FortiGate Amazon Machine Image (AMI) Selection Guide for Amazon EC2
New Place, Same Feel Secure Your AWS Cloud with Fortinet Fortinet s Amazon Machine Image (AMI) and subscription based portfolio offer explicit support in AWS and provide the enhanced Firewall features to secure your AWS workloads. This comprehensive cloud security solution enables visibility of AWS usage and application identity while protecting your AWS content via advanced security policies all captured in a single pane of glass management platform. Available Fortinet AMIs include AVAILABLE FORTINET AMIs INCLUDE FortiGate Next-Gen Firewall FortiAnalyzer Centralized Log and Reporting FortiManager Centralized Security Management FortiWeb Web Application Firewall 2
Active Directory or LDAP FortiAuthenticator User Identity Management FortiSandbox Advanced Threat Protection FortiManager Centralized Management FortiAnalyzer Logging, Analytics, Reporting FortiGate Next-Generation Firewall provides the foundation for proper user-based secure access into AWS multi-tiered applications among VPCs, especially a rich set of RESTAPIs access can be integrated with advanced AWS CloudWatch metrics, AWS CloudTrail logs, or external management tools. Fortinet adopts the no patch philosophy where all FortiGate instances in AWS Cloud and on-premise datacenter can be centrally managed through FortiManager with configuration synchronization and updates. Thus, you can shift your mindset to workload security instead of single instance one off protection. Enterprise Campus or Branch Office 3
Amazon EC2 provides a large number of options across multiple instance types, each with one or more size options, optimized for different types of applications. Fortinet supports the M3, C3, and C4 instance types. AWS recommends that you assess the requirements of your applications and select the appropriate instance family as a starting point for application performance testing. Evaluate the performance of your applications by (a) Identifying how your application needs compare to different instance families (e.g., is the application compute-bound, memory-bound, etc.), and (b) Sizing your workload to identify the appropriate instance size. AWS recommends application-level testing 4
M3 This family includes the M3 instance types and provides a balance of compute, memory, and network resources, and it is a good choice for many applications. FEATURES High Frequency Intel Xeon E5-2670 v2 (Ivy Bridge) Processors* SSD-based instance storage for fast I/O performance Balance of compute, memory, and network resources USE CASES Small and mid-size databases, data processing tasks that require additional memory, caching fleets, and for running backend servers for SAP, Microsoft SharePoint, and other enterprise applications. M3 instances may also launch as an Intel Xeon E5-2670 (Sandy Bridge) Processor running at 2.6 GHz. FortiGate-VM SKU AWS EC2 Instance vcpu Mem (GiB) SSD Storage (GB) License FG-VM01-AWS m3.medium 1 3.75 1 x 4 On-Demand FG-VM02-AWS m3.large 2 7.5 1 x 32 On-Demand FG-VM04-AWS m3.xlarge 4 15 2 x 40 On-Demand FG-VM08-AWS m3.2xlarge 8 30 2 x 80 On-Demand 5
C3 & C4 Compute-optimized instances, featuring the highest performing processors. FEATURES High Frequency Intel Xeon E5-2680 v2 (Ivy Bridge) Processors Support for Enhanced Networking Support for clustering SSD-backed instance storage USE CASES High performance front-end fleets, web-servers, batch processing, distributed analytics High performance science and engineering applications, ad serving, MMO gaming, video-encoding, and distributed analytics. FortiGate-VM SKU AWS EC2 Instance vcpu Mem (GiB) SSD Storage (GB) License FG-VM02-AWS c3.large 2 3.75 1 x 16 On-Demand FG-VM04-AWS c3.xlarge 4 7.5 2 x 40 On-Demand FG-VM08-AWS c3.2xlarge 8 15 2 x 80 On-Demand FG-VM02-AWS c4.large 2 3.75 EBS Only BYOL Only FG-VM04-AWS c4.xlarge 4 7.5 EBS Only BYOL Only FG-VM08-AWS c4.2xlarge 8 15 EBS Only BYOL Only 6
REFERENCES Fortinet AWS http://www.fortinet.com/aws Amazon EC2 Instances http://aws.amazon.com/ec2/instance-types DON T TAKE OUR WORD FOR IT CHECK IT OUT YOURSELF Test drive an HA demo in AWS http://www.fortinet.com/promo/aws-testdrive.html Fire up a free 15 day trial in Amazon Marketplace https://aws.amazon.com/marketplace/pp/b00pczswda/ ref=sp_mpg_product_title?ie=utf8&sr=0-5 Call 1-866-868-3678 about EC2 proof of concept credits Contact Fortinet AWS Sales awssales@fortinet.com 7
Copyright 2015 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiCare and FortiGuard, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. v1.0 12. 02.15 www.fortinet.com