Skip to content Skip to navigation Skip to footer

   

Features & Benefits

Key Secure SD-WAN features

CONSOLIDATION

True platform consolidation

Secure SD-WAN, SSE, zero trust, wireless controller, LTE/5G gateway, and FortiGuard AI-Powered Security Services have the same OS, policy engine, and management plane. This simplifies operations with centralised deployment, configuration and management, while enabling comprehensive visibility, analytics and reporting. FortiAI-Assist helps IT teams orchestrate and automate the entire secure SD-WAN infrastructure.

VISIBILITY

Unified telemetry, DEM and analytics

SD-WAN, SSE, endpoints and zero trust share a single data model enriched with built-in DEM, analytics and a unified agent. This correlates user experience and network performance from endpoint to ISP to application (SaaS, private), and security events, including vulnerability scanning and patching in real time. Integrated analytics and reporting is available as-a–Service, delivering 24x7 threat monitoring, AI-driven alert triage and expert-led incident escalation in as little as 15 minutes.

LOWER TCO

Predictable costs

Fortinet Secure SD-WAN has a predictable cost model with no bandwidth licensing or data transfer charges or services tiering. Easily transition to FortiSASE security service edge (SSE) with simplified licensing, also delivering lower costs; about one-third of competitor offerings.

INSPECTION

Distributed enforcement & local inspection

Traffic is decrypted and inspected at the most appropriate edge for malware prevention. Performance is optimised with automatic detection of users on- and off-network; not sent to centralised, shared cloud, or data centre inspection points. With purpose-built ASICs in FortiGates, comprehensive SSL and certificate inspection can be performed while minimising performance impact, latency, and cloud hair-pinning, resulting in predictable user experience.

ZERO TRUST

Consistent universal zero trust

The broadest built-in application gateway options extend identity-based access across users, branches, campuses and IoT/OT—regardless of where connections originate, with posture checks every 60 seconds, secure access and application verification. Leverage 50+ unique attributes to define characteristics of endpoint posture, allowing granular controls for device access to any application.

Unified SASE
Performance and Security

Secure SD-WAN and SSE in one solution

Networking and security share FortiOS, a single policy engine and organically built security services. Advanced SD-WAN capabilities for intelligent application steering and MPLS-like performance over broadband enhance application performance. Built-in security services and ASIC-accelerated networking and security functions include detection and protection across thousands of GenAI applications.

Learn more
Performance and Resilience

Autonomous app-aware SD-WAN architecture

Automatically detect problems, then reroute traffic to maintain app performance. Multi-cloud on-ramp and ZTP enable fast deployment and secure connectivity to, in, and between cloud apps. Self-healing, autonomous architecture and hardware acceleration mean there’s no single point of failure. Real-time path monitoring and dynamic steering across broadband, 5G and MPLS are backed by ASIC-accelerated packet processing. High performance and scalability support thousands of sites – with no slowdown.

PERFORMANCE ISSUE IDENTIFICATION

SD-WAN underlay and app monitoring service

The SD-WAN Underlay and Application Monitoring Service offers comprehensive monitoring of the ISP link, path, and application performance. It is enabled by FortiManager and FortiGuard Labs’ database of hundreds of popular SaaS and cloud designations. This empowers IT teams to swiftly prioritise network traffic, efficiently address operational issues, and enhance user experience.

Learn more
RAPID, SECURE INTERCONNECTIVITY

SD-WAN Overlay-as-a-Service

The FortiGate Cloud Advanced Service provides simplified, secure, and rapid provisioning of interconnected locations.

  • Turnkey service: The SaaS, cloud-hosted model reduces hosting costs and management needs, plus lowers deployment time and overall cost.
  • Continuous operations: Fortinet managed and hosted, geo-redundant hubs are included with the service.
  • Simple: The point-and-click interface means minimal technical expertise is required.
Watch the video

Download the Solution Brief
How it works

Learn how Secure SD-WAN works

  • Fortinet Secure SD-WAN 7.6 – a solution overview

    Fortinet Secure SD-WAN 7.6 – a solution overview

    The demo walks through the Fortinet Secure SD-WAN solution on FortiOS 7.6 including the FortiAI assistant capability.

  • Integrating Fortinet Secure SD-WAN and FortiSASE (SSE) within minutes

    Integrating Fortinet Secure SD-WAN and FortiSASE (SSE) within minutes

    Fortinet Secure SD-WAN is foundational for a seamless transition to Fortinet Unified SASE. In this demo, we show how easily and quickly you can extend consistent security posture/efficacy with application resilience, delivered as a service, hosted by Fortinet to secure all of your hybrid workforces.

  • SD-WAN Overlay-as-a-Service

    SD-WAN Overlay-as-a-Service

    Overlay-as-a-Service powered by FortiGate Cloud Advanced services is a turnkey service that securely provides simplified and rapid provisioning of interconnected locations as well as setting up overlay policies.

  • Fortinet Secure SD-WAN customer panel – IHG, Itau & Grupo Bimbo

    Fortinet Secure SD-WAN customer panel – IHG, Itau & Grupo Bimbo

    Leaders from IHG, Itau, and Grupo Bimbo discuss their experiences deploying Fortinet Secure SD-WAN across thousands of locations. Gain insights into the challenges they encountered, the strategic reasons behind their selection of Fortinet, and the significant business outcomes realised through this solution.

  • SD-WAN in the age of SASE, AI and Zero Trust: Still a key player?

    SD-WAN in the age of SASE, AI and Zero Trust: Still a key player?

    SD-WAN has revolutionised modern networking, and emerging technologies like SASE, GenAI, and zero trust are expanding its possibilities for the future.

  • How to choose an SD-WAN solution in a rapidly evolving market

    How to choose an SD-WAN solution in a rapidly evolving market

    See how Fortinet Secure SD-WAN integrates AI to simplify complex network operations and improve speed and accuracy.

Fortinet Secure SD-WAN 7.6 – a solution overview

The demo walks through the Fortinet Secure SD-WAN solution on FortiOS 7.6 including the FortiAI assistant capability.

Integrating Fortinet Secure SD-WAN and FortiSASE (SSE) within minutes

Fortinet Secure SD-WAN is foundational for a seamless transition to Fortinet Unified SASE. In this demo, we show how easily and quickly you can extend consistent security posture/efficacy with application resilience, delivered as a service, hosted by Fortinet to secure all of your hybrid workforces.

SD-WAN Overlay-as-a-Service

Overlay-as-a-Service powered by FortiGate Cloud Advanced services is a turnkey service that securely provides simplified and rapid provisioning of interconnected locations as well as setting up overlay policies.

Fortinet Secure SD-WAN customer panel – IHG, Itau & Grupo Bimbo

Leaders from IHG, Itau, and Grupo Bimbo discuss their experiences deploying Fortinet Secure SD-WAN across thousands of locations. Gain insights into the challenges they encountered, the strategic reasons behind their selection of Fortinet, and the significant business outcomes realised through this solution.

SD-WAN in the age of SASE, AI and Zero Trust: Still a key player?

SD-WAN has revolutionised modern networking, and emerging technologies like SASE, GenAI, and zero trust are expanding its possibilities for the future.

How to choose an SD-WAN solution in a rapidly evolving market

See how Fortinet Secure SD-WAN integrates AI to simplify complex network operations and improve speed and accuracy.

Models & Specs

Appliance models and specifications

Available in all form factors including physical and virtual appliances. Flexible capacity enables the best application experience. FortiManager can be used to monitor and manage FortiGate appliances and is also available in different form factors including hardware, virtual, and SaaS. Learn more about FortiGuard AI-powered Security Bundles for FortiGate.

View by:

Hardware appliances

Devices/VDOMs (Maximum)
30
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
100
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1000
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
1200
Sustained Log Rates
50
GB/Day
2
Zero Touch Provisioning
Yes
Third Party Automation
Yes
Devices/VDOMs (Maximum)
4000
Sustained Log Rates
150
GB/Day
10
Zero Touch Provisioning
Yes
Third Party Automation
Yes
FMG-BASE to FMG-VM-UL-UG
Devices/VDOMs (Maximum)
10 to Unlimited
Sustained Log Rates
Hardware dependent
GB/Day
1-50
Zero Touch Provisioning
Yes
Third Party Automation
Yes
NGFW Throughput
850 Mbps
Threat Protection Throughput
700 Mbps
VPN Throughput
1 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
1.5 Gbps
Threat Protection Throughput
1.2 Gbps
VPN Throughput
1.5 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
2.5 Gbps
Threat Protection Throughput
2 Gbps
VPN Throughput
3 Gbps
Max G/W to G/W IPSEC Tunnels
2000
Ports
Up to 10
NGFW Throughput
4.5 Gbps
Threat Protection Throughput
3.5 Gbps
VPN Throughput
5.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
NGFW Throughput
9 Gbps
Threat Protection Throughput
7 Gbps
VPN Throughput
6.5 Gbps
Max G/W to G/W IPSEC Tunnels
40,000
Ports
Up to 10
Actual performance may vary depending on the network and system configuration. Performance metrics were observed using a DELL R740 (CPU Intel Xeon Platinum 8168 2.7 GHz, Intel X710 network adaptors), running FOS v5.6.3. Tested with VMware vSphere 6.5 Enterprise Plus. SR-IOV is enabled. 1. IPS performance is measured using 1 MB HTTP and Enterprise Traffic Mix. 2. Application Control performance is measured with 64 KB HTTP traffic. 3. NGFW performance is measured with IPS and Application Control enabled, based on Enterprise Traffic Mix. 4. Threat Protection performance is measured with IPS and Application Control and Malware protection enabled, based on Enterprise Traffic Mix.

Amazon Web Services (AWS), Microsoft Azure, Google, and Oracle support both bring-your-own-licence (BYOL) and on-demand (pay-as-you-go). Please see the Marketplace listings for more information:

Product Reviews

Feedback from Fortinet Secure SD-WAN customers

Analyst recognition

2026 Gartner® Magic Quadrant™ for SASE Platforms
A Challenger in SASE Platforms
Fortinet is recognised as a Challenger in the 2026 Gartner® Magic Quadrant™ for SASE Platforms.
Download Report »

Case studies

SD-WAN Resources

SD-WAN Is the Foundation of Every Successful SASE Strategy »

Discover why Secure SD-WAN is the essential foundation for SASE, enabling unified management, stronger security, and optimized cloud performance.

Future Proofing a National Intelligence Network »

An intelligence network is turning to Fortinet to help scale its data center architecture and elevate its security posture by embedding new levels of AI-powered security. Learn more.

Fortinet Improves Resiliency and Operations to 1,000+ ATMs »

Major global bank securely connects and improves the resiliency of thousands of remote ATMs with one rugged platform for 5G, SD-WAN, and security with FortiGate Rugged 70G NGFW. Learn more.

Fortinet Secure SD-WAN Receives Coveted “Recommended” Rating from CyberRatings.org »

Independent testing of Fortinet's Secure SD-WAN solution was conducted by CyberRatings.org and earned the highest "Recommended" rating. Learn more.

Large U.S. Construction Services Company Consolidates its Network and Increases Visibility with the Fortinet Secure SD-WAN Solution »

Read why Fortinet was selected by this company for its network modernization program to make network management easier.

Simplify SD-WAN Deployments with Industry-First Fabric Overlay Orchestrator »

Simplifying the deployment and management of SD-WAN networks is a key consideration when evaluating a WAN edge solution. Learn how the all-new Fabric Overlay Orchestrator makes it easier to set up and manage new SD-WAN regions.

Optimizing IT and User Experience by Bringing AIOps and DEM to SD-WAN »

Adding Digital Experience Monitoring (DEM) and AIOps to SD-WAN benefits both the business and IT sides of an organization. Read to learn more.

Large Fuel Distribution Company Refines Its Network Performance with Fortinet »

Read about a global fuel distribution company which chose to build its business on advanced Fortinet FortiGate NGFWs and Secure SD-WAN, gaining greater performance and functionality—plus greater value. Learn more.

Accurate Analysis Matters: Fortinet Secure SD-WAN Cyber Threat Assessment Can Help »

Customers continue to shift to SD-WAN architectures so they can realize all the benefits that a WAN Edge solution can bring to their networks.

Build a Multi-Cloud Freeway With SD-WAN »

Cloud connectivity is a chore. The big 3 public clouds in North America– AWS, Azure, and Google Cloud–each have their own networking constructs, quirks, and management interfaces.

SD-WAN Services Bundle »

Introducing the New SD-WAN and SASE Services Bundles »

Secure Your Hybrid Workforce with Fortinet Unified SASE »

Fortinet Unified SASE addresses the full scope of hybrid workforce security through a comprehensive, single-vendor approach that tightly integrates software-defined wide area networking (SD-WAN) with cloud-delivered security service edge (SSE), simplifying operations while ensuring consistent protection from the network edge to remote users.

SD-WAN Underlay and Application Monitoring Service »

The Fortinet SD-WAN Underlay and Application Monitoring Service provides administrators with a comprehensive suite of features to enhance user experience.

FTNT-SDWAN-OaaS-one pager »

Fortinet SD-WAN Overlay-as-a-Service provides a simple and easy on-demand secure connectivity between locations without the need for IT technical expertise.

Simplify and Strengthen Hybrid Workforce Security with FortiSASE »

FortiSASE is a cloud-delivered security service edge (SSE) solution that provides always-on secure access to private applications.

Simplify SD-WAN Operations with Fortinet Secure SD-WAN, FortiManager, and FortiAnalyzer »

Fortinet Secure SD-WAN addresses today’s WAN challenges, combining next-generation firewalls (NGFWs) with integrated solutions for management and analytics to centralize and simplify SD-WAN operations.

Transform the Enterprise WAN with the Fortinet Security Fabric and Azure Virtual WAN »

Extend Your Fortinet Security Fabric to the Azure Cloud

Enhancing Collaboration, App Performance, and Security with Fortinet Secure SD-WAN and Overlay-as-a-Service »

Fortinet offers a tailored solution combining Secure SD-WAN and Overlay-as-a-Service (OaaS) for small and midsized businesses (SMBs) to empower WAN infrastructure transformation while ensuring comprehensive secure internet connectivity, optimizing collaboration across sites, and enhancing application performance.

Efficient Communication and User Experiences with FortiVoice and Fortinet Secure SD-WAN »

FortiVoice Unified Communications delivers quality calling, conferencing, chat, fax, and more in a single platform, with flexible deployment options in cloud, hardware, and virtual machines.

Leroy Merlin boosts its operations with Fortinet Secure SD-WAN »

Leroy Merlin shares how Fortinet’s integrated security and networking platform helps the company centrally manage its 50+ stores, data centers, and the cloud, delivering real time visibility, protection, and operational efficiency for a lean IT team.

SD-WAN Overlay-as-a-Service Powered by FortiGate Cloud Advanced Service »

Overlay-as-a-Service powered by FortiGate Cloud Advanced Services is a turnkey service that securely provides simplified and rapid provisioning of interconnected locations as well as setting up overlay policies.

Business Outcomes By Using Fortinet Secure SD-WAN »

Fortinet Secure SD-WAN customers across industries are realizing tremendous measurable benefits. Some of these benefits include cost savings, speed of deployment, boost in IT efficiency, improved performance, reduced risks and increase network uptime.

Fortinet Secure SD-WAN Customer Panel — IHG, Itau & Grupo Bimbo »

In this customer panel, leaders from Grupo Bimbo, IHG, and Itaú discuss their experiences deploying Fortinet Secure SD-WAN across thousands of locations. Gain insights into the challenges they encountered, the strategic reasons behind their selection of Fortinet, and the significant business outcomes realized through this solution.

Integrate Fortinet Secure SD-WAN and FortiSASE within Minutes »

Fortinet Secure SD-WAN is Foundational for a Seamless Transition to Fortinet Unified SASE. If you are currently using Fortinet Secure SD-WAN, learn how easy and within minutes you can extend consistent security posture/efficacy with application resiliency, delivered as a service, hosted by Fortinet to secure all of your hybrid workforces with FortiSASE

Fortinet Secure SD-WAN 7.6 - A Solution Overview »

In this demo we will walk through the Fortinet Secure SD-WAN solution on 7.6. Our latest release includes over 20 new features, including our new FortiAI assistant and SD-WAN Manager.

Expedite SD-WAN Services with Fortinet Overlay-as-a-Service »

Fortinet SD-WAN Overlay-as-a-Service (OaaS) is a SaaS turnkey service that provides central policy management and simple, easy, and on-demand secure connectivity between locations. Customers will realize cost savings, continuous operation, and simplicity with minimal IT expertise required.

SD-WAN Overlay-as-a-Service »

Overlay-as-a-Service is a turnkey service that securely provides simplified and rapid provisioning of interconnected locations.

FortiGate 90G Delivers Unparalleled Security Performance and Power Efficiency »

The FortiGate 90G series of next generation firewalls (NGFWs) are designed to deliver the highest performance and efficiency in a compact, fanless desktop form factor to address the complex power and security needs in small offices and branches.

Fortinet Secure SD-WAN 7.2 Key Capabilities »

Many modern enterprises have adopted SD-WAN and welcomed the simplified management, increased network speeds and agile operations that it brings. FortiOS 7.2 delivers on simplicity, scalability and speed of deployment.

How to Choose a SD-WAN Solution in a Rapidly Evolving Market »

See how Fortinet Secure SD-WAN integrates AI to simplify complex network operations and improve speed and accuracy.

SD-WAN in the Age of SASE, AI, and Zero Trust: Still a Key Player? »

SD-WAN has revolutionized modern networking, and emerging technologies like SASE, GenAI, and Zero Trust are now expanding its possibilities for the future.

How to Elevate UX with Secure SD-WAN and Digital Experience Monitoring »

Watch this webinar to gain visibility into application performance, identify and troubleshoot application delivery problems quicker, and proactively monitor and manage user experience.

Fortinet Presents at Networking Field Day 33 »

With Fortinet Secure SD-WAN, organizations can improve application experience, secure connectivity, and enhance operations, all leading to improved user experience.

Forrester TEI Study Reveals Impactful Business Outcome of Fortinet Secure SD-WAN »

Join us to hear from our guests with Forrester Consulting Group as they provide an in-depth overview of a recent study and more about the business outcomes and benefits that Fortinet Secure SD-WAN has had on organizations in multiple industries.

Forrester Discusses the Building Blocks of a Successful Zero-Trust Approach »

Join experts as they discuss a successful zero-trust approach. This webcast is ideal for anyone at any organization interested in zero-trust security and successfully deploying it.

Transforming the WAN Edge? The Right SD-WAN and WWAN Solution Matter! »

Join our experts to learn how an integrated solution can unify all edges for a more reliable, secure, and fast network.

Moving to a Zero Trust Edge Architecture? IDC and Fortinet Discuss the Critical Role of Secure SD-WAN »

The increase in work-from-anywhere employees and sophisticated cyberattacks are transforming WANs. Secure SD-WAN is the de facto solution to tackle these trends, but how can Secure SD-WAN help organizations moving to a Zero Trust Edge architecture? Attend this webcast and get advice from IDG and Fortinet experts.

Three Use Cases for Transforming Branches with Fortinet Secure SD-WAN »

Three common use cases show how Fortinet delivers the full benefits of an SD-WAN architecture without sacrificing security.

SD-WAN Enables a Multi-cloud Freeway »

Infrastructure for each service

It’s Time to Leave Branch Routers Behind »

4 Big Advantages of Secure SD-WAN

SD-WAN Isn’t Just for Retail »

An ESG Study: Analyzing the Economic Benefits of FortiGate Secure SD-WAN »

Find out how Fortinet's Secure SD-WAN customers are reducing network costs, reducing instances of malware and increased business agility.

Fortinet Cybersecurity Solutions for MSSPs »

Enabling partners to deliver broad and integrated security and networking services

WAN Evolution Presents Opportunities to Service Providers »

From managed SD-WAN to Managed SD-Branch Services

Understanding the Obstacles to WAN Transformation »

Network engineering and operations leaders are looking to software-defined wide area networks (SD-WAN) to support the influx of traffic and applications driven by digital transformation (DX). These applications improve staff productivity while creating new business opportunities, but they also reshape corporate networking and security needs. In response, many organizations are beginning to rethink their traditional WAN architecture. SD-WAN has emerged as a replacement, but many SD-WAN implementations also present serious challenges—from inadequate security to high total cost of ownership (TCO). Understanding these issues is key to navigating the increasingly complex market for WAN edge technologies.

The Importance of Self-Healing SD-WAN »

6 Reasons Why Fortinet Secure SD-WAN Is the Right Choice »

Secure SD-WAN FAQs

What is Secure SD-WAN?

Secure SD-WAN converges networking and security in one platform, running on the same operating system and managed in a single pane of glass.
 
 

What should I look for when evaluating a secure SD-WAN solution?

It is important to ensure that security is not bolted on but built in. In other words, true platform consolidation means that SD-WAN, zero trust, SSE, a wireless controller, LTE/5G gateway, and security services run on the same OS, policy engine, and management system.

Key capabilities include:

  • Ability to scale from tens to thousands of locations without performance degradation
  • Distributed enforcement with accelerated local inspection of encrypted traffic without performance impact
  • Unified telemetry, digital experience monitoring, and analytics across the entire path, correlating user experience and network performance from endpoint to ISP to applications and security events, including vulnerability scanning and patching in real time.
  • Autonomous application-aware SD-WAN architecture with self-healing capabilities and hardware acceleration.
  • Flexible deployment options available for the cloud, on-premises, and rugged environments, as well as as-a–Service offerings.

How is Fortinet Secure SD-WAN licensed?

There is no licensing required based on bandwidth, data transfer, or service tiering.

Does Fortinet Secure SD-WAN use AI?

Fortinet Secure SD-WAN uses FortiGuard AI-Powered Security Services and GenAI FortiAI-Assistant for simplifying operations and accelerating troubleshooting.

Can Fortinet Secure SD-WAN integrate with SASE?

Fortinet Secure SD-WAN can integrate with Fortinet Unified SASE and third-party security service edge (SSE) vendors.

Demos

Secure SD-WAN Demo

Gartner, Magic Quadrant for SASE Platforms, By Jonathan Forest, Andrew Lerner, John Watts, July 28 2026

Gartner and Magic Quadrant are trademarks of Gartner, Inc. and/or its affiliates.

Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.

This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Fortinet.

THE GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE BADGE IS A TRADEMARK AND SERVICE MARK OF GARTNER, INC. AND/OR ITS AFFILIATES AND IS USED HEREIN WITH PERMISSION. ALL RIGHTS RESERVED. GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE CONSTITUTE THE SUBJECTIVE OPINIONS OF INDIVIDUAL END-USER REVIEWS, RATINGS, AND DATA APPLIED AGAINST A DOCUMENTED METHODOLOGY; THEY NEITHER REPRESENT THE VIEWS OF, NOR CONSTITUTE AN ENDORSEMENT BY, GARTNER OR ITS AFFILIATES.