CASE STUDY
The solution : Fortinet Secure SD-WAN to branches
Following the successful completion of rigorous proof-of-concept trials , Petrol Ofisi decided to proceed with the Fortinet Secure SD-Branch offering , comprising Fortinet Secure SD-WAN combining the advanced threat protection of FortiGate nextgeneration firewalls ( NGFWs ) with integrated SD-WAN functionality . These same FortiGate NGFWs manage the FortiSwitch secure Ethernet switches . Lastly , FortiNAC network access control provides secure visibility and control of all devices connecting into the network . Branches that needed LTE connectivity leveraged FortiGate devices with built-in LTE . For branches that required redundancy , a FortiExtender WAN extender was deployed in conjunction with the firewall .
The resulting distributed branch network would be centrally administered using a combination of the FortiManager network management platform and FortiAnalyzer logging and reporting solution , collectively known as the Fabric Management Center .
“ The Fortinet Secure SD-Branch solution exceeded our requirements for functionality and price performance – the built-in LTE is just one example of that ,” said Karakuş . “ But the level of service and support we experienced from the local Fortinet team left us in no doubt we were partnering with the right company .”
Advantages of an integrated solution
Through the Fortinet SD-Branch solution , Petrol Ofisi was able to reduce the total number of devices required at each location , significantly simplifying deployment . Furthermore , thanks to a common security operating system , the Fortinet firewalls , switches and any other devices sitting behind the branch firewall ( such as a FortiAP wireless access point ) will automatically apply the same centrally determined security policies and come under the same central management umbrella .
In other solutions , such levels of integration might lead to reductions in effective throughput . But the FortiGate employs a purpose-built SoC4 SD-WAN security processing unit ( SPU ) to deliver the industry ’ s fastest identification and steering for over 5,000 unique applications . This drastically reduces latency and accelerates overlay performance .
Enhanced user experience
From the perspective of the IT team , one of the most noticeable changes after the Fortinet solution was deployed across their network of remote filling stations was the immediate reduction in problem reporting and support cases .
With faster , more reliable connectivity , the vast majority of issues relating to application usage and continuity disappeared , allowing the IT team to focus more of their time and resources on planning and optimisation .
“ Fortinet enables us to differentiate between all the different types of traffic crossing our WAN , so we can now confidently manage latency and prioritise business-critical applications to deliver the experience our users expect ,” said Karakuş .
Increased security and control
An additional benefit of differentiating traffic flows based on application usage is the ability to segment the traffic into virtual domains and tailor the security posture accordingly .
This segmentation also confines any successful intrusions to the segment penetrated , preventing lateral propagation and thus limiting its potential impact .
FortiManager provides full visibility and control of the entire infrastructure , its traffic and any potential threats . Leveraging its central provisioning , policy updates and change management for all Fortinet devices , Petrol Ofisi was able to rollout the new infrastructure with both speed and confidence .
The addition of FortiAnalyzer brings deep insight into current threats and allows for the automation of key tasks such as attack mitigation , logging and reporting .
By correlating real-time information from across the network , FortiAnalyzer helps the company to identify and automatically mitigate a range of advanced targeted threats , whether they are isolated incidences or persistent attacks . p
THE LEVEL OF SERVICE AND SUPPORT WE EXPERIENCED FROM THE LOCAL FORTINET TEAM LEFT US IN NO DOUBT
WE WERE PARTNERING WITH THE RIGHT COMPANY .
www . intelligentcio . com INTELLIGENTCIO EUROPE 61