--- title: "Fortinet" source: "https://www.tigera.io/partners/fortinet/" --- Tigera Partner # Fortinet Tigera is a Fortinet Fabric-Ready technology partner. With this partnership, Fortinet customers can extend their existing network security architecture to their containers and Kubernetes environments. [Start Free](https://www.calicocloud.io/)   Jump to - Overview - Benefits - Key Features - Quick Start - Resources - Get Started ## Overview Fortinet and Tigera have partnered to deliver active security solution for containers and Kubernetes. As Kubernetes adoption in enterprises accelerates, organizations want to extend their existing perimeter based security architecture into the containerized workloads and Kubernetes environment. Instead of maintaining two disparate security platforms that introduces additional complexity and manual processes, Tigera and Fortinet provide Fortimanager and Fortigate better visibility into east-west traffic for workload-level security. ## Benefits Calico allows you to maintain the same workload access controls in place by using the IP address of the microservices at a particular moment in time. These IPs are pushed to the FortiGate devices, which are then updated to ensure that the firewall rules stay valid ![Zero Trust Icon](https://www.tigera.io/app/uploads/2022/04/icon-zero-trust.svg) ### Secure Your Environment Ensure traditional firewall rules stay valid for Kubernetes environment ![Firewall Integration Icon](https://www.tigera.io/app/uploads/2023/07/icon-firewall-integration.svg) ### Enforce Zone-Based Security Extend existing operational workflows with legacy firewalls ![Layered security icon with shield and checkmark.](https://www.tigera.io/app/uploads/2023/06/icon-defense-in-depth.svg) ### Achieve Defense In Depth Retain Fortinet investment and enforce defense-in-depth perimeter security for Kubernetes cluster ## Key Features [![Zero-Trust Workload Access Controls icon](https://www.tigera.io/app/uploads/2023/07/icon-egress-access-controls.svg) #### Zero-Trust Workload Access Controls](https://www.tigera.io/features/access-controls/) [![Universal Firewall Integrations icon](https://www.tigera.io/app/uploads/2023/07/icon-firewall-integration.svg) #### Universal Firewall Integrations](https://www.tigera.io/features/firewall-integration/) [![Identity-Aware Microsegmentation icon](https://www.tigera.io/app/uploads/2023/07/icon-microsegmentation.svg) #### Identity-Aware Microsegmentation](https://www.tigera.io/features/microsegmentation/) [![Runtime Threat Defense icon](https://www.tigera.io/app/uploads/2023/04/icon-Runtime-Threat-Defense.svg) #### Runtime Threat Defense](https://www.tigera.io/features/network-threat-detection/) [![Encryption icon](https://www.tigera.io/app/uploads/2023/06/icon-encryption-1.svg) #### Encryption](https://www.tigera.io/features/encryption/) [![Workload-Based IDS and IPS icon](https://www.tigera.io/app/uploads/2023/04/icon-Intrusion-detection-prevention.svg) #### Workload-Based IDS and IPS](https://www.tigera.io/features/workload-based-ids-ips-ddos-dpi-waf/) [![Compliance and Audit icon](https://www.tigera.io/app/uploads/2023/04/icon-image-assurance.svg) #### Compliance and Audit](https://www.tigera.io/features/compliance-and-audit/) [![Dynamic Service and Threat Graph icon](https://www.tigera.io/app/uploads/2023/07/icon-dynamic-service-graph.svg) #### Dynamic Service and Threat Graph](https://www.tigera.io/features/dynamic-service-graph/) [![Dashboard icon](https://www.tigera.io/app/uploads/2023/07/icon-DNS-dashboard.svg) #### Dashboard](https://www.tigera.io/features/calico-dashboards/) [![Dynamic Packet Capture icon](https://www.tigera.io/app/uploads/2023/07/icon-dynamic-packet-capture.svg) #### Dynamic Packet Capture](https://www.tigera.io/features/packet-capture/) [![Application-Level Observability icon](https://www.tigera.io/app/uploads/2023/04/icon-App-level-observability.svg) #### Application-Level Observability](https://www.tigera.io/tigera-products/service-mesh/) [![Multi-Cloud Security icon](https://www.tigera.io/app/uploads/2023/07/icon-multi-hybrid-cloud.svg) #### Multi-Cloud Security](https://www.tigera.io/tigera-products/multi-cloud-security/) ## Quick Start The Calico and Fortinet integration workflow lets you control egress traffic leaving the Kubernetes cluster, by allowing you to create perimeter firewall policies in FortiManager and FortiGate that reference Kubernetes workloads. [Fortinet and Tigera integration](https://docs.tigera.io/calico-enterprise/latest/network-policy/policy-firewalls/fortinet-integration/firewall-integration) ![Fortinet Logo](https://www.tigera.io/app/uploads/2023/07/Fortinet-logo.svg) ## Featured Resources Developer-created resources to help you secure your Kubernetes deployment with Fortinet ![How Calico Enables Fortinet Firewalls to Secure Kubernetes Workloads](https://www.tigera.io/app/uploads/2023/05/Calico-Fortinet.png) Blog ### How Calico Enables Fortinet Firewalls to Secure Kubernetes Workloads Make your fortigate firewall work with Kubernetes. [Read More](https://www.tigera.io/blog/make-your-fortigate-firewalls-work-with-kubernetes-how-calico-enables-fortinet-firewalls-to-secure-kubernetes-workloads/) ![Reference Deployment Architecture](https://www.tigera.io/app/uploads/2023/05/Featured-resources-video.png) Video ### Reference Deployment Architecture Learn how to secure egress traffic for your Kubernetes cluster with Calico. [Watch the Video](https://www.youtube.com/watch?v=ym1QbAf3hW8) ![Achieving EU GDPR Compliance](https://www.tigera.io/app/uploads/2023/05/customer-case-study-blog-Aldagi.png) Case Study ### Achieving EU GDPR Compliance Learn how Aldagi leveraged Universal Firewall Integration to secure their application for GDPR compliance. [Read More](https://www.tigera.io/aldagi-case-study/) [All Resources](https://www.tigera.io/resources/) ![Calico Logo](https://www.tigera.io/app/uploads/2026/01/Calico-logo-2026-black-text.svg) ## Ready to Get Started? Get started for free or request a demo to see Calico in action [Start Free](https://www.calicocloud.io/) [Get a Demo](https://www.tigera.io/demo/)