INSPECTION OF ENCRYPTED TRAFFIC WITHOUT … · why fortigate 7000 series? learn more about the 7000...
Transcript of INSPECTION OF ENCRYPTED TRAFFIC WITHOUT … · why fortigate 7000 series? learn more about the 7000...
WHY FORTIGATE 7000 SERIES?
www.fortinet.comLEARN MORE ABOUT THE 7000 SERIES HERE
SECURITY MUST SCALE TO SUPPORT 100G DATA CENTERS
FORTIGATE 7000 SERIES PERFORMANCE
50GBPSSSL
INSPECTIONTHROUGHPUT
120GBPS
INTRUSION PREVENTION
THROUGHPUT
630GBPS
NETWORK FIREWALLTHROUGHPUT
80GBPS
THREAT PROTECTION
THROUGHPUT
GBPS100
NGFWTHROUGHPUT
FORTIGATE 7040E VS. COMPETITORS IN A REAL-WORLD TEST4:
WHAT ANALYSTS SAY ABOUT NGFW IN DATA CENTER
NETWORKS ARE BEING UPGRADED FROM
10G TO 100G
USERS REQUIRE FAST, SECURE ACCESS AT
ALL TIMES
INSPECTION OF ENCRYPTED TRAFFIC WITHOUT NETWORK SLOWDOWN IS CRITICAL
1: Fortinet Threat Landscape report 20172: Gartner Magic Quadrant for Enterprise Network Firewalls , 10 July 20173: Gartner Predicts 2017: Network and Gateway Security,13 December 20164: Independent test facility where all 3 vendors’ products were subjected to the same test conditions
EXPONENTIAL
IN IoT & CLOUD TRAFFIC INCREASE
“With the data center migration underway from 10G to 100G to support new applications and services, NGFW throughput and latency requirements are evolving in the data center. NGFWs deployed in internal networks or in the data center core are expected to perform at levels approaching 100G speeds to avoid becoming a bottleneck in the fastest part of the network.”
– Rob Ayoub, IDC
PURPOSE-BUILT SECURITY PROCESSORS ENABLE TOP PERFORMANCE
70%
INBOUND DATA CENTER REQUESTS ARE ENCRYPTED 1
NEW ENTERPRISE FIREWALLS DEPLOYED WILL BE USED FOR OUTBOUND TLS INSPECTION, UP FROM LESS THAN 10% TODAY.2
ENCRYPTED TRAFFIC (HTTPS) REPRESENTS ROUGHLY 30% TO 40% OF ENTERPRISE WEB TRAFFIC, RISING STEADILY WHEN COMPARED TO 2015.3
50%