EXPANDING THE FORTINET SECURITY FABRIC

Transcription

Q1/2017EXPANDINGTHE FORTINETSECURITY FABRICAdvanced essApplicationPartner API

OVERVIEWFortinet’s mission is to deliver the most innovative, highest performing network securityfabric to secure and simplify your IT infrastructure. We are a leading global provider ofnetwork security appliances for carriers, data centers, enterprises and distributed offices.Founded: Nov. 2000First Product Release: May 2002Fortinet IPO: Nov. 2009 1.275BNASDAQ: FTNTHeadquarters: Sunnyvale, CaliforniaEmployees: 4,665FY 2016 Revenue: 1.275 BQ4 2016 Revenue: 363MQ4 2016 Billings: 463MQ4 2016 EPS (GAAP): 0.14CAGR 57%Market Cap (Feb.1, 2017) 5.7B 1.31B Cash and No DebtUnits Shipped to Date: 3MCustomers: 300,000 3-5XOther comparable358 Patents IssuedNetwork SecurityCompanies292 Patents Pending 2M20022016REVENUESource: Published USPTO dataQ4 2016High-End Appliances41%Mid-Range Appliances29%APAC20%Americas41%Large enterprises & telcos/service providersEnterprisesFortiGateBillingsREVENUEby Regionby SegmentEMEA39%Entry-Level Appliances30%SMBs, branch offices and retailOperations2%Sales &Marketing47%G&A6%APAC14%Service& Support20%EMEA24%EMPLOYEESby Functionby RegionR&D25%2EMPLOYEECOSTAmericas62%

GAINING SHARE IN A GROWING MARKETFortinet Security FabricCP9 & SoC3Fortinet is a major player in many segments of the fast growing NetworkSecurity and WLAN markets.35Acquired AccelOps20162M Units Shipped 33.6B30Acquired Meru NetworksEnterpriseWLAN 27.3BInternal SegmentationFirewallNew HQ20151 Tbps Firewall25SIEM20EnterpriseEndpoint1st 100 GbE PortSecurity Appliance2014MessagingWeb Security151st 40 GbE PortSecurity ApplianceSecurity Processor NP6ATPFortiSandbox102013NetworkSecurity5FortiOS 5.0 & SoC21M Units Shipped0201620122019Network Security & WLAN MarketSource:IDC Worldwide Endpoint Security Forecast, 2016–2020IDC Worldwide Security and Vulnerability Management Forecast, 2016–2020IDC Worldwide Enterprise WLAN Forecast, 2016–2020IDC Worldwide Specialized Threat Analysis and Protection Forecast, 2016–2020IDC Worldwide Web Security Forecast, 2016–2020IDC Worldwide IT Security Products Forecast, 2015-2019FortiAP2010FortiOS 4.0IPOFortinet is the largest network security appliance vendor (units) andgrowing quickly, according to IDC.1st Security 0002006Cisco300,000FortiOS 3.0Check Point1st Security Processor:200,000Network Processor2005100,000Juniper NetworksNamed WWUTM LeaderPalo Alto Networks2011201220132014FG-5000 (ATCA)20152004Source: IDC Worldwide Security Appliances Tracker, March 2016 (based on annual unit shipments)Fortinet is the Only Company to Excel at All Key Stages of Network alueFortiManagerFortiOS 2.02003Began Global SalesFortiGate & FortiOS 1.01st Security Processor:Number ofContent Processor2002Fortinet Founded2000100’s of Companies 50 53

EMERGING SECURITY CHALLENGESToday’s Networkis BorderlessSlow isBrokenComplexity is theEnemy of SecurityIoT and the cloud haveexpanded the attack surface the “edge” is no longer clearlydefined. There are more waysin and more ways out.Security has become abottleneck; enterprisescompromise security featuresto achieve performance goals.Too many point solutionscreate security gaps and aslow response to threats; nocommunication or coordination.Machine toMachine AttacksFabricSecurity FabricAdvanced ThreatProtectionAdvancedTargeted AttacksMaliciousAppsPerformance DegradationMaliciousSitesApplication ControlAPPWeb FilterURLSpamBotnetsAnti-spamViruses& SpywareIntrusion& WormsGeneration 2CONTENTNGFW/UTMAntivirusLayer 5-7:Content & ApplicationLayer 3-4:ConnectionHardware TheftGeneration 3INFRASTRUCTURELayer 1-2:PhysicalIPSFirewall/VPNLock & KeyGeneration 1CONNECTIONStateful Firewall1980s4Today

THE FORTINETSECURITY FABRICTHIRD-GENERATION NETWORK SECURITYFirst-generation network security, known as statefulfirewalls, focused on securing the connection. Ledby Fortinet, a second generation of network security,next-generation firewalls and UTMs, expandedAdvanced ThreatIntelligenceNOC/SOCinspection to the application and content. Today, theemergence of cloud, IoT and mobile is driving the needfor a third generation of network security to protect theCloudClient/IoTrapidly expanding attack surface and secure“data everywhere.”NetworkFortinet is once again leading the way with its SecurityFabric, the first architectural approach to securityAccessApplicationdesigned to dynamically adapt to the evolving ITinfrastructure. The Security Fabric intelligentlysegments the network, from IoT to the cloud, toprovide broad, powerful and automated protectionPartner APIagainst sophisticated threats.BROADPOWERFULAUTOMATEDThe Fabric covers the entire attackThe Security Fabric utilizesThe Security Fabric enables asurface — security can be appliedsecurity processors to reduce thefast and coordinated response toto the network, endpoints, access,burden on infrastructure, allowingthreats — all elements can rapidlyapplications and cloud, and visibilitycomprehensive security withoutexchange threat intelligence andextended to other vendor solutions.affecting performance.coordinate actions.5

FORTINET’S SECURITY FABRIC COVERS YOUR ENTIRE NFortinet SolutionsENTERPRISEFIREWALLCLOUDSECURITYFortiGate- Next-Generation FW- Data Center FW- Internal Segmentation FW- Distributed Enterprise CloudFortiGuard ServicesADVANCED THREATPROTECTIONFortiGate VM (Virtual FW)FortiGate VMX (SDN Virtual FW)FortiGate VM for Public Cloud- AWS- Microsoft Azure- Openstack-basedFortiHypervisorFortiGuard iClientFortiCloud SandboxingFortiGuard tiDDoSFortiDBFortiWANFortiCacheFortiGuard ServicesDATA CENTER/PRIVATE CLOUDFortiGate NGFWSecure chSwitchingFortiGate InternalSegmentation FWWeb ServersIP VideoSecurityCAMPUSFortiClientFortiWebWeb FiDistributed Ent FWFortiClientFortiGate InternalSegmentation FWFortiGate VMXSDN, Virtual veryControllerFortiGate InternalSegmentation FWFortiGateDCFW/NGFWFortiMailEmail SecurityFortiGate InternalSegmentation FWFortiExtenderLTE ExtensionFortiDDoS ProtectionFortiSandboxBRANCHOFFICE6Email

NETWORKFortiCareOur FortiCare customer support team provides global technicalsupport for all Fortinet products. With support staff in the Americas,Europe, Middle East and Asia, FortiCare offers services to meet theneeds of enterprises of all FiFortiCloud AP ortiExtenderFortiGuard tiAnalyzerFortiGuard ServicesBecome a FortinetNetwork Security Expert!Fortinet’s Network Security Expert (NSE) Program is an 8-leveltraining and assessment program designed for customers, partnersand employees, with over 50,000 security certifications to date.Validate YourSecurity ExperienceFortinetVirtual FirewallCloud-IaaSPUBLIC CLOUDServerFortiCloudAP pLevel ObjectiveNSE 1Develop a foundational understanding ofnetwork security concepts.NSE 2Develop the knowledge and skills necessaryto sell key Fortinet solutions.NSE 3Develop the knowledge and skills to sellFortinet products.Sales Associate(For Fortinet employees and partners only)(For Fortinet employees and partners only)NSE 4Develop the technical knowledge andskills needed to configure and maintain aFortiGate Next-Generation Firewall solution.NSE 5Develop a detailed technical understandingof how to implement network securitymanagement and analytics.NSE 6Develop an understanding of advancedsecurity technologies beyond the firewall.NSE 7Demonstrate a deep technicalunderstanding of key Fortinet erNSE 8ExpertDemonstrate the ability to design,configure, install and troubleshoot acomprehensive network security solution ina live environment.7

HIGH-END APPLIANCES40GNEW100GHIGH-PERFORMANCE NETWORK SECURITYFortinet’s core firewall platform, FortiGate, is powered by our purpose-builtoperating system, security processors and threat intelligence from FortiGuard Labs.FortiGate 7060EData Center Firewall (DCFW)/Carrier Class Firewall (CCFW)40GNEW40 Gbps - 1.12 Tbps100GFortiGate 7040EDeploymentService Provider or EnterpriseForm Factor2U/3U Appliance and ChassisInterfaces10, 40 and 100 GbEFW Throughput10 Gbps to more than 1 TbpsSpecial FeaturesCarrier ClassInternal Segmentation Firewall (ISFW)DeploymentService Provider or EnterpriseForm Factor1U/2U/3U ApplianceInterfaces10, 40 and 100 GbEFW Throughput16 to 320 GbpsSpecial FeaturesVDOM Management, Ultra-low LatencyNext-Generation Firewall (NGFW)FortiGate 5144C100GNEWDeploymentEdge or Border FirewallForm Factor1U/2U/3U ApplianceInterfaces1, 10, 40 GbEFW Throughput1 to 160 GbpsSpecial FeaturesAdvanced Threat ProtectionFortiGate 3980EUnified Threat Management (UTM)40GNEW100GFortiGate 3800D40 - 320 Gbps40GFortiGate 2000E20 - 80 GbpsDistributed Enterprise or SMBForm FactorDesktopInterfacesHigh-density 1 GbEThroughput1 to 3.5 GbpsSpecial FeaturesWi-Fi, PoE, RuggedizedVirtual Machine and Cloud FirewallFortiGate 3700DFortiGate 3200D8DeploymentFortiGate 1500DDeploymentEast/West Data Center or CloudForm FactorHypervisor or CloudSDN IntegrationCisco ACI, VMware NSX, OpenStackCloud IntegrationAWS, Microsoft Azure, OpenStackThroughputHardware DependentHypervisorsAll Major Hypervisors SupportedAdvanced Threat Protection (ATP)DeploymentEnterprise NetworksForm FactorAppliance/Virtual/CloudInterfaces1, 10 GbEThroughput1 to 4 GbpsSpecial FeaturesFortiGate/Mail/Client/Web IntegrationHypervisor

MID-RANGE APPLIANCES8 - 20 GbpsFortiGate 800DSecurity Services & TechnologiesFortiGate 600DManagementFirewallSoftware-EnabledSecurity ModulesVPNApplication ControlNEWFortiGate 300DIPSApp ControlAntivirusAnti-spamNEW2.5 - 4 GbpsWeb FilteringAnti-malwareFortiGate 200EWAN AccelerationMobileSecurityIPSWeb AppDatabaseData Loss ProtectionNEWWi-Fi ControllerAdvanced Threat utationFortiGate 100EENTRY-LEVEL APPLIANCESSPU-driven Performance & TCO AdvantageFortinet SPU-basedParallel Path EWFortiGate 50EFortiGate 30ENEWSlow, Not Scalable& Poor TCOVS.AcceleratesNetworkTrafficFlexible AcceleratesPolicyContentInspectionFW40 GbpsIPsec VPN25 GbpsSSL VPN28 GbpsIPS20 GbpsLESSLATENCYOptimized forentry-levelform factorsFortiGate 60E5X FW8X/11X SSL/IPsec VPN5X IPS5X Concurrent Sessions3X Power Efficiency6X - 12X performanceNEWLESSSPACELESSPOWERvs. similarly-priced offeringsFortiAP U421EVFortiAP U423EV802.11ac Wave 2Pricing oyment Mode15% of HW IPS/AC, AV,WF, AS, ATP,MS)20% of HWPrice Each1 YearAnnual Discountor# Ports and Speed&Edge, Internal Segmentation, Data Center,Branch and Virtual8 x 5 SupportFortiGate 80E24 x 7 Supportor25% of HW price100G, 40G, 10G, 1G, Wi-Fi, 4G/LTE360 Support35% of HW priceUTM Bundle(IPS/AC, AV, WF, AS)or& orProfessionalServicesDaily RateEnterprise Bundle(UTM ATP MobileSec)8x5Support24 x 7Support8x5Support24 x 7Support55% ofHW Price65% ofHW Price80% ofHW Price90% ofHW Price3 Years4 Years5 Years2 Years6% off/yr800 Mbps - 3.5 GbpsCPU & SerialProcessing-basedNEW10% off/yr12% off/yr15% off/yr9

INDEPENDENTLY TESTED AND VALIDATED PROTECTIONNGFW FortiGate 3200DBDS FortiSandbox 3000DJuniperForcepointCisco ASAAverageHillstone 100%tCheck PointDell SonicWALLHuaweiCisco FirePOWERPalo Alto NetworksBarracuda90%WatchGuards80%Security Eff70%60%CyberoamAverageFebruary 201650% 100 80 60 40 20 040%TCO per Protected MbpsWAF FortiWeb 1000DDC IPS FortiGate 3000DDATA CENTER INTRUSION PREVENTION SYSTEM (DCIPS)SECURITY VALUE MAP IBM100%Q4100%Fortinet FortiWeb 1000D95%Juniper*Networks TrendPalo AltoNetworksAverageIntelSecurity FortinetMicroQ190%90%80%85%60%50%40%Security Effectiveness70%eAveragJUNE 2016 130 120 110 100 90 80 70 60 50 40 30 20 10 020%60%10%55%0%50% 110 100 90 80 70 60 50 40Price per Protected-MbpsPRODUCTS TESTED1070%65%TCO per Protected Mbps Fortinet FortiGate 3000D v5.4.0, build 7184 HPE TippingPoint S7500NX v3.7.2.4252 IBM Security Network Protection XGS 7100 v5.3.2.175%30%HPE 14080% Intel Security McAfee Network Security Platform NS9100 v8.2.5.120 Juniper Networks SRX5400 v12.3X48-D18 Palo Alto Networks PA-7050 v7.0.4* On March 1, 2016, TippingPoint, owned by Hewlett Packard Enterprise (HPE), submitted the S7500NX v3.7.2.4252 to the NSS Labs DCIPS Public GroupTest. During testing, NSS discovered a number of security issues, which caused the product to receive a Caution rating. After testing began, Trend Micro 30 20 10 0

UNPARALLELED THIRD-PARTY CERTIFICATION¡ RECOMMENDED¡ CAUTIONNEUTRALFortinetCheckPointNSS LabsFirewall NGFW¡¡NSS LabsData Center Firewall¡XCertificationNSS Labs BreachDetection SystemNSS Labs WAF¡¡¡NSS LabsNext Gen IPSCiscoRETESTED & PASSEDPalo AltoJuniperSRX¡FireEyeXX¡XXX¡XXX¡ ¡XXXXXX¡XXXNSS LabsData Center IPS¡XXBreakingPointResiliency ¡¡ICSA FirewallICSA IPSICSA AntivirusICSA WAFICSA ATDVB100 VirusVBSpamAV ComparativeCommon CriteriaFIPSUNH USGv6/IPv6Certifications¡XThe Only NSS Labs Recommended Edge to Endpoint ATP SolutionFortinet has participated in thefollowing Real-world group tests,open to the industry, and conductedby NSS Labs. In doing so, Fortinetstands out as the only vendor toprovide an ATP Solution that is NSSLabs Recommended from the DataCenter to the Edge to the Endpoint inthe latest group tests.¡¡NGFW¡¡DC IPS¡¡Web Application Firewall¡¡Endpoint Protection¡¡Breach Detection (Sandbox)11

100 Offices Worldwide Including:HEADQUARTERSFORTINET INC.899 Kifer RoadSunnyvale, CA 94086United StatesTel: 1 408 235 7700Fax: 1 408 235 7737AMERICASNEW YORK1 Penn Plaza, Suite 4400New York, NY 10119United StatesTel: 1 646 381 2270PLANO6111 W Plano Pkwy,Plano, TX 75093VIRGINIA/WASHINGTON DC12005 Sunrise Valley Dr, Suite 140Reston, VA 20191Tel: 571 449 8375FLORIDA13450 W. Sunrise Blvd., Suite 430Sunrise, FL 33323 United StatesTel: 1 954 368 99917650 Courtney Campbell CausewaySuite 300Tampa, FL 33607Tel: 877-952-6725Fax: 813-288-8626BRITISH COLUMBIAStill Creek Campus4190 Still Creek Drive, Suite 400Burnaby, BC V5C 6C6CanadaTel: 1 604 430 1297Fax: 1 604 430 1296OTTAWA1826 Robertson RoadOttawa, ON K2H 5Z6CanadaAUSTRIARUSSIAWienerbergstrasse 7/D/12th floor,1100 ViennaAustriaSales: 43 1 22787 120Fax: 43 1 22787 200Smolenskaya square 3, Regus,office 610MoscowRussiaOffice: 7 499 9552499Email: russia@fortinet.comBELGIUM/LUXEMBOURGPegasuslaan 51831 DiegemBelgiumSales: 32 0 2 716 49 27Fax: 32 0 2 716 47 27SPAINCZECH REPUBLICAvinguda Diagonal, 177, planta 508018 BarcelonaSpainPhone : 34 93 547 72 69Pekarska 10150 00 Prague 5Czech RepublicSales: 420 773 788 788DENMARKIsafjordsgatan 39B16440 KistaSwedenSales: 46 70 237 9090GERMANYSWITZERLANDFeldbergstraße 3560323 FrankfurtGermanySales: 49 69 310 192 0Fax: 49 69 310 192 22Landsbergerstrasse 15580687 MünchenGermanyTel: 49 89 57959663IRELAND28-32 Upper Pembroke StreetDublinIrelandSales: 353 1 6087703ISRAEL6 Hachoshlim St., 1st FloorP.O. Box 12006Herzliya Pituach 46722IsraelSales: 972 77 6935670ITALYPaseo de la Reforma 412 piso 16Col. Juarez C.P. 06600México D.F.Tel: 52 55 5524 8428Via del Casale Solaro, 11900143 ROMAItalySales: 39 06 51573 330Fax: 39 06 51573 390EMEA SALES OFFICE905 rue Albert Einstein06560 ValbonneFranceTel 33 4 8987 0500Fax 33 4 8987 0501FRANCETOUR ATLANTIQUE24ème étage,1 place de la Pyramide92911 Paris La Défense CedexFranceSales: 33 1 8003 1655SWEDENTuborg Boulevard 12DK-2900 HellerupSales: 45 3694 4408MEXICOEMEAAvda. Europa, 24, Edif. B, 2ºBAlcobendas, Madrid 2810SpainPhone: 34 915 024 874POLAND59 Zlota Str.LUMEN Bldg (In OFFICE, 6th floor)00-120 Warsaw, Polandpoland@fortinet.comPORTUGALAvenida D. João II, nº 50 - 4º Piso Edifício Mar Vermelho Parque das Nações1990-095 LisboaPortugalSales: 351 91 289 59 64Riedmuehlestr. 8CH-8305 Dietlikon, ZurichSwitzerlandSales: 41 44 833 68 48THE NETHERLANDSThe NetherlandsRegus WTC Utrecht PapendorpPapendorpseweg 1003528 BJ UtrechtThe NetherlandsSales: 31 (0)33 454 67 50Fax: 31 (0)33 454 66 66TURKEYSaray Mah. Doktor Adnan BüyükdenizCad.No:4 Akkom Ofis Park 2Blok Kat:10Ümraniye-lstanbul 34768Office: 90 216 250 3259/60UNITED ARAB EMIRATESSuite 105Arjaan Business TowerDubai Media CityP.O. Box 502276, DubaiUnited Arab EmiratesSales: 971 4 423 9601Fax: 971 4 426 4698G01-6WA, West Wing, Building 6,Block ADubai Airport Free ZoneDubai, UAETel: 971 4 2146057Fax: 971 4 2146059JAPANAPAC8th Fl., Sumitomo FudosanRoppongi-dori Bldg.7-18-18, Roppongi, Minato-ku,Tokyo, 106-0032JapanTel: 81 3 6434 8531Fax: 81 3 6434 8532APAC SALES OFFICE300 Beach Road 20-01The ConcourseSingapore 199555Tel: 65 6395 2788Fax: 65 6295 0015AUSTRALIA5F Nomura 3rd Building2-19, Kanda Suda-cho, Chiyoda-kuTokyo 101-0041, JapanTel: 81 3 5297 1221Fax: 81 3 5297 1222Level 7, 2-10 Loftus StreetSydney, NSW 2000AustraliaTel: 61 2 8007 6000Fax: 61 2 8007 6009KOREALevel 1, 483 Riley StreetSurry Hills NSW 2010AustraliaTel: 61 1300-148-00015th Fl. Haeam Bldg., 983-1,Daechi-dong, Gangnam-gu, Seoul,Korea(135-280)Tel : 82 70 7126 1111Fax: 82 2 512 5998CHINA12FL, Zhongxin Plaza,52 North Fourth-Ring West Road,Haidian DistrictBeijing,100080, ChinaTel: 8610 6296 0376Fax: 8610 6296 0239Leaders Building 205 Ho,Jangmi-Ro 42, Bundang-Gu,Sungnam city, Kyonggi-Do,Korea. Zip : 463-828Tel : 82 31 707 9932Fax: 82 31 707 9972HONG KONGMALAYSIAFortinet International, Inc.Suite 1508-10, Cityplaza One,Taikoo Shing,Hong KongTel: 852 3708 3500INDIAFortinet Innovation Centre India Pvt Ltd,C1 & C2-201, C1 & C2-301,2nd & 3rd floor, Tower-C, The MillenniaNo 1 & 2, Murphy Road, Ulsoor,Bangalore – 560 008Fortinet Technologies India Pvt Ltd,C2-002, Ground Floor,Tower-C,, The MillenniaNo 1 & 2, Murphy Road, Ulsoor,Bangalore – 560 008Fortinet Technologies India Pvt Ltd703, Powai Plaza, 7th floor,Powai, Andheri (E),Mumbai 400076 INDIAOffice: 91 22 67252515, 25704691INDONESIA50/F Menara BCA Grand IndonesiaJl. MH. Thamrin No. 1Jakarta 10310IndonesiaTel: 62 21 2358 4548Fax: 62 21 2358 4401Suite 33A-02/03, Level 33AMenara Keck Seng203, Jalan Bukit Bintang55100 Kuala LumpurMalaysiaTech Support: 603 2711 7391Sales: 603 2711 1770Sales Fax: 603 2711 1772PHILIPPINES32nd Street., One World Place,Bonifacio Global City,Taguig City 1634, PhilippinesTel: 632 808 8798Fax: 632 621 0646TAIWAN2F, No. 176, Xing’ai Rd,Nei-Hu Dist.Taipei City, 11494, TaiwanTel: 886 2 2796 1666Fax: 886 2 2796 0999THAILANDLevel 25, Unit ML2511The Offices at Central World999/9 Rama 1 RoadBangkok 10330, ThailandTel: 66 2 658 658 12UNITED KINGDOMFORTINET (UK) LTD.Fortinet (UK) Ltd.Floor 6, 120 Old Broad StreetLondon, EC2N 1ARUnited KingdomSales: 44 0 207 868 1715Fax: 44 0 2032079129Follow Us:www.fortinet.comCopyright 2017 Fortinet, Inc. All rights reserved. Fortinet , FortiGate , FortiCare and FortiGuard , and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also beregistered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internallab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein representsany b

Internal Segmentation Firewall (ISFW) Next-Generation Firewall (NGFW) Unified Threat Management (UTM) Virtual Machine and Cloud Firewall Advanced Threat Protection (ATP) FortiGate 3800D 100G FortiGate 3700D 40G FortiGate 3200D FortiGate 2000E FortiGate 7060E NEW 40G 100G FortiGate 3980E 100G NEW 40G NEW FortiGate 7040E NEW 40G