The firewall market has changed drastically over the past 10 years, and now it's ready for the next evolution.
Fortinet chief executive Ken Xie said he has watched the market evolve from when he started NetScreen in 1996, pairing together software and hardware for an ASIC-based network firewall and VPN appliance, to the end of 2000 when he launched an anti-virus firewall to focus on content and application security as part of a company that ultimately would become Fortinet.
Fortinet itself has evolved alongside the market, moving beyond the firewall two years ago to secure the entire infrastructure instead of just looking inside the network connections. Xie called that transition the "third generation" of network security, comparing it to getting TSA pre-checked for a flight instead of just needing a ticket and a security X-ray scan.
Now, Xie said the firewall market is preparing for the fourth generation, one that has technology companies across the enterprise infrastructure building in security from the beginning and leveraging automation to improve security capabilities and management.
"We're hoping that we can build a foundation for the next generation of the internet and networking based on content and applications," Xie said. "In order to protect the data today, just to look on the network side is no longer enough. It has to be more broad than that," he said.
To get there, firewall manufacturers have to evolve around five key areas, Xie said: detection, prevention, integration, performance and lower cost. Xie said few firewall vendors to date have checked the boxes in all those areas.
With that vision in mind, Xie said Fortinet has been repositioning its business over the past two years. The culmination of that transformation was the launch a year ago of the company's Security Fabric strategy, which looks to provide a security framework for the company's broad set of offerings.
"Today is not only about network security anymore," Xie said. "It's from the network, to Wi-Fi access, to the application, to email, web applications, and to the cloud. … Network is still a major piece, but the other pieces need to be working together as well."
Fortinet has grown significantly during the past two years, with more than 300,000 customers, 3 million FortiGate devices deployed globally, and sales up 20 percent year over year in the most recent quarter to US$340.6 million. Earnings also were up for the most recent quarter, from US$2.1 million in 2016 to US$10.7 million in the first quarter this year.
According to research firm IDC, Fortinet is now the fastest-growing security appliance company at 21.2 percent growth in first-quarter 2017 and 30 percent growth in number of units shipped year over year. Cisco Systems, for its part, had 15 percent year-over-year growth, while Check Point Software Technologies had 11 percent year-over-year growth. Fortinet also had the largest market share by units, with 27.4 percent of the market, compared with Cisco at 14.4 percent and Check Point at 10.6 percent. Fortinet was also recently named a leader by Gartner in its 2017 Magic Quadrant for Unified Threat Management.
John Maddison, senior vice president of products and solutions at Fortinet, said customers are demanding more functionality from their security vendors. Fortinet's Security Fabric strategy involves bringing together its broad set of disparate security offerings into a single platform, which shares intelligence and allows for more comprehensive automation capabilities. Customers want to consolidate the number of vendors they work with, he said, adding he is hearing a "plea for help" from customers to reduce complexity and increase automation to deal with a rising skills shortage.
Eric Kohl, vice president of advanced solutions, networking and security at distributor Ingram Micro, said a platform security approach like the Security Fabric helps partners deliver a solution to address the security talent shortage and is easier to manage. Integration with other third-party vendors is also key, according to Kohl, as it allows partners to deliver a full security solution set. Ingram Micro has more than 1000 resellers working with Fortinet and is seeing double-digit growth with the vendor.
"I think Fortinet has done a good job of expanding their own technology through the years, but I get excited positioning multivendor solutions. It's right in our wheelhouse. When you have the opportunity with the Security Fabric to be able to go deliver multivendor solutions with joint go-to-market strategies that are already battle-tested and ready to use together, that's one of the values that we can bring with our security practice … to provide the best security ultimately to protect the end client," Kohl said.
Fortinet isn't the only security vendor moving to offer an integrated security platform in recent years. It joins companies such as Symantec, McAfee, Palo Alto Networks, FireEye, Sophos, Check Point Software Technologies, and more, all of which also are vying to build a full security platform.