Every connection is a door
Hundreds of connections enter and leave your company network every day: emails, cloud applications, remote teams, branches, the guest network. The firewall is the first layer that meets all of this traffic. Choose the wrong one and it slows your business down. Configure it wrongly and it does not protect you.
FortiGate is Fortinet’s next-generation firewall (NGFW). It assesses traffic not only by address and port, but by application, user and content. The answer to who is accessing what, and with which application, is gathered in one place.
What does FortiGate do?
Stops threats at the gate
Intrusion prevention (IPS), antivirus, web filtering and application control all run on the same device. Thanks to FortiGuard security services, threat signatures and filter databases are kept continuously up to date.
Makes encrypted traffic visible
Most internet traffic is now encrypted. With SSL/TLS inspection, FortiGate can also examine threats inside encrypted connections. Fortinet’s own security processors are designed to offload this intensive work from the device’s main processor.
Connects remote teams and branches securely
Remote workers connect securely to company resources via VPN. Encrypted tunnels are set up between branches. With the SD-WAN built into every FortiGate, multiple internet lines are used together, intelligently; if one line goes down, traffic switches to another.
Makes the network manageable from a single screen
Rules, users and reports are all in a single interface. Thanks to the Fortinet Security Fabric, FortiSwitch switches and FortiAP wireless access points can also be part of the same management.
FortiGate with Unna
The right model is not the highest figure on the product page. Your number of users, your internet lines, your branch structure and the security services you intend to enable determine it together. That is why we discuss your needs before the device.
- We listen first. We examine your network, number of users, lines and growth plans. If you already have a firewall, we assess its rules and how it is actually used.
- We plan together. We select the model and licence bundle that will meet your needs even with security services enabled. We design the rule structure, network segments and VPN scenarios.
- We install and commission. We schedule the cutover outside working hours, migrate and simplify the old rules, and test every scenario.
- We stay by your side. Firmware updates, licence renewals, rule changes and periodic checks remain with us after installation too.
Part of the whole
A firewall is where security starts, not all of it. We always consider FortiGate together with these layers:
- With Unna Controller, we manage multiple FortiGates from a single screen, take a configuration backup every night and run automatic security checks.
- With Firewall Analyzer, we turn firewall logs into clear reports.
- With 5651 logging, we record guest and staff internet access in line with legal obligations.
- With endpoint security, we also protect computers that leave the office network.
- With Safetica DLP, we add a second control against sensitive data leaving through users.
- With Veeam backup, we keep the way back open even in the worst-case scenario.
Frequently asked questions
Will migrating from our current firewall disrupt our business?
We prepare the rule set in advance and carry out the cutover outside working hours. Downtime is limited to the time needed to swap the device and run tests.
What happens if the FortiGuard licence expires?
The device continues to work as a basic firewall. However, intrusion prevention and antivirus signatures are no longer updated, and cloud-dependent services such as web filtering stop working. We track renewal dates for you.
How should we choose between FortiGate, WatchGuard and Ruijie?
We work with all three brands. On our network security page, we compare which one suits you based on your number of users, branch structure and the security services you will enable.
Is it suitable for a small office too?
Yes. The FortiGate family ranges from small office models to data centre-class devices. Virtual versions are also available for cloud environments.
