Self-service Firewall
With Firewall as a Service from Fundaments, your virtual environment is always equipped with powerful protection against digital threats. The firewall provides security, filtering, and traffic segmentation for your virtual environment and applications. It analyzes all data entering and leaving your cloud, with settings determining which traffic is permitted and which is blocked.
Full management
Full management of traffic across both physical and virtual networks.
VMware Cloud Director
Seamless integration with VMware Cloud Director.
Online portal
Full control in a simple online portal.
All-in-one
Firewall, routing, load balancing, and VPN in a single solution.
High availability
Highly available due to a redundant setup.
Additional features
Expandable with additional modules for inspecting network traffic, using methods such as Intrusion Detection and Intrusion Prevention systems (IDS/IPS).
Fundaments Self-service Firewall
At Fundaments, you can choose between two Firewall as a Service options: a Self-service or Managed Firewall. If you choose the Fundaments Self-service Firewall, Fundaments handles the initial installation and basic configuration. You then receive the relevant login credentials so you can further set up, manage, and maintain the firewall yourself. Fundaments Self-service Firewalling offers two different firewalls to choose from: 1) the FortiGate (by Fortinet) and 2) the NSX Firewall (by VMware).
NSX Firewall
With the VMware NSX Firewall, every individual Virtual Machine is secured with its own centrally managed firewall. From this management environment, you can determine at once which Virtual Machine is allowed to communicate with whom. This management environment is seamlessly integrated into Cloud Director, the portal through which Fundaments offers its Infrastructure as a Service services.
Thanks to this integration and the application of micro-segmentation, all doors remain closed to hackers, and management is easy and clear. In addition, the NSX Firewall offers options for load balancing, network traffic routing, and VPN.
FortiGate Next Generation Firewall
Compared to the NSX Firewall, the FortiGate offers a number of additional features. For example, it is possible to expand with licenses for OSPF routing and traffic analysis: Intrusion Detection System (IDS) and Intrusion Prevention System (IPS). Furthermore, FortiGate offers additional cybersecurity bundles. The FortiGate Next Generation Firewall is, just like the NSX Firewall, easy to connect with Fundaments IaaS. Fundaments offers the FortiGate Firewall in two versions: a physical appliance or a virtual version. Depending on your usage profile, Fundaments will recommend one of these versions.
Physical or virtual FortiGate?
If traffic volumes are high (from 500 Mbps continuous) and/or if IPS/IDS traffic analysis is required, a physical appliance is typically chosen. Fundaments includes a standard appliance in its portfolio, offering a separate domain (vDOM) on a FortiGate 300E. This configuration includes both IPS and IDS and is limited to a maximum of 1 Gbps of traffic. The virtual version of the FortiGate integrates seamlessly into the Fundaments VDC. For this version, a pair of two virtual appliances is always configured in active-standby mode. This configuration is a requirement for providing our firewall availability guarantee.
FortiGate security bundles
The FortiGate Next Generation Firewall can be expanded with additional security bundles, such as Advanced Malware Protection, Web Security, and AntiSpam. Fundaments can handle the initial configuration of these bundles. If desired, Fundaments can work with a specialized partner to offer additional management of security functionalities, for example, through a Security Operations Center (SOC).
100% control over your data
Want to be certain where your data is located? The sovereign Cloud from Fundaments can guarantee that. This ensures your data resides on Dutch soil, is managed by a Dutch party—Fundaments—and provides you with full control over all your data. Fundaments' Private Cloud solutions form the foundation for a solid and reliable IT infrastructure, whether at your location or ours in the Netherlands. Our data centers are spread across seven locations in the East, Central, and West of the Netherlands. These are all Tier 3+ locations: the highest achievable class for a Dutch data center at this time. At a Tier 3+ data center, every aspect of security is covered, including guaranteed power supply, intrusion protection, water and fire detection, and climate control.
