Fortinet black logo

SD-WAN Architecture for Enterprise

Cloud on-ramp

7.0.0
Copy Link
Copy Doc ID 7030e0d2-4287-11ec-bdf2-fa163e15d75b:452920
Download PDF

Cloud on-ramp

Cloud on-ramp provides optimized access to SaaS or IaaS workloads running in one or multiple cloud providers. Rather than accessing the cloud services through the public internet, a secure overlay can be established to the closest cloud point of presence (POP). FortiGate SD-WAN overlays use IPsec-compliant overlays that integrate with most cloud built-in gateways. However, deploying a FortiGate VM in the cloud as the gateway has many advantages, and is generally recommended for branch-to-cloud connectivity.

Branch communication to the cloud resources typically happens directly through secure overlays, similar to a datacenter gateway in previous designs. Branches will connect to the gateway through secure overlays and steer by using the best path according to the SD-WAN overlays. However, the design required for the cloud will vary based on the type of cloud environment.

This section contains the following topics:

Cloud on-ramp

Cloud on-ramp provides optimized access to SaaS or IaaS workloads running in one or multiple cloud providers. Rather than accessing the cloud services through the public internet, a secure overlay can be established to the closest cloud point of presence (POP). FortiGate SD-WAN overlays use IPsec-compliant overlays that integrate with most cloud built-in gateways. However, deploying a FortiGate VM in the cloud as the gateway has many advantages, and is generally recommended for branch-to-cloud connectivity.

Branch communication to the cloud resources typically happens directly through secure overlays, similar to a datacenter gateway in previous designs. Branches will connect to the gateway through secure overlays and steer by using the best path according to the SD-WAN overlays. However, the design required for the cloud will vary based on the type of cloud environment.

This section contains the following topics: