FortiGate CNF - Cloud Native Firewall as a Service - Annual Contract

Overview

FortiGate Cloud-Native Firewall (CNF) is a highly available, SaaS-based security service designed to simplify network security while seamlessly scaling and integrating with cloud-native networking and security services. FortiGate CNF significantly reduces operational overhead by eliminating the need to deploy, configure, and maintain firewall infrastructure, allowing security teams to focus on security policy definition and enforcement. FortiGate CNF supports both consumption-based billing and annual subscription models.

Capabilities

• Industry-Leading Next-Generation Firewall (NGFW)
  FortiGate CNF delivers advanced firewall capabilities including intrusion prevention, application control, content filtering, and more. These capabilities are powered by AI-driven threat intelligence from FortiGuard Labs.

• Simplified Management
  The FortiGate CNF management console provides a comprehensive set of tools to manage network security across cloud environments. Users can onboard cloud accounts, deploy CNF instances, define protected resources, and manage security policies from a single interface. Purpose-built wizards help guide teams that are less familiar with cloud security operations.

• Scalability
  FortiGate CNF scales to meet customer demands, with each instance capable of protecting up to 1,000 subnets across multiple virtual networks, availability zones, and cloud accounts within a single region.

• Security Management Integrations
  FortiGate CNF integrates with centralized security and network management platforms to enable automated provisioning and policy enforcement. Organizations can leverage native cloud security management tools or Fortinet management solutions such as FortiManager to define and push security policies consistently across environments.

• Flexible Consumption
  FortiGate CNF offers flexible consumption models to match business needs—on-demand usage for dynamic or unpredictable workloads, and annual subscriptions for predictable environments and cost optimization.

Credit-Based Usage Model

This product includes 1,000,000 credits, which are deducted based on actual service usage (deployed CNF instances and traffic processed), as outlined below:

• 1 CNF Hour (including support): 96 credits

• 1 Cost-Optimized CNF Hour (including support): 32 credits

• 1 GB of Traffic Processing: 1 credit

• 1 GB of Advanced Security Processing: 1 credit

Once the included 1,000,000 credits are fully consumed, usage will be billed on a pay-as-you-go basis according to the applicable CNF pricing. Additional credits can also be purchased as needed.

Highlights

• Advanced Network Protection: FortiGate CNF blocks traffic to and from known bad IPs, provides intrusion prevention and content filtering capabilities and supports GEO IP policies. FortiGate CNF supports the complete set of mature FortiOS NGFW capabilities.

• Streamlined Security Management: By aggregating security from all networks in an AWS region into a single FortiGate CNF instance customers can simplify security and manage fewer security policies. Customers are not required to build and maintain separate cloud firewalls for each cloud network or availability zone.

• Lower costs: With no security software infrastructure to build, deploy and operate, operations are simplified and in turn costs are reduced. Furthermore, with FortiGate CNF customers only pay for security processing functionality the use