FortiGate Cloud-Native Firewall (CNF)
Firewall software
Network security software
Business security software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if FortiGate Cloud-Native Firewall (CNF) and its alternatives fit your requirements.
Pay-as-you-go
Free Trial
Free version unavailable
Small
Medium
Large
- Healthcare and life sciences
- Information technology and software
- Energy and utilities
What is FortiGate Cloud-Native Firewall (CNF)
FortiGate Cloud-Native Firewall (CNF) is a cloud-delivered firewall designed to provide network security controls for workloads running in public cloud and containerized environments. It targets cloud and platform teams that need to enforce segmentation, inspect traffic, and apply consistent security policies across distributed applications. The product is positioned for cloud-native deployments where firewall functions are integrated with cloud networking constructs and automated provisioning workflows.
Cloud-native deployment model
The product is designed for cloud environments rather than relying on a traditional appliance form factor. This can simplify adoption for teams standardizing on public cloud networking and infrastructure-as-code workflows. It aligns with use cases where security controls must be instantiated close to workloads and scaled with application changes.
Policy consistency across environments
FortiGate CNF supports applying firewall policies in a way that can be standardized across multiple cloud accounts, regions, or application segments. This helps reduce drift when teams operate mixed environments that include cloud workloads and other Fortinet firewall deployments. It is relevant for organizations that want centralized governance while allowing distributed application teams to deploy services.
Integrates with Fortinet ecosystem
As part of the Fortinet portfolio, CNF typically fits into Fortinet’s broader security operations and management approach (for example, shared policy concepts and integration points). This can reduce integration effort for customers already using Fortinet security products. It also supports a single-vendor operational model for firewalling and related network security controls.
Fortinet-centric operational dependency
Organizations not already standardized on Fortinet may need to adopt Fortinet-specific tooling, licensing, and operational practices to run CNF effectively. This can increase switching costs compared with more vendor-agnostic approaches. It may also require training for teams accustomed to other firewall policy models.
Cloud scope and feature parity
Cloud-native firewall offerings can differ by cloud provider and may not always match the full feature set of mature virtual appliance NGFW deployments. Buyers should validate supported cloud platforms, deployment patterns, and inspection capabilities for their specific architecture. Some advanced functions may depend on the surrounding Fortinet management stack or specific cloud integrations.
Complexity in large-scale segmentation
Implementing micro-segmentation and consistent policy enforcement across many services can introduce design and operational complexity. Teams may need careful planning around routing, traffic steering, and policy lifecycle management to avoid outages or unintended access. This is especially relevant in highly dynamic container and multi-account environments.
Plan & Pricing
Pricing model: Pay-as-you-go (usage-based) Free tier/trial: 30-day free trial available (see notes) Example costs: Not specified on Fortinet's product pages or data sheet. Fortinet states pricing is calculated per security function and by traffic processed but does not list dollar rates or SKU prices on its official site. Discount/options: Fortinet states customers may procure on-demand (pay-as-you-go) or use annual contracts; no explicit discount table or volume-pricing details published on the Fortinet product pages or datasheet. Notes: Fortinet’s product pages and datasheet direct customers to subscribe via the AWS Marketplace for FortiGate CNF; concrete dollar rates and subscription SKU options are provided on the marketplace rather than on Fortinet’s public product pages or datasheet.
Seller details
Fortinet, Inc.
Sunnyvale, California, USA
2000
Public
https://www.fortinet.com/
https://x.com/Fortinet
https://www.linkedin.com/company/fortinet/
