Feature Introduction


AWS Cloud WAN provides a central dashboard for making connections between your branch offices, data centers, and Amazon Virtual Private Clouds (Amazon VPCs)—building a global network with only a few clicks. You use network policies to automate network management and security tasks in one location. Cloud WAN generates a complete view of your on-premises and AWS networks to help you monitor network health, security, and performance.


Fortinet SD-WAN

Fortinet SDWAN (software-defined wide-area network) solution enables enterprises to transform and secure all WAN edges. Leveraging the Security-driven Networking approach that uses one operating system and one centralized management console, enterprises realize superior user experience, enhanced security posture effectiveness with converged networking and security, and achieve operational continuity and efficiency. Fortinet FortiGate delivers fast, scalable, and flexible Secure SD-WAN for cloud-first, security-sensitive, and global enterprises. Our Security-Driven Networking approach consolidates SD-WAN, next-generation firewall (NGFW), and advanced routing.



Zenlayer offers on-demandedgecloud services in over 270 PoPs around the world, with expertise in fast-growing emerging markets like India, China, and South America. Businesses utilize Zenlayer's global edge cloud platform to instantly improve digital experiences for their users with ultra-low latency and worldwide connectivity on demand.


Example Description

In the previous example, we use the integration of AWS Cloud-WAN and Fortinet SD-WAN to realize direct connection communication of enterprise branches based on the secure connection between SD-WAN POPs, so that the management terminal of the Singapore office can quickly connect to the equipment of the Virginia plant through SD-WAN network security. Securely transfer corporate data.

For details, see:


In this example, in order to securely and quickly transfer the operating data of the Vietnam factory equipment to the business system deployed in AWS, we solved the problem that AWS does not have an availability zone coverage in Vietnam through the network resources of our partner Zenlayer, so as to optimize the network experience between the Vietnam factory and the business system deployed on AWS, and based on Fortinet SD-WAN Performance SLA and intelligent routing allow Vietnam factories to maintain a secure and effective network connection with business systems deployed on AWS for the secure and stable transmission of enterprise data.



Configuration Instructions

Address information:



IP Address



Business EC2


Singapore POP


Vietnam POP


Vietnam Factory

AWS Configurations

Create a Virtual Private Gateway,Used to bind connection Direct Connect resources


Accept and activate Direct Connect


Create a Virtual Interface,Fill in the Direct Connect profile information, bind to the previously established Virtual Private Gateway.


Bind Virtual Private Gateway to business VPC


Configure route propagation for the Business VPC and enable the Virtual Private Gateway


Disable network source/destination inspection of EC 2 hosts in business systems to allow other IP addresses outside the VPC to communicate with EC2 hosts

Vietnam POP Configurations

Configure the Port2 interface IP address as the interconnect address of the AWS Virtual Interface


Enable BGP, configure neighbor information for Vietnam POP and AWS Virtual Interface, and local network information


Create an IPSec Tunnel called SD-WAN to provide SD-WAN access services to the Vietnam plant


Configure the SD-WAN interface IP address information and access permissions


Configure the Vietnam factory to access the Firewall Policy of AWS business systems through SD-WAN

Vietnam Factory FortiGate Configurations

Configure SD-WAN access from Vietnam factory to Vietnam POP


Configure SD-WAN access from the Vietnam factory to the Singapore POP


Configure SD-WAN Zones and add port1, sdwan01, sdwan02 to Virtual WAN Link


Set SD-WAN Performance SLA


Set SD-WAN Rules


When the SD-WAN is in the normal state, the data traffic of the uploaded service system goes through the SD-WAN connection of Vietnam POP


If the SD-WAN connection service test of Vietnam POP is abnormal, the data traffic uploaded to the service system goes to the SD-WAN connection of Singapore POP