Fortinet Secure SD-WAN – Software-Defined Wide Area Networking Platform

Fortinet Secure SD-WAN is a software-defined WAN and security platform that optimises network paths while enforcing protection at the branch, campus and cloud edge. It combines application-aware routing, integrated NGFW controls and centralised policy management to improve user experience, simplify operations and strengthen visibility across distributed sites.

Fortinet SD WAN diagram

Fortinet Secure SD-WAN Key Platform Specifications

  • Platform Type: SD-WAN Platform
  • Primary Function: WAN Connectivity & Optimisation
  • Deployment Model: Software Platform
  • Management Scope: WAN & Branch Connectivity
  • Target Environment: Branch & Distributed Enterprises
  • Licensing Model: Perpetual & Subscription
Starting from: £789.00 Ex. VAT
Request a free trial
SKU Fortinet-Secure-SD-WAN Categories , Brand:
View all software in this series: SD-WAN

Fortinet Secure SD-WAN Overview

When branch and cloud connectivity must stay secure, predictable and manageable, organisations need SD-WAN that aligns traffic steering with enforcement rather than treating them as separate tasks.

Security-Driven SD-WAN for FortiGate Networks

Fortinet Secure SD-WAN is Fortinet’s SD-WAN solution for FortiGate and FortiOS environments, supporting branch, campus, data centre, cloud and SaaS access. It brings WAN edge networking and security together in one operating model.

How It Supports Production Operations

In practice, it uses application identification, real-time SSL inspection and WAN path steering to direct traffic across mixed transports based on performance needs. Its self-healing behaviour helps keep applications usable when latency, jitter or packet loss changes. Where central control is needed, FortiManager supports provisioning and policy management, while FortiAnalyzer adds analytics and visibility.

Operational Outcomes

This helps teams consolidate branch infrastructure around FortiGate, reduce policy fragmentation and improve visibility across distributed sites. It also supports smoother SaaS adoption and a cleaner path into a broader FortiSASE model. The result is a more consistent operational footprint with security built into the network edge.

If you are evaluating Fortinet Secure SD-WAN, our team can help you assess where it fits in your branch, security and management model.

Fortinet Secure SD-WAN Key Features​

Fortinet Secure SD-WAN brings security-driven WAN edge networking to branches, campuses, data centres, and cloud access through FortiGate and FortiOS, combining application steering, inspection, visibility, and control in one operating model.

Secure Branch Traffic Control

Application-Aware Path Steering
Fortinet Secure SD-WAN identifies more than 5,000 applications and uses real-time SSL inspection to steer traffic across WAN links according to application needs and policy.

Integrated NGFW Security
The platform combines WAN edge routing with next-generation firewall controls so branch traffic can be directed and protected without separating networking from security enforcement.

Self-Healing WAN Resilience
Built-in self-healing capabilities help maintain service continuity when circuits degrade or fail, which supports stable branch connectivity for business applications.

Cloud On-Ramp for SaaS
Cloud on-ramp capabilities help optimise access to SaaS services, supporting mixed transport environments where branch users rely on cloud-delivered applications.

Centralized FortiGate Operations

FortiOS-Based Consistency
Secure SD-WAN functionality runs on FortiGate devices under FortiOS, giving teams a common operating model for edge routing, traffic steering, monitoring, and security.

FortiManager Policy Administration
FortiManager can be used for centralized provisioning and policy management across many FortiGate devices, which helps operations teams scale control across distributed sites.

FortiAnalyzer Visibility
FortiAnalyzer adds analytics and logging for environments that need deeper operational visibility into SD-WAN performance, traffic behavior, and security events.

Speak to a Fortinet Security Specialist

If you need to align branch networking, security enforcement, and SaaS performance in one SD-WAN model, our Fortinet experts can help map the right FortiGate and FortiOS approach for your environment.

Fortinet Secure SD-WAN Use Cases

Security-Driven Branch SD-WAN

Deploy Fortinet Secure SD-WAN at the branch WAN edge on FortiGate and FortiOS to combine connectivity optimisation with встроified firewall and security enforcement in one platform. It is well suited to branch sites because the same device can apply application-aware routing, SSL inspection, NGFW controls and SD-WAN traffic steering without a separate SD-WAN product or licence, simplifying secure branch operations.

Application-Aware Path Steering

Use Fortinet Secure SD-WAN where traffic must be identified across 5,000+ applications and steered over the best WAN link based on policy and real-time performance. FortiGate’s SD-WAN functionality provides the monitoring and traffic-steering intelligence needed to route business applications according to SLA and security criteria, making it a strong fit for environments that need precise, application-led path selection.

WAN Resilience and Self-Healing

Fortinet Secure SD-WAN is suited to WAN resilience scenarios because it continuously measures latency, jitter and packet loss and can automatically adjust traffic when link quality changes. Built into FortiOS on FortiGate, the self-healing behaviour helps preserve user experience and application availability across branch, campus and cloud-connected networks without relying on a separate WAN optimisation layer.

FortiGate Branch Consolidation

Use Fortinet Secure SD-WAN when branch sites need firewall, SD-WAN, secure connectivity and application control consolidated into a single FortiGate appliance. Because Secure SD-WAN functionality is available on FortiGate through FortiOS, organisations can reduce branch hardware sprawl while still applying integrated security, cloud on-ramp and end-to-end visibility from one vendor ecosystem.

Centralised FortiManager Operations

Fortinet Secure SD-WAN fits centralised operations where many FortiGate deployments must be provisioned, changed and monitored consistently through FortiManager. The wider solution supports zero-touch provisioning, central policy management and dashboard operations, with FortiAnalyzer available for logging and analytics where deeper visibility and reporting are required.

SASE/FortiSASE Integration

Use Fortinet Secure SD-WAN as the branch WAN edge when traffic needs to connect cleanly into FortiSASE for remote user, cloud and private application access. The FortiGate and FortiOS architecture supports secure branch-to-cloud connectivity, while Fortinet Security Fabric integration helps extend policy and visibility across the wider SASE environment without breaking the secure networking model.

Supported Fortinet Secure SD-WAN Environments & Integrations

FortiGate and FortiOS SD-WAN Environments

Fortinet Secure SD-WAN runs on FortiGate devices with FortiOS, combining WAN steering, monitoring and security without a separate SD-WAN licence.

FortiManager Centralised Operations

Integrates with FortiManager for zero-touch provisioning, central configuration and change management across multiple FortiGate SD-WAN deployments.

FortiAnalyzer Visibility and Analytics

Connects with FortiAnalyzer to provide logging, analytics and end-to-end visibility for branch and WAN operations.

Branch, Campus and Data Centre Networks

Supports branch, campus and data centre environments with application identification, SSL inspection and NGFW controls at the WAN edge.

Cloud, SaaS and Internet Application Access

Provides cloud on-ramp and application-aware path steering for SaaS and cloud application traffic across mixed WAN links.

Fortinet Security Fabric and FortiSASE Integration

Aligns with Fortinet Security Fabric and FortiSASE to extend secure branch, remote user and private application access.

Fortinet Secure SD-WAN Licensing Options

FortiOS SD-WAN Functionality

Fortinet Secure SD-WAN functionality runs in FortiOS on FortiGate appliances and VMs, and core traffic steering, monitoring and security do not require a separate licence or bandwidth-based cloud service.

SD-WAN Service Bundle 1329

Fortinet SD-WAN Service Bundle 1329 is the standalone bundle for FortiGate 60G and larger models, and it includes FortiCare for customers procuring SD-WAN services as the primary package.

SD-WAN Service Bundle 1337

Fortinet SD-WAN Service Bundle 1337 is the standalone bundle for FortiGate models smaller than 60G and active E-series models, and it includes FortiCare but not standard FortiSASE user licences.

SD-WAN Service Add-on 1389

Fortinet SD-WAN Service Add-on 1389 is an add-on for FortiGate 6xG+ models, and it supports existing security bundles while including standard FortiSASE user licences from 5 to 100.

SD-WAN Service Add-on 1387

Fortinet SD-WAN Service Add-on 1387 is an add-on for FortiGate G models 30–50 and 6xF or active E-series models, and it does not include FortiCare or standard FortiSASE user licences.

Separately Licensed Add-Ons and Review

Fortinet Secure SD-WAN may require separate licensing for service packaging such as FortiGuard SLA data, FortiTelemetry SaaS monitoring, FortiSASE connectors, FortiGate Cloud Advanced Subscription and related security services, and our team can help assess appliance model, included FortiCare, FortiSASE needs, FortiManager use and bundle alignment.

Fortinet Secure SD-WAN Implementation and Support

Solution Design & Planning

We help assess how Fortinet Secure SD-WAN should fit your branch and cloud connectivity goals, so the deployment approach balances application performance, security enforcement and operational simplicity across your WAN estate.

Deployment & Configuration

Our team can assist with FortiGate and FortiOS setup, SD-WAN policy configuration and branch onboarding for Fortinet Secure SD-WAN, ensuring the environment is prepared for secure traffic steering and consistent edge protection.

Integration with Existing Environments

We support integration of Fortinet Secure SD-WAN with FortiManager, FortiAnalyzer, FortiSASE, FortiGate Cloud and Fortinet Security Fabric workflows to align management, visibility and secure access across your existing environment.

User Adoption & Operational Readiness

We can help prepare network and security teams for Fortinet Secure SD-WAN by aligning handover, monitoring routines and day-to-day operational processes so administrators are ready to manage the platform confidently.

Ongoing Support & Lifecycle Management

We provide ongoing support for Fortinet Secure SD-WAN with platform reviews, operational guidance, update planning and licensing alignment, including help with FortiGate subscription and service bundle renewal planning where required.

Commercial Optimisation & Support for Fortinet Secure SD-WAN

Subscription & Licence Reviews

We help review whether FortiGate and FortiOS-based Secure SD-WAN usage is best covered by base functionality or by an SD-WAN Service Bundle or Add-on, so the commercial model stays aligned with site needs and security requirements.

Portfolio Alignment

Our team can assess how Fortinet Secure SD-WAN fits alongside FortiManager, FortiAnalyzer, FortiGuard services and FortiSASE, helping you coordinate subscriptions and support across a wider Fortinet estate.

Commercial Optimisation

We can review licence structures, bundle choices and add-on requirements to help align Fortinet Secure SD-WAN investment with branch consolidation goals, operational priorities and budget planning.

Renewal Planning & Lifecycle Management

We support proactive renewal planning by reviewing changing FortiGate footprints, service bundle usage and future Fortinet requirements, helping keep the commercial position aligned as the environment evolves.

Adoption & Value Realisation

Successful SD-WAN transformation depends on sustained adoption, and our team can help you maximise value through usage review, capability take-up and ongoing lifecycle guidance.

Related solutions for Fortinet Secure SD-WAN

The software and technologies listed here support different requirements and are often used together as part of a wider IT stack.

As an official partner to vendors including Cisco, Juniper, HPE and Fortinet, we can help confirm which software or combination provides the capabilities your team needs, while avoiding under- or over-licensing.

Not sure which software or licensing tier you need?

Speak to our team for help matching the right solution and licence level to your requirements.

Speak to a specialist

Need a clearer view of your software costs?

We can review your current setup, licensing and renewal cycle to check whether your software is still doing what you need, where costs can be reduced, and where administration can be simplified.
Speak to a specialist
Can’t find what you’re looking for? We have more products available - just reach out to us directly! Found a better price elsewhere? Let us know - we’re happy to discuss price matching.