across multiple AWS accounts in a given AWS region.

Security Management Integrations: AWS Customers can utilize AWS Firewall Manager to provision FortiGate CNF instances and push security policies. Fortinet customers can use FortiManager to define and push security policies for FortiGate CNF in their AWS environments.

Flexible Consumption: FortiGate CNF offers the flexibility to consume the way that best fits your business. On-demand consumption for transient and unpredictable workloads, and annual contracts for cost control when workloads are more predictable.

This product entitles you to 1,000,000 credits. The credits are subtracted based on the actual usage (deployed CNF instances and traffic flowing through them) of different features as follows:

1 CNF Hour including support = 96 credits

1 Cost Optimized CNF Hour including support = 32 credits

1 GB of Traffic processing = 1 credit

1 GB of Advanced Security processing = 1 credit

After the 1,000,000 credits are consumed, you will be charged on-demand based on the PAYG listing price for FortiGate CNF. Alternatively, you can purchase additional credits.

Visit the FortiGate CNF Community Resource Hub to find onboarding, deployment, and technical information and join in discussions:

https://community.fortinet.com/t5/FortiGate-CNF-All-Marketplaces/gh-p/fortigate-cnf-on-aws