Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

SD-WAN components

SD-WAN can be broken down into three layers:

  • Management and orchestration

  • Control, data plane, and security

  • Network access

The control, data plane, and security layer can only be deployed on a FortiGate. The other two layers can help to scale and enhance the solution. For large deployments, FortiManager and FortiAnalyzer provide the management and orchestration capabilities FortiSwitch and FortiAP provide the components to deploy an SD-Branch.

Layer

Functions

Devices

Management and orchestration

  • Unified management

  • Template based solution

  • Zero touch provisioning

  • Logging, monitoring, and analysis

  • Automated orchestration using the REST API

FortiManager

FortiAnalyzer

Control, data plane, and security

  • Consolidation of underlays and overlays into SD-WAN zones

  • Scalable VPN solutions using ADVPN

  • Static and dynamic routing definition

  • SD-WAN health-checks and monitoring

  • Application-aware steering and intelligence

  • NGFW firewalling

FortiGate

Network access

  • Wired and wireless network segmentation

  • Built-in network access control

FortiSwitch

FortiAP

SD-WAN components

SD-WAN can be broken down into three layers:

  • Management and orchestration

  • Control, data plane, and security

  • Network access

The control, data plane, and security layer can only be deployed on a FortiGate. The other two layers can help to scale and enhance the solution. For large deployments, FortiManager and FortiAnalyzer provide the management and orchestration capabilities FortiSwitch and FortiAP provide the components to deploy an SD-Branch.

Layer

Functions

Devices

Management and orchestration

  • Unified management

  • Template based solution

  • Zero touch provisioning

  • Logging, monitoring, and analysis

  • Automated orchestration using the REST API

FortiManager

FortiAnalyzer

Control, data plane, and security

  • Consolidation of underlays and overlays into SD-WAN zones

  • Scalable VPN solutions using ADVPN

  • Static and dynamic routing definition

  • SD-WAN health-checks and monitoring

  • Application-aware steering and intelligence

  • NGFW firewalling

FortiGate

Network access

  • Wired and wireless network segmentation