Fortinet Teleworker Solutions - Leverages Existing FortiGate NGFW capabilities for large scale workforce support - Extends Current Infrastructure & Management Tools - Enables Secure, Remote Connectivity for the entire workforce

1. 1
Fortinet Teleworker Solutions
Enabling Remote Work At Scale
Oleksandr Palyvoda
opali@muk.ua

2. 2
Growing Need for Remote Work Solutions
Crisis can take many forms:
• natural disasters
• global pandemics
• acts of terror
All can strike with little or no warning
• Business continuity planning/disaster recover
• Employees working offsite
• All sizes of businesses affected

3. 3
Fortinet Security Fabric
Teleworker Solutions
BROAD
visibility of the entire digital attack
surface to better manage risk
INTEGRATED
solution that reduces the
complexity of supporting multiple
point products
AUTOMATED
workflows to increase speed
of operations and response
Q4FY19 v2.1
Secure
WLAN/LAN
Security
Operations
Fabric
Management
Center
Open Fabric
Ecosystem
Applications
NGFW
SD-WAN
Cloud
Infrastructure
Endpoint
Network
Access

4. 4
Elements of a Teleworker Solution
Headquarters
Head End Systems
General roaming- 100%
• 90% of employees
• (Super & Power users when roaming)
Power users- 8%
• Key Support Technicians
• Network admins
Super users- 2%
• Network admins
• Emergency personnel
• Executives

5. 5
Elements of a Teleworker Solution- General User
Secure VPN connection
• SSL
• IPSec FortiClient
• Mobile & Laptop
FortiToken for 2FA
Internet
Teleworker
SSL / IPSec VPN Client
Internet / SaaS
Direct-to-Internet
for Cloud/SaaS
Applications
Split Tunnel Support
FortiClient
Native OS VPN Support
FortiCASB
FortiToken

6. 6
Internet
Secure Connection to
FortiGate
Power User
FortiAP
Internet / SaaS
Optional Split
Tunneling for
Direct-to-Internet
Cloud/SaaS
Applications
FortiCASB
Elements of a Teleworker Solution- Power User
FortiAP
• Secure VPN Tunnel
• Firewall policies
FortiToken for 2FA
FortiToken

7. 7
Internet
IPSec VPN
Super User
FortiGate /
FortiWiFi
FortiFone FortiAP
Internet / SaaS
Direct-to-Internet
for Cloud/SaaS
Applications
FortiCASB
Elements of a Teleworker Solution- Super User
FortiToken
FortiGate
• Secure VPN Tunnel
• Firewall policies
• Traffic shaping
• Application Control
FortiToken for 2FA
FortiFone
• Soft Client
• Hardware options

8. 8
SAML
FortiClient EMS
Active Directory
FortiGateFortiAuthenticator
On Premises - Cloud - Hybrid
Data Center
SSL / IPSec VPN
Gateway
Internet / SaaS
FortiSIEM FortiAnalyzer
NOC-SOC / Central Management / Analytics
FortiManager
Elements of a Teleworker Solution- Head End
Fortigate
VPN- IPSec or SSL
FortiAuthenticator / Active Directory
FortiClient EMS
FortiManager / FortiAnalyzer
FortiSIEM
FortiCASB / FortiGate VM
Internet

9. 9
Elements of a Teleworker Solution- Head End
Model
Concurrent
SSL VPN Users
Concurrent IPSec
VPN Users
Managed FortiAPs
(Tunnel Mode)
100E 500 10,000 32
100F 500 16,000 64
300E 5,000 50,000 256
500E 10,000 50,000 256
600E 10,000 50,000 512
1100E 10,000 100,000 2,048
2000E 30,000 100,000 2,048
All Larger
Models* 30,000 200,000 2,048
Built-in capacity in Fortigate NGFW
• No new licenses required
• Massive scaling available

10. 10
Internet
SAML
FortiClient EMS
Active Directory
FortiGateFortiAuthenticator
SSL / IPSec VPN Client
On Premises - Cloud - Hybrid
Data Center
SSL / IPSec VPN
Gateway
FortiSIEM FortiAnalyzer
NOC-SOC / Central Management / Analytics
FortiManager
General User
Teleworker
Internet / SaaS
Direct-to-Internet
for Cloud/SaaS
Applications
Split Tunnel Support
FortiClient
Native OS VPN Support
FortiCASB
FortiToken

11. 11
Internet
SAMLActive Directory
FortiGateFortiAuthenticator
Secure Connection to
FortiGate
On Premises / Cloud / Hybrid
Data Center
FortiSIEM FortiAnalyzer
NOC-SOC / Central Management / Analytics
FortiManager
Power User
FortiAP
Internet / SaaS
Optional Split
Tunneling for
Direct-to-Internet
Cloud/SaaS
Applications
FortiCASB
Power User
FortiToken

12. 12
Internet
SAMLActive Directory
FortiGateFortiAuthenticator
IPSec VPN
On Premises / Cloud / Hybrid
Data Center
IPSec VPN
Gateway
FortiSIEM FortiAnalyzer
NOC-SOC / Central Management / Analytics
FortiManager
Super User
FortiGate /
FortiWiFi
Internet / SaaS
Direct-to-Internet
for Cloud/SaaS
Applications
FortiCASB
Super User
FortiFone FortiAPFortiToken

13. 13
• Leverages Existing FortiGate NGFW
capabilities for large scale workforce
support
• Extends Current Infrastructure &
Management Tools
• Enables Secure, Remote Connectivity for
the entire workforce
Fortinet Teleworker Solutions