Self-service Firewall
With Firewall as a Service by Fundaments, your virtual environment is always equipped with powerful protection against (digital) threats. The firewall provides security, filtering and separation of traffic to your virtual environment and applications. In addition, the firewall analyses all data going in and out of your Cloud. Depending on the settings, it determines which traffic does pass the firewall and which traffic is blocked.
Complete management
Complete management of traffic across both physical and virtual networks.
VMware Cloud Director
Seamless integration with VMware Cloud Director.
Online portal
Complete management in a simple online portal.
All in 1
Firewall, routing, load balancing and VPN in one solution.
High availability
High availability due to redundant setup.
Additional capabilities
Expandable with additional modules for inspecting network traffic, with methods such as Intrusion Detection and Intrusion Prevention systems (IDS/IPS).
Self-service Firewall by Fundaments
At Fundaments, you can choose between two variants of Firewall as a Service: a Self-service or Managed Firewall. If you choose the Self-service Firewall by Fundaments, Fundaments will take care of the initial installation and basic configuration of the firewall. You will then receive the relevant login details so you can further set up, manage and maintain the firewall yourself. Self-service Firewalling by Fundaments has two different firewalls to choose from, namely: 1) the FortiGate (from Fortinet) and 2) the NSX Firewall (from VMware).
NSX Firewall
With VMware's NSX Firewall, each individual Virtual Machine is protected with its own firewall that is centrally managed. From this management environment you determine at once 'what' a Virtual Machine is allowed to communicate with 'who'. This management environment is seamlessly integrated into Cloud Director, the portal on which Fundaments offers its Infrastructure as a Service services.
Thanks to this integration and by applying microsegmentation, all doors remain closed to hackers and management is easy and clear. In addition, the NSX Firewall offers load balancing, network traffic routing and VPN capabilities.
FortiGate Next Generation Firewall
Compared to the NSX Firewall, the FortiGate offers a number of additional features. For example, it is possible to expand with licences for OSPF routing and traffic analysis: Intrusion Detection System (IDS) and Intrusion Prevention System (IPS). Furthermore, FortiGate offers additional bundles in the field of cybersecurity. The Fortigate Next Generation Firewall, like the NSX Firewall, is easy to pair with Fundaments IaaS. Fundaments offers the FortiGate Firewall in two variants: a physical appliance or a virtual variant. Depending on your usage profile, Fundaments will recommend either of these variants.
Physical or virtual FortiGate?
When traffic volumes are large (from 500 Mbps continuous) and/or when IPS/IDS traffic analysis is desired, a physical appliance is usually chosen. Fundaments has a standard appliance in its portfolio, offering a loose domain (vDom) on a Fortigate 300E. This configuration features both IPS and IDS and is limited to a maximum of 1 Gbps of traffic. The virtual variant of the FortiGate can be seamlessly applied in Fundaments' VDC. For this variant, a pair of two virtual appliances is always configured in active-standby. This configuration is a requirement for being able to offer the firewall availability guarantee.
FortiGate security bundles
The FortiGate Next Generation Firewall can be extended with additional security bundles. These include: Advanced Malware Protection, Web Security and AntiSpam. Fundaments can shape the initial configuration of these bundles. If required, Fundaments can offer additional management on the security functionalities with a specialised partner, for example in the form of a Security Operations Centre (SOC).
100% control over your data
Want to be certain where your data resides? That's what Fundaments' Sovereign Cloud can guarantee. This gives you the assurance that your data is on Dutch soil, that it is managed by a Dutch party, which is Fundaments, and therefore there is full control over all your data. Fundaments' Private Cloud solutions are the basis for a solid and reliable IT infrastructure - at your premises or ours in the Netherlands. Our data centres are spread across seven data centre locations in the East, Central and West of the Netherlands. These are all Tier3+ locations: the highest achievable class for a Dutch data centre at the moment. A Tier3+ data centre has everything in place regarding security, including guaranteed power supply, intrusion protection, water and fire detection and climate control.
