This document discusses challenges that enterprises face when expanding operations globally into the cloud. As workloads move to the cloud, management and connectivity of cloud resources has not kept up with business needs. This brings new security risks from local-cloud, cloud-cloud networking and workloads. The document proposes building a global secure SD-WAN on Cloud WAN to address these challenges, with solutions from Fortinet and partners like Zenlayer that provide flexible purchasing and a global last-mile network and compute infrastructure. Fortinet is recognized as a leader in network firewalls and SD-WAN by Gartner and ranked #1 for security-sensitive, small branch and remote worker use cases.

1. Fortinet

2. Fortinet 2022 Cloud Security Report

3. Fortinet 2022 Cloud Security Report
•
•
•
•
•
•
•

4. 企业加速出海面临的挑战
互联网不是为高性能安全传输设计的
云上的工作负载越来越多，
但是对云的管理和云连接组
网能力没有跟上业务的需求
• 本地-云，云-云组网
• 云实例配置管理
工作负载
全面连接后带来了更多的安
全风险，同时地缘政治带来
的合规新需求，以及行业特
有的安全风险
• 数据安全
• 应用安全
• 网络安全
安全
开展全球业务需要触达到当
地的用户，甚至需要在当地
开设分支机构，如何在大陆
可以统管全球IT
• 远程访问
• 有线无线统一管理
• 全球加速
分支组网与远程访问

5. Branch
Campus OT
WFH
Agent
Agentless
Agent
Agentless

6. SD-WAN
加速数字化
69% 52%
随时随地办公
67%
勒索软件攻击
亟需提升的用户体验 大量不安全的接入设备 降低业务在线时间及生产力

7. •

 SaaS

•
• 远程工作的用户是“一个分支机构”
• 分支机构就是在同一时间同一地点的人员和设
备的集合
• 你的家庭网络就像一个人和设备争夺带宽的分
支机构
• 风电机组的边缘位置就像是物联网/OT设备的
分支机构
• 所有这些实体都需要安全访问功能
SD-WAN

9. 亚马逊云科技 Cloud WAN

10. Region 1 Region 2 Region 3
VPC VPC VPC
亚马逊云科技 Cloud WAN
SD-WAN
IPSec
VPN
SSL
VPN
Transit
Gateway
FortiGate-VM
VPC VPC VPC VPC
SD-WAN
IPSec
VPN
Transit
Gateway
Remote
Users
Data
Center
Branch HQ Data
Center
DX
FortiGate-VM
Branch HQ Data
Center
DX
Remote
Users
Branch Data
Center
Cloud WAN SD-WAN

12. • Transit Gateway:
• Cloud WAN
•
Fortinet SD-WAN
• SD-WAN
Zenlayer POP
•
亚马逊云科技
VPC与Region连接
全球“最后一公里”
网络与计算
基础设施覆盖
全球“最后一公里”
连接覆盖；
SD-WAN组网
安全能力覆盖；
• Marketplace: FortiGate (BYOL, PAYG) Zenlayer
• Direct Connect
• Marketplace: FortiGate (BYOL, PAYG)
Fortinet与Zenlayer
产品灵活采购

13. Top访问源 用户数据流 带宽消耗 延迟 抖动 丢包 报表 逻辑拓扑 告警 SaaS访问
优化
01001000110100100
010
入侵检测与防御 加密流量检测
可扩展VPN IP与URL信誉
零信任访问
内容过滤
合规 秒级故障切换

14. VPN
Routing
Proxy
WLAN Switch
Device
Application
Location
User Content
Secure
SD-WAN& 5G
SWG
ZTNA
Network Firewall
Secure
LAN/WLAN
Fortinet

15. Fortinet Recognized as a Leader 2021 is
12th time included in this Magic Quadrant
Fortinet Recognized as a Leader Positioned
Highest for Ability to Execute
November 2021 Magic Quadrant™
for Network Firewalls
September 2022 Magic Quadrant™
for SD-WAN
SD-WAN与网络防火墙魔力象限双料领导者
融合管理
一个平台
Gartner Magic Quadrant for Network Firewalls, Ajpreet Kaur, Jeremy D'Hoinne, Nat Smith, Adam Hils, 1 November 2021. Gartner Magic Quadrant for WAN Edge Infrastructure, Jonathan Forest, Naresh Singh, Andrew Lerner, Evan Zeng, 20 September
2021. Gartner and Magic Quadrant are registered trademarks of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved. This graphic was published by Gartner, Inc. as part of a larger
research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Fortinet. Gartner does not endorse any vendor, product or service depicted in its research publications, and does
not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner
disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

16. Ranked #1
Security-Sensitive Use-Case
Ranked #1
Small Branch WAN Use-Case
Ranked #1
Remote Worker Use-Case
Gartner, Magic Quadrant for WAN Edge Infrastructure, Jonathan Forest, Naresh Singh, Andrew Lerner, Evan Zeng, 20 September 2021.
“Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation.
Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with
respect to this research, including any warranties of merchantability or fitness for a particular purpose.
Gartner and Magic Quadrant are registered trademarks of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.
This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Fortinet.

17. 总结
Cloud Formation Terraform
Cloud WAN EC2 Fortinet FortiGate
Zenlayer
Markeplace
基于Cloud WAN构建的
全球安全SD-WAN

18. AWS Graviton Ready Partner
AWS Graviton FortiGate-VM
EC2
NGFW SD-WAN Graviton2
灵活的订阅方式，并支持性价比更高的实例
PAYG BYOL ARM64/Graviton2
Marketplace
PAYG

19. Thank you!
岑义涛
18610598207
ycen@fortinet.com