By combining stateful inspection with a comprehensive suite of powerful security features, FortiGate Next Generation Firewall technology delivers complete content and network protection. This solution is available for deployment on OCI.
In addition to advanced features such as an extreme threat database, vulnerability management, and flow-based inspection, features including application control, firewall, antivirus, IPS, web filter, and VPN work in concert to identify and mitigate the latest complex security threats.
FortiGate for OCI supports active/passive HA configuration with FortiGate-native Unicast HA synchronization between the primary and secondary nodes. When FortiGate detects a failure, the passive firewall instance becomes active and uses OCI API calls to configure its interfaces/ports.
Highlights of FortiGate for OCI include the following:
- Delivers complete content and network protection by combining stateful inspection with a comprehensive suite of powerful security features.
- IPS technology protects against current and emerging network-level threats. In addition to signature-based threat detection, IPS performs anomaly-based detection, which alerts users to any traffic that matches attack behavior profiles.
- New Docker application control signatures protect your container environments from newly emerged security threats. See Use Case: FortiGate-VM on a Docker Environment.
FortiGate-VM for Oracle OCI requires manual deployment outside the Oracle marketplace, which is described later in this guide. Currently the Oracle marketplace supports OCI-Classic deployments only, which is outside the scope of this guide.