Fortinet Secure SD-WAN is a software-defined WAN and security platform that optimises network paths while enforcing protection at the branch, campus and cloud edge. It combines application-aware routing, integrated NGFW controls and centralised policy management to improve user experience, simplify operations and strengthen visibility across distributed sites.
When branch and cloud connectivity must stay secure, predictable and manageable, organisations need SD-WAN that aligns traffic steering with enforcement rather than treating them as separate tasks.
Fortinet Secure SD-WAN is Fortinet’s SD-WAN solution for FortiGate and FortiOS environments, supporting branch, campus, data centre, cloud and SaaS access. It brings WAN edge networking and security together in one operating model.
In practice, it uses application identification, real-time SSL inspection and WAN path steering to direct traffic across mixed transports based on performance needs. Its self-healing behaviour helps keep applications usable when latency, jitter or packet loss changes. Where central control is needed, FortiManager supports provisioning and policy management, while FortiAnalyzer adds analytics and visibility.
This helps teams consolidate branch infrastructure around FortiGate, reduce policy fragmentation and improve visibility across distributed sites. It also supports smoother SaaS adoption and a cleaner path into a broader FortiSASE model. The result is a more consistent operational footprint with security built into the network edge.
If you are evaluating Fortinet Secure SD-WAN, our team can help you assess where it fits in your branch, security and management model.
Fortinet Secure SD-WAN brings security-driven WAN edge networking to branches, campuses, data centres, and cloud access through FortiGate and FortiOS, combining application steering, inspection, visibility, and control in one operating model.
Application-Aware Path Steering
Fortinet Secure SD-WAN identifies more than 5,000 applications and uses real-time SSL inspection to steer traffic across WAN links according to application needs and policy.
Integrated NGFW Security
The platform combines WAN edge routing with next-generation firewall controls so branch traffic can be directed and protected without separating networking from security enforcement.
Self-Healing WAN Resilience
Built-in self-healing capabilities help maintain service continuity when circuits degrade or fail, which supports stable branch connectivity for business applications.
Cloud On-Ramp for SaaS
Cloud on-ramp capabilities help optimise access to SaaS services, supporting mixed transport environments where branch users rely on cloud-delivered applications.
FortiOS-Based Consistency
Secure SD-WAN functionality runs on FortiGate devices under FortiOS, giving teams a common operating model for edge routing, traffic steering, monitoring, and security.
FortiManager Policy Administration
FortiManager can be used for centralized provisioning and policy management across many FortiGate devices, which helps operations teams scale control across distributed sites.
FortiAnalyzer Visibility
FortiAnalyzer adds analytics and logging for environments that need deeper operational visibility into SD-WAN performance, traffic behavior, and security events.
If you need to align branch networking, security enforcement, and SaaS performance in one SD-WAN model, our Fortinet experts can help map the right FortiGate and FortiOS approach for your environment.
Deploy Fortinet Secure SD-WAN at the branch WAN edge on FortiGate and FortiOS to combine connectivity optimisation with встроified firewall and security enforcement in one platform. It is well suited to branch sites because the same device can apply application-aware routing, SSL inspection, NGFW controls and SD-WAN traffic steering without a separate SD-WAN product or licence, simplifying secure branch operations.
Use Fortinet Secure SD-WAN where traffic must be identified across 5,000+ applications and steered over the best WAN link based on policy and real-time performance. FortiGate’s SD-WAN functionality provides the monitoring and traffic-steering intelligence needed to route business applications according to SLA and security criteria, making it a strong fit for environments that need precise, application-led path selection.
Fortinet Secure SD-WAN is suited to WAN resilience scenarios because it continuously measures latency, jitter and packet loss and can automatically adjust traffic when link quality changes. Built into FortiOS on FortiGate, the self-healing behaviour helps preserve user experience and application availability across branch, campus and cloud-connected networks without relying on a separate WAN optimisation layer.
Use Fortinet Secure SD-WAN when branch sites need firewall, SD-WAN, secure connectivity and application control consolidated into a single FortiGate appliance. Because Secure SD-WAN functionality is available on FortiGate through FortiOS, organisations can reduce branch hardware sprawl while still applying integrated security, cloud on-ramp and end-to-end visibility from one vendor ecosystem.
Fortinet Secure SD-WAN fits centralised operations where many FortiGate deployments must be provisioned, changed and monitored consistently through FortiManager. The wider solution supports zero-touch provisioning, central policy management and dashboard operations, with FortiAnalyzer available for logging and analytics where deeper visibility and reporting are required.
Use Fortinet Secure SD-WAN as the branch WAN edge when traffic needs to connect cleanly into FortiSASE for remote user, cloud and private application access. The FortiGate and FortiOS architecture supports secure branch-to-cloud connectivity, while Fortinet Security Fabric integration helps extend policy and visibility across the wider SASE environment without breaking the secure networking model.
Fortinet Secure SD-WAN runs on FortiGate devices with FortiOS, combining WAN steering, monitoring and security without a separate SD-WAN licence.
Integrates with FortiManager for zero-touch provisioning, central configuration and change management across multiple FortiGate SD-WAN deployments.
Connects with FortiAnalyzer to provide logging, analytics and end-to-end visibility for branch and WAN operations.
Supports branch, campus and data centre environments with application identification, SSL inspection and NGFW controls at the WAN edge.
Provides cloud on-ramp and application-aware path steering for SaaS and cloud application traffic across mixed WAN links.
Aligns with Fortinet Security Fabric and FortiSASE to extend secure branch, remote user and private application access.
Fortinet Secure SD-WAN functionality runs in FortiOS on FortiGate appliances and VMs, and core traffic steering, monitoring and security do not require a separate licence or bandwidth-based cloud service.
Fortinet SD-WAN Service Bundle 1329 is the standalone bundle for FortiGate 60G and larger models, and it includes FortiCare for customers procuring SD-WAN services as the primary package.
Fortinet SD-WAN Service Bundle 1337 is the standalone bundle for FortiGate models smaller than 60G and active E-series models, and it includes FortiCare but not standard FortiSASE user licences.
Fortinet SD-WAN Service Add-on 1389 is an add-on for FortiGate 6xG+ models, and it supports existing security bundles while including standard FortiSASE user licences from 5 to 100.
Fortinet SD-WAN Service Add-on 1387 is an add-on for FortiGate G models 30–50 and 6xF or active E-series models, and it does not include FortiCare or standard FortiSASE user licences.
Fortinet Secure SD-WAN may require separate licensing for service packaging such as FortiGuard SLA data, FortiTelemetry SaaS monitoring, FortiSASE connectors, FortiGate Cloud Advanced Subscription and related security services, and our team can help assess appliance model, included FortiCare, FortiSASE needs, FortiManager use and bundle alignment.
We help assess how Fortinet Secure SD-WAN should fit your branch and cloud connectivity goals, so the deployment approach balances application performance, security enforcement and operational simplicity across your WAN estate.
Our team can assist with FortiGate and FortiOS setup, SD-WAN policy configuration and branch onboarding for Fortinet Secure SD-WAN, ensuring the environment is prepared for secure traffic steering and consistent edge protection.
We support integration of Fortinet Secure SD-WAN with FortiManager, FortiAnalyzer, FortiSASE, FortiGate Cloud and Fortinet Security Fabric workflows to align management, visibility and secure access across your existing environment.
We can help prepare network and security teams for Fortinet Secure SD-WAN by aligning handover, monitoring routines and day-to-day operational processes so administrators are ready to manage the platform confidently.
We provide ongoing support for Fortinet Secure SD-WAN with platform reviews, operational guidance, update planning and licensing alignment, including help with FortiGate subscription and service bundle renewal planning where required.
We help review whether FortiGate and FortiOS-based Secure SD-WAN usage is best covered by base functionality or by an SD-WAN Service Bundle or Add-on, so the commercial model stays aligned with site needs and security requirements.
Our team can assess how Fortinet Secure SD-WAN fits alongside FortiManager, FortiAnalyzer, FortiGuard services and FortiSASE, helping you coordinate subscriptions and support across a wider Fortinet estate.
We can review licence structures, bundle choices and add-on requirements to help align Fortinet Secure SD-WAN investment with branch consolidation goals, operational priorities and budget planning.
We support proactive renewal planning by reviewing changing FortiGate footprints, service bundle usage and future Fortinet requirements, helping keep the commercial position aligned as the environment evolves.
Successful SD-WAN transformation depends on sustained adoption, and our team can help you maximise value through usage review, capability take-up and ongoing lifecycle guidance.
The software and technologies listed here support different requirements and are often used together as part of a wider IT stack.
As an official partner to vendors including Cisco, Juniper, HPE and Fortinet, we can help confirm which software or combination provides the capabilities your team needs, while avoiding under- or over-licensing.
Speak to our team for help matching the right solution and licence level to your requirements.
