Monday, February 6th 2023

Fortinet Unveils New ASIC to Accelerate the Convergence of Networking and Security Across Every Network Edge

Fortinet, the global cybersecurity leader driving the convergence of networking and security, today announced FortiSP5, the latest breakthrough in ASIC technology from Fortinet, propelling major leaps forward in securing distributed network edges. Building on over 20 years of ASIC investment and innovation from Fortinet, FortiSP5 delivers significant secure computing power advantages over traditional CPU and network ASICs, lower cost and power consumption, the ability to enable new secure infrastructure across branch, campus, 5G, edge compute, operational technologies, and more.

"With the introduction of FortiSP5, Fortinet once again sets new industry records for performance, cost, and energy efficiency. As the only cybersecurity vendor leveraging purpose-built ASICs, an over 20-year investment in innovation, Fortinet delivers the secure computing power that will support the next generation of secure infrastructure." Ken Xie, Founder, Chairman of the Board, and Chief Executive Officer at Fortinet
Unparalleled Innovation in Custom Chip Performance
With an application-specific design and embedded multi-core processors to accelerate the convergence of networking and security functions, FortiSP5 delivers:
  • 17x faster firewall performance compared to leading standard CPUs.
  • 3.5x faster next-generation firewall (NGFW) performance compared to leading standard CPUs to handle higher levels of traffic inspection to detect and block threats.
  • 32x faster encryption to protect sensitive data and secure virtual private networks.
  • 2.5 Gbps of SSL deep inspection to deliver the processing power needed to inspect encrypted traffic for malware without performance issues.
  • Secure boot to allow only approved operating system software to boot up, protecting critical infrastructure against malicious tampering.
  • Volumetric DDoS protection to thwart distributed denial-of-service (DDoS) attacks.
  • VXLAN/GRE hardware-accelerated encapsulation to enable secure interconnectivity for distributed networks.
  • Hardware-accelerated Quality of Service (QoS) to enhance user experience with dedicated QoS for sensitive applications such as videoconferencing.
Significant Cost and Energy Savings
As a fifth-generation 7-nanometer chip, FortiSP5 packs more capabilities in a smaller form factor to deliver:
  • 88% less power consumption compared to the leading industry-standard CPU
  • Industry-leading performance per watt
  • Industry-leading price-performance
Supporting More Applications to Enable Important Customer Use Cases
With the ability to accelerate and concurrently run 2x more applications—for example, NGFW, zero-trust network access (ZTNA), SD-WAN, and SSL inspection—compared to the previous generation, FortiSP5 will support use cases such as:
  • Branch/Campus: FortiSP5 ensures the transition to SD-Branch is efficient and cost-effective in a small form factor, enabling IT staff to simplify management and reduce OpEx while increasing network uptime. Additionally, as more organizations embrace the cloud and hybrid work model, FortiSP5 will continue to be a driver for Secure SD-WAN to empower customers to securely and seamlessly access applications anywhere while delivering consistent user experience with an optimized platform.
  • Edge Compute: As edge computing improves efficiency and cost control through processing close to the edge, FortiSP5 supports high-speed networks and security threat protection for both commercial and operational technology (OT) environments, minimizing bottlenecks for traffic movement.
  • Operational Technology: The convergence of IT and OT has opened the infrastructure to increased security risks that can disrupt operations. FortiSP5 enables scalable convergence, securing both OT and IT infrastructures with a single, high-performance platform.
  • 5G: 5G adoption is on the rise in enterprise networks, fueling innovation at the edge as it provides higher bandwidth and lower latency. FortiSP5 enables a seamless transition to support 5G with an optimized and sustainable platform.
Proven System on a Chip Technology
FortiSP5 will power the next generation of entry and mid-range FortiGate firewalls being released later this year. Now on its fifth generation, we believe Fortinet's proprietary system on a chip technology has a proven track record of powering the industry's top-performing products and solutions. A few examples include:
  • Fortinet has been named a Leader in the 2022 Gartner Magic Quadrant for Network Firewalls,¹ marking the thirteenth time Fortinet has been recognized in this Magic Quadrant.
  • A recent Forrester study highlighted that customers deploying Fortinet's Secure SD-WAN solution, which is backed by FortiGate and SOC technology, achieved a 300% return on investment over 3 years with a payback period of only 8 months.
Source: Fortinet
Add your own comment

8 Comments on Fortinet Unveils New ASIC to Accelerate the Convergence of Networking and Security Across Every Network Edge

#1
Avro Arrow
Heh, that's funny. I scanned over this headline twice and both times I thought that it said "Fortnite", not "Fortinet". :laugh:
Posted on Reply
#2
Zareek
My only experience with them is flaky site-to-site VPN connections. Multiple instances with horrible, repeated problems with VPN stability connecting to a major cloud platform. Some so bad that their software had to be downgraded to fix the issues, there was no workaround.
Posted on Reply
#3
ixi
Have been using fortigates for around year. Major vulnerabilities with required firmware upgrades are pain in the ass for production, but otherwise than that, they work. Sdwan with ipsec is a neat feature.

Devices with the new chip will cost alot. And not to mention licenses for features...
Posted on Reply
#4
NoneRain
ixiHave been using fortigates for around year. Major vulnerabilities with required firmware upgrades are pain in the ass for production, but otherwise than that, they work. Sdwan with ipsec is a neat feature.

Devices with the new chip will cost alot. And not to mention licenses for features...
Yep. Here, their licensing prices are a punch in the gut. I imagine their "cut-edge" will come with bold subscriptions.
Posted on Reply
#5
Soul_
We haven't had any major issues with Fortinet per say. But their licensing model has certainly "evolved" in past few years, to near microtransaction level.
Posted on Reply
#6
mrnagant
We had issues with the VPN v7 client, though no issues with v6. We worked with engineers to finally get it resolved. It was something on their client but I don't recall what it was. Once it was resolved we rolled out v7. VPN tied into Azure authentication and MFA worked like a charm.

As far as updates, it seems just about every firewall has had an "urgent patch now" bug. What is worse though is jumping on a new firmware patch that bricks yours hardware for Fortinet to then pull hours later.

For this SP5 processor, I understand all the marketing behind the "its faster that a regular CPU" which you have to assume they mean x86. I imagine that a lot of the industry is just x86 or even ARM based. What I do not see is how much it is better than their SP4 processor? If I have your stuff now, why should I upgrade to SP5?
Posted on Reply
#7
Bearshark
Fix my silicon

Maybe they should fix the silicon on my 300E first. SSL HW acceleration kept spiking the CPU so I had to turn it off. Now "proxyd" and "wad" are crashing causing any new VPN connections to not connect.

Don't pay for their rapid replacement service cause they've never rapidly sent me anything since this problem cropped up over a year ago.
Posted on Reply
#8
ixi
BearsharkFix my silicon

Maybe they should fix the silicon on my 300E first. SSL HW acceleration kept spiking the CPU so I had to turn it off. Now "proxyd" and "wad" are crashing causing any new VPN connections to not connect.

Don't pay for their rapid replacement service cause they've never rapidly sent me anything since this problem cropped up over a year ago.
Today got a case from client that when enabled few UTM profiles on policy http and https websites are opening slowly - it takes 5sec - 1min to load :D. Waiting on support now.
Posted on Reply
May 21st, 2024 18:54 EDT change timezone

New Forum Posts

Popular Reviews

Controversial News Posts