inspection of encrypted traffic without … · why fortigate 7000 series? learn more about the 7000...

1
WHY FORTIGATE 7000 SERIES? www.fortinet.com LEARN MORE ABOUT THE 7000 SERIES HERE SECURITY MUST SCALE TO SUPPORT 100G DATA CENTERS FORTIGATE 7000 SERIES PERFORMANCE 50 GBPS SSL INSPECTION THROUGHPUT 120 GBPS INTRUSION PREVENTION THROUGHPUT 630 GBPS NETWORK FIREWALL THROUGHPUT 80 GBPS THREAT PROTECTION THROUGHPUT GBPS 100 NGFW THROUGHPUT FORTIGATE 7040E VS. COMPETITORS IN A REAL-WORLD TEST 4 : WHAT ANALYSTS SAY ABOUT NGFW IN DATA CENTER NETWORKS ARE BEING UPGRADED FROM 10G TO 100G USERS REQUIRE FAST, SECURE ACCESS AT ALL TIMES INSPECTION OF ENCRYPTED TRAFFIC WITHOUT NETWORK SLOWDOWN IS CRITICAL 1: Fortinet Threat Landscape report 2017 2: Gartner Magic Quadrant for Enterprise Network Firewalls , 10 July 2017 3: Gartner Predicts 2017: Network and Gateway Security,13 December 2016 4: Independent test facility where all 3 vendors’ products were subjected to the same test conditions EXPONENTIAL IN IoT & CLOUD TRAFFIC INCREASE “With the data center migration underway from 10G to 100G to support new applications and services, NGFW throughput and latency requirements are evolving in the data center. NGFWs deployed in internal networks or in the data center core are expected to perform at levels approaching 100G speeds to avoid becoming a bottleneck in the fastest part of the network.” – Rob Ayoub, IDC PURPOSE-BUILT SECURITY PROCESSORS ENABLE TOP PERFORMANCE 70 % INBOUND DATA CENTER REQUESTS ARE ENCRYPTED 1 NEW ENTERPRISE FIREWALLS DEPLOYED WILL BE USED FOR OUTBOUND TLS INSPECTION, UP FROM LESS THAN 10% TODAY. 2 ENCRYPTED TRAFFIC (HTTPS) REPRESENTS ROUGHLY 30% TO 40% OF ENTERPRISE WEB TRAFFIC, RISING STEADILY WHEN COMPARED TO 2015. 3 50 %

Upload: dangphuc

Post on 02-Sep-2018

214 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: INSPECTION OF ENCRYPTED TRAFFIC WITHOUT … · why fortigate 7000 series? learn more about the 7000 series here security must scale to support 100g data centers fortigate 7000 series

WHY FORTIGATE 7000 SERIES?

www.fortinet.comLEARN MORE ABOUT THE 7000 SERIES HERE

SECURITY MUST SCALE TO SUPPORT 100G DATA CENTERS

FORTIGATE 7000 SERIES PERFORMANCE

50GBPSSSL

INSPECTIONTHROUGHPUT

120GBPS

INTRUSION PREVENTION

THROUGHPUT

630GBPS

NETWORK FIREWALLTHROUGHPUT

80GBPS

THREAT PROTECTION

THROUGHPUT

GBPS100

NGFWTHROUGHPUT

FORTIGATE 7040E VS. COMPETITORS IN A REAL-WORLD TEST4:

WHAT ANALYSTS SAY ABOUT NGFW IN DATA CENTER

NETWORKS ARE BEING UPGRADED FROM

10G TO 100G

USERS REQUIRE FAST, SECURE ACCESS AT

ALL TIMES

INSPECTION OF ENCRYPTED TRAFFIC WITHOUT NETWORK SLOWDOWN IS CRITICAL

1: Fortinet Threat Landscape report 20172: Gartner Magic Quadrant for Enterprise Network Firewalls , 10 July 20173: Gartner Predicts 2017: Network and Gateway Security,13 December 20164: Independent test facility where all 3 vendors’ products were subjected to the same test conditions

EXPONENTIAL

IN IoT & CLOUD TRAFFIC INCREASE

“With the data center migration underway from 10G to 100G to support new applications and services, NGFW throughput and latency requirements are evolving in the data center. NGFWs deployed in internal networks or in the data center core are expected to perform at levels approaching 100G speeds to avoid becoming a bottleneck in the fastest part of the network.”

– Rob Ayoub, IDC

PURPOSE-BUILT SECURITY PROCESSORS ENABLE TOP PERFORMANCE

70%

INBOUND DATA CENTER REQUESTS ARE ENCRYPTED 1

NEW ENTERPRISE FIREWALLS DEPLOYED WILL BE USED FOR OUTBOUND TLS INSPECTION, UP FROM LESS THAN 10% TODAY.2

ENCRYPTED TRAFFIC (HTTPS) REPRESENTS ROUGHLY 30% TO 40% OF ENTERPRISE WEB TRAFFIC, RISING STEADILY WHEN COMPARED TO 2015.3

50%