Azure workload
SaaS company on Azure that doesn't want to manage VMs picks CNF as PaaS.
Fortinet · FortiGate NGFW
FortiGate Cloud-Native Firewall (CNF)
Azure-native SaaS firewall; no device management.
Quick answer
FortiGate Cloud-Native Firewall (CNF) is a fully managed SaaS firewall on Azure. No VM setup, license management or patching required; pay-as-you-go model.
FortiGate CNF is Fortinet's cloud-native managed service for Azure. Deployable in minutes from the Azure Marketplace.
Unlike classic FortiGate-VM there is no device management — configuration happens via the Azure portal. An AWS Cloud-Native Firewall is in beta.
- Azure native
- SaaS
- Pay-as-you-go
Key features
What this model offers
- Azure-native (managed service)
- Pay-as-you-go hourly billing
- No device or VM management
- Configuration via Azure portal
- IPS + application control + URL filtering
- Auto-scaling
Tech Summary
Technical data
- Cloud
- Azure (AWS beta)
- License
- PAYG hourly
- Management
- Azure portal
Use CasesCloud native Fast launches Multi-cloud
At what scale is this model preferred?
Pilots and short-lived projects
30-day project on CNF pay-as-you-go.
Azure inspection
CNF on the Azure side of a multi-cloud architecture.
Who is it for?
Azure-native workload owners; teams preferring managed services.
Frequently Asked Questions
Common questions about this model
FortiGate-VM vs CNF?
VM: you manage it (VM install, license, patch). CNF: Fortinet manages (managed). CNF is simpler; VM is more flexible.
Does AWS support exist?
AWS Cloud-Native Firewall is currently beta. Production-grade Azure side is mature.
Cost?
Hourly PAYG; more expensive long-term than VM BYOL, but zero management cost.
Policy design?
Via Fortinet tabs inside the Azure portal; no FortiManager integration.
Auto-scaling?
Automatic — Fortinet scales capacity with traffic.
Stock / licensing?
Instantly available; no procurement process.
Vendor's official model page
Opens the vendor's original datasheet and product page in a new tab.
Fortinet — FortiGate Cloud-Native Firewall (CNF) →Same Family
Other models of this product
FortiGate 40F
5 Gbps firewall for micro offices up to ~10 users.
DetailsFortiGate 60F
10 Gbps firewall for 10–30 user small offices.
DetailsFortiGate 70G
Successor to the 60F; 2x performance at the same price, SD-WAN-optimized.
DetailsFortiGate 80F
50–100 user branch with PoE+ ports to power FortiAP/FortiSwitch.
DetailsFortiGate Cloud-Native Firewall (CNF) — licensing + deployment + support
Sora Yazılım handles sizing, licensing, deployment and ongoing management — all from a single team.