FortiSwitch

FortiSwitch can be adopted as a natural extension of SD-WAN to provide security on the wired LAN edge.

FortiSwitch is an essential cornerstone to the software-defined branch (SD-branch) that completes the SD-WAN architecture by enabling security into the access through FortiLink, consolidating all the connectivity in the branches, and enabling the management and power of the FortiAPs.

In addition to the above, the simplification of networking tasks, from the potentially complex topology designs to the lack of staff in the remote locations, by adding a layer of auto-discovery and automation allows the security teams to carry out the deployment in the branches seamlessly.

FortiSwitch facilitates and enhances network visibility as a first step in grabbing control of the network—under the umbrella of FortiGate, with FortiManager functioning as a single pane of glass.

We will describe the FortiSwitch and FortiLink management setup, the simple provisioning of the Secure Access Layer as part of the architecture of the SD-Branch, and the implementation of the security use cases that complement the SD-WAN.

The key features of FortiSwitch are:

• FortiLink management simplification: With FortiLink, FortiSwitches are discovered and managed automatically from the FortiGate, automatically forming the topology and the Layer 2 aggregation, relieving the administrators from configuring low-level parameters, such as the Spanning Tree Protocol.

  

• Single pane of glass: From the FortiGate or FortiManager GUIs, you can access and configure the FortiSwitches managed by FortiLink, and obtain thorough information about the devices connected to them.

  

• Security to the LAN: security features associated with LAN environments—from basic VLAN segmentation to 802.1X authentication policies. VLANs become part of FortiGate’s interfaces and can be easily integrated into Security Fabric policies.

  

• Power up you POE devices: FortiSwitch models with PoE support lets you provide power to other devices, such as FortiAPs. PoE control and budget are also available from the FortiGate GUI. Current FortiSwitches support PoE, PoE+, and PoE++ (depending on the models).

  

See also Important terms for FortiSwitch.