INTERNAL SEGMENTATION FIREWALL

Transcription

1 Q4/2015 INTERNAL SEGMENTATION FIREWALL High-Throughput Ultra Low Latency High-Speed Interfaces Virtual Domains

2 Overview Founded: Nov First Product Release: May 2002 Fortinet IPO: Nov Fortinet s mission is to deliver the most innovative, highest performing network security platform to secure and simplify your IT infrastructure. We are a leading global provider of network security appliances for carriers, data centers, enterprises and distributed offices. $350 45% NASDAQ: FTNT $300 40% Headquarters: Sunnyvale, California Number of Employees: 3,900+ FY 2014 Revenue: $770M ($M) $250 $200 $150 YoY GROWTH 35% 30% 25% 20% YoY GROWTH (%) FY 2014 Billings: $896M Q Revenue: $260M $100 15% 10% Q Billings: $300M $1.17B cash and no debt Profitable $50 0 Q Q Q Q Q Q Q Q Q % 0 Units Shipped to Date: 2,200,000+ ~$1.0B Customers: 255,000+ $770M Patents: CAGR 62% 257 patents issued 228 patents pending $2M $16M REVENUE CASH Fortinet Founded Began Global Sales FortiManager Named WW UTM Leader FortiOS 3.0 FortiWiFi FortiOS 4.0 FortiAP FortiOS 5.0 & SoC2 1 st FortiASIC IPO FG-5000 Network Processor 1M Units FortiOS 2.0 (ATCA) Shipped 1 st 40GbE Port Appliance New HQ Internal Segmentation Firewall & FortiOS st FortiASIC System-on-a-Chip FortiASIC NP6 1 Tbps Firewall 2M Units Shipped 1 st FortiASIC Content Processor FortiSandbox 1 st 100GbE Port Appliance Acquired Meru Networks 2

3 Gaining Share in a Growing Market Operations 2% G&A 7% Fortinet is a major player in the fastest growing market segment 40 $36B 35 Wireless Sales & Marketing 43% EMPLOYEES by Function Service & 21% 30 $27B Web Endpoint TISS R&D 27% Cloud 15 DDoS Messaging 10 5 $6.1B IPS $8.6B FW/NGFW APAC 11% Network Market Source: IDC Market Forecasts Fortinet is the largest network security appliance vendor (units) and growing quickly, according to IDC... VPN EMEA 25% EMPLOYEE COST by Region Americas 64% 500, , , ,000 Cisco Check Point APAC 21% Americas 44% 100,000 Juniper Networks Palo Alto Networks REVENUE by Region Source: IDC Worldwide Appliances Tracker, March 2015 (based on annual unit shipments) EMEA 35% And now the second-largest Data Center Firewall vendor according to Infonetics. 12% 10% 8% Mid-Range Appliances 26% Enterprises High-End Appliances 38% Large enterprises & telcos/service providers 6% 4% Segmentation 2% 0% 2013 Q Q Q Q2 Source: Infonetics Research Data Center Products Nov Entry-Level Appliances 36% SMBs, branch offices and retail * Billings Data 3

4 The Fortinet Advantage Fast, Secure and Global High-Performance Rapidly growing bandwidth requirements are turning legacy security solutions into choke points Fortinet s custom FortiASIC processors and Optimum Path Processing accelerate performance by 5 10X competitive solutions becomes a business enabler, not a bottleneck (IPsec) (SSL) Comprehensive Management Firewall VPN Application Control Software Enabled Modules App Control Antivirus Anti-spam IPS Web Filtering Anti-malware WAN Acceleration Mobile IPS Web App Database Data Leakage Protection Wi-Fi Controller Advanced Threat Protection Web Filtering Vulnerability Management IP Reputation A faster, coordinated and more robust defense is needed to stop today s sophisticated attacks Fortinet s experienced FortiGuard Labs team discovers new threats and delivers highly effective, 3rd-party validated, real-time threat intelligence Fortinet s custom FortiOS operating system consolidates all required technologies for the quickest, most robust and coordinated response 4

5 Global Platform Control & Visibility Client Secure Access Network Segmentation Application Cloud Services & Framework FortiManager FortiAnalyzer Endpoints for AWS Hypervisor VMX Fast, secure and comprehensive cybersecurity platform End-to-end coverage from client to edge to core to data center to cloud Simpler to deploy, easier to manage, better user experience, and more secure 5

6 Independently Tested and Validated Protection NGFW 1500D BDS FortiSandbox 1000D Cisco 100% Trend Micro Check Point Lastline 90% Fortinet Blue Coat Average Fidelis 80% 70% 60% FireEye 50% August 2015 *McAfee *See Value Map Comparative Report $600 $500 $400 $300 $200 $100 $0 TCO per Protected Mbps Average 40% Next Gen IPS 1500D WAF FortiWeb 1000D Palo Alto Networks PA-5020 Cisco FirePOWER 8350 Fortinet 1500D 100% 98% 100% 95% Q4 Fortinet FortiWeb 1000D Q1 IBM Network Protection XGS 7100 IBM Network Protection XGS % 96% Average 85% 94% 92% 80% 90% 75% 88% 70% HP TippingPoint S7500NX 86% 65% 84% 60% 82% Median 80% 55% $30 $25 $20 $15 $10 $5 $0 TCO per Protected-Mbps 50% $110 $100 $90 $80 $70 $60 $50 $40 $30 $20 $10 $0 Price per Protected-Mbps 6

7 Unparalleled 3 rd Party Certification Certification RECOMMENDED NEUTRAL CAUTION Fortinet Check Point Cisco Palo Alto Juniper SRX NSS Labs Firewall NGFW X NSS Labs Data Center Firewall X X X X X NSS Labs Breach Detection System X X FireEye Certifications NSS Labs WAF X X X X X NSS Labs Next Gen IPS X X X NSS Labs Data Center IPS X X X BreakingPoint Resiliency Score X X X X ICSA Firewall X X ICSA IPS X X X X ICSA Antivirus X X X X X ICSA WAF X X X X X VB100 Virus X X X X AV Comparative X X X X X Common Criteria FIPS The Only NSS Labs Recommended Edge to Endpoint ATP Solution Fortinet has participated in the following Real-world Group Tests, open to the industry, and conducted by NSS Labs. In doing so, Fortinet stands out as the only vendor to provide an ATP Solution that is NSS Labs Recommended from the Data Center to the Edge to the Endpoint in the latest Group Tests. NGFW NGIPS Web Application Firewall Endpoint Protection Breach Detection ( Sandbox ) 7

8 HIGH-END APPLIANCES High-Performance Network FortiOS is a purpose-built, security-hardened, and sophisticated network security operating system that is the foundation of all platforms. 40 Gbps Tbps 5144C 5060 Data Center Firewall (DCFW)/Carrier Class Firewall (CCFW) Deployment Service Provider or Enterprise Form Factor 2U/3U Appliance and Chassis Interfaces 10, 40 and 100 GbE FW Throughput 10 Gbps to 1 Tbps Special Features Carrier Class Internal Segmentation Firewall (ISFW) 40G 40G D Blade 5903C Blade Deployment Form Factor Interfaces FW Throughput Special Features Service Provider or Enterprise 1U/2U/3U Appliance 10, 40 and 100 GbE 16 to 320 Gbps VDOM Management, Ultra-low Latency 100G 100G 40G 5913C Blade 3810D Next-Generation Firewall (NGFW) Deployment Edge or Border Firewall Form Factor 1U/2U/3U Appliance Interfaces 1, 10, 40 GbE FW Throughput 1 to 160 Gbps Special Features Advanced Threat Protection Unified Threat Management (UTM) Gbps 3700D 3000D Deployment Form Factor Interfaces Throughput Special Features Distributed Enterprise or SMB Desktop High-density 1GbE 1 to 3.5 Gbps Wi-Fi, PoE, Ruggedized Virtual Machine 3100D 3200D Deployment Form Factor SDN Integration UTM Throughput Hypervisors East/West Data Center or Cloud Hypervisor or Cloud Cisco ACI, VMware NSX, OpenStack Hardware Dependent All major hypervisors supported Hypervisor Gbps D 1200D 1000D Advanced Threat Protection (ATP) Deployment Enterprise Networks Form Factor Appliance/Virtual/Cloud Interfaces 1, 10 GbE UTM Throughput 1 to 4 Gbps Special Features /Mail/Client Integration

9 Platforms MID-RANGE APPLIANCES Policy Driven Network Segmentation 900D The enterprise attack surface is growing rapidly, increasing the likelihood of a breach. Architects are therefore looking to segment the internal network to better limit or contain these attacks with Internal Segmentation Firewalls (ISFW). An ISFW has several important characteristics: High performance Internal networks run at much higher speeds than at the perimeter Protection, not just detection for rapid containment and damage limitation Policy-driven and deployable in transparent mode for operational simplicity 1 2 CLOUD Hypervisor Platform () (FortiCare) SaaS INTERNET Easy 4-Step Pricing Model IoT BRANCH OFFICE PUBLIC CLOUD UTM Form Factor and Deployment Mode 8 x 5 15% of HW price PoS ENDPOINT DATA CENTER DCFW & or MOBILE CAMPUS PUBLIC CLOUD NGFW # Ports and Port Speed 24 x 7 25% of HW price INTERNET SaaS & & or DATA CENTER SDN ORCHESTRATION Hypervisor Throughput (FW, IPS, NGFW, UTM) Professional Services 800C 600D 500D 400D 300D 200D 100D ENTRY-LEVEL APPLIANCES & MORE 80C 90D FortiWiFi 90D 60D /FortiWiFi 30D FortiWiFi 60D FortiAP-S 323C 8-20 Gbps Gbps 800 Mbps Gbps 3 4 Services (FortiGuard) Term Individual Services (IPS/AC, AV, WF, AS, ATP, MS) 20% of HW Price Each 1 Year Annual Discount or 2 Years 6% off/yr UTM Bundle (IPS/AC, AV, WF, AS) 8 x 5 55% of HW Price 3 Years 10% off/yr 24 x 7 65% of HW Price or Enterprise Bundle (UTM + ATP + MobileSec) 8 x 5 70% of HW Price 4 Years 12.5% off/yr 24 x 7 80% of HW Price 5 Years 14% off/yr FortiAP 222C FortiAP 320C FortiAP 221C FortiAP 21D FortiExtender 100B FortiAP 11C 9

10 The Fortinet Solution Covers Your Entire Network Complementary Solutions Available Product List FortiADC Application Delivery Controller FortiAnalyzer Log Analysis FortiAP Secure Wireless FortiAuthenticator Authentication FortiCamera IP Video FortiClient FortiCloud FortiDB FortiDDoS FortiExtender Endpoint Cloud Logging and Provisioning Database DDoS Protection Cellular LTE Extension Core Firewall Platform FortiAuthenticator User Identity Management Cloud DATA CENTER FortiMail FortiManager FortiSandbox FortiSwitch FortiToken FortiVoice Centralized Management Advanced Threat Protection Access & Data Center Switching 2FA Token IP PBX Phone Systems FortiManager Centralized Management FortiAnalyzer Logging, Analysis, Reporting FortiWeb Web Application Firewall Next Gen IPS DCFW FortiWeb Web Application Firewall FortiWiFi UTM with Wireless Access FortiSandbox Advanced Threat Protection CAMPUS FortiAP Secure Access Point NGFW FortiClient Endpoint Protection FortiSwitch Switching FortiWiFi UTM FortiCamera IP Video FortiVoice IP PBX Phone Systems 10

11 FortiCare Top-of-Rack FortiDB Database Protection Our FortiCare customer support team provides global technical support for all Fortinet products. With support staff in the Americas, Europe, Middle East and Asia, FortiCare offers services to meet the needs of enterprises of all sizes. 8x5 Enhanced 24x7 Comprehensive Premium Services Professional Services VMX SDN, Virtual Firewall FortiADC Application Delivery Controller Become a Fortinet Network Expert! Network Expert Program Fortinet s Network Expert (NSE) Program is a new 8-level training and assessment program designed for customers, partners and employees. Internal NGFW Validate your Experience Demonstrate Value Accelerate Sales FortiDDoS DDoS Protection FortiMail 1 2 Step NSE 1 NSE 2 Level Objective Develop a foundational understanding of network security concepts. Develop knowledge and skills to sell Fortinet gateway solutions. (For Fortinet employees and partners only) FortiExtender LTE Extension BRANCH OFFICE FortiClient Endpoint Protection, VPN FortiToken Two Factor Authentication Intrusion Prevention Application Control Web Filtering Antivirus IP Reputation Web Application Vulnerability Management Anti-spam NSE 3 Sales Associate NSE 4 Professional NSE 5 Analyst NSE 6 Specialist NSE 7 Troubleshooter NSE 8 Expert Develop the knowledge and skills required to sell Fortinet Advanced solutions. (For Fortinet employees and partners only) Develop the knowledge and skills of how to configure and maintain a Unified Threat Management (UTM) appliance. Develop a detailed understanding of how to implement network security management and analytics. Develop an understanding of advanced security technologies beyond the firewall. Demonstrate the ability to troubleshoot internet security issues. Demonstrate the ability to design, configure, install and troubleshoot a comprehensive network security solution in a live environment. Database Visit to get started! 11

12 100+ Offices Worldwide including: HEADQUARTERS FORTINET INC. 899 Kifer Road Sunnyvale, CA United States Tel: Fax: AMERICAS CALIFORNIA 894 Ross Drive Sunnyvale, CA Tel: Fax: Courtney Campbell Causeway Suite 300 Tampa, FL Tel: Fax: YORK 1 Penn Plaza, Suite 4400 New York, NY United States Tel: VIRGINIA/WASHINGTON DC Sunrise Valley Dr, Suite 140 Reston, VA Tel: FLORIDA W. Sunrise Blvd., Suite 430 Sunrise, FL United States Tel: BRITISH COLUMBIA Still Creek Campus 4190 Still Creek Drive, Suite 400 Burnaby, BC V5C 6C6 Canada Tel: Fax: OTTAWA 1826 Robertson Road Ottawa, ON K2H 5Z6 Canada MEXICO Paseo de la Reforma 412 piso 16 Col. Juarez C.P México D.F. Tel: EMEA EMEA SALES OFFICE 120 rue Albert Caquot Sophia Antipolis 06410, Biot, France Tel Fax FRANCE TOUR ATLANTIQUE 11ème étage, 1 place de la Pyramide Paris La Défense Cedex France Sales: AUSTRIA Wienerbergstrasse 7/D/12th floor, 1100 Vienna Austria Sales: Fax: BELGIUM/LUXEMBOURG Pegasuslaan Diegem Belgium Sales: Fax: CZECH REPUBLIC Pekarska Prague 5 Czech Republic Sales: csr_sales@fortinet.com GERMANY Feldbergstraße Frankfurt Germany Sales: Fax: Landsbergerstrasse München Germany Tel: IRELAND Upper Pembroke Street Dublin Ireland Sales: ISRAEL 6 Hachoshlim St., 1st Floor P.O. Box Herzliya Pituach Israel Sales: ITALY Via del Casale Solaro, ROMA Italy Sales: Fax: POLAND 59 Zlota Str. LUMEN Bldg (In OFFICE, 6th floor) Warsaw, Poland Sales: RUSSIA Trubnaya Str. 12 Millenium House (3rd Floor) Moscow Russian Federation Sales: SPAIN Camino Cerro de los Gamos, 1. Edificio 1. Pl Pozuelo de Alarcón Madrid, Spain Sales: Fax: SWEDEN Isafjordsgatan 39B Kista Sweden Sales: SWITZERLAND Riedmuehlestr. 8 CH-8305 Dietlikon, Zurich Switzerland Sales: THE NETHERLANDS Hardwareweg BM Amersfoort The Netherlands Sales: Fax: TURKEY Saray Mah. Doktor Adnan Büyükdeniz Cad. No:4 Akkom Ofis Park 2 Blok Kat:10 Ümraniye-lstanbul Office: /60 UNITED ARAB EMIRATES Suite 105 Arjaan Business Tower Dubai Media City P.O. Box , Dubai United Arab Emirates Sales: Fax: G01-6WA, West Wing, Building 6, Block A Dubai Airport Free Zone Dubai, UAE Tel: Fax: UNITED KINGDOM FORTINET (UK) LTD. Fortinet (UK) Ltd. Floor 6, 120 Old Broad Street London, EC2N 1AR United Kingdom Sales: Fax: APAC APAC SALES OFFICE 300 Beach Road The Concourse Singapore Tel: Fax: AUSTRALIA Level 7, 2-10 Loftus Street Sydney, NSW 2000 Australia Tel: Fax: Level 1, 483 Riley Street Surry Hills NSW 2010 Australia Tel: CHINA 12FL, Zhongxin Plaza, 52 North Fourth-Ring West Road, Haidian District Beijing,100080, China Tel: Fax: HONG KONG Fortinet International Inc. Unit 505, Stanhope House, 734 King s Road, Quarry Bay Hong Kong Tel: Fax: INDIA Fortinet Technologies India Pvt Ltd No. 9, Esquire Centre, Ground Floor, B Wing, M.G. Road, Bangalore Ph: / 99 Fortinet Technologies India Pvt Ltd 703, Powai Plaza, 7th floor, Powai, Andheri (E), Mumbai INDIA Office: , /1 Ground & First Floor Salarpuria Adonis Binnamangala Old Madras Road Indira Nagar Bangalore Tel: Fax: INDONESIA 50/F Menara BCA Grand Indonesia Jl. MH. Thamrin No. 1 Jakarta Indonesia Tel: Fax: JAPAN 8th Fl., Sumitomo Fudosan Roppongi-dori Bldg , Roppongi, Minato-ku, Tokyo, Japan Tel: Fax: F Nomura 3rd Building 2-19, Kanda Suda-cho, Chiyoda-ku Tokyo , Japan Tel: Fax: KOREA 15th Fl. Haeam Bldg., 983-1, Daechi-dong, Gangnam-gu, Seoul, Korea( ) Tel : Fax: Leaders Building 205 Ho, Jangmi-Ro 42, Bundang-Gu, Sungnam city, Kyonggi-Do, Korea. Zip : Tel : Fax: MALAYSIA Suite 33A-02/03, Level 33A Menara Keck Seng 203, Jalan Bukit Bintang Kuala Lumpur Malaysia Tech : Sales: Sales Fax: PHILIPPINES Unit 1710 Hanston Square 17 San Miguel Avenue Ortigas Center Pasig City, 1605 Philippines Tel: Fax: TAIWAN 2F, No. 176, Xing ai Rd, Nei-Hu Dist. Taipei City, 11494, Taiwan Tel: Fax: THAILAND Level 25, Unit ML2511 The Offices at Central World 999/9 Rama 1 Road Bangkok 10330, Thailand Tel: Follow Us: Tfl Copyright 2015 Fortinet, Inc. All rights reserved. Fortinet,, FortiCare and FortiGuard, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet s internal lab tests. Fortinet disclaims in full any covenants, representations,and guarantees pursuant hereto, whether express or implied. Certain offerings mentioned herein may not be generally available, and Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Revision: Q4 / 2015 v