fortigate amazon machine image (ami) selection … amazon machine image (ami) ... integrated with...

8
FortiGate Amazon Machine Image (AMI) Selection Guide for Amazon EC2

Upload: vuthien

Post on 29-Mar-2018

258 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: FortiGate Amazon Machine Image (AMI) Selection … AMAZON MACHINE IMAGE (AMI) ... integrated with advanced AWS CloudWatch ... FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE

FortiGate Amazon Machine Image (AMI) Selection Guide for Amazon EC2

Page 2: FortiGate Amazon Machine Image (AMI) Selection … AMAZON MACHINE IMAGE (AMI) ... integrated with advanced AWS CloudWatch ... FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE

FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE FOR AMAZON EC2

New Place, Same Feel − Secure Your AWS Cloud with Fortinet

Fortinet’s Amazon Machine Image (AMI) and subscription based portfolio offer explicit support in AWS and provide the enhanced Firewall features to secure your AWS workloads. This comprehensive cloud security solution enables visibility of AWS usage and application identity while protecting your AWS content via advanced security policies all captured in a ‘single pane of glass’ management platform.Available Fortinet AMIs include

AVAILABLE FORTINET AMIs INCLUDE ■ FortiGate – Next-Gen Firewall ■ FortiAnalyzer – Centralized Log and Reporting ■ FortiManager – Centralized Security Management ■ FortiWeb – Web Application Firewall

2

Page 3: FortiGate Amazon Machine Image (AMI) Selection … AMAZON MACHINE IMAGE (AMI) ... integrated with advanced AWS CloudWatch ... FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE

FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE FOR AMAZON EC2

FortiGate Next-Generation Firewall provides the foundation for proper user-based secure access into AWS multi-tiered applications among VPCs, especially a rich set of RESTAPIs access can be integrated with advanced AWS CloudWatch metrics, AWS CloudTrail logs, or external management tools.

Fortinet adopts the “no patch” philosophy where all FortiGate instances in AWS Cloud and on-premise datacenter can be centrally managed through FortiManager with configuration synchronization and updates. Thus, you can shift your mindset to workload security instead of single instance one off protection.

Active Directory or LDAP

FortiAuthenticatorUser Identity Management

FortiSandboxAdvanced Threat Protection

FortiManagerCentralized Management

FortiAnalyzerLogging, Analytics, Reporting

Enterprise Campusor Branch Office

3

Page 4: FortiGate Amazon Machine Image (AMI) Selection … AMAZON MACHINE IMAGE (AMI) ... integrated with advanced AWS CloudWatch ... FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE

FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE FOR AMAZON EC2

Amazon EC2 provides a large number of options across multiple instance types, each with one or more size options, optimized for different types of applications. Fortinet supports the “M3, C3, and C4” instance types. AWS recommends that you assess the requirements of your applications and select the appropriate instance family as a starting point for application performance testing. Evaluate the performance of your applications by

(a) Identifying how your application needs compare to different instance families (e.g., is the application compute-bound, memory-bound, etc.), and

(b) Sizing your workload to identify the appropriate instance size. AWS recommends application-level testing

4

Page 5: FortiGate Amazon Machine Image (AMI) Selection … AMAZON MACHINE IMAGE (AMI) ... integrated with advanced AWS CloudWatch ... FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE

FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE FOR AMAZON EC2

This family includes the M3 instance types and provides a balance of compute, memory, and network resources, and it is a good choice for many applications.

M3

FEATURES ■ High Frequency Intel Xeon E5-2670 v2 (Ivy

Bridge) Processors* ■ SSD-based instance storage for fast I/O

performance ■ Balance of compute, memory, and network

resources

USE CASES ■ Small and mid-size databases, data

processing tasks that require additional memory, caching fleets, and for running backend servers for SAP, Microsoft SharePoint, and other enterprise applications.

■ M3 instances may also launch as an Intel Xeon E5-2670 (Sandy Bridge) Processor running at 2.6 GHz.

FortiGate-VM SKU AWS EC2 Instance vCPU Mem (GiB) SSD Storage (GB) License

FG-VM01-AWS m3.medium 1 3.75 1 x 4 On-Demand

FG-VM02-AWS m3.large 2 7.5 1 x 32 On-Demand

FG-VM04-AWS m3.xlarge 4 15 2 x 40 On-Demand

FG-VM08-AWS m3.2xlarge 8 30 2 x 80 On-Demand

5

Page 6: FortiGate Amazon Machine Image (AMI) Selection … AMAZON MACHINE IMAGE (AMI) ... integrated with advanced AWS CloudWatch ... FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE

FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE FOR AMAZON EC2

Compute-optimized instances, featuring the highest performing processors.

C3 & C4

FEATURES ■ High Frequency Intel Xeon E5-2680 v2 (Ivy

Bridge) Processors ■ Support for Enhanced Networking ■ Support for clustering ■ SSD-backed instance storage

USE CASES ■ High performance front-end fleets,

web-servers, batch processing, distributed analytics

■ High performance science and engineering applications, ad serving, MMO gaming, video-encoding, and distributed analytics.

FortiGate-VM SKU AWS EC2 Instance vCPU Mem (GiB) SSD Storage (GB) License

FG-VM02-AWS c3.large 2 3.75 1 x 16 On-Demand

FG-VM04-AWS c3.xlarge 4 7.5 2 x 40 On-Demand

FG-VM08-AWS c3.2xlarge 8 15 2 x 80 On-Demand

FG-VM02-AWS c4.large 2 3.75 EBS Only BYOL Only

FG-VM04-AWS c4.xlarge 4 7.5 EBS Only BYOL Only

FG-VM08-AWS c4.2xlarge 8 15 EBS Only BYOL Only

6

Page 7: FortiGate Amazon Machine Image (AMI) Selection … AMAZON MACHINE IMAGE (AMI) ... integrated with advanced AWS CloudWatch ... FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE

FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE FOR AMAZON EC2

REFERENCES ■ Fortinet AWS

http://www.fortinet.com/aws ■ Amazon EC2 Instances

http://aws.amazon.com/ec2/instance-types

DON’T TAKE OUR WORD FOR IT – CHECK IT OUT YOURSELF ■ Test drive an HA demo in AWS http://www.fortinet.com/promo/aws-testdrive.html

■ Fire up a free 15 day trial in Amazon Marketplace https://aws.amazon.com/marketplace/pp/B00PCZSWDA/ ref=sp_mpg_product_title?ie=UTF8&sr=0-5

■ Call 1-866-868-3678 about EC2 proof of concept credits

■ Contact Fortinet AWS Sales [email protected]

7

Page 8: FortiGate Amazon Machine Image (AMI) Selection … AMAZON MACHINE IMAGE (AMI) ... integrated with advanced AWS CloudWatch ... FORTIGATE AMAZON MACHINE IMAGE (AMI) SELECTION - GUIDE

v1.0 12. 02.15

Copyright © 2015 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners.

www.fortinet.com