Fortinet FortiGate-as-a-Service (FGaaS)
Hardware-as-a-Service for FortiGate (FGaaS) and FortiManager (FMGaaS)

Overview:

Cloud-Delivered Security and Centralized Management

FortiGate-as-a-Service (FGaaS) is a comprehensive service that includes both FortiGate-as-a-Service (Firewall) and FortiManager-as-a-Service (Management), delivering enterprise-grade security, centralized management, and automation directly from the cloud. FGaaS provides advanced FortiGate NGFW security, enabling organizations to deploy it as an SD-WAN hub, wireless LAN controller, and to secure OT environments while inspecting and securing all traffic—powered by FortiOS. FMGaaS enhances security operations with single-pane management and provisioning, Fabric automation and monitoring, visibility, and troubleshooting.

Both services integrate seamlessly with the Fortinet Security Fabric, leveraging automation-driven network operations and advanced security architectures. Hosted in Fortinet-managed data centers, FGaaS includes FortiGuard services, IPs, and guaranteed bandwidth, all available through flexible monthly subscriptions or through annual subscriptions via Standard purchasing SKUs.

Models and Specifications

There are three models to choose from for a seamless fit into any environment. All of our hardware appliances contain purpose-built proprietary ASICs to meet the most demanding threat protection performance and energy efficiency requirements.

FortiGate-as-a-Service

MODEL	THREAT PROTECTION
FortiGate 91G	2.2 Gbps
FortiGate 901G	20 Gbps
FortiGate 3501F	63 Gbps

Features and Benefits

Up and Running in Minutes

No shipping means immediate access to FortiGate hardware, available in locations across the globe

Offload Hardware Management

With HW-as-a-Service, there is no need to install and manage hardware

No Hardware Replacement

There will never be a need to deal with the RMA process

Flexible Licensing

It’s easy to set up and use FortiPoints on-demand with monthly billing

High Availability

HA paired models at the same location or setting up geo-redundancy improves resilience

Full-Spectrum Protection

FortiGuard AI-Powered Security Services deliver comprehensive security

FGaaS Use Cases

SD-WAN Hub

Building regional SD-WAN networks requires a hub to facilitate secure connections between locations. When organizations want to accelerate building in new regions, they can leverage FGaaS as an SD-WAN hub to build a full mesh network using Auto-Discovery VPN (ADVPN). This approach provides the flexibility to select the appropriate hardware based on the number of tunnel connections the network needs to handle.

Wireless Controller

A variety of different site types and sizes have arisen as organizations look to get work done, often without a compelling need for onsite security hardware. As the network environment at campus and branch evolves to a thin edge model, FGaaS can act as a secure wireless LAN controller for those sites. FGaaS provides the scalability to support many sites and centrally manages enterprise FortiAPs installed at thin edge locations. Furthermore, integrated security services on FGaaS ensure the security of the clients and the applications at each site. With a range of FGaaS models to choose from, no matter the size of your network, there’s a FGaaS solution right for your organization.

Web Proxy and Centralized Security Inspection

Protecting your employees against internet-borne attacks is critical. FGaaS delivers broad protection and visibility to every network segment and device. By routing all traffic through FGaaS, organizations benefit from comprehensive threat protection. Controls include URL/DNS/video filtering, data loss prevention, application visibility and control, advanced malware protection, intrusion prevention, high-performance SSL decryption, and AI-based inline sandboxing. All protections are applied consistently across the network, simplifying security management. Administrators can define and enforce policies from a single location. With FortiGuard Labs, organizations can count on leading AI-powered security services.

Ideal for OT Environments

Factories, power plants, and remote equipment such as highway signs, pumps, and EV charging stations can leverage specific OT security features such as industrial protocol awareness and deep packet inspection for SCADA and ICS systems. FortiGate-as-a-Service helps protect critical infrastructure by detecting and mitigating threats that target industrial control systems and cyber-physical systems, ensuring operational continuity and preventing costly downtime. The scalable and flexible architecture adapts to the specific needs of OT environments, providing robust security without compromising operational efficiency.

Documentation:

Download the Fortinet FortiGate-as-a-Service (FGaaS) Datasheet (PDF).