Fwn wan link load balancer 2015-04-30

© Copyright Fortinet Inc. All rights reserved.

FortiWANWAN Link Load BalancersAprile 2015

2

WAN Link Load Balancers - FortiWAN

FAST. SECURE. GLOBAL.

Scope/Definition of Link Load Balancers

Manage multiple WAN Links Backup link connectivity Add cost-effective bandwidth Reduce latency and ensure

critical application availability Edge appliance deployed

between WAN and LAN Key Features

» Link health checking» Policy-based traffic routing» Auto link failover and recovery» Link aggregation (tunnel routing)» Multihoming for inbound traffic

Can’t a Firewall or ADC do this? Yes, both have limited Link Load

Balancing Firewalls typically are limited to the

number of WAN ports and are used for link backups only

ADCs typically are limited by the number of ports and don’t have advanced features

ISP

MPLS

FortiWAN

FortiGate

3



Drivers/Challenges

Reduce Risk of Link Outages» Link health checking» Link auto routing» Seamless recovery

Bandwidth capacity» Supplement leased/MPLS lines» Add virtually any ISP technology

Prioritize Traffic» Policy-based routing» L4 Quality of Service (QoS)

Reduce bandwidth costs» Implement lower-cost links» Simplify WAN management

Who Needs it? Virtually any organization that

needs more bandwidth Specific needs in

US/International markets with intermittent or poor connectivity

Multiple use cases Remote connectivity (distributed

enterprises) Hybrid WAN for single location or data

center Redundancy for mission critical

applications

Who Needs it Most? Hospitality and Retail Financial services Manufacturing Healthcare

4



Emerging Requirements/Trends

Access to internet needed for core business services» Growth of cloud-based services» Backhaul to central data center expensive and introduces delays

Bandwidth needs growing across the board» Remote offices and data centers» Voice, video and web applications straining networks

Leased line costs remain high compared to other ISP technologies

» T1 lines (1.5 Mbps up/down) average $500 per month» DS3 (45 Mbps up/down) average $7,000 per month» Cable (10/200 Mbps up/down) average $200 per month» DSL (2-25 Mbps up/down) average $200 per month

Internet is generally getting more reliable, however» Connectivity still remains a challenge in remote areas in U.S.» International markets can vary widely in cost and reliability, even in

urban areas

5



FortiWAN Overview

3 hardware models available Throughputs from 60 Mbps to 3 Gbps Models with up to 8 10GE SFP+ ports Up to 50 WAN links supported

Industry leading support for up to 50 links with proven reliability from legacy AscenLink

technology

Robust, reliable Link Load Balancing WAN Link Health Detection Optimum Route Detection Automatic routing and link

restoration Policy-based Routing and QoS Patented Tunnel Routing DNS-based Multihoming MPLS, Leased, Cable and DSL links

(DSL, PON, TDM) Multiple Service Provider support Active-Passive Failover (HA) Advanced Link and Usage Reporting Licensed-based throughput upgrades

6



FortiWAN Benefits

Increase WAN bandwidth and avoid link outages Link Load Balancing

Distribute traffic to best performing links with WAN Link Health Detection and Optimum Route Detection

Prioritize mission-critical traffic with Policy-based Routing and L4 QoS

Create high-capacity VPN/VPL links with Tunnel Routing between 2 or more FortiWAN appliances

Inbound link load balancing and URL continuity with Multihoming Reduce WAN costs by adding less expensive bandwidth from Cable

and DSL providers instead of leased lines or MPLS Add capacity with up to 50 links for bandwidth-intensive

environments Upgrade your throughput as needed with Upgrade Licenses

7



Performance &

Scalabilit

y

WAN < 500 Mbps 500 Mbps to 1 Gbps 1 – 3 Gbps

Links Up to 25 Up to 50 Up to 50

Ports GE GE/SFP GE/SFP/SFP+

FortiWAN Product Lineup

FWN-200B

FWN-1000B

FWN-3000B

8



FortiWAN Product Matrix

200B 1000B 3000BWAN Bandwidth* 60 to 200 Mbps 0.5 to 1.0 Gbps 1.0 to 3.0 Gbps

WAN Links** Up to 25 Up to 50 Up to 50

GE Ports 5 3 8

GE SFP Ports 0 4 8

10GE SFP+ Ports 0 0 8

Storage 500GB HDD 1TB HDD 1TB HDD

High Availability (HA Port) P P PPower Supply Single Dual Dual

Form Factor 1U 1U 2U

Concurrent Connections 800K 2 million 7 million

Multihoming DNS Records 200 400 800

Base Throughput Included 60 Mbps 0.5 Gbps 1.0 Gbps

Upgrade Licenses 100 Mbps, 200 Mbps 1.0 Gbps 2 Gbps, 3 Gbps

* Bandwidth ranges based on model and licenses chosen.** Requires external VLAN switch to implement maximum links supported.

9



Link Load Balancing

Problem» Reduce risk of ISP outages» Increased cost-effective bandwidth

Solution» Add up to 50 links (based on model)» Mixed service providers and

technologies» Link health checking» Traffic management

Benefits» Multi-redundant last mile access» Seamless soft-degrade and auto

recover» Carrier-class reliability from Internet

links

FortiWAN

FortiGate

DSLT1 DS3

OFFLINE

10



Tunnel Routing

Problem» Increased site-to-site bandwidth» Increased VPN/backhaul capacity

Solution» Single-session tunnel from up to 50

links» Mixed service providers and

technologies» Build VPLs/VPNs as large as needed» Support for up to 100 tunnels» FortiWAN required at each end point

Benefits» End-to-end link redundancy» Unbreakable VPN/VPL» Carrier-class VPN from Internet links

Headquarters

Branch Office

SECURE VIRTUAL TUNNEL

11



Multihoming

Problem» Increased bandwidth from internet» Single URL, multiple IP addresses» Load balance inbound traffic

Solution» DNS-based multihoming» Automatic updates if link/IP

unavailable» Support for up to 50 links» Mixed service providers and

technologies

Benefits» Seamless and efficient inbound

routing to internal network resources» Auto-recovery and DNS updates when

links and IP addresses back on line

Link1: 10.10.0.1Link2: 10.10.0.2Link3: 10.10.0.3

www.example.comDNS: 10.10.0.2

Application URL:www.example.com

12



Hybrid WAN

Problem» Add increased bandwidth for cloud

applications» Reduce VPN/backhaul pressure » Integrate independent ISP solutions

into one set of WAN policies

Solution» Advanced policy based routing» Quality of Service» Add up to cost-effective 50 links

Benefits» Increased capacity for cloud

applications» Optimized WAN management for

internet and MPLS traffic for internal and external users in organization

Headquarters

Branch Office

ERP

SalesForce

GeneralInternet

13



FortiWAN Competitive Advantages

FortiWAN offers products that compete in SMB to Enterprise Radware and Barracuda top FortiWAN competitors Generally similar features at much lower TCO than Radware

WAN Link Load Balancer Competitors

Strengths Weaknesses

Radware • Market leader• Similar features as AscenLink• Up to 16 Gbps solutions

• Expensive• Not a primary product line• Complicated

Barracuda • Brand/name recognition• Distribution• SMB solutions

• Poor LLB product• Tops out at 7 links• SMB focus

Elfiq • Good LLB product• Up to 6 Gbps performance• Pricing (direct sales model)

• Reliability issues• Limited brand recognition• Pure play

Riverbed • Focus on WAN optimization• Broader tool set• Gartner MQ leader

• Expensive option• Overkill for simple LLB

F5 • Strong ADC focus• WAN module good• Offers full WAN optimization

• Very expensive• Mostly for Data Center• Complicated/overkill

14



Pricing/Licensing

Purchase price includes» Hardware: appliance, mounting hardware, etc.» Base throughput of appliance

FortiCare (1, 2 and 3 year increments)» 8x5 enhanced» 24x7 comprehensive

Upgrade Licenses for Bandwidth» FortiWAN-200B, 100 Mbps and 200 Mbps (stackable)» FortiWAN-1000B, 1.0 Gbps» FortiWAN-3000B, 2.0 Gbps and 3.0 Gbps (stackable)

“Other Products” tab on Pricelist

15



Complementary/Related Products

FortiGate Firewalls» Increases VPN throughput without expensive services» Soft-degrade and auto recovery of VPN links» “Instant” link failover

FortiADC Application Delivery Controllers» Server load balancing» Layer 7 content-based routing and SSL offloading

FortiWeb Web Application Firewalls» Advanced L7 application protection» PCI 6.6 compliance

FortiDirector Cloud-based Global Server Load Balancing» Service-based multi-site server load balancing» Annual subscription based on DNS redirects

16



Objection Handling

My leased lines are very reliable. I don’t need a link load balancer.

» They may be, but they still can go down, and you may be limited on bandwidth. FortiWAN can provide a back up line for redundancy and let you additional bandwidth at a fraction of the cost of another leased line.

My firewall (or ADC, or other device) provides link load balancing. I don’t need another dedicated appliance to manage.

» Many products offer a reduced set of link load balancing features to provide basic redundancy, but don’t offer advanced traffic management or features like tunnel routing and multihoming.

I don’t need more bandwidth at this time.» You may not need additional bandwidth, but you may need redundancy in your

network should a primary line go down. If you do need more bandwidth, it’s easy to add new links to a FortiWAN to seamlessly expand your throughput.

Fortinet isn’t known for its WAN Link Load Balancers, I’d rather go with a name I know

» Fortinet acquired AscenLink in 2013 and it’s 10+ years of product and WAN market knowledge. FortiWAN is based on the proven technology of AscenLink and provides the same features and functionality.

17



Qualifying Questions

Does your business have the bandwidth it needs?» FortiWAN allows you to seamlessly add bandwidth using virtually any ISP

technology, even low-cost DSL and Cable. Are internet outages affecting your organization?

» WAN link health checking and auto routing detect link status and route traffic to the best performing links and can auto-recover links once they come back online.

Are cloud-based applications straining backhaul links to your data center?

» Advanced traffic management and policy routing allow you to direct traffic by packet type to the connection that can handle it best without having to backhaul everything to your data center.

Are you paying too much for WAN bandwidth using leased lines or MPLS?

» Use lower cost links like DSL and Cable to seamlessly add bandwidth at a fraction the cost of T1, DS3 or MPLS links.

Do you have the bandwidth for secure VPN connections between your data center and remote locations?

» Using FortiWANs at each endpoint, Tunnel Routing can create high-capacity VPN tunnels to meet your bandwidth needs.

18



Contatta il nostro Ufficio Commerciale

Ufficio CommercialeTel. +39 049 8843198 DIGIT (5)[email protected]

www.lanewan.it

In questi anni di partnership con la casa madre, Lan & Wan Solutions ha ottenuto tutte le specializzazioni previste nei vari iter di certificazione, raggiungendo la qualifica di Partner Of Excellence.

Certified experts in Fortimail and email security

Certified experts in Fortiweb and web application firewall protection

Certified experts in FortiAp, FortiWifi and wireless security

Date post:	12-Jan-2017
Category:	Business
Upload:	lan-wan-solutions
View:	981 times
Download:	0 times

Fwn wan link load balancer 2015-04-30

Business