Patrick Grillo, Senior Director Solutions Marketing
Daniel Kendall, Systems Engineer / SD-WAN Expert
When Old WAN Technologies Ride off into the Sunset…
RIP RIP RIP
Leased ISDN X.25
Lines
RIP RIP RIP
Frame MPLS ???
Relay
© Fortinet Inc. All Rights Reserved. 2
SD-WAN Circa 2019
SD-WAN
© Fortinet Inc. All Rights Reserved. 3
SD-WAN Evolves
V1.0 Focus on Connectivity and Cost Savings
V2.0 Introducing Secure SD-WAN
© Fortinet Inc. All Rights Reserved. 4
SD-WAN Circa 2024
SD-WAN
© Fortinet Inc. All Rights Reserved. 5
Global SD-WAN Market 2023 – 2027*
CAGR 16.5%
12
10
8 $9,6B
$B
6 $7,2B
4 $5,2B
2
0
2023 2025 2027
*Gartner © Fortinet Inc. All Rights Reserved. 6
Factors Surrounding SD-WAN
CLOUD WAN & LAN ZERO TRUST SASE
© Fortinet Inc. All Rights Reserved. 7
SD-WAN Evolves to Meet the Challenges
V1.0 Focus on Connectivity and Cost Savings
V2.0 Introducing Secure SD-WAN
V3.0 Convergence
© Fortinet Inc. All Rights Reserved. 8
From Networking Innovation to Networking Cornerstone
Cloud
SD-
WAN
© Fortinet Inc. All Rights Reserved. 9
Secure SD-WAN – Introduce Multi-Cloud
Flexible Application Steering at Edge
Public Cloud Traditional
Internet SaaS
Data Center
Convergence Consistent
Security
SD
WAN
• Network Firewall • Application Aware
• Secure SD-WAN • Intrusion Prevention
• Cloud Security & On-Ramp • Web Filtering
• DNS Protection
• Sandboxing
• In-Line Sandboxing
• In-Line CASB
• OT and IoT Security
Campus Branch Factory
On-premises Users
© Fortinet Inc. All Rights Reserved. 10
Fortinet Secure SD-WAN for Hybrid and Multi-cloud
Enabling the cloud on-ramp & multi-cloud
Applications/Workloads
• Cloud-native connectivity integrations
with Fortinet Security Fabric
• Automation for efficient cloud
operations Network
Azure AWS Transit
• Superior Application QoE
Virtual WAN Gateway
Connectivity
Center …
Simplifies SD-WAN Cloud On-ramp Orchestration
deployments across
multi-cloud and Cloud On-Ramp Multi-Cloud
SD-WAN SD-WAN
hybrid clouds
Edge Datacenter FortiGate
© Fortinet Inc. All Rights Reserved. 11
Optimizing Secure Access to SaaS Applications
• Granular application identification
and dynamic traffic steering
• Middle mile optimization
• API integration to optimize
application reachability 1
Pa imiz
ion
op
ss ing
t
• Passive and active WAN link
grat
i ve S
, a aa
Inte
cti S e
SLA to optimize application
ve xp
2
API
W er
AN ien
performance Middle Mile
SL ce
Optimization
A
FortiManager
Secure SD-WAN
© Fortinet Inc. All Rights Reserved. 12
From Networking Innovation to Networking Cornerstone
Cloud
SD- WAN
WAN & LAN
© Fortinet Inc. All Rights Reserved. 13
Secure SD-WAN – Extend to the LAN
Consolidate Visibility and Management on the LAN
Public Cloud Traditional
Internet SaaS
Data Center
Convergence Consistent
Security
SD
WAN
• Network Firewall • Application Aware
• Secure SD-WAN • Intrusion Prevention
• Cloud Security & On-Ramp • Web Filtering
• SD-Branch • DNS Protection
• Sandboxing
• In-Line Sandboxing
• In-Line CASB
• OT and IoT Security
Campus Branch Factory
© Fortinet Inc. All Rights Reserved. 14
Secure Connectivity
The power of convergence with a single platform
Flexible and Scalable Networks Converged with Security
Flexible Choice of Management
Can be managed via cloud, FortiLAN Cloud FortiManager
virtual machine, or appliance
and Deployment
NGFW Security & Control • IPS
Converged Accelerated • AV
Best of Breed Security extended • IoT
to the LAN Enterprise Security • Web Filter
FortiExtender FortiAP FortiSwitch FortiNAC
Full Visibility with Control
NAC functions with policy
AI Automation and FortiLink FortiLink FortiMonitor FortiAIOps
enforcement built in Intelligence NAC
Microbranch Branch Campus DataCenter
Expand the power of SASE to the Convergence of SD-WAN, WLAN, Security, visibility, and control at Provide the performance and
smallest edges of your network LAN, and 5G Gateway into an scale for large deployments. security necessary for todays and
easily orchestrated and managed tomorrow’s datacenter
solution.
© Fortinet Inc. All Rights Reserved. 15
Delivering a Secure Office
Enterprise Requirements Convergence High ROI & Low TCO
NGFW
One Console
Wireless
One Config
Switching
Fewer Licenses
Simplified
NAC Operations
© Fortinet Inc. All Rights Reserved. 16
From Networking Innovation to Networking Cornerstone
Cloud
SD- WAN
WAN & LAN
Zero
Trust
© Fortinet Inc. All Rights Reserved. 17
Secure SD-WAN – Deploy Zero-Trust Principles
User, Device & Session
Public Cloud Traditional
Internet SaaS
Data Center
Convergence Consistent
Security
SD
WAN
• Network Firewall • Application Aware
• Secure SD-WAN • Intrusion Prevention
• Cloud Security & On-Ramp • Web Filtering
• SD-Branch • DNS Protection
• Introduce ZTNA • Sandboxing
• In-Line Sandboxing
• In-Line CASB
• OT and IoT Security
Home Campus Branch Factory
© Fortinet Inc. All Rights Reserved. 18
Fortinet’s Universal ZTNA
ZTNA Application Gateway
SaaS Apps
Campus Complete Coverage
Continuous Verification
Branch
Flexible Deployment
Consolidated Offering
Remote Data Center
Verified user identity, device identity Wherever the
Wherever the user is
and posture check prior to access application is
© Fortinet Inc. All Rights Reserved. 19
Universal ZTNA Operation–Remote Employee
Private application and SaaS
Policy SaaS Apps
Application
Application
Paul FortiClient NGFW, WAF, ADC
NGFW Data Center Application
Benefits
1 2 3 4 5 • Low-latency for best user experience
• Continuous Verification
Validate Verify Device Application Encrypted
Device User Posture Access Only • Leverages Existing Infrastructure
Access
• Traffic Security Inspection
© Fortinet Inc. All Rights Reserved. 20
From Networking Innovation to Networking Cornerstone
Cloud
SASE
SD- WAN
WAN & LAN
Zero
Trust
© Fortinet Inc. All Rights Reserved. 21
Secure Access Service Edge (SASE)
True convergence, visibility and management
Public Cloud Traditional
Internet SaaS
Data Center
Convergence Consistent
Security
Secure SD
Services
Edge WAN
• Network Firewall • Application Aware
• Secure SD-WAN • Intrusion Prevention
• Cloud Security & On-Ramp • Web Filtering
• SD-Branch • DNS Protection
• Introduce ZTNA • Sandboxing
• Secure Access Service • In-Line Sandboxing
Edge • In-Line CASB
• OT and IoT Security
Travel Home Campus Factory
Branch
© Fortinet Inc. All Rights Reserved. 22
Secure Networking Journey to SASE
Single Management and Reporting Console
Single Management Consistent
and Analytic Console Enterprise Security
1 2 3 4 5
Hybrid Mesh Secure Secure
SASE Universal
Firewall SD-WAN WLAN/LAN
ZTNA
Control points Optimize application Secure all your Secure remote Apply zero trust
across the experience edges users to all users
infrastructure applications
© Fortinet Inc. All Rights Reserved. 23
Fortinet Universal SASE
Consistent Security and Superior User Experience Everywhere
Zero Trust Security Posture
Remote Users
Secure SaaS
Access
FortiClient
Unified
Management CASB/DLP
Secure Internet
Secure Application Access
Access
Flexible Connectivity
Micro Branch
Bi-directional SWG
FortiSASE
Firewall
Secure Private
Access
End-to-End
Digital
Experience ZTNA
Branch, Campus
Secure Private
Access
Data NGFW
Secure Center
SD-WAN
Secure SD-WAN
FortiGate Network
© Fortinet Inc. All Rights Reserved. 24
Real World Example – UK Government
Key
Traditional DCs Public Cloud(s)
SD-WAN
Azure Virtual Overlay
Internet Generic AP
VDI Machine Network
Generic Virtual Virtual Virtual FortiGate
Router FortiAnalyzer FortiManager FortiGate
Staged Approach to Zero-
FortiSASE FortiSwitch FortiAP User Site Location
Trust
The customer can keep Micro-Branch
realising investments Internet
Internet
throughout the journey
Easy to train staff, support SD-WAN Overlay
and flexible design
approach to the nature of Internet Internet
FortiSASE
Internet
the solution
Procurement is easier as it
can be done through one
procurement rather than
multiple Users with Users with
ZTNA Agent ZTNA Agent
Corporate Offices Shared Offices Home Users
© Fortinet Inc. All Rights Reserved. 25
The Fortinet SD-WAN Value-Add
LEADERSHIP RICHNESS FUNCTIONALITY VISION
• Not all SD-WAN • Maturity does not • Convergence and • SD-WAN must be part
Solutions are equal equal obsolete Consolidation of a bigger picture
© Fortinet Inc. All Rights Reserved. 26