Skip to main content
KPS
KPS
New Member
February 28, 2019
Question

Using Fortigate virtual instead of Fortigate physical

  • February 28, 2019
  • 1 reply
  • 2848 views

Hi!

 

I need a new internal "segmentation-firewall". On the perimeter, there is a ha-pair of FG-200E. The new segmentation-firewall filters between different Client- / Server-Security-Zones...

 

...but I need 10GbE for backup-jobs between the internal segments.

 

So: I need a ha-device, that can do: 5 Gbps IPS and full 10 Gbps for "non-NGFW-traffic" for single streams.

 

Long introduction, but: What do you think about buying two FG-VM08v as VMs (HA-pair) to handle that traffic on VMWare (without SR-IOV, as I do not have Ent. plus). Is this a good idea? The alternative would be a pair of 1000Ds or 1200Ds because the smaller devices do not have 10 GbE-interfaces...

 

VMs seem to be much cheaper...

 

Thank you for your thoughts

KPS

 

    1 reply

    IlariExove
    IlariExove
    New Member
    February 28, 2019

    Have you considered a simpler solution such as getting a pair of 10G switches that can do line rate routing and L4 ACLs on hw?

    KPS
    KPSAuthor
    New Member
    February 28, 2019

    Hi!

     

    Yes, that would be possible, but I hope to get a solution with better security. Currently, I am using a Linux-Cluster as segmentation-firewall. That is cheap and fast, but I think, I should have an "Enterprise-grade-IPS" between the zones.

    Terms & ConditionsAccessibility statement