
Overview

Product video
FortiGate CNF delivers an easy-to-deploy, advanced cloud-native firewall service that secures cloud network traffic, while eliminating the need for network redesigns and maintenance. Powered by FortiOS and FortiGuard Labs threat intelligence, FortiGate CNF protects from malware, data breaches and botnets by blocking risky traffic connections, and enforces compliance with geo-specific policies, blocking traffic to/from specified countries.
FortiGate CNF offers:
-
Enterprise-Grade Protection: Stop attacks and data exfiltration with market-leading NGFW security capabilities such as intrusion prevention (IPS), Data Leak Prevention (DLP), advanced filtering based on AI-powered threat intelligence from FortiGuard Labs.
-
Quick and Easy Set Up: Simply subscribe from the AWS marketplace and follow the built-in setup wizard to deploy CNF instances in minutes. FortiGate CNF comes with predefined policies and default security profiles for rapid deployment.
-
Simplified Security Management: Apply policies and monitor security with the intuitive FortiGate CNF management console or use FortiManager for hybrid FortiGate deployments. FortiGate CNF also integrates seamlessly into AWS Firewall Manager.
-
Dynamic Security: Ensure consistent security with dynamic policies that use cloud meta data tags to follow your cloud workloads, eliminating the need for static IP updates as operations change.
-
Regulatory Compliance: FortiGate CNF can assist in meeting regulatory compliance requirements, including GDPR, HIPAA, and PCI-DSS.
-
Flexible Pricing: Pay-as-you-go and optimize costs with just one firewall service instance for an entire region. FortiGate CNF is also available as an annual subscription.
Try FortiGate CNF with a 30-day free trial. After the free trial, you can transition to pay-as-you-go pricing as listed below.
Get started:
- FortiGate CNF Demo Video: https://bit.ly/CNFdemo
- Getting Started Tutorial Video: https://bit.ly/3QIYNOh_Tutorial
- Reach out to our customer success team for questions or help getting set up: CNF_CSM@fortinet.com
Visit the FortiGate CNF Community Resource Hub to find onboarding, deployment, and technical information and join in discussions: https://community.fortinet.com/t5/FortiGate-CNF-All-Marketplaces/gh-p/fortigate-cnf-on-aws
Highlights
- Advanced Network Protection: Featuring Geo-IP blocking, advanced filtering, and robust threat protection, FortiGate CNF offers comprehensive visibility and advanced security.
- Streamlined Security Management: With the ability to aggregate security from all VPCs and accounts in an AWS region into a single FortiGate CNF, security is consolidated and a single policy can be applied to all resources selected.
- Lower costs: With no security software infrastructure to build, deploy and operate, only pay for security functionality that is utilized.
Details
Unlock automation with AI agent solutions

Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Cost/unit |
---|---|
Hours a CNF instance is deployed and is running. | $2.20 |
GB of Traffic Processing | $0.022 |
Advanced Security Processing Units (see documentation) | $0.022 |
Hours for deployed Cost Optimized FortiGate-CNF Instances including support | $1.10 |
Vendor refund policy
No refunds
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Fortinet FortiCare support offerings provide global support and deliver best-in-class support services. With FortiCare support, customers can be assured that their Fortinet security products are performing optimally and protecting their corporate assets.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Standard contract
Customer reviews
Provides robust cloud security with effective threat detection and prevention
What is our primary use case?
How has it helped my organization?
What is most valuable?
What needs improvement?
For how long have I used the solution?
What was my experience with deployment of the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
How was the initial setup?
What about the implementation team?
What was our ROI?
What's my experience with pricing, setup cost, and licensing?
Which other solutions did I evaluate?
What other advice do I have?
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Affordable pricing and ease of deployment highlight strengths despite limitations in IPS technology
What is our primary use case?
I primarily use FortiGate Cloud-Native Firewall (FortiGate CNF) as a firewall with general bundles of licenses, including Intrusion Prevention System (IPS) and antivirus. We employ it in medium and enterprise-level businesses, not small businesses.
What is most valuable?
FortiGate Cloud-Native Firewall (FortiGate CNF) is highly valued for its pricing, which is considered very affordable. The rates and reviews it receives, such as from Gartner, underscore its reliability. Its price policies are flexible, and it is widely favored in the market with significant coverage in security. It holds around 60% of the security market in Ukraine.
What needs improvement?
The Intrusion Prevention System (IPS) in Fortinet products, including FortiGate Cloud-Native Firewall (FortiGate CNF), is not very strong; we often prefer Cisco IPS instead. AI features are not well developed in Fortinet solutions compared to Check Point.
What do I think about the scalability of the solution?
Unfortunately, FortiGate Cloud-Native Firewall (FortiGate CNF) is not very scalable. For businesses that grow or develop further, only about ten percent can handle the increase.
How are customer service and support?
Customer service for Fortinet is rated at four out of five. This translates to approximately eighty percent satisfaction.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I've previously used solutions from Trend Micro, Check Point, and Palo Alto. For email protection tools and general security, I often use Trend Micro and Check Point.
How was the initial setup?
Overall, the initial setup for FortiGate Cloud-Native Firewall (FortiGate CNF) is straightforward and hassle-free. It takes two to four weeks to complete.
What's my experience with pricing, setup cost, and licensing?
FortiGate Cloud-Native Firewall (FortiGate CNF) offers a very flexible price policy, with medium pricing, making it an attractive option for many businesses.
Which other solutions did I evaluate?
I have evaluated solutions like those from Trend Micro, Check Point, Palo Alto, and Cisco IPS.
What other advice do I have?
Overall, I rate FortiGate Cloud-Native Firewall (FortiGate CNF) around seven out of ten due to its flexible pricing, significant market presence, and ease of deployment.
Integration is seamless with both physical and virtual firewalls
What is our primary use case?
What is most valuable?
What needs improvement?
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
How would you rate customer service and support?
Positive
How was the initial setup?
What's my experience with pricing, setup cost, and licensing?
What other advice do I have?
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Policy creation and management ensure comprehensive security for cloud infrastructure
What is our primary use case?
We enhance our cloud security strategy through FortiGate Cloud-Native Firewall (FortiGate CNF) by implementing zero trust policies for our cloud infrastructure APIs. This includes the secure communication between our on-site data center and cloud premises.
What is most valuable?
FortiGate Cloud-Native Firewall (FortiGate CNF) greatly enhances our cloud security strategy with features such as policy creation and management. We implemented IPS and IDS, which contribute significantly to our security. The visibility and exposure to logs provide valuable insights for our InfraSec team, aiding in monitoring and managing communication and policies.
What needs improvement?
I would be glad if there were free solutions to help manage migrations. Migration can be quite challenging when moving from a different firewall to FortiGate Cloud-Native Firewall. Solutions like FortiConverter are good but are paid, and getting approval to purchase can take some time. It would be great to have something more readily available for engineers.
For how long have I used the solution?
We have been using FortiGate Cloud-Native Firewall (FortiGate CNF) for around one year.
What do I think about the stability of the solution?
I would rate the stability of FortiGate Cloud-Native Firewall (FortiGate CNF) as nine out of ten, indicating it is very stable.
What do I think about the scalability of the solution?
As of now, we haven't scaled our cloud network much, and the deployment is working fine. There are plans to launch new projects, and once that's done, we will definitely scale our FortiGate Cloud-Native Firewall as needed. I would rate the scalability as an eight out of ten.
How are customer service and support?
There are some bugs that need to be fixed, and they can take some time to resolve. I would rate the customer service and support an eight out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have worked on Palo Alto and Cisco firewalls before. The organization decided to cut CapEx costs and was looking for vendors offering the same features at a lower cost. We ultimately chose FortiGate Cloud-Native Firewall.
How was the initial setup?
The initial setup involved a smooth deployment with some challenges during the migration process, as we had to manually transfer our rules and policies without FortiConverter.
What about the implementation team?
Our deployment team consisted of three network engineers and two infrastructure managers.
What was our ROI?
The primary benefit we experienced is the reduction in CapEx costs. FortiGate Cloud-Native Firewall provides the same features that higher-end models offer, but at a much lower cost.
What's my experience with pricing, setup cost, and licensing?
The pricing of FortiGate Cloud-Native Firewall is very good and is not considered expensive compared to other products.
What other advice do I have?
I would rate FortiGate Cloud-Native Firewall (FortiGate CNF) an eight out of ten. While the pricing, features, and stability are good, the presence of bugs and the time it takes to fix them prevent a higher rating.